Analysis
- max time kernel
159s - max time network
147s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system - submitted
05/06/2024, 11:53
Static task
static1
Behavioral task
behavioral1
Sample
98143ccee58f6f97c1e470e1e16cd60c_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
98143ccee58f6f97c1e470e1e16cd60c_JaffaCakes118.apk
Resource
android-x64-20240603-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
98143ccee58f6f97c1e470e1e16cd60c_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
3 signatures
150 seconds
General
- Target 98143ccee58f6f97c1e470e1e16cd60c_JaffaCakes118.apk
- Size 1.7MB
- Sample240605-n2b5vafe77
- SHA256 8447653796697512be9576e06b057c224f300c01c62c87086f5bad58413705e7
- MD5 98143ccee58f6f97c1e470e1e16cd60c
- SHA1 95fa7e6639ffd8b30492533e160cc49efd503b90
- SHA512 4c6eded526ffae0a57911d48e43d46f9cfd51c6308d0e33ad55d237f43eb9a0b278a0dcec648a539ed360552edcf53870113fdb96ea68b8f91ae378fc1eaffcc
- SSDEEP 24576:Q8CNnym3B7k/1c+V1/Bwt4G1WiePLGMdbuaeE0vEyZjpVrRvu13nmfZ:DKnt3K/m+XW6PLOKyZjpVrRvu13E
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.apocer6.brc6eop - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.apocer6.brc6eop - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.apocer6.brc6eop - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.apocer6.brc6eop - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.apocer6.brc6eop