Analysis
- max time kernel
26s - max time network
132s - platform
android_x64 - resource
android-x64-arm64-20240603-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system - submitted
11/06/2024, 03:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9ce0653f59c46a813ada956147cb77dd_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
9ce0653f59c46a813ada956147cb77dd_JaffaCakes118.apk
Resource
android-x64-20240603-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
9ce0653f59c46a813ada956147cb77dd_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
7 signatures
150 seconds
General
- Target 9ce0653f59c46a813ada956147cb77dd_JaffaCakes118.apk
- Size 1.2MB
- Sample240611-d8zvdatdrr
- SHA256 1dcccdef7cf2b84b6c693cd472016d11d76fdfc89c277a49bbaf30da1be66c8c
- MD5 9ce0653f59c46a813ada956147cb77dd
- SHA1 3945ceaceb24e531e4aefd72eaf503355fc9f6af
- SHA512 cef371f63c327d7393bc38395edb00095e27c4c16ab22104dea3c04b40a693daa6d01845ecb4deec7d7edaf0b152d356a00b9ba7a8b91522b15f8b041add7533
- SSDEEP 24576:4YrNsCXxo6Ztncovq0ZLIj5OQtt+x18PKu/2xekkNgCwOy+vj:4YpW6QoPZLI8AtAqKu/ZHNgPb+vj
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /sbin/su com.slevin.asiangirl /system/bin/su com.slevin.asiangirl - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.slevin.asiangirl - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.slevin.asiangirl - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.slevin.asiangirl - Reads information about phone network operator. 1 TTPs
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.slevin.asiangirl - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.slevin.asiangirl
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.slevin.asiangirl/files/INSTALLATION
- Size 36B
- SHA256 4bfab4a6f58751bf91fedca2f69571f386296973aff4102c386756fbd5dab817
- MD5 5413f5144e2afa9224726c1eebfa07b3
- SHA1 b741db1aab296f62163e2209fb8d312f3ed8f827
- SHA512 3f89536bd97a449fedb94dbee571560d8ad23eebec9e17921dd5a596a6fb3d65224cbe907dc6f59568cd0bd468795233b943899bc3841809eeb3d138b08519b7
- MD5 SHA1 SHA512