Analysis
- max time kernel
176s - max time network
132s - platform
android_x64 - resource
android-33-x64-arm64-20240603-en - resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240603-enlocale:en-usos:android-13-x64system - submitted
11/06/2024, 03:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9cdc8a90810a4459ec3cbbd5908c9751_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
9cdc8a90810a4459ec3cbbd5908c9751_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240603-en
5 signatures
150 seconds
General
- Target 9cdc8a90810a4459ec3cbbd5908c9751_JaffaCakes118.apk
- Size 3.3MB
- Sample240611-d3l2bssera
- SHA256 f01c8e8bf56699120af4b7428d23671475753d603ad7faaac70c7028bcce2d93
- MD5 9cdc8a90810a4459ec3cbbd5908c9751
- SHA1 f6265e8d059504c38e0cfb22b2022c94d8123b4b
- SHA512 c1537d8a456d42589327e57b6f6a9c6f2251482161df7f31127dd258f22f609582121718196e11dc9e720db652f4412387d0efdde56e01b58a9f2c7c0478e225
- SSDEEP 98304:ilZbgHDE3Ydkzuwjt5mfODiTBnuVLhZRD:ib8DE3YdkzlEODSBn4ZRD
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener app.note.zhongyi - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.note.zhongyi - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo app.note.zhongyi - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo app.note.zhongyi