Analysis
-
max time kernel
49s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
25-07-2024 15:20
Static task
static1
Behavioral task
behavioral1
Sample
702382cc308df79357839ec1abdd9614_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
702382cc308df79357839ec1abdd9614_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
702382cc308df79357839ec1abdd9614_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
702382cc308df79357839ec1abdd9614_JaffaCakes118.apk
-
Size
4.6MB
-
MD5
702382cc308df79357839ec1abdd9614
-
SHA1
9a79879c29e4c2fa33905fa83244768f764af278
-
SHA256
48f6e4fc55dd54db1d543519734d81995d8d6150330c2c0c0bf84270fd8e6a68
-
SHA512
e5a691b01fcd9ebb17024f6ab22b1877d5ba262f14b571ba882d383e9c984385234e575fee228b9b26e0c8b8ced20f11bdf465fc6bc29b2b4ffbbd201f8fcad2
-
SSDEEP
98304:gb5B6zBxIoOVd2qbXydVI0JdngLY6WTsE+g48qV6rm64z:ePoOdbXmVIwd0WwEG4Tk
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.smartapp.makhfi -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.smartapp.makhfi -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.smartapp.makhfi -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.smartapp.makhfi -
Reads information about phone network operator. 1 TTPs
-
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell information.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.smartapp.makhfi -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.smartapp.makhfi -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.smartapp.makhfi
Processes
-
com.smartapp.makhfi1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about the current nearby Wi-Fi networks
- Acquires the wake lock
- Queries information about active data network
- Requests cell location
- Schedules tasks to execute at a specified time
- Checks memory information
PID:4477
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD5abe2f971a6038452e960eed30f62bda0
SHA1ddefdd49447c70d7d98c1bacc321e6452faa7eb1
SHA256cfb5d7132311ce2598bf853938da94d9f8785204feda47ac55e4dd95c113353d
SHA512fd16b7733dd21c96d8f92f213f31453170264e2484b3ecec2148349d0a6a0150b32a88853f6e7edf8a8b4db261ff7e114f07d58b2870ff0d6a071726d0629a4a
-
Filesize
8KB
MD572a65107700a5513cab77b8b3c5c22e3
SHA12f432dc88f6548c1c2213094a757631b0a1557a1
SHA256e59738e0df703df3024abf1aa3563427f66415da110e8d62ba61cea19af7957a
SHA512ad39e135ddfd8bd86989aaa9f0ba89a104e4268effb35b71bb6fbc25311e7a133355fdd5e48e3dc1fdfc9f3fb8fc401fa3a7c7d664895fe4bd0bbdf2c7324d1a
-
Filesize
8KB
MD56f44a6043b98d9ec2ab0f266f3a2cc54
SHA11a2ffb680a5fd6d69f66ee00e7228c33e5c98499
SHA2566ca1ab256651e97bf7cff37d7b9859d5144ca2785a02584481baed6dba33c893
SHA512552a574d5a27546b7bffd9ee7b6bfa4446286e75912cabc819924a32ded989bf706850e9f8f6ce79b5c5148f3b2c102bead73f25c9be22efdf4be3ad9de401b1
-
Filesize
8KB
MD5d37ba41b250f01d2bf3aead9bb20038d
SHA1f75d5f5f817446d0ac42267e2b23d4e34781b543
SHA2562d69bdda06a3944b6e7bb5ecec771afd478d6cecd13842f942b8a91005694930
SHA512c0dd647dccc595987f68968ffb79b6651df960750e8e5b3f263e8bdb52a80fc583c5d917cd44ff34a48df549d2788a444e8dde8ab6947719413e9b5383520b01
-
Filesize
8KB
MD5ac1ea9126c27a67c7e2f6c6323c67a8c
SHA1605f83c64bd74c68d273c1eec16cdf82ce18d47b
SHA2561dd3101ee5a857ef2851a3bcb53b201d00165f886f0db344af89baf61793b095
