c79ead4a50f27223b0c9c2a9572441b47ad60ba8ecbe274c0c81f66016286abb

Analysis

max time kernel
176s
max time network
169s
platform
android_x64
resource
android-33-x64-arm64-20240611-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611-enlocale:en-usos:android-13-x64system
submitted
11/06/2024, 18:10

Target
9f1815615536aa19180ad550b677342d_JaffaCakes118.apk
Size 24.5MB
Sample240611-wsbfyswcnc
SHA256 c79ead4a50f27223b0c9c2a9572441b47ad60ba8ecbe274c0c81f66016286abb
MD5 9f1815615536aa19180ad550b677342d
SHA1 565309a2589dba647c144db8af4889de8b12b85f
SHA512 fdea474b077aeef493648502a7ea06e4b16d94429061a800b635bc0526d6f796d2a7bea53f8f544bb7982094563524e3ddb9e7ddacd96c72a372b54cc6c8cdfd
SSDEEP 393216:JuxkFZzcWeCqCeRhy+0oSqo56muY9uAx8gNT5t0eyyFqJTe7gRBfKH7gIB1k4:A0zPeCq9y+0f9uY98gjt77d7StCxz
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.zhsz.zhsq

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

Process Discovery

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zhsz.zhsq

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zhsz.zhsq

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.zhsz.zhsq

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.zhsz.zhsq