b2bbae152af3e34b5dabd716cf49715774d2fac9e2848b7d98c1a7f97cc12624

Analysis

max time kernel
129s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
28/09/2024, 08:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fbee7c1047658878603901d96d1dd3d7_JaffaCakes118.apk
Size

2.2MB
MD5

fbee7c1047658878603901d96d1dd3d7
SHA1

509e04c0bf1f44ed10a0878554539b0c9561e62a
SHA256

b2bbae152af3e34b5dabd716cf49715774d2fac9e2848b7d98c1a7f97cc12624
SHA512

d9ac2d02bb3151267190b84e19717427aa800d8901d95bfb0f88d75df219ecc4188eb0c038aa9a74e0c9175957c162cba5fcf4813832e1fbebd14424423e3565
SSDEEP

49152:K3DMdvKn8XOXH0pTIdvvqT3dbn3GvWbpvtvsj0bVlIid5:KzRnsO3SSqTh9bXvsjIeid5

Score

7^/10

banker collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	osb.xsgj

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	osb.xsgj

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	osb.xsgj

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	osb.xsgj

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	osb.xsgj

osb.xsgj
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
- Checks memory information
PID:4788

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/osb.xsgj/databases/StudentManager

Filesize
32KB

MD5
885b0f381a90f4a3742c8488b837fee2

SHA1
769c5e0aba915cf81206ed742b341f98fcaa37e8

SHA256
f4c0aee8e739d895b316e316ee0bad28a2cb4519927f6cb235722251f7cd70e6

SHA512
52426d4c5a300909b2baa19709ce8c0dec07e14d489a73a130cda5090d62266e4b57e3f94060fe0e67194107a2103e0f0502379b7bf62b541f11b7fca72c6b4e

Download Submit
/data/user/0/osb.xsgj/databases/StudentManager-journal

Filesize
512B

MD5
34836066a5711f26cad18a4f7d2e10d0

SHA1
3556e70e4487a3578a335e9d9688dfcf2a8601af

SHA256
467feffa1447b68cdaa75f25f1ab741eb7abc4593f2775c582fd35268cc78f05

SHA512
1f750fdb1932cd6e258c67642ee1ae971c72f561e6013a5c7f5624679f3353fb63f24b0791cc843a89ab60cadefd2ed15afdf3ec71581b75f3089683925bf0c2

Download Submit
/data/user/0/osb.xsgj/databases/StudentManager-journal

Filesize
8KB

MD5
1b3d8977fe03c98dded26f592bbb95bc

SHA1
0a2ef071094708974e22b908dc4a565ab1aad521

SHA256
be41f1251d65d3aa4c32bfde19112f8aa0a3d63af8a68367119ed2c42a2ef6b0

SHA512
bc72e4f957b7b5742a5f7af0ad5fc61de06b5c01fdd6ea0bd6002bdc16f0487e42c1cba8ed2bd3fa947cecde2e255ec969c1ab6e5bc3f333ad769a2a6df4c1fd

Download Submit
/data/user/0/osb.xsgj/databases/StudentManager-journal

Filesize
8KB

MD5
18a6e21904c020fd7ff1b3daf02d0363

SHA1
7cd2da8415d024e2b8996550b5a7f31fa1a5742e

SHA256
01980397e8f1ee8e0ee053ac8229471dfc69d546d3f644ba7a3081ce190f19a5

SHA512
68b0afc4cccf8b53ef70175f14e76304f8c914e5827f9ec8c1e9c645c102d688adf6c8dac5fac321a85327b6f4c301bbede6980906c3b2adb4aee92c38214450

Download Submit
/storage/emulated/0/Android/custom.dat

Filesize
32B

MD5
901dcabcdad9494f58728b238f4a7102

SHA1
6409e8098be629d63c3bb3acc82924b1d9e8e2e5

SHA256
7a45ee657b6f5921ba0477bd7e82349c9ca27c6394c7610b793e9cce9cd789d2

SHA512
a4913cb6e64ee04e002d6646f432d431b020c625047a2fdb0bc09cfb93f669106dbfbfff90a0e46ad5d28c05677b53f529376fa322aad54bbb4b09bdc439e8b1

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads