190086542cd7c76afc7656d7dd5613175d83daf5f59760090f5eb6212be16000

Analysis

max time kernel
155s
max time network
174s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
13/06/2024, 07:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a47fc959f1f870e06d39f35ccae39d90_JaffaCakes118.apk
Size 11.1MB
Sample240613-jpbw4atfjp
SHA256 190086542cd7c76afc7656d7dd5613175d83daf5f59760090f5eb6212be16000
MD5 a47fc959f1f870e06d39f35ccae39d90
SHA1 7b237bee6d78ca6c71382a6aea33ba102fb07525
SHA512 fe724ed2aa9cde37e245cddeaabea1af0c2a8009fb42918897f96ac176c59bd769c4193ec5d427c3131e50310384f70bd4f1afd334b0f39bcd45a291d5cffdf5
SSDEEP 196608:2FJE3/dZwf04J+YrKn2rKe3wJbXcb3IhtfQ3xhfqomwGS7Xco5ddIRyz48l/Vkb6:T3hCk2rKDcqtoN3mwLXcYddks3/VckYU
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	cn.com.modernmedia.modernlady

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	cn.com.modernmedia.modernlady

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
28	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.com.modernmedia.modernlady

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	cn.com.modernmedia.modernlady

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	cn.com.modernmedia.modernlady

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	cn.com.modernmedia.modernlady

cn.com.modernmedia.modernlady
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
- Checks memory information
PID:4420

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

CachedCommand_000001901093a3fb_00000000_173745324563126799

Path /data/user/0/cn.com.modernmedia.modernlady/app_Parse/CommandCache/CachedCommand_000001901093a3fb_00000000_173745324563126799
Size 224B
SHA256 f6e6730d750b68576a5f160c016135128fcfff5b2fece6ef8a385e53035e9f41
MD5 5c0326d468d848c2446e6b68c4fd3f5a
SHA1 c18838abb43fcaa147f8ddfad98a602d8a970093
SHA512 13247361d2bcf1d8105ff9b3bfb43fd0aa320394587a4f51e8e33a4df2c65b6b304203a3718ff80a802388d1ff10332827a4b322e65e30f3aaa5d19fd91bf0e4
MD5 SHA1 SHA512

Submit Download

local_ed74840d4b726418

Path /data/user/0/cn.com.modernmedia.modernlady/app_Parse/LocalId/local_ed74840d4b726418
Size 17B
SHA256 3150a415ac4b4b49679268b99f43132f9e46be879659d0bc493e4a3e93bd2da4
MD5 9b42aab1d2522e937abf53dd3a9e74f1
SHA1 cfeebf2c70fde3ed33ddfbb7b482b543a8cc6a55
SHA512 0d41a49e803826d135e33c8cd3773d9f21031f62aaaff6ffcf809c73cad899cc1a03ed7c419d5b308d4ac6d27d679f1d081c899afc5c756ee83125b3993b3e64
MD5 SHA1 SHA512

Submit Download

local_ed74840d4b726418

Path /data/user/0/cn.com.modernmedia.modernlady/app_Parse/LocalId/local_ed74840d4b726418
Size 17B
SHA256 db500db2fe579953c5dc1547087bc7bbf93ba0106ac64ff18084a85077b4eeb9
MD5 e6fdb03f1d8341b66570c05c5c4b1221
SHA1 6f1bb026bb15edd717f6f8ebb23205877bf81d46
SHA512 cec7fdbe76acedc473d95d7ecb1bc2bbeb2cfd72c0808fd4c5fa3f8578744d0698d6c58439b860a1ccaf9491ce1ce2a4e6c2818cc7e9b71a94bfcd33b760d447
MD5 SHA1 SHA512

Submit Download

applicationId

Path /data/user/0/cn.com.modernmedia.modernlady/app_Parse/applicationId
Size 40B
SHA256 b9823c43af233f89caeea704a8394b0bb2f617f42998cd2c853cc444cbbf929a
MD5 e23a0d2eabc35e862f3a182ab08bbfa4
SHA1 c7605ab38d350e31e6505a9c4f37faf80ec1760b
SHA512 077cbcd35de6beb41ecfa102bbc7c899165b75a5f2c582185d6d568068ed3c62d28c9b51324676dba01e5e274aeea39dbbb8dd64b6d419b8a5db3d1e7d7e369c
MD5 SHA1 SHA512

Submit Download

currentInstallation

Path /data/user/0/cn.com.modernmedia.modernlady/app_Parse/currentInstallation
Size 39B
SHA256 90f9875acbfdca8629cace9758d3bca4db6ac98caef1fa34229bceb2a5b7502d
MD5 cc85f7d5a393737391c3ce08eb93baf9
SHA1 f3268a39d263ac0a714098d74bb64fe81f3dead2
SHA512 6a25b8c08c1c17e884ea62cdfc556dcce88e57e10886cc75e024231a90620fc912eef5bfabb286ac552713710040945c66b139c29b799a6464b5fd56270c8f1f
MD5 SHA1 SHA512

Submit Download

installationId

Path /data/user/0/cn.com.modernmedia.modernlady/app_Parse/installationId
Size 36B
SHA256 6807c613e31b2b6d744673ee9af5ef271c0a7f079e071c11d31624640934e037
MD5 92c7eb319b8f435500448e7f713aca2e
SHA1 e47afdd2b2619978c03c7f5f7c5a1a876143e002
SHA512 812c18823ed56568941c2c19c9de57ab96bc4c28494f56ff77c79c149ca597d722f9fe2f33e3e5d3efbe9e367fb6f293fdd7a4af42069aa3466562f2215802f4
MD5 SHA1 SHA512

