Analysis

  • max time kernel
    134s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240603-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
  • submitted
    04/06/2024, 11:14

General

  • Target
    94a079810e2d8bc5bce1f51689b74481_JaffaCakes118.apk
  • Size 4.8MB
  • Sample240604-nb6xjaec5x
  • SHA256 6ddb3538d42dc88e76eea1a4824ec975a9d753ab4d0ab5a2973049526c3256ef
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.nhcq
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4581

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        debug.conf

        • Path /data/user/0/com.nhcq/app_tbs/core_private/debug.conf
        • Size 101B
        • SHA256 08f0991cbfc9d968e89d9b25e2d313c295e841805ee6d08d228f864a628a7b3b
        • MD5 SHA1 SHA512

        tbslog.txt (deleted)

        • Path /storage/emulated/0/Android/data/com.nhcq/files/tbslog/tbslog.txt (deleted)
        • Size 8KB
        • SHA256 f7d6fb05dbe3f85c04c4cbdef4a5ba093566d028848eb3cfaf389e1c12b6533c
        • MD5 SHA1 SHA512 SSDEEP