Analysis
- max time kernel
38s - max time network
149s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
17/06/2024, 08:52
Static task
static1
Behavioral task
behavioral1
Sample
b7be6db68fb541b14a055e482fdbdcbe_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
b7be6db68fb541b14a055e482fdbdcbe_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
b7be6db68fb541b14a055e482fdbdcbe_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
3 signatures
150 seconds
General
- Target b7be6db68fb541b14a055e482fdbdcbe_JaffaCakes118.apk
- Size 6.2MB
- Sample240617-ksvztatbme
- SHA256 b7c60fc7daa229d2cfbd58bcd313c836c176373b87889e25275b141a7761fccc
- MD5 b7be6db68fb541b14a055e482fdbdcbe
- SHA1 f86221522356be6e06d6f7cb9b0a8a48fea420af
- SHA512 e4358d44262f2e3e3c6dad4eb8100f29a42a03fb8953552c746a3d576e7619407b5501ffb0446b6aa741355b66a30e4706c0b32ecbc807151bd52ee6da37f360
- SSDEEP 98304:E2fE6g1XgxfE6g1XgEfE6g1XgUfE6g1XgwfE6g1XgxfE6g1Xgm:1fng2xfng2Efng2Ufng2wfng2xfng2m
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.real.real - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.real.real - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.real.real - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.real.real - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.real.real