Analysis
- max time kernel
5s - max time network
132s - platform
android_x64 - resource
android-x64-arm64-20240611.1-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system - submitted
16/06/2024, 14:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b40aa3e46b63ec0d0b2f44e1a2c67dbd_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b40aa3e46b63ec0d0b2f44e1a2c67dbd_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
4 signatures
150 seconds
General
- Target b40aa3e46b63ec0d0b2f44e1a2c67dbd_JaffaCakes118.apk
- Size 7.4MB
- Sample240616-r28ets1emj
- SHA256 d80bb85086cf613bd289021e2792cd2e7e0bda6c3877cf1caa37030edd98b07c
- MD5 b40aa3e46b63ec0d0b2f44e1a2c67dbd
- SHA1 8dadafb7f2e9a1d37ef75b0cb656660646028cac
- SHA512 dac39f3c09c4530cea486e6fbda0ceddbbc5febdbe1ae8aa8d9a7c310f50568866de1856883890d59a3635c536c77cd52ed7681043a56326f084f825422d31d4
- SSDEEP 196608:eKVdt3DwfrdJzHteIIN15+K2K0RFbdUm5xolmehMj2RG0U:e23UflID5VDGFbOexoYWMj2U0U
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.zfkj.xxsf.guopan - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.zfkj.xxsf.guopan - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.zfkj.xxsf.guopan - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.zfkj.xxsf.guopan
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Android/data/com.zfkj.xxsf.guopan/files/tbslog/tbslog.txt (deleted)
- Size 12KB
- SHA256 5c16b85ea8fdf3b7782bacc589420a49cdb1af952892e4c2af22bf952cf38ceb
- MD5 fdf4abf3fba66b8ab49b25ea828fdf0f
- SHA1 5e42d59ad8aa29a6460393ca866c32792533ae43
- SHA512 9d2a52c675d00849d4d8398241123ae35d38209c0a3c1267b198b3f6804e46508d73d90eaad6cae8b8200a4f16befdbb68f453a447ac7a0e7557348421e05570
- SSDEEP 192:bH7z6DWRGolOjoGSlZ6sm2sdjPKdPXfut7Wbpbs658CCjm+ar+3BlJHm06CCXqj4:TM4wLxN8L
- MD5 SHA1 SHA512 SSDEEP