Analysis
- max time kernel
44s - max time network
152s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
- submitted
06/06/2024, 00:42
General
- Target 99a450a327a577101fff52a9733954fa_JaffaCakes118.apk
- Size 1.3MB
- Sample240606-a2l36adh38
- SHA256 27e83bdaa63b01249f0e64a4913374e2b279e4f559b1008c3ed9819cd4477ea5
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
- Queries information about active data network 1 TTPs 1 IoCs
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
- Checks CPU information 2 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
com.daye.mfkt.activity1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information