4cd65f4b028917af1a657ff69c1bbe24b9f88c0af78c5fb98ea72772d97c70c5

Analysis

max time kernel
29s
max time network
151s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
29-07-2024 14:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4c068cbaf1d67044995960c1de8a7ce6_JaffaCakes118.apk
Size

729KB
MD5

4c068cbaf1d67044995960c1de8a7ce6
SHA1

8a50ac5083981680a33abd63bab458fdf1dd93ae
SHA256

4cd65f4b028917af1a657ff69c1bbe24b9f88c0af78c5fb98ea72772d97c70c5
SHA512

05aa957ebb506bc1813f5027d6b0638d6ddad1d2470790ac46e50488b29ad2075d57f9dbca94b06a12a927df5eff444ee4e7adf20e1a32b3f40fe8c5b10a5001
SSDEEP

12288:K9SYoutrKifHd/hRQw2Nq4IfveViZhAvW1U+EvYMlTrNpVp0LPIG9OT:FuVdd/GIfvlbUPvV3WzG

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

Processes:

com.nasser.huaweimanager

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.nasser.huaweimanager

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

Processes:

com.nasser.huaweimanager

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.nasser.huaweimanager

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.nasser.huaweimanager

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.nasser.huaweimanager

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

com.nasser.huaweimanager

description	ioc	Process
File opened for read	/proc/cpuinfo	com.nasser.huaweimanager

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

com.nasser.huaweimanager

description	ioc	Process
File opened for read	/proc/meminfo	com.nasser.huaweimanager

com.nasser.huaweimanager
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4976