Analysis
-
max time kernel
25s -
max time network
188s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
25/07/2024, 15:20
Static task
static1
Behavioral task
behavioral1
Sample
702382cc308df79357839ec1abdd9614_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
702382cc308df79357839ec1abdd9614_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
702382cc308df79357839ec1abdd9614_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
702382cc308df79357839ec1abdd9614_JaffaCakes118.apk
-
Size
4.6MB
-
MD5
702382cc308df79357839ec1abdd9614
-
SHA1
9a79879c29e4c2fa33905fa83244768f764af278
-
SHA256
48f6e4fc55dd54db1d543519734d81995d8d6150330c2c0c0bf84270fd8e6a68
-
SHA512
e5a691b01fcd9ebb17024f6ab22b1877d5ba262f14b571ba882d383e9c984385234e575fee228b9b26e0c8b8ced20f11bdf465fc6bc29b2b4ffbbd201f8fcad2
-
SSDEEP
98304:gb5B6zBxIoOVd2qbXydVI0JdngLY6WTsE+g48qV6rm64z:ePoOdbXmVIwd0WwEG4Tk
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.smartapp.makhfi -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.smartapp.makhfi -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.smartapp.makhfi -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.smartapp.makhfi -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.smartapp.makhfi -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.smartapp.makhfi -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.smartapp.makhfi
Processes
-
com.smartapp.makhfi1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks memory information
PID:4960
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD5995163ae3fdbcd11c24caa86f021db91
SHA1d889c4ba74d5ab8d3c44fa25bd5ee31cba738b95
SHA25668a19843dd978465c4a86675093618bbecd50fea3c0088b1a38e5205d466b364
SHA51206fd4aa94f7e2e59ab580020e5499fd00f76dd91ab7148392541d09dde73a8c20d80687a33db57c990fad67946e5096d99124d4b9b842d37566fa0c3790c15ef
-
Filesize
8KB
MD57d4b2a028d6b41644e86be0cf2676ebf
SHA114f00055012aea08854a9b649640aba8dc78eaad
SHA256a5d4b0cea2bf45d98c2e518f1202cb72f899192cc8a7b3fe5757de5b0c0a85e5
SHA512bafed03759737eea2215888359a7d83d0725c7fe2c49fce32b1a550ebb7d5dad0bf6373122d2558715ae008a762c470e70775bd6efcf1e2fd54ad612c1706769
-
Filesize
8KB
MD56568b6457f94d37cf987e05411897ce9
SHA1502ab926b1e8b3d36837108a4ec03c44e3c3c1d7
SHA2564351657f4213582593c96b8fe9059a8e578f5026eec734e2b79ec76c2fd6f747
SHA512615c5949d559da81e69eba276c94fb040e6c8137f45ec13cd3a136dfe2783ec783c76d569d1c4481bc47f0c8261fd2a2f0b2fa9e47f9c423f0b6665b3ffbb26d
-
Filesize
8KB
MD56169bbc5386b9447b65e1865c383317f
SHA18b0f7ec36209aca72c3eb0ef3ac19260cdaab2b7
SHA256e3c197e2db8ea8c67960e2f037cee12cfbd44c1861dc7577afe433dad2a6ae32
SHA512a60a6676f910cc63495a136e656487df2f5c04d5d6bfef1001d8eaef4207fff4b7528a83c18a1f479b39116e7a7d513dae74b46d9a4da4248cfff2804581ed2d
-
Filesize
8KB
MD5b8afaa7e4130a93eb6f205686a80ead9
SHA1e6677bd3c93f8c584a314b4be21d3f19421ece5f
SHA25695434506d91e60c21250d6bf109aae89ea3eae5fe543c9d89834b55c299b2ffb
SHA512d91872cfa1177b5cba897614285443348e6eac466940622130c8b3c4b96be749af1469ebec2edba3d10f421f5ec45a01e39ed6ce73c9a208f231597002853eef
-
Filesize
24KB
MD5665b1ec629be177d29e29a072170e255
