Analysis
- max time kernel
47s - max time network
130s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
17/10/2024, 00:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4ff6dc270ffc90073e594fdc1129ac2e_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
4ff6dc270ffc90073e594fdc1129ac2e_JaffaCakes118.apk
Resource
android-x64-20240624-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
4ff6dc270ffc90073e594fdc1129ac2e_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
7 signatures
150 seconds
General
- Target 4ff6dc270ffc90073e594fdc1129ac2e_JaffaCakes118.apk
- Size 790KB
- Sample241017-a7e7sswfml
- SHA256 4a67e0d64001af1dc7f26d155c85479971199f4c8bf4151ab6efd81af44402fe
- MD5 4ff6dc270ffc90073e594fdc1129ac2e
- SHA1 b406ac67a7ff0e3afaaeddcbb43e7887200f6ac5
- SHA512 3ba2cb9b24427b76b47543fef98f9c825633e57468535eb3562787cdbc4773b11fc17a7c35bb687355bbdb6fa735d541dbc9362958e294d59b791ddd550395d8
- SSDEEP 24576:5E5XpltZGp9E/FjC/xH0fc1wmiiU311KNi3zomhPsr:OXpp09EBgZo1OUbY
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /sbin/su m.appmob.xxxpornvideoappmob /system/bin/su m.appmob.xxxpornvideoappmob - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener m.appmob.xxxpornvideoappmob - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo m.appmob.xxxpornvideoappmob - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo m.appmob.xxxpornvideoappmob - Reads information about phone network operator. 1 TTPs
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo m.appmob.xxxpornvideoappmob - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo m.appmob.xxxpornvideoappmob
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/m.appmob.xxxpornvideoappmob/files/.bugsense
- Size 33B
- SHA256 09dc3f6da194e1de69ac74a4167dba118a8f533d8df8ade0a298f30b0a7c1f04
- MD5 ca57e6de8bd9e0d142d92feaad24f8ca
- SHA1 989c2b27d3cc630b5ba9b789efdadf8042983a36
- SHA512 c7e92efd8f760741e03c8531cfd709a3232bbc3e0fbd4e2947d3b616f121752add8f469a8e6fc38879cd26a242ee621c85e10abdacbb97efc481257ae33caf65
- MD5 SHA1 SHA512