Analysis

  • max time kernel
    127s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    15-06-2024 03:12

General

  • Target

    acb50a5ddc692be06ae0acdb4d92bd24_JaffaCakes118.apk

  • Size

    12.2MB

  • MD5

    acb50a5ddc692be06ae0acdb4d92bd24

  • SHA1

    2197990e8eb1447e9d6326dbf0a4200f537506b3

  • SHA256

    42e581f9d9f3293de31480360a6634377491a202242d642d45af50ebc082f52d

  • SHA512

    145c191044ab825faa890498d588ba8d83bf3e52f87725f54a612444c95b108f655a83ba987c6837e070fc0b273b0d44fac44267f5f72be6b4d7bb7e1e9d98bd

  • SSDEEP

    196608:MXubikGstyw7oDADBk0uzH7Lno9ai3VRz9wbnX005DW7/rdi43ORA7sR:BQwEDUBk0ujpsRwbnk0Q7/ZikORf

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.AndPhone.game.beyondthewar
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Checks CPU information
    • Checks memory information
    PID:4674

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.AndPhone.game.beyondthewar/files/mobclick_agent_cached_com.AndPhone.game.beyondthewar
    Filesize

    98B

    MD5

    ac28c7d283d06fadd41b3951e4d423cd

    SHA1

    7f88050f1470a66b91d39ecc5a56bff7ec255e37

    SHA256

    5bc0bda82292575173c3aeb718dbdcbe6b6865f2efd7d60ca07222df6bd8cdb3

    SHA512

    5ba82c67b40872f11f7af36c77275963a25a05af1359b1550c16eebc81b22a5819271f6fd7c707a1d7236ab6c2226fe277c9fe0ee8905fc40f25f37e3e0b2ea5

  • /data/user/0/com.AndPhone.game.beyondthewar/files/mobclick_agent_cached_com.AndPhone.game.beyondthewar
    Filesize

    197B

    MD5

    f7d6c24a04880d89e53e5f05b0bbadf0

    SHA1

    927006cb44ee2526fd94e3589c21c46b9fbc850f

    SHA256

    6bb6cd0b46402e233cfccb1f4bf13535e654c842c5a185ffbb0b57d677776635

    SHA512

    bf504aae4aa1aa0adc11a32bea92708eeb31c97d5d9a7afc9d4f1ebe09e6e0c64800f0c384f4e10e8a772a3f592d4923ed1f53b7da9ae1b6c8e6caf73e2edf05