Analysis

  • max time kernel
    145s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    19/10/2024, 01:52

General

  • Target
    5a479b18294f816f06876cda565ccd5a_JaffaCakes118.apk
  • Size 2.2MB
  • Sample241019-cap2vasbkk
  • SHA256 2ef2a8acc4cf65b008d1c77bae6d1de78332636d3fba01210d0cd7d424a17f2c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • cn.bluesky.colorlines
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5060

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        main_phone.js

        • Path /data/data/cn.bluesky.colorlines/cache/data/www/main_phone.js
        • Size 43KB
        • SHA256 0423a276ce734065ba9f3c809724fd28bab41b5afbb92af617d93e5c7116de4c
        • MD5 SHA1 SHA512 SSDEEP

        main_tablet.js

        • Path /data/data/cn.bluesky.colorlines/cache/data/www/main_tablet.js
        • Size 45KB
        • SHA256 15faee5e9e634f842927abac042212dd0335ea4d2b3b94bd611bc703dc6a6418
        • MD5 SHA1 SHA512 SSDEEP

        phonegap.js

        • Path /data/data/cn.bluesky.colorlines/cache/data/www/phonegap.js
        • Size 47KB
        • SHA256 a00c62e6db495a5a2a052a6a249d8bf1c018abeea8d88e596fe85453fd60b14a
        • MD5 SHA1 SHA512 SSDEEP