SHA5124681cb674d8416cf17499a8153437ba210b756227e44a68d8a888d1900e86ed9675d3e356f376032ae3750d6fe77ca01f090154083f9e19fbdee1d7a6508176a
-
Filesize
24KB
MD5d51c98f4be6a8d96819865f6f151664b
SHA1dec08b0d77543b0b9b8c2ba9b102cf5813904c8d
SHA25638cc96a27c710690a23842ec95936fa26dce6a622d837a941bf8fad416755a99
SHA512b8c6a8fa3e498a119be3a44531e857d901b807d1e32840ffb681643f6aeea802fd715a61c0249416a12f709f763db70ad47b9c1c2fe41437236a76922998c8b6
-
Filesize
512B
MD5ad3203df82bf81dc356598348afc8df5
SHA1e8159f98c4420ceee187e3d3c12ab6656add5aeb
SHA25651cc7ab9647148ef016b44e3b1e28a084839de3ea3e9a1a93d220de249fb354b
SHA5122a842a7f9ee90a643e19df0e88f39a9c002ff566513bad584fa88bcd95ba3b66f499c40cdf06ec56e962454ae01338237f0c0f616426435ac3a8a47ed8469ffc
-
Filesize
24KB
MD50660d3ef5f0245096a9fa0f61d6a8666
SHA1282222362a5a05e3153b7f6b49ef35c667b19542
SHA2561091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2
SHA51218bbe88051278314b76611bd68156ce60a9c3af3818d39991fa58d28bd9bcb8476eb00ef52ad8ae7d16c1d7ffcd9f2e8a858e2fd806ae59b5d85a8c3a9ca12a7
-
Filesize
20KB
MD56783df573eedb209847ac8327ff727c3
SHA1f805f0a11dd0a6869fa61bef5939c676cf76e99d
SHA256d82aa5b3b69ed5ecc2fe9f034280237554b20279183e6fec341c33b788860489
SHA51286801377803d522378c06098ff7c011305aedb54357dfa3ea0bc31ff3c87e9594f70e5dd2015448ad3fb9574cd6318df7fe0c2c1303e595a24446d20104a864c
-
Filesize
20KB
MD558ba66f363daa05172f78d9ed6110727
SHA1012aa83b1957321f6cad500a7f13ce3480cff79b
SHA256aa769898a70e9df16702c48233589d140f4aaf50eeac9fba7d88077b83fc8c4e
SHA51272de5df34455bd46229ae3db71e9e877ef1b42da2e83ff06f27d480f16620c509e43ee1b9605a3ef2d86de609db8ebfa70e638dfed3362d351d36b6e09b708a5
-
Filesize
512B
MD5850b71f7365d3cb6406d15fbbde77692
SHA1e36beff251e24f43794fd2369366c605d3e9a322
SHA256951747fe7a02c8305278971ba66abd58fd76c279c25b835263f0893d568bc42d
SHA5128d49c0217e34400188f5e288de98b8ec8f551b696bc25cd97822de9f201631fbd0d678291cf0c13f59515806eba6cdafbe7a36f4fbff2dfe8e13246aa24d4b45
-
Filesize
8KB
MD57e2b797484117beb0ca17abc88ba9d04
SHA178cf182fe923b0a1670105de160860ac26430edd
SHA2566dbb2f265adff342733f66ee995204c037b9ec2dbd63f840902d08723eb5156d
SHA512b2f106e0d59aa6ed8b434b84a53d172e29f46e7d0bb291bb6de2c091b5495bd043ec56b1cb47f64d20c05bc6a53d98797085f99c016d550e26f8a3be66822412
-
Filesize
8KB
MD58d8031a47302d2e515295a6e76ec8cfc
SHA1ea42abbedab25aad0b9457ad1508c1ce57c7339a
SHA2564af0a807d1f37b480742e215db15b2faa5dd07d59a3f8e9e9186613f1fa002c1
SHA5125d144a8267ee0abec3c7b6fc618441b989c8805a37d78ada423981ccd8432c97415326a9ad1fb2eb902f74546fe81156c9363280bc01f67e25171e3f5a08508a
-
Filesize
8KB
MD56179374959b1d5a40da3d0987cc34503
SHA193fbc44b5ebdfcd956dd93aa911568f3b82bfe67
SHA256d7e8d3666a8f065346a54e2349f7c7b67236d14748153948a0a0ade076285aa7
SHA5124c119296ffa95ed15c393611b557ef8df02cc15629497e4a483d465b65c67b62645f7e46a109b0ad546283bf373fbf255dfacd23c67696800cdfe2f17d1b84a9
-
Filesize
12KB
MD52b6922444e6d0f60a57098557a11d766
SHA162e6862978da6ac7a0a92d99e1602909e5afd7c8
SHA256db7200aa7e98f25770d010dede3e1efd323b837f820e77e858121962ddb317a3
SHA512ba641fae36cc7155a8a381c2c9bc44c6516342948cfc8847c5cc169370a7c8467824193da38ca9b6092ec9e1824e755914c8f09161a91319ef71056cadc6d2a5
