Analysis
- max time kernel
22s - max time network
148s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
15/06/2024, 21:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b019e606c66dd3af220d96a0961caa72_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
b019e606c66dd3af220d96a0961caa72_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
b019e606c66dd3af220d96a0961caa72_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
5 signatures
150 seconds
General
- Target b019e606c66dd3af220d96a0961caa72_JaffaCakes118.apk
- Size 7.8MB
- Sample240615-zz7dravaje
- SHA256 1640a05210c91a513341cef0461396585449f2f3423a9021e755680d99aa78e5
- MD5 b019e606c66dd3af220d96a0961caa72
- SHA1 2996869847780c2d49fd3269185a3e9133b503f2
- SHA512 6d05d21fa749847641c8eca75851ac40e3a258ceda8adcf7bccb6eea28956d09eaf38d125885c2ff5d169a95f1e95b3136ed3517fd1c47c97c122c4472ad6f7a
- SSDEEP 196608:f8pweYrTuoSv+kNZzL89F2jsj1JCYB+KEm1EPaBRS:f8pweiarXNZzW2jsZJXB+1oRS
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.hujiang.dict - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.hujiang.dict - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.hujiang.dict - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.hujiang.dict - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.hujiang.dict - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.hujiang.dict - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.hujiang.dict
Processes
-
com.hujiang.dict1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5003
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.hujiang.dict/databases/offlinedicts.db
- Size 16KB
- SHA256 b6807206f9ff33d7b2cb87e68b63d531046a70388f3d557555fa4acce59fb37f
- MD5 62204414689dad7852fe77064d553179
- SHA1 b02ab0f494d9923484ee6c3eb9ca77b953a92393
- SHA512 20485697ab6ad97be9a29571dfa9efc90cdaf5187fb9e0328aceafc71f776e1264455a808667fa8a6d15c49e94e4cd5707774d20a478ef56f8fcdc499648a970
- SSDEEP 12:TLpE2qoDU5l3KkdcVkTiAWWYdYYgOYcDeRmBEyPbBvOw:TLhqWk6QOnS94GSN
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.hujiang.dict/databases/offlinedicts.db-journal
- Size 512B
- SHA256 8398f6bcd3d94dde99fdcd0be6d6da2ee7cf5e78cc99a3e8713089dac7c3fe4f
- MD5 b75122e74ab4e782ec6616b9fb6be739
- SHA1 7d5291e5b3c1eb70991de885de1dba78bc18707d
- SHA512 d04e68a6acea7ce272e53d4f9309c5cd8a4530b832215189315fffae953edc9a2d11a6bbdd13864020f1eb7ea69beee306986907a048f6d7c0ef5dd12f1eb4f8
- MD5 SHA1 SHA512
- Path /data/data/com.hujiang.dict/databases/offlinedicts.db-journal
- Size 8KB
- SHA256 2858d8918d5d0fb8ab177dcf52be455bd85719228b6de46c2a10f7ae44f10fde
- MD5 4c657a896e25d6360c36e03d98add12e
- SHA1 0fced44e8c820c505f2b0b478f88f049353054aa
- SHA512 6e4f63bdb1df438098a9a5c2f62cafedcba849463ca829d6add3a4c6c7e3ba5907761b73d6392e5a13b61b012ae93b239c4bea480b26118788ed16db5b23fe8c
- SSDEEP 6:7+/l94jOn1AjRg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKQs:7+tG1qLiuWdwRmBEyPbTs
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.hujiang.dict/databases/offlinedicts.db-journal
- Size 8KB
- SHA256 0bf2b7ef88c97a4b35f17b5088fddc4e7226b6cfd18c4e6bf0b35415ba59d165
- MD5 ac1f7d7685cd1d59a098c6527cd9a19e
- SHA1 19c24b2beb280e1cb27a32868c46d43181467ef4
- SHA512 7aa8c5769e22ba152ab77e3eab405bbcd3cc416c79d81a05494304d86be8d0e61f3a80cb8b1b9a9a60ead306ac4ceff826138f22961657ebc7adc455c69d4908
- SSDEEP 6:7+/l9oJFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKkkt/Qw:7+tkqLJdTRmBEyPbDk1Qw
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/hjapp/HJDict/data/db/DictDatabase
- Size 32KB
- SHA256 8195251f6bac29b02369f9f933fd3c6f70987854d972ad1105db53e017f5595d
- MD5 759a75f2ec3e73044b81eb9dbec42d07
- SHA1 31aa118607b936b127e753ed05037a9babd79da6
- SHA512 707b9112739446f71b0a7fb1bf7a0bbc5d698a887b44b21ec24bdccf929cb6073c820972db5ad0bbcc79db35c4eb9cc7a27ce32f47fae5b4feb36319c6ff9536
- SSDEEP 24:TLpMyhi9FgustAMyxpOuTbPMAD/y1uS9wGSZGe:T6rstgPL/69HS
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/hjapp/HJDict/data/db/DictDatabase-journal
- Size 512B
- SHA256 b57644beafc82333ce3068ad2dbe1b9e06fc64b67cd718676c3ab8be105e1736
- MD5 d26e04fa27d125ab40ab390a13c1b8f3
- SHA1 57daa6b6f0f7908b463eea6f318ca300fbec4c4e
- SHA512 aed719c296369f51c89f2b8ef2d993f2931a1db563e87fa5559d1a795b51a61bf6afe7959cc30f7897093c98b0ea7d784d6227392edeed72b56c4b744a34dc8c
- MD5 SHA1 SHA512
- Path /storage/emulated/0/hjapp/HJDict/data/db/DictDatabase-journal
- Size 8KB
- SHA256 3171fdafae88eb8cd034a4f4d7d818f38c12a915042b0ecdc76db126add2c32c
- MD5 57769f65bd22ae497e0750c00a060f40
- SHA1 ffcbd3e7f5848823d49aa33bfa21cc17dbc6800d
- SHA512 8cec8b6865a880417836d25922b3eee18e574ef3f4fba5a328923e6d06ea556a6fdf1284b0fdb7cd98a6bc711e162a23b1df5133ea6c5f6aa6b1a705cc577b55
- SSDEEP 6:7+/l9/lulFn12Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKS:7+t7BWqLiuWdwRmBEyPbh
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/hjapp/HJDict/data/db/DictDatabase-journal
- Size 8KB
- SHA256 c384f82485e438a496fe4fc9d732aea15ea3ba5b94164d8ac8b4b3a7b7cd8247
- MD5 0a9bc4dfeb7c87b305519437f1679932
- SHA1 206cbd1e2984a32e5d70fd98e3d6503f7e06e441
- SHA512 3a882a7f87228ae7785032999ccfdfd109c6b0ce0c4db9252e501ab0f6e93857e52ce13ac3ca220a443142ba97ad1e74f67e0b57cb6682f9d72908ca23b4a9e1
- SSDEEP 6:7+/l9lGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6XC/EC:7+tD6qLJdTRmBEyPbLCEC
- MD5 SHA1 SHA512 SSDEEP