Analysis
- max time kernel
5s - max time network
131s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
- submitted
10/06/2024, 11:53
General
- Target 9a924dc1b013e722d9bb2a5d6d16cb0c_JaffaCakes118.apk
- Size 3.1MB
- Sample240610-n2axsaad67
- SHA256 f426cc860158e33898bc564559cb86add257d7963e72a47b8b8b40f4f294dc87
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
- Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Queries information about active data network 1 TTPs 1 IoCs
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
- Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
yoyo.game.xjgw1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
SETTING.mrh
XJB2.mrh
XJB8.mrh
building.mrh
decorate.mrh
equip.mrh
equipeffect.mrh
hair.mrh
headwear.mrh
ingame.mrh
loading.mrh
logo.mrh
naked.mrh
npc.mrh
orge.mrh
pet.mrh
prop.mrh
prop_v5.mrh
serviseID.mrh
skill.mrh
states.mrh
sys.mrh
sys_v5.mrh
task.mrh
tile.mrh
ui.mrh
ui_v5.mrh
weapon.mrh
weaponattack.mrh
weaponeffect.mrh