SHA11dc6c9648e40646c89d93cf26c6ff547b9bbfb1b
SHA256752f61afa867e633cafe0a10724b58317ded618338f8c4d29040b22ef3bc6aaa
SHA51245f3daeeed70a4a8a6611ae8afed318c32bd516ac41360aabcf777e2e3c53feb9d3689fd2ae2ea8ebfec96139bf529436c5da8e2d608ffbf27a52f7d250b889d
-
Filesize
512B
MD5b9850d72988ea71f8ed67bfd8ab267f7
SHA18d6d88f046e10258e8c2ca2435af263a7d42f740
SHA2562c0dfcc7e70321664749940cd1de726fd7b77af03d90f4d1af17fc95b4a74a6a
SHA512dcd29f76417d9271938fd3774bf0646c90309b13f2fd1ae35a17e8a472c6e636e1bb50a5d0f9f644968183fee0ce5be6b9f3fbe9b29fffdd8197f66a072f319e
-
Filesize
24KB
MD5259a1e4e7ebc4b0d0341ffcf0c3bc2ea
SHA19b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c
SHA2564f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1
SHA512dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313
-
Filesize
20KB
MD5eee72e08ace07eabf3518c6679d92a93
SHA118c1b70e03e111196da21182a51b990dff8f1c54
SHA25645e9f37bc11c11ddabc02331b6c15da3ab650ef2cefd5c7d58c39d8350699b95
SHA512ae15b38c0524ac2ca3a085196bad64001c4d682dc01e39261cc8951dca17cc2bc2d3a69d00e279a71b5df0cfea094e9755c288cdf754e467acc1e406ee61ee03
-
Filesize
20KB
MD50b8fdabc57d4ca2a0a2710b5be8c6864
SHA119d3fa82d5203da7e3b1c4e99b4fd0207c720ae2
SHA256741e2aa6e637fba1375c1ca1f54f468669f6c2bb7ab8733c5e24e57cb55ebfa6
SHA51242893958dcb322dde0d55811efb9a3533c2822bf0e4a1de56bb3a64a489f18b43d89ec2085fda2c064aa5cdc66dba80a03c9355d19687afa5dc1692eb083d2cc
-
Filesize
512B
MD53965f886f40df28726c866a542530023
SHA1c0cad42e53a6fb3a804542393e8234961363bbf2
SHA256ef3479058764e95cb27324d3b62526ca84158bf43650e5a2cfa239190a9f5c3d
SHA512d6912a6a70c2a14430280d663c61f2031274d1a9d9a2334f97c433f5be8458473177d045536377fc62c33fa22363f237e06635cd03b498007fe0fc9d4accb422
-
Filesize
8KB
MD5ebaccd88090af302e29e0010d9787b3c
SHA1d4a2e20ed3d59c4c5ddb4307c8a6966aaaec8a19
SHA25694f5a645a723916c3a4e6ff503ded8258ae8296c4130af97d20cfe6df1066771
SHA51245508a86a70cd0b7974bf005e27078c553f938c6bef40ad6bdc76ff7cce58834fa54e6aec006db5f3508b3503c4dfe56e65033cd4280f7335af533742af4f924
-
Filesize
8KB
MD5890804507b033284d78e3c555fa24805
SHA12c4a30e88e74713a4c23fc28ece682190a74a5c2
SHA256b404db9fe5bac48ce0ac045f6f49b544dafe3d219fdfaef97c177e680df8df0d
SHA512ed6237ab868c789947ae615eb66e1c9858199e70a5a8079a7b47a16dcf4e5624441662fde45ee7a195c54eb9ffc4e4c9fb95abd378ec997b48a385fa81dfc49c
-
Filesize
8KB
MD57b52ba3510963d2331e4bac2c8fb6fb1
SHA138631bf45c33694e32a94eb0db7c9fdc288d7202
SHA256563cc467957e1021e71901a358ddf1ed163ec12897a2bef27ab7f1abe958e319
SHA5124862befc05fda70c63ec26aa7f0112c9ca91a3fa76bfa059750f09a11f836df8013c7d76f43bb091b484b956e09f20bc2874d1961aa5722321ba6a698a30b7db
-
Filesize
12KB
MD5938360fcbeb49f21c475e84790619ea7
SHA1f03354719f50a45bb76af5c21aaa63f7c86d8376
SHA25699ed662940731f3519674c14741f5bba9252bc3115c1ff292496341320b4c368
SHA5128e7139af7341eb3dafaee76c5be4628839dc9c56238f0e2738df5f16740b752133847d433b540146489d24f96cbb997332265f2abdcbcfcec6714aafa8c1014d
-
Filesize
12KB
MD5f22a877f885190e7fc3599ca24b63544
SHA173382860ff8493f715b2b4a14d236ae98da1619b
SHA256c2b26b18a32eebcf19c660267ec0949815d953e23ba231c256867485896f25fe
