Analysis
-
max time kernel
149s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
09-10-2024 08:29
General
-
Target
2dee1d37cef288fc6a65769eb2f42df0_JaffaCakes118.apk
-
Size
2.8MB
-
MD5
2dee1d37cef288fc6a65769eb2f42df0
-
SHA1
c19fd641ad5cc8c6f5d4cb75a4889878697b7ba1
-
SHA256
cc4c3f179f4171ad5d3532602b03fe99ba06726efe544c60e3168c75d3e1f244
-
SHA512
fc72cfff3bb18419c67dc3c1a692204f73d7dc5db8caf077bd8fe202b65ea1277fe93aefc13d892cc795467bff7e8b607ea85f8773a8179aaec8d8d17c5f1ec1
-
SSDEEP
49152:dXpsBnPFA2bKW9GbYUGDH7dhJlth7NcuRphXF6AKv5igsK3rAbcNQVi3jFf62NZn:dXpMtAZmEPGD7xl1cqhXF6AKv33rAQN5
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 2 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
-
Checks memory information 2 TTPs 2 IoCs
Processes
-
com.ezzebd.androidassistant1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
-
com.ezzebd.androidassistant:beyondAppMonitor1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD5e9a84a9a4292c6370d5519ceb2ee6956
SHA1802e834100dd65896cd338b8adfaf0e571a53a56
SHA256c136974b3a4db61930470fe214125874f7edcfd15c897be3387d05de99372715
SHA51209b2047c544415173904cd3abca829548c88f60c98561feefb523c12487ac77cb3bfee7ccbd1009fca6353cdf6cabaf6405d369ce9af89a89691c4d7027cfb41
-
Filesize
2KB
MD53fb66cf220127ea1b4a7bf5325d507df
SHA1aa3c828d63f8233f14d224df7313c43a48bf6f55
SHA2567855c72bb3a968cc8d0bed415180729ddc21209da6c114eae2af3663bd0c62fd
SHA512757ebf19ddeb6f07e19228a8bb2d2c5b65bbb9b7a0b1356803c96b3ea449ec29af4ea37cb43830c07b7a8067660b70873a226347e2f146cc81d3a5ce3a5068a4
-
Filesize
8KB
MD5072add5b3c78af0946d55b86abd7a98f
SHA1f4a74e0a2cf44072343bd5a231f1ad1cd862dfe7
SHA2561a5a5300d9e7837ac8658d80664ccde46394acf8cc9c267b17b5b3f36431a3ee
SHA512710cea4814bf8413992dcc55d567b5ac441f2a75569b8602e2bd02fa8eae94a174af04c3470dda122ee00debfadf7534c6fd488a5f99e755d1859618a84d27c1
-
Filesize
8KB
MD515f7a949dd5760c6ad6d77f8e7a009f9
SHA157c9a69daaf0ad4097029ea29beeab8483640a26
SHA2562ca35ab853e60219ca52168e07da52623fc89f9ec6c414708f6fd2ca05f9fb84
SHA51202e5bbec9a79ac3358bf616d652ff242df3570dff875d8cf59324c647a7ca764703f17f82bf4558e35694d9df3a6d3ae163714771a60eab96de59ac626bcfbdc