Submit Download

pushState

Path /data/user/0/cn.com.modernmedia.modernlady/app_Parse/pushState
Size 255B
SHA256 08489a438b3853f5930db162f9d2304f67e47e87e7d7d314a7c1a24d4555a58c
MD5 9b1de0b96eb140133fecdb0549f53893
SHA1 e6666bfa7bfa1ba4aa0e7179887a5871dd944a30
SHA512 fa91b7aec4ec003c39ce5d196fd3f263b786844bb6611adf7ff001d370631f2bd02fc92967f2dde537daf862b120ace0ea9b6e95ae3ac86941757607e3bd9b39
MD5 SHA1 SHA512

Submit Download

.FlurrySenderIndex.info.AnalyticsData_6T4YCHYM8PK6RVS858F4_170

Path /data/user/0/cn.com.modernmedia.modernlady/files/.FlurrySenderIndex.info.AnalyticsData_6T4YCHYM8PK6RVS858F4_170
Size 42B
SHA256 05325e347a744641aa67e4072696212346801a89d36cdd95c6481e2a3e531182
MD5 841ac2ff5fac1a84c2bd1ea60ab4cb5a
SHA1 abbbffcedd5d2456d7a046cc9a9e95eaa0ab441d
SHA512 c6428b4f2943411a08ef89147b3f20e660ce6733f49965fd755034385bf6d2c888e9b797b3bae0f57831a3c8681c6d00e90fc208edd34d647041dcfc32928f61
MD5 SHA1 SHA512

Submit Download

.FlurrySenderIndex.info.AnalyticsMain

Path /data/user/0/cn.com.modernmedia.modernlady/files/.FlurrySenderIndex.info.AnalyticsMain
Size 44B
SHA256 c58250b76978c3926cf8004b4ae5501c1833f4fe28faa850ba97e96a125f9acd
MD5 0bf7e7c926cbd7fda9fab3e8aebc2723
SHA1 bc7e473d883de933dcc97a2452448533a41ff439
SHA512 0f9ee368ac8f188bcf407761b2cbec41096ef2b9e8656e179a113af25b92a833949f9b158cbee008fbe2120ebbf20daaf94aa25c4a4a66fd3ddf4bf377f91ce5
MD5 SHA1 SHA512

Submit Download

.flurryagent.-724d6647

Path /data/user/0/cn.com.modernmedia.modernlady/files/.flurryagent.-724d6647
Size 58B
SHA256 05069e43f927bcbd3ad8634478619177f46eb9a526a35b8073bab40bd27fd174
MD5 24464417831cc79b4a88cbf2e0457c87
SHA1 0cb2f4282db8fbb71b760cbf22c00d62debbd638
SHA512 64b4beab695c51518a1f1c319935369051b4077716141dce5f2f9f81d3d526093cc502871e41ae24aa941768d45aa9790b9b0a81e871eb8c629f03530345a2bf
MD5 SHA1 SHA512

Submit Download

.flurrydatasenderblock.d249361e-8cd2-4460-b75d-6bfa79ae325f

Path /data/user/0/cn.com.modernmedia.modernlady/files/.flurrydatasenderblock.d249361e-8cd2-4460-b75d-6bfa79ae325f
Size 263B
SHA256 6bec25564bd0913239f0151599b84429dedf9ed83055e5b9667a283671680430
MD5 5d4a436cc8205f762f128f49a835cd69
SHA1 67737675a03918299f74d6f87fd478688ab8fcec
SHA512 94cdd3eb7a8564e64376cc808058b22a91395f735570bfaedefa3d68f4991569b7da17e6ac153a132a724b9aebc4c30c1c2acb35188164f5f4a1d4a9ec635f5e
MD5 SHA1 SHA512

Submit Download

gaClientId

Path /data/user/0/cn.com.modernmedia.modernlady/files/gaClientId
Size 36B
SHA256 044b458c50878270394c336aba1dd3d277209b3e17db348226f4cd8529c4a4ea
MD5 592a42df876e68f34337a14adeaf688e
SHA1 924424befa4efcea7e2bfb0c30096f9713e1f477
SHA512 56f88e6a3ad9def7e6aba72429f6edbbbc9e997c4eb30dc14642a0242fd5313860bbc336863c91f97f0b5ea1cc4c42e7dd80c0e5b92d41ba409db6d488cf6358
MD5 SHA1 SHA512

Submit Download

mobclick_agent_sealed_cn.com.modernmedia.modernlady

Path /data/user/0/cn.com.modernmedia.modernlady/files/mobclick_agent_sealed_cn.com.modernmedia.modernlady
Size 527B
SHA256 f3b36f44cc78a1e79836557d96da82b91600742122642fd01a00573b789e921b
MD5 3257ef99c3e08205048a5b42bbf6ea62
SHA1 0457ed733d0997217fa7670029189e96da32d09b
SHA512 f600be60cdba5da4a877a5c1a266ca7955bc6bd6958e12b91a5f54dd501863da284ea49871f02cff76b4c5a974245decc319c1acabc9093e67aadf4b19ff0439
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/cn.com.modernmedia.modernlady/files/umeng_it.cache
Size 148B
SHA256 c85ca5f5c4979e19b44a030c0f5f164a483627fbe5bccedfb2f28831e2ea1317
MD5 95599d1d993539e5bb3ba3286276d40e
SHA1 0ab0612644b2fb84bc2ceb50fc45dd97000f4467
SHA512 8ef46c6b0c4dd5cc3f2eca441c47da61f1bf711a47c97d4a52124243c28cfcd0903012cb47187feb5a1c2bd863ffdf2a1ff0b79c5820d9df86f235fde56c5678
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads