97e8a2df2902c42bf09004885d466453bc0b334429c256b24e04baec0b1bdcd1

Analysis

max time kernel
49s
max time network
151s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
04/06/2024, 17:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
95a82c88016bdd09361638e9ad2799aa_JaffaCakes118.apk
Size 1.0MB
Sample240604-vwfdmsed42
SHA256 97e8a2df2902c42bf09004885d466453bc0b334429c256b24e04baec0b1bdcd1
MD5 95a82c88016bdd09361638e9ad2799aa
SHA1 0f70a5bea60c55ecace3f09fed6d2517fbebba41
SHA512 caea3b6c7bd0ec32efc5569f8840b03d5061f200ccae6f8bcd751b8b5a5d8b3e53c0b70de232a57392b25a64db8f262ef3e7da3f2a1d991c76e8f8b8e74272f6
SSDEEP 24576:IhG8RpPvUaWm8Hgg/AQQ23JI8hlSxqf5ywY:IhGyUaWNPovCmmSxqf56
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.root.font.pack.net.rootedcomic

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.root.font.pack.net.rootedcomic

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.root.font.pack.net.rootedcomic

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.root.font.pack.net.rootedcomic

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.root.font.pack.net.rootedcomic

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.root.font.pack.net.rootedcomic

com.root.font.pack.net.rootedcomic
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5028

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

Roboto-Regular.ttf

Path /data/data/com.root.font.pack.net.rootedcomic/files/Roboto-Regular.ttf
Size 112KB
SHA256 00ae3fd7698bec219473edf68171a0f14e6cf68d363eea59373156e0b090de11
MD5 230e0e1a8b7a17d5f3f03de75adea5a2
SHA1 42dd3daecfa9192c08fee4bbd3bea78b14dd6e62
SHA512 1fedc2e66c80fde9e093e032e571883221ea57a4e24ded7aba83d11d42c8709128ac98bd6f1f61d0d8bdd3a5b6af6c7cbd45dd1b849075fbf44515de0e586826
SSDEEP 3072:PnTHErpAMMVGCqFy+RbHN6xss5lBvsssssskNP:PrnVEFr6xss5lBvssssssaP
MD5 SHA1 SHA512 SSDEEP

Submit Download

close_button.png

Path /data/data/com.root.font.pack.net.rootedcomic/files/close_button.png
Size 1KB
SHA256 17e1977137c8d19334573c7add2e7ab505ef55e08b5c9e6e8714bd8ad75735a9
MD5 6d79997d240bf8146886e4bc63f31db3
SHA1 6e033e83a010d249d6e24b9ea8798cfe99b6d778
SHA512 95f5b92fba0fbb344526a588ea4c16356fd149b84ca5e5c45e3c982d11a7f430d07fdbc181b084d0281c91eec36c0a59207c7bb0157ec7615ab0d682582a01ef
MD5 SHA1 SHA512

Submit Download

drawable-mdpi.zip

Path /data/data/com.root.font.pack.net.rootedcomic/files/drawable-mdpi.zip
Size 8KB
SHA256 6e5561d8a9798d40c58edbb47083f399acf7538ff96bf9e4272da31dc684d971
MD5 a716d6290eaa175b7bf68337e15cf17f
SHA1 893692f7b6319a03e34a1d01db3d3eb3f9aeb97f
SHA512 68ac0d753ac57dbc67d495966baff44430c86a0a8792fc0db9c69aca0b227cc3f8dd7219796098c657917614e02183061ed844d40a0739a15ac72cd6bbb093ec
SSDEEP 192:HlN+7SdkPEqSXsAOxZvKuY8e43Luluw/vaxn9Ku9IfL8jnVwN8+d:HlS8kPEqasA67hLc/v8n3I0nE8+d
MD5 SHA1 SHA512 SSDEEP

Submit Download

drawable.zip

Path /data/data/com.root.font.pack.net.rootedcomic/files/drawable.zip
Size 11KB
SHA256 9313e65192a108ab22d94239028c5caf4e4e7efb8c1072c0b985f679c7cb82fc
MD5 55c53d457904480c917ae919026e5919
SHA1 5206401071ae506ed8a730ddad2eea8ea6d45eef
SHA512 8573e6dd4c697e107defb6c98cffef4e6774b420b5fe94695bcd31ba1aafb3914ea68c20b957edc984fa742272fc5bbb497506a7e91ec59f665a2d27aef0324f
SSDEEP 192:+3y/SS3PSDFhz1ZaqIeNkVPCEh8vndeUd2nnYimSDFhz1ZaqIeNtVPCEh8vndeU8:+97hVt2VPCEIdeY2nn3JhVtTVPCEIdeH
MD5 SHA1 SHA512 SSDEEP

Submit Download

empty_star.png

Path /data/data/com.root.font.pack.net.rootedcomic/files/empty_star.png
Size 1KB
SHA256 d3159015a641eaa8524d530f4e35fdcc19a8bfa2679c7d25c4247c262babdc4e
MD5 73aa466d5176127dcf290f2727eda17a
SHA1 8cbaf9e3ea1f60a11a468a4faf6b183f53f84a25
SHA512 372a82391121911561e2938095c414b0a156c3c4bc2f30ff3f6b5515172231daf6d699edd2710165f22d324e4419be9f0c55682e53d1d8c9bf013524a092ba82
MD5 SHA1 SHA512