SHA5125f3ef19770b0ac3560d658117ff1e3a475510aca60b91caeeac4de97e56ca542eb041f57861867f40ce52d4306310ca5be15e7b713157065e8ae96c20dc7e52b
-
Filesize
28KB
MD5eda4e5f53129dca7344c7e3f3e6d9513
SHA1ed01e856ac998b6c3de46ac8a2a155f09d6db185
SHA2567c4bbb192102dd3dfc3d30cd5542d9a115cbc6c52369f1630eeb9e5ea81c8e5b
SHA512cf733d69c95b4db67de951dbd2b4f3c9b31008dd0b7f8a1d42bb14820def6b34a5bfa178d1e8cee0dafdf64531751674e7f6398743e915ef469bb97662c063a1
-
Filesize
512B
MD59742a883f81f289f4cf11e14b6376354
SHA10b048a83bf8f857e3a0aae897cd08ee35e65622f
SHA256a28938de5b4aaccebc5fa1657de0c9effbc473b6230f5a8f89c3ac24f3550665
SHA512146becc0ebbd462b342ba2eb8f8a6676290307fbd817782c056c5c16a338d5e3f4aa10d9f7f4ec90fd3f255ab55a1a1f7a6af28750a33e16eefc4a70c7a53168
-
Filesize
8KB
MD5416a99d71957c5907308e580e6d75b85
SHA10a35e01f377119d062c67a3584f38dc80c7da56e
SHA256082fbd783757fdd8371b604392390b2b6a88cf0be2cc6f95a99f863f9e8f021e
SHA512e7e0b79a2fe1680c4a540c8975d22693cbd25e7ebc910eb1eec0403082f33d84a013b9e6c8fe4c2003f2952ce26ccb6f0bf283c7e0fc7108e5e9ecd2022ee627
-
Filesize
8KB
MD53a68bb035c260bf14a27b7e1600e4404
SHA1f0f8f183982df7d257715b6915b6002c74372de1
SHA2565d2efb8b0d22c3bde931e2deff5f5fad84655b56125ba80e114fbb20fd4d9eed
SHA512857e51770af94eb72541f486302e1cfcafa0b045dc7dbcd11fef3f474b174a6bbecd69718343cdf032915d05757c8efafa77f04621fd9a8bde7d3cc1df62c303
-
Filesize
16KB
MD500e829076f54c72b50b63fd6de296a03
SHA1fbeb1b8be863931f98a7c29224a03b89f9616ab2
SHA256c479f839c0bc15e9a9749cb5a5a3eef4e09c0163160073477f72fa78b2e300df
SHA5121c6b0bfe980050072927f8d407ca86353098d03502f7194f141d43c045a3f35103261811281f023262f4823a4fd70659d6802b76e126e991120dc14cdf74bbcc
-
Filesize
16KB
MD5b732b8c5c9fd37a4dc07b666e332a5b5
SHA13372183085db06bebfb3e45d362d9ed18dfc590f
SHA256f8c6f921aa346dde90d70087754521d4bd0f24f8741b8a3b0c3bc5749f8cf6a0
SHA51262ef73f52af279f2d911621bdfa75a239f2ddacd06367841d917d0490db2eeb35e18499a6cb5bd841199a691752c215060b50e1c9570df8e4110b83dae520754
-
Filesize
16KB
MD5fe993c9d58770ec7699093acd8d6c450
SHA1d9b64230d2ba28c4f0b2b4e27839519babaf668d
SHA2567a7303092a87790d970febd6891e2bb7753aeb9e73dac54758868093b9f04674
SHA5120b70ec042a184a4279c33966725b661f563f7ee8c953f91d507c4439abbf6e907db7ee2ebdfd3fc2ec92d9093f715f3a3844ed100bd7b81af607d665980b06f2
-
Filesize
16KB
MD5633244777788730940cc917f2af28dd1
SHA13979c1c57f31584114c1b2ce1c7acc67c112e72e
SHA256cf9f53667e3316cf52649cf58ec4f55a18d64445e76d5f9c1e01ec7210f1f94c
SHA51213917dbffa3a6888d7eb3ee6cf289586ce6a55e8db5f1289c81eb953db5b0cd3e5839c6a5c9e4f86a38b186a9d1760c976be273a9d2ab13ca423d7add4a6ac80
-
Filesize
16KB
MD5c66b7cac41f8a192a4625891388ffd14
SHA1e64dd8e39b0ffb2bffac196c3654085becb1f30a
SHA2566b2076d34d65b179905ab03c9729d59b999b31bbda0daf8511499afb3befce9e
SHA512a8b2b53051f02cf6c576408bc72b0e92ac8f58fe1aef87aa55d548004203ec317c2be946a4f73975fd1c83d233cda83e8e38f9ccf016a24fa01605abf5cf6af0
-
Filesize
16KB
MD573bbfa711bae3c7110488b698a2ade44
SHA198d485201aa79d5c8c8ac4899793b392521995ae
SHA25657e84df484168001b92e83c8282dde4b491a1b1c9ffdb025854617e7057902ab
