Analysis
- max time kernel
179s - max time network
148s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
14/06/2024, 13:31
Static task
static1
Behavioral task
behavioral1
Sample
a9ef89e9439fe67f45d09f3f4cfa7e71_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a9ef89e9439fe67f45d09f3f4cfa7e71_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
a9ef89e9439fe67f45d09f3f4cfa7e71_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
2 signatures
150 seconds
General
- Target a9ef89e9439fe67f45d09f3f4cfa7e71_JaffaCakes118.apk
- Size 5.6MB
- Sample240614-qsrv2ssfke
- SHA256 78d3da2dc1b2d44e47f969b116e8817fe95ccb17f0e43e76f3f3686e1e9bb9b1
- MD5 a9ef89e9439fe67f45d09f3f4cfa7e71
- SHA1 4eb1afd6c38f466175497d8f2ce4fb6fa6dfc194
- SHA512 d377388d7bec25a3749c1c1bf363554d6b00f496f85da7662482fbd9038142b74ed0a97b742348d9b10aadb2fa340238aa1b7492a9161387fb4a7b008c5cc87e
- SSDEEP 98304:qsfw8sYuh6dcelBnP4Q/r4OMG/dEbBvn34WpKJHjmnZWwY2bjETpx3q:FwJ5elBnP4qEO5E5n7KJjoZWwY2/ETLq
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener net.kairosoft.android.edotownscn - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone net.kairosoft.android.edotownscn - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver net.kairosoft.android.edotownscn - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo net.kairosoft.android.edotownscn