Submit Download

filled_star.png

Path /data/data/com.root.font.pack.net.rootedcomic/files/filled_star.png
Size 1KB
SHA256 deea08857a7c4db40ce82f2d129660fc0d4f0537cf8effc8e54b8fb6d07dab6f
MD5 685f9e06c0990c57fd21bcfe47ce706d
SHA1 6c15fd6142f6e2d081377abbb07e302261859871
SHA512 f4356a940e3ee404ed6895374090bc2cbbb226b49b84ad17dac0a26a42e0e7479c43989c09dc17fd0da2192f2fbb08833b3b46ee561b7dc0047363a49cc4d662
MD5 SHA1 SHA512

Submit Download

half_star.png

Path /data/data/com.root.font.pack.net.rootedcomic/files/half_star.png
Size 1KB
SHA256 c7e35b796c71ec2b3b2713961a0777a09e261f8056d304550addf39c638f44b8
MD5 b1657a6b1b87d76617fd7db36dcfaa82
SHA1 65bd6dc7c7abb02ae7c5650e65e544d8e060e27a
SHA512 d1dd09840103e98531105b428e374672531ac9d33a652fcd091aa94d38a8699a6e99ac5822e67b293e68513307b28e986412a1a84d55d73791c9be95fe1fc18e
MD5 SHA1 SHA512

Submit Download

info_ex_s.png

Path /data/data/com.root.font.pack.net.rootedcomic/files/info_ex_s.png
Size 3KB
SHA256 0abf37985d6e83fd45f6f9f854c3d8e2fd0063f71933f1bc07772a9d54e561e8
MD5 f8e42efc5fb6d75ab8e928822c83b535
SHA1 bb2535f79e03481a594ede3acdf1d956fd94b3cb
SHA512 9102e9551f335e7e843932b44274ede4b0f2212a3bd8b0dc509083456799582067966cc70d4694c9c18e369f6863e93ad0f513f938c029ea60be7ce73e8385cc
MD5 SHA1 SHA512

Submit Download

info_s.png

Path /data/data/com.root.font.pack.net.rootedcomic/files/info_s.png
Size 1KB
SHA256 97b5a55d551a037126c25cd939d369881e597ff181072f3e251b7cc739e74354
MD5 2aa3e72c2f48b2297c27f997c06f5de1
SHA1 e02b540bcbe25cf6a16e2e9108ddb1be745476bc
SHA512 6cbb2ede58606085a3bf07d78aa7e299ba431c5090e258a6cfc798d1fd178a458483b135f8066854b4a7dc2012d83b437779efa81d163c1b0ded00ddc75c9f60
MD5 SHA1 SHA512

Submit Download

loading.html

Path /data/data/com.root.font.pack.net.rootedcomic/files/loading.html
Size 3KB
SHA256 9f94a9863a4cac60cb363e3e06f0d6e490edb3704736156e55876922f66b74ec
MD5 0ed53979251332a3b26ba5a8b9b8c7be
SHA1 0978878b41d7661d4c9c0e9771c767feec9f21b1
SHA512 ea5e0cf829cd34d751b8e33a60f2b11b83f606d1b74951ee1675bdbd8590aeb71c95fa8f008961ff39318d3a4892bebaa33903cab011ea026aed298e0007ccf6
MD5 SHA1 SHA512

Submit Download

logo.png

Path /data/data/com.root.font.pack.net.rootedcomic/files/logo.png
Size 2KB
SHA256 10fe86e42cb94819cf134a66a458f6b1edd433d196e6bb395cb936cf50dfe20c
MD5 b91dd0791d392ec207619cc1a267e896
SHA1 be8fc6d4e103a4915f10cb1297725ca2abdb4176
SHA512 6ee669a4e1d22b48d101d640f09fbb4ee4879cca025715de5014503f6d1779afe7a9cc677e1404f459e43eb0f5b6c1070714f0e87b454f7a006384da9bcfd90e
MD5 SHA1 SHA512

Submit Download

resources.zip

Path /data/data/com.root.font.pack.net.rootedcomic/files/resources.zip
Size 58KB
SHA256 212e4f070449df3f70d620c83d961d90134f030e548afc674e5d41994b1880fb
MD5 8c05bc3a2e5ac5adbf539c9b69bed4a9
SHA1 e895081a270472cbaf117afeae925a6a4cb0ac05
SHA512 17e73ef55cb0d1e688682a937d55b7bd8cb5261bcf6105a74d4ef183e9d86906e8942e4556afc2faeafd1434ad89f465d0451a6a8fef027227dfb6bb09e75bcc
SSDEEP 1536:FV8QfBWzdelT113vfnQBopwDrgA+XqUKd+a9k:FzsdQfox0Nq3A
MD5 SHA1 SHA512 SSDEEP

Submit Download

tab_side.png

Path /data/data/com.root.font.pack.net.rootedcomic/files/tab_side.png
Size 2KB
SHA256 6148d3dc89c461a0147a9c4de14caa2a2ad1d36ccce75936433c9736c9eb2996
MD5 7d68d6523a1257de1310bfb7b66cb3d6
SHA1 1a35d821fc51bd627626cfa10d256d647acb88b4
SHA512 861fda4b4e55d3b6f3158845e64d14453d7ecbeb375070c08920fa0a8a55f32c2ba86b626f02a461f90b4f7cc28b56ddcceef064bf0cdb7096d84017bc40b6e3
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads