Analysis
-
max time kernel
18s -
max time network
143s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
02-10-2024 23:24
General
-
Target
0ce21f4d334e5c2b2262c3bc5eccde40_JaffaCakes118.apk
-
Size
1.6MB
-
MD5
0ce21f4d334e5c2b2262c3bc5eccde40
-
SHA1
1f52c497ae78df8142f10db9bbc6128ce5abb43c
-
SHA256
040d99fd51769f9ab3a81fcc70b5e0defc20834918e8e3c0b814f1884bcf8d18
-
SHA512
14cc2e42237c163b31780983873fabb1eacda39353ba1f8f8cf669593cf57f91b09b98db0d242ac59370830eea797acc095b4a7709837c1d25dd58b7f99569b0
-
SSDEEP
24576:eYC3E+iXu6NqrRdO6n5y/dNNxM8cWChjlfihp9BNe/kigyEHXfFZdiszKJ:ed3aXeVdh5yTMvWChYpirMfFZdi/
Score
7/10
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.winjit.android.geometry:vserv1⤵
- Obtains sensitive information copied to the device clipboard
- Requests cell location
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
-
com.winjit.android.geometry1⤵