Analysis

  • max time kernel
    5s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    16/06/2024, 14:42

General

  • Target
    b40aa3e46b63ec0d0b2f44e1a2c67dbd_JaffaCakes118.apk
  • Size 7.4MB
  • Sample240616-r28ets1emj
  • SHA256 d80bb85086cf613bd289021e2792cd2e7e0bda6c3877cf1caa37030edd98b07c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.zfkj.xxsf.guopan
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4565

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tbslog.txt (deleted)

        • Path /storage/emulated/0/Android/data/com.zfkj.xxsf.guopan/files/tbslog/tbslog.txt (deleted)
        • Size 12KB
        • SHA256 5c16b85ea8fdf3b7782bacc589420a49cdb1af952892e4c2af22bf952cf38ceb
        • MD5 SHA1 SHA512 SSDEEP