-
Filesize
12KB
MD56d6afd878d874d1ffbdfa71c6c23b355
SHA17a5178b416016449d63ea9faa5ef6877c6d15a0e
SHA256a0265e872dcf9f87cbecdf5ee4547f4d8a27234127a26cc05a1a1f5cf2e24d22
SHA5127ee992d2e1c1b94885103e1acc19fde38d446e79649aec41b6e36e0f662be16df2ba184714226ecfd7704c739c3e7ca5924acbf70c7ce693840e94e6d2c6d37e
-
Filesize
28KB
MD54a1f18b25648733896b29fdf2a1d89be
SHA1b8883150a1eabcf6784dd19b959ad4ccfc020744
SHA25618bc4e177a262bc1db79293c918c1e1fd9d22a43cd8af9f6f820e02250d6b9a1
SHA512d241d2a4828c236d31c0cd712787bf83d946c91ee126dc696bc1d237798afea3d19fb94a59fc1255a8af3b29174180e72be5910561190475c35d21c31a17ba0e
-
Filesize
512B
MD52f89c7a1a564d1bbba2b089b304ed740
SHA16ce8f3240fa3eeab706a87c1b56343c4c6ed5d74
SHA256996c617f58c45c97b5480af7fddffe5f1f43b67cf291d0fb61b6c34cfa3e9588
SHA51258b0f44100903f183fca4a9721b663907266e136942203e6631cc76fda586c0b72aed9af7a18b85f1c457d4682de1e2408564da20d7b459b0ebbaf321517872a
-
Filesize
8KB
MD5f3f56779a189c7307763469f46492e23
SHA1ea6ef69ce282abf2beddf01d77259f224549530c
SHA256c5818a5cd7dc7e9ca9c0056b4f4c14b8a4625dc9afeb11b9effab2df246fece1
SHA512c220cc70827d14cfd076927f151b05457857c43ad4e38f59c2411cff3919cd7e046aebeb4e13da60ac11ada1dd65f9907d91d1d11231e8bfd45917f936bce6bc
-
Filesize
8KB
MD5e91b47b1cb68f60435cfbf462f78d98b
SHA13d87248041e89e3aa93fc6dbe27f5a53a98729ee
SHA256ba4e2dcf6123930625d7e8b88d6e416a43b3b975f9b71a2b9e6cc3347d192808
SHA5125ba3e4af2d48310e17902371ccc8524af0d45192bb5174546bac9083b2583b1d2d5d53421489c93b5e455ca42ebc79ddb95d4130b96eaa6d5d75148a63f5f0c6
-
Filesize
16KB
MD547080e3bfcf2db9b8620f2faf6c5857a
SHA16f63c1851255e0fa99567f047382074b086d38bc
SHA256dc4f8a73f49d2a6b41ff425fd08b85c1eba5280c438a1a1ff9832e91dfa56cbb
SHA512e757043d82798926a5ddd716457accf6616894ad1ad79ec832293a1f662910b663239f899bf05a5c8d90fed5bcb093c5529e5bc842fe9003c1d5902f9ed84473
-
Filesize
16KB
MD5506d397ad6465ebb2447f8f2c347618f
SHA126c38e8901a2a7ff568a682904ff9573a90799b7
SHA2568e075a8fe6d3268b4f9b0113cdb0961ee9e57ea359bfd702b788dbc6d25254ff
SHA5125a31e53551548d2452b8df4bf81d7bcfd492702aa098044495200010eefcf491aae8342143510faf93d1fc2c8f14093a122226c47e2f7241198d0b2e739e4d24
-
Filesize
16KB
MD5a13b465f463863b801748942f03c424d
SHA134fb7457aec8ba57bbaa309dc3b22c9580665545
SHA2560ef89585bcce359d5ef2ee11e9f025f19611375f7940f9584266f7201311199d
SHA512f064cf8e66173eb65e880eb7b4e1febfd94f0a8c576d19478d75855ad32af0f927a51f7e205775283ee05601387f90f27de4a686da12dd0c0f1ac36ee6021623
-
Filesize
16KB
MD5a3f5a6870c9eaeec62ee48edf02d5a74
SHA1d9b8fcd9ba6320caf440664d3d085034d67d2dd4
SHA256ba3e32d47c1fc6aa0af91c976da81f713857c9426fb07253b7fb14e70436922f
SHA512a876285b2c01b6c80830b0c12dad43ea19b5ba9781c8e79329b463146ecbb11a92e564f95472d4326bba79c5f314cca2704812262f14b8f3716ae8862657271e
-
Filesize
16KB
MD50531f22f2fa86bc8648b8510f5e0a64e
SHA14706b756e4f727f94abd870bfc5bb369bd0633d3
SHA25658935132de1027918e8126a9a0eabb486cf0f5918c5bb05e81b331a9757ab04c
SHA5126c2fae4fce90a8e2bb2ff69ded8db2aa3004660ee36048b1ef88dd65c6177e9d69f46762269654c50fd89b9b1ffcf8958962c4a64cb5746a557001ee157f9de7
-
Filesize
16KB
MD507d99648a03e9920f771c1a3df51c194
SHA1fc6a93b86a8c474749ccbeb1e26af467edea2365
SHA256348819be1b07de0f7d4ab1a61dfa5efc9708e266753c4a2aaed6c664bef3d5fb
