263857fa92a5f89d98d87e90ea1c2160a164b75b2945647c115335da553796db

Analysis

max time kernel
28s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
29-08-2024 17:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c9523fcf9668345b47d9e45bba4230df_JaffaCakes118.apk
Size

364KB
MD5

c9523fcf9668345b47d9e45bba4230df
SHA1

7ee6d85718148519b1a6a12496757b951490d0d7
SHA256

263857fa92a5f89d98d87e90ea1c2160a164b75b2945647c115335da553796db
SHA512

f8a943c1044b3fbf085ba93731ebd26caef397aa401b3e05665fd27b2524b5f686f826907e029fae0e20d929e13cb241051235392287e687c553e3d2c7a3b5ed
SSDEEP

6144:mRiIPIz/JfxUOaXgcIAdD3C2xhjMRDuZnq1Zgo9ZXI8MI1Mrs/2UWCX5tsb:IPIzFxKX1R35gDsq1ZvSxI/245Q

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	tawk.to.megawinlivechat

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	tawk.to.megawinlivechat

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	tawk.to.megawinlivechat

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	tawk.to.megawinlivechat

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	tawk.to.megawinlivechat

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	tawk.to.megawinlivechat

tawk.to.megawinlivechat
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4965