Analysis
- max time kernel
152s - max time network
186s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system - submitted
06/06/2024, 06:33
Static task
static1
Behavioral task
behavioral1
Sample
9a25b39a8a1ac689d0c3469002730b18_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
9a25b39a8a1ac689d0c3469002730b18_JaffaCakes118.apk
Resource
android-x64-20240603-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
9a25b39a8a1ac689d0c3469002730b18_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
3 signatures
150 seconds
General
- Target 9a25b39a8a1ac689d0c3469002730b18_JaffaCakes118.apk
- Size 1.4MB
- Sample240606-hbdm4aae7w
- SHA256 7cc9a34e50dbf4f2344ba9820db1f2af1dd16aed17a159301c0b60d1a9bfc358
- MD5 9a25b39a8a1ac689d0c3469002730b18
- SHA1 c6427ae61689aaf78f73f3a380ef218314e70bac
- SHA512 b8f55769315ad9efd5d119a0c72ea4169d8053efea11cbc158397a09827eaf399e01c5460d95366f98c5b2bc2e98547067cc394913eb8100db84d4e0731a3e15
- SSDEEP 24576:LMjyehQa6nCTbQEGHQIls8WLMv4E0/0j1b9uLv1cJBP4QrbeE0vEyteu133mfn:LMjyehj/FCQIln4sjYv4P48zyteu13e
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.aevpqt904.btp904qve - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.aevpqt904.btp904qve - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.aevpqt904.btp904qve - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.aevpqt904.btp904qve - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.aevpqt904.btp904qve