104749e878014ae101fdc82da4fa656456d47f31457286ded6a34563050e59d2

Analysis

max time kernel
131s
max time network
185s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
30-08-2024 10:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

caa2f0cb67fe49e221508c5ad6003aa6_JaffaCakes118.apk
Size

2.3MB
MD5

caa2f0cb67fe49e221508c5ad6003aa6
SHA1

6d0c23f658a4629144e8eb3cd017b86523ebd6bc
SHA256

104749e878014ae101fdc82da4fa656456d47f31457286ded6a34563050e59d2
SHA512

51673833d9ca5dba31cc27754471e46a8b92c3f703574fb8961b850a6c485b5bb4534d72ce38a1a9fc332b7fb05a340ae4457a420f7f03e2bed6295b87fee441
SSDEEP

49152:T4hbMiZJN2tAJB8/cZevLULF7ZYRXq/77/9c53wGdup:khbMiZJG/cZxwRkQ9ds

Score

7^/10

collection credential_access execution impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.asab.mmk

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.asab.mmk

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.asab.mmk

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.asab.mmk

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.asab.mmk

com.asab.mmk
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4446

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.asab.mmk/databases/__pushe_base_lib_db

Filesize
24KB

MD5
968fab8926db1d33d0be72368a2a85ee

SHA1
90f09868185739ca021af243404a9885e495862b

SHA256
e60c2227b1daf74ab547d8c94e0256fbdddf85d5ccd65e37d45f5be5d8d50044

SHA512
611e237645cc719eecef2a385d439d286d9f3663d4c9c2a3f3a11e48ef60a72403a6c52c0c8c3f7acd989cb309aac97d629850a58484db519aff0e112a55df89

Download Submit
/data/user/0/com.asab.mmk/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
2604343cb350ba1ba78d2a093a5f8e57

SHA1
e738b0b94d479da85488e4e1ceb01f8acd1186ce

SHA256
c6d10052a88adfee555ee3d26da97f6b7379e9a2f0aef52adacd95e2a2825bf5

SHA512
538746a21460f671dd7bf01f5209220c2a1a71dcbd7e944bbe6d1c57b2f723223d1bf6fe9d4338b55d126a110414971c6d9b95b0d6d9418579b9813a2ad010ec

Download Submit
/data/user/0/com.asab.mmk/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
dd76c02cde3aafe1fcc36ac526296571

SHA1
cdaeed9ea88eadd0cffc6c7bbf9d01fb246b971a

SHA256
d788a7045effdd98adcf13b129ccda97f46efe5b6ff900177ed781e66fbc8b49

SHA512
39d20fb6169285eeeecef71b182d1aa03b0c84f6db37c9d2450844f278450bbf51bde9dfa1361385001fb23a6e995cb2ede80da5cd3c6783666985510d4bf5cf

Download Submit
/data/user/0/com.asab.mmk/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
27b653ccde434f5014a069ca6d25ac21

SHA1
5ee032464879a02f89ae19300ff0bb61809cd75d

SHA256
27d189640ebf2d2bf8e2b45053638c794c275148446e9ce63ea083359b5d2eca

SHA512
aa93c5da7c0e0c7c5ecc24e4204fc7a7d84c780b23564a1c53f0d9f12aac71137b447a526685b330d1b622295ace1e9f62c4964537d91eec023483c374fcc11f

Download Submit
/data/user/0/com.asab.mmk/databases/__pushe_base_lib_db-journal

Filesize
512B

MD5
c8101cba5fb79711e589f66d61b670d2

SHA1
3407134c7ca6e150ee8a6d0ff293cab49722cb7b

SHA256
2244ab1dee9b7b55a28f1b6b698e48bdfabbbe591a8c8c4dd21b5c16ace72531

SHA512
13578bea7cca9088f1255e53ec98d7f2e85d1d51fb84afc7313fe0ed285a364059ea1107ac4bb59cefc7a31e30990a94867bc51789b0f78cbca42bd367fda69b

Download Submit
/data/user/0/com.asab.mmk/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
4c171a537d3f1e16cfdf96ffed3d73b9

SHA1
3d0afcdbe50c6ffe03088b3f3fa91f2fb099f7a0

SHA256
aa6e4ab6c4b0f1b135c26677f5ae7c090ec6f9bf1a3999e6b130fd51270e77e3

SHA512
70485806dffdd7c779faf0fb4ca57ff1e0f63d60ab17742cf7b6d62242f3789ad3757c27f468bbffede980b96747e7087f7d93c33381f0aa265cdf2187a91d1e