SHA5129d91cb2abd63194ef7be33b6622fc252ff5c88ceb25f2fdbd29f2600debdb1e27cff46817c5fed25cb7aa6fb55a7c414b86c1981eea99b5c7afa64017e1f3ad7
-
Filesize
8KB
MD5dde836d6a19dba769af36da9787d289e
SHA1aed578c58c0e1ac83469b806682dc5701e3ff7fe
SHA256628fc0124b8eb8a6c46f9ed4e11c6cd7ad2d9a067403d223dc2181cbe526ad69
SHA512c1e6db21969d8c65d285cee2424c5c7054be2451bed931df401195923c8f76ebdbcf0bcdaa8899b860506345d4d2c529abac87c71f7b279b00ef609ccdf7f471
-
Filesize
512B
MD58c06fd34cf357e0c5d675cd7e68e9759
SHA1a66e40b30161ea439517ad4ac9cfa2a346b7c9e8
SHA25667ba4ab98d771a38cd61f0b37427c3d2c24880a502483fc806866ad545b92277
SHA51271d19995494c9e2f354098a6aa4d803d150870c52c21d1d74241e6eb02e127ca17c3912a8a98a2c51c641ccc987a72d7115b3adf2c7a02861b9eba06f970eced
-
Filesize
8KB
MD5c2d9ab5bd6ff540065f21e4b3f968d78
SHA1ac379aa8a7c8062d67611d2b2abcb4ecb07649c5
SHA256da6915fd201400dec1d817b228b4f0dde230956a9a0855711b79f854c75e9ddf
SHA5126585f1bba9e6e353a9ea99b8eb115fef91e67180594991fe2dae3dae477013978f188e27cd106348edd7557714a46726171aafda5983cc04b5d7a78131afad8f
-
Filesize
8KB
MD5d1628a246c98964bc19e8f793fa6a540
SHA15a9e3a1b02448decb676ffaff03eb62d0a24ff1d
SHA2565e00435b44cb34e284a76f2ee711c210811f485db408dec9896085d9ea1f917e
SHA51245eabdc14b8c3eb4df0c492c6210144a893137b38aee97a4cafe5711e16737dbf3e5bb01924422612636eb785b23b5a4e3605349e2e6ce4c518b38ddfa7a34f2
-
Filesize
8KB
MD5814ebc633d862311e47c271cda9d7aaa
SHA1afaafeff0baa3c18a2fecb5a9e1f405f7e636254
SHA256bf70700b34e4197a56b98ad6c3de35eb81df15d179e4bde7ad4bc92db42abaaa
SHA51208492bac2433095e69f7bc6ce35281023d1859db410566172002edec8fe8fb73393f0809d2aff68f9f32e957d2dcaae76d4054c448df514c73eb94d4a632e858
-
Filesize
8KB
MD5373fa920a552d8328bf3f121d1231f82
SHA18125ac965fed2ef260dcab402be0ee31f7f96b30
SHA25619e6f55789a42f13dec913db8127da8fa03cd60ed091f150b8e9cac721eb52db
SHA5123aeb74a938069900635d3a1bb02c54a008bcd2e15340373b97ddb24a18682a71df4b161f74a73a7e96d89c93a6f7711ad7a6a0fd83f179bc5f4d78f6e3877444
-
/data/user/0/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize485B
MD5fd649add7a6bd27b5fa2836a027e6124
SHA132e980d44844a3d5abd78ff64e599785b85727fe
SHA2569c37f591e2b839c316a0a16d1677d03ba8a7e787e025c65016caca5d8f32c82c
SHA51284e2e5235a09cfa7be991d40926822a329627efd24aae66f783daa1b6a1c3b139400bf4434702209e9ff0a6b171635e04fbd980e0ad8fa3946e6d9e10746bb83
-
/data/user/0/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize1007B
MD5b9adc29ce38204afec84630a3052b372
SHA17a83b96635040ae3621ffdc37b09efc7d6e919de
SHA25655763fd390392481b7472be71ef9548b9afebbd72ed8931ae6d58c3900c3e41b
SHA512f4fe2c2d89d5ba614afd12a3460c09b5607bcdae748e3a4efe6b5ba7887fb509de7e5a1c2625050e300e43c88502a95d62e4d14fff821908977ce6380a23fa08
-
/data/user/0/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3a11346a-14ba-4032-acff-379d27ed7337_1721920838648.tap
Filesize376B
MD583e0f70ca7df747ddf15b0f362eda18c
SHA12c89013bd8e55e7610490834ddbc7e57013bf5c9
SHA2568f5cbc4324165a5f7bc310c1e8eac866401665208203b1ace32593e7303b4f00
SHA512993ef5f9bde8b373cde35fde66233023548780f6b96fbcd89b16cf57fd733630524f3821b37ad3e5f90aa61844f967b998dde05c6dbb6ce239040e74981b5c5b
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1