Analysis
-
max time kernel
45s -
max time network
181s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
28-07-2024 21:02
Behavioral task
behavioral1
Sample
239f4c9b0807000b58919df8245abb22_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
239f4c9b0807000b58919df8245abb22_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
239f4c9b0807000b58919df8245abb22_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
239f4c9b0807000b58919df8245abb22_JaffaCakes118.apk
-
Size
151KB
-
MD5
239f4c9b0807000b58919df8245abb22
-
SHA1
6c2396c040f113145a42b4b480af34add5f4f545
-
SHA256
e64bdbecba0b3614feb63f845eb69c07221b453c430a6df8b0b0e759e64c766c
-
SHA512
e6116a531807a64185999d99d42230df0d3218bd6f2bd64dd27a2735fece3fd3199a12f76dee7701511362f9e1c43520d13a03cb987365c64e45b27a3568e40b
-
SSDEEP
3072:WEB+7pSUWm1vMRM2usQtLKjfJdqVU/FGrDE2rfUhFXozrNoXr9dZWw:FSpTD1vInQBKjfJ7/4k2rf+CzuXr9dB
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes:
www.aplikasipemalang.com.apemdescription ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener www.aplikasipemalang.com.apem -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
www.aplikasipemalang.com.apemdescription ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo www.aplikasipemalang.com.apem -
Checks CPU information 2 TTPs 1 IoCs
Processes:
www.aplikasipemalang.com.apemdescription ioc Process File opened for read /proc/cpuinfo www.aplikasipemalang.com.apem -
Checks memory information 2 TTPs 1 IoCs
Processes:
www.aplikasipemalang.com.apemdescription ioc Process File opened for read /proc/meminfo www.aplikasipemalang.com.apem