SHA512f33d03691ca8a4d8727bebeb0f57196e2cfde59df26b071e2e47e14ddc59e2edda4689f94165c4325faab4c206a0c8ac3cd6850d0ebb126bc2515a2b1b819cf9
-
Filesize
8KB
MD58ac86eac809ee85380cee50984b0ed23
SHA1d35cbefb35bb8c453377d56d81115772823c1965
SHA2565a8ac2bd41af805d4a8f66df8bc8ecc316a4f54bf28551d6eeb57b8524fd8849
SHA512340d2d852513bf61ff8da04e097076c634c9802e373cff155756d419a14cf5869052ec855e971e0cb2ad0251e182e0c3699a9fefb0c104c08c64b5f40eb39800
-
Filesize
512B
MD58f249e1b0b3488376d184ac30124ffbc
SHA1802d5c1dc7740a6a2489f15badb81176b6e6fbd8
SHA256988fd2d4c9a2580708636cf62d696cde0bd9555865ffd789125031af814daf12
SHA512ec6cdbeb44baba16c0fea8f838f8373f228382f11d3e62067cad2f48a1e8832a712f5ea51fb8fc34a34cddf07bab9a785f1ef90b585a5c15f3d7baddaaffbc16
-
Filesize
8KB
MD5000ddff5b704817baaecc655db3f7aeb
SHA15312e060266cdd29ed4e520b130e0215d63042e2
SHA256b0b0921f8db4e5f15c9c9a8aa2739d8402871c022305f195e4b9a206d7b65fe6
SHA512b238a18905a585468ed8342e35d02be0d5176179e28bbe30d77bb3b6b440906388abcaac59cf6062b65d9d627780411bd859e07002378fb6428b8f02f8cca8cb
-
Filesize
8KB
MD5168de3c6889e84434aa070686feb0478
SHA1505fb32107366f649805cb460e5c317cbcc862f8
SHA2568bf7dca685b46e1b7c8e9e7eac029186b7944889e7a7419732af40b2eebba0a3
SHA5125b7e1b6616af0edfd2eb30e825449880299016326e6a815a604b2566d845037c96c982d1c02407c79b0d93759a00f09cca5859dbb9a8d19671adf2292fec27fb
-
Filesize
8KB
MD5795bb7ed0db4e8e4da9aa6d4ae23ec2f
SHA150d639a12bdc103fa6dfcdff0a074c92d5e46cd4
SHA2561a6175fef9a24ddadd81cb387b0866b5048bb23d1e5000b6af5093466d770cbd
SHA512935a964b6aeeead0ee6aac733526791a4eec68c4a75d2015c15cc2431b31f82a0f74b085fbfa238a7a7d438876f4a229ce235603eb2b68c7cf3add732bffc996
-
Filesize
8KB
MD5072b12e722f40bd1079dacf915a56882
SHA12b61d164f19afaf03be8b5c5573a21ff83b849ec
SHA256ad603ef2959f3cca9ca44b542b6479ae2be9ea7c600e911cee50e3582931869e
SHA51229f82174b2aa9cdd697037d20fa99ff673e3d66cbfcec3fbae6005564b97fb063c0d1c7a92b4f427e391a76a690fbe8268afaafc79073181f12bd5a232d1453a
-
/data/data/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize485B
MD5a51668cd7875eca586fc8044a0c5da3e
SHA1f9039a0767f6527a45cf02070ccc6c728360ad22
SHA256325b27c2bcae371fb28a9f240cd90c87497dca237323d05f3f9314a67ee038a7
SHA5126263b82263f50ca5e297ccbb4896c33332fcebc02f2e36f7d2f1777a8f62043b19339dd9f6246894e9ca3ab429aa8c6973b656ccdee1e8aaa9bb2c9c8a80db98
-
/data/data/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize1007B
MD5b4988800d31e33afdd28012c493af0d9
SHA15dc31d5f5b8be13b65e9dbe385e7c3d200ee5985
SHA256f45d90fa5b4637d5d1606623ed16b55e9bd82eb4c3715bac19a3a23be414a325
SHA512442fddb3fd648bd4bd8ad42884f0e8ff66fd8ae3dd9e9f1059f56ae05347019c9905f35dd3a6424efd932972c10abd75aaa788208cbe4c70102c8f8a4cb7b6b1
-
/data/data/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_bd67eb04-def6-4027-bc50-fa6f6f854903_1721920835292.tap
Filesize378B
MD5f2e2b49207fe162797098819f23a3486
SHA1f9f4aabd135d3fdd90464c0e7a1f105db1ad3aa7
SHA256ca1974e0f6709d07cc61d626be4f5795b7693a19d40e5505c06b69d09f607828
SHA512cab063fcdfe5feb15353060ace61081f4feedb0777926a1dba6dd2b2c57cf9394eea8cd4027160012b58e11aa0c57e91d96556d04b0504c5fc1f672e369fb6e2
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1