d2577719bd1817b27f5ea0f143ac5a67c238c5e7d93399dc960a4923e60bf45c

Analysis

max time kernel
28s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
10/06/2024, 07:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9a6e0298e290d194e2e92285753daf67_JaffaCakes118.apk
Size 1.8MB
Sample240610-jd9c8aef43
SHA256 d2577719bd1817b27f5ea0f143ac5a67c238c5e7d93399dc960a4923e60bf45c
MD5 9a6e0298e290d194e2e92285753daf67
SHA1 136709d6a53b1b39a0ccf27aa78f101d7de86629
SHA512 ba030708c58f4b19b9fa29900b4e651dd92d87bfd7774c1c3e7c37fbb7d8fefaf7e9ae017755a70116d1c139c1b7260d56f761e5685c6effcde7e8f95d280b67
SSDEEP 49152:GYoUzylxv+RKuhSBicJkecFieMoJC2l5K5l:2UG6/JPecFzMoJol
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.msxf.localapp8512

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.msxf.localapp8512

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.msxf.localapp8512

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.msxf.localapp8512

com.msxf.localapp8512
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4540

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

__local_last_session.json

Path /data/user/0/com.msxf.localapp8512/files/__local_last_session.json
Size 97B
SHA256 80b47ee9da83725556b0c964d648acbe14b39a8c6811b84e9906afc075673ae7
MD5 7271ef9efda796eaebd8a3ee7b1adc30
SHA1 99b706855895006ad03346a930a4490624946e98
SHA512 a4234ca69735614870553b6a2d8f277211bbfa27dd4c72b7b997148740b5cc36113f175ee17920467436cc3bb7894200b8c157c5e776787f7aa6cb5ca048c7d3
MD5 SHA1 SHA512

Submit Download

__local_stat_cache.json

Path /data/user/0/com.msxf.localapp8512/files/__local_stat_cache.json
Size 25B
SHA256 c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19
MD5 2d805b13f2f28dc3ca9bbcc000f49bb5
SHA1 9eac165b4d81258fd3967cde5cc53b53b1dabcb1
SHA512 5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads