Analysis
- max time kernel
166s - max time network
172s - platform
android_x64 - resource
android-x64-arm64-20240611.1-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system - submitted
13/06/2024, 10:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a5233913c42ff438afd5bb268a3eb4ec_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5233913c42ff438afd5bb268a3eb4ec_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
a5233913c42ff438afd5bb268a3eb4ec_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
4 signatures
150 seconds
General
- Target a5233913c42ff438afd5bb268a3eb4ec_JaffaCakes118.apk
- Size 445KB
- Sample240613-msqffavgmc
- SHA256 32381b92e783a43d389650f0aeeaa636336bd67d96ebbd3d5d3967dd67721314
- MD5 a5233913c42ff438afd5bb268a3eb4ec
- SHA1 f4262831179e586f8cb76d89be5a2a3a6b38cf39
- SHA512 6545a83499799b790dca5224a349336030510a3eb2573fc582693c7c9df1b57beed85b15aa45b1c80025f14d3c80187a3fd4f4c7d539622845c0b00b180e7664
- SSDEEP 12288:ozUSMgYDYAZy802XDhlIKdxTNVS1tssARnrkXE709qkpfc:MUSbrAZu2FlIKnGtssAhk2+qZ
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.yc.movie - Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.yc.movie - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.yc.movie