1dcccdef7cf2b84b6c693cd472016d11d76fdfc89c277a49bbaf30da1be66c8c

Analysis

max time kernel
26s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
11/06/2024, 03:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9ce0653f59c46a813ada956147cb77dd_JaffaCakes118.apk
Size

1.2MB
MD5

9ce0653f59c46a813ada956147cb77dd
SHA1

3945ceaceb24e531e4aefd72eaf503355fc9f6af
SHA256

1dcccdef7cf2b84b6c693cd472016d11d76fdfc89c277a49bbaf30da1be66c8c
SHA512

cef371f63c327d7393bc38395edb00095e27c4c16ab22104dea3c04b40a693daa6d01845ecb4deec7d7edaf0b152d356a00b9ba7a8b91522b15f8b041add7533
SSDEEP

24576:4YrNsCXxo6Ztncovq0ZLIj5OQtt+x18PKu/2xekkNgCwOy+vj:4YpW6QoPZLI8AtAqKu/ZHNgPb+vj

Score

8^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.slevin.asiangirl
/system/bin/su	com.slevin.asiangirl

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.slevin.asiangirl

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.slevin.asiangirl

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.slevin.asiangirl

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.slevin.asiangirl

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.slevin.asiangirl

com.slevin.asiangirl
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
- Checks memory information
PID:4590

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.slevin.asiangirl/files/INSTALLATION

Filesize
36B

MD5
5413f5144e2afa9224726c1eebfa07b3

SHA1
b741db1aab296f62163e2209fb8d312f3ed8f827

SHA256
4bfab4a6f58751bf91fedca2f69571f386296973aff4102c386756fbd5dab817

SHA512
3f89536bd97a449fedb94dbee571560d8ad23eebec9e17921dd5a596a6fb3d65224cbe907dc6f59568cd0bd468795233b943899bc3841809eeb3d138b08519b7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads