Analysis
- max time kernel
163s - max time network
152s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system - submitted
04/06/2024, 16:19
Static task
static1
Behavioral task
behavioral1
Sample
957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral3
Sample
957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral4
Sample
Fluent.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral5
Sample
Fluent.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral6
Sample
Fluent.apk
Resource
android-x64-arm64-20240603-en
General
- Target Fluent.apk
- Size 414KB
- Sample240604-tsxcbacf21
- SHA256 9ef6b169afbf9f140dfba4cad958c6a096ffbcf05a707fc43f5d8e0449f62407
- MD5 3d596b729e275c8822001b56934f3acc
- SHA1 2230deddd141c20ecc3a6c2ead933107802494a9
- SHA512 9287a05b4e9b7ede8b7a1f12cca41339c5fa5b04723a052fe9176b5f40afb4a837d3f01948af3741ea4eb49680ab9c02a325cee5be83556567f758a646741636
- SSDEEP 12288:NsGhcUBzjcKDtU9Cq2TbD6+iBshVBhJ0BxZyiUD:NsG3rt2CVK+iGhVBEB+D
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.fluent.xyzgg - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.fluent.xyzgg - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.fluent.xyzgg - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.fluent.xyzgg - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.fluent.xyzgg - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.fluent.xyzgg
Processes
-
com.fluent.xyzgg1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5184