Download Submit
/data/user/0/com.asab.mmk/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
a99724f309e840fe08ef52729f785139

SHA1
d908837ed51fe68e72ebad8233d3797b96b8088a

SHA256
0e818a2c05990cc46a385b5d2922c17613ebb3396943449baecd3174049e8cc4

SHA512
b130386d8653dff8a598b654a5050b978844b78d9a4337ceaf893f390ee9c027e956d9f744238f87beb2b003790ef73f449bdc1d064ec653064031c99966f8ec

Download Submit
/data/user/0/com.asab.mmk/databases/evernote_jobs.db

Filesize
16KB

MD5
e883bc186c61967e38da42c7edf208ac

SHA1
aec2ff9060ba26593744a8da59437bfe697ae756

SHA256
33e2e3fb28d2ea83a5571c7f1f2809d734f6a2a9df7376351350b7c89f025ccb

SHA512
66ce6bd2c66a6f5ab3bb60434904fe29815c0d3de74be72a4a6d3afc049b9617ae69d14641c79e2ec99f891d0197cad78ab46cad395feb4b030214965558bc65

Download Submit
/data/user/0/com.asab.mmk/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
db060f6701cc1660943579d9b9ebd1a8

SHA1
5574e6ce9dad0e327475eaaa420947e65934859d

SHA256
1f0194d31437334e52000f4a9e14713de4a560a0a1adc662021e119d99583599

SHA512
d9660bc8309058bccb4a40f47f6a5af0a4c5c047d2cca0500bb83350ab7f80abeb40f88080e3e2f5f01f5b736933c2b1c6208c2403056270a82ad1aa643aa4b7

Download Submit
/data/user/0/com.asab.mmk/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
8cb7600b4262cda25b9903dc34c5d395

SHA1
3b562a4d3813d48fc822ceb9c9117e126d037cf4

SHA256
706b9c31eae034fee6df3af2db259197971dea8b8f72cd806bb07d9263bf8d2a

SHA512
94e06555c87063ab30078513f78c2fb79d0b076b3819375a7a5fc192238f02f87120302c781b1fbd1c3329399a26c87ec7ee8e9f8d5acc58ef40634f92a5e3d3

Download Submit
/data/user/0/com.asab.mmk/databases/evernote_jobs.db-journal

Filesize
512B

MD5
e9c0f1f06411f47b043f2d411cef96be

SHA1
8825108e099d4083b3cb213db54d24ed180f20ef

SHA256
18dca09f47821d0d1953b74d1689bde9958147cb3c5d5594d1a060d49fa7c42a

SHA512
7786e5546d11a4772716058219bbe342ede1ce171c3584474b262ce0e65e1c6121814f619eaf103861890bbaaa0be6a80ffc2eaf2c089c808171e03456b910b3

Download Submit
/data/user/0/com.asab.mmk/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
84e8bffe3f3383ffaaf41eceaff7f4a5

SHA1
ad2a0d760f1c4559b2bf840969021172c330b90b

SHA256
6caa03dde7c04aac1223d2caf1fc873cb255fb3eb09d12e52fee50a4d425ce97

SHA512
400a59991a61f0f186c695574e259f8eccbc958dfeb35248b2260422ee6cca394da61dd21358104e1c045cf9dff2c554e3b617e7af0c05fabb46a56e133ea7c7

Download Submit
/data/user/0/com.asab.mmk/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
c9eb5915de2e652c1a101c26663e800c

SHA1
e0ef3f303e1517380d189ea406afa731f98370ee

SHA256
b59e56ebaa19c01ea75b02972f7f62dfc2c2d0c49bb8de666e2ced5b63815d60

SHA512
7a9b6cc810b113d6891859796e063cd1f2d368d610f451875d6d3f9ae9dabda03c515234367b565190efaac16d7833eb18abb945d852a8292d76062497e53efe

Download Submit
/data/user/0/com.asab.mmk/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
755a58183678265a56747d71f397bd0b

SHA1
511f99a3496e7227e3a908e13a0f5f95add76a42

SHA256
61cb1bd6e3fee0b4bc74b4a681e13b3eba199ab6bc531b2cfe230e3ca4d0a264

SHA512
533ea5af47506aae8529f9500e9a6b083942c09bc711e73fda066d69be39df65352cc71b78575082f99f01626415ddcd9b7b07ee8520982ea5db69049848a770

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads