Overview
overview
7Static
static
66089b4994b...18.apk
android-9-x86
76089b4994b...18.apk
android-10-x64
76089b4994b...18.apk
android-11-x64
7helper.apk
android-9-x86
1helper.apk
android-10-x64
1helper.apk
android-11-x64
1plugin.apk
android-9-x86
7plugin.apk
android-10-x64
7plugin.apk
android-11-x64
7helper.apk
android-9-x86
1helper.apk
android-10-x64
1helper.apk
android-11-x64
1Analysis
- max time kernel
8s - max time network
156s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
20/10/2024, 05:14
Static task
static1
Behavioral task
behavioral1
Sample
6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
helper.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
helper.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
helper.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral7
Sample
plugin.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral8
Sample
plugin.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral9
Sample
plugin.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral10
Sample
helper.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral11
Sample
helper.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral12
Sample
helper.apk
Resource
android-x64-arm64-20240624-en
General
- Target plugin.apk
- Size 330KB
- Sample241020-fxb1aashrn
- SHA256 76556dae89b8ae56ed6b52bee819a8cd5809ce967d4c1c8386f1ba438057a18f
- MD5 a2e1d87e7666a64b69bc5d2bd2750628
- SHA1 e82331f06cfcdecc3b0e04dfc41062ef2479ed4f
- SHA512 40de9a6ed6f3a2a580afa3eeb7ce87750d71b5e4cb92a175180414b58cb00de18c026c1c1c937d73b09b7d5e0fa4e5dfe026bc5b66afd532f35a326f2f362ff6
- SSDEEP 6144:r5dN8DhJ876h6i3X+22I81FDamNi3QS9B4u64e0Oep2uOpOjpCpF1CMqQBwClJi:rOr87Ev3P2ImFWM+U4w4VoLCMlBwCy
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.xpaper.video/files/xpg/xpg.jar 4496 com.xpaper.video - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.xpaper.video - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xpaper.video - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xpaper.video - Reads information about phone network operator. 1 TTPs
- Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.xpaper.video
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xpaper.video/files/daemon
- Size 17KB
- SHA256 054a1272e4c0e6272878e6068d7944b0962d8ab79d68bcda8e28a65fc1f5a340
- MD5 a094f7f9077482cfd462073dccd0628c
- SHA1 2c31ea529559aee3857f2f97a3b19267c1c660de
- SHA512 64fd5e2546d5ab60305ba8b82544146f238539509e24fda579ee9518218252521270128ae288f32200e445223e259c148e4fc2f1b17f0b819a72aa80c8ef2dad
- SSDEEP 384:CSFAsJl/+JnnnnnnnnnzawMXUvNaobkO9SeFCMsG:BFAsJ2w6pbNSe
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xpaper.video/files/xpg/tem.jar
- Size 213KB
- SHA256 840448fdc1785cbbf2de82a455ff76366968278795b9f134f98f03de37c73701
- MD5 e7e33cd90f2e50ee4b6753458bb1017d
- SHA1 b5a804bbb238d4d7b93972ccaa7ef4b250056fcb
- SHA512 c27b0b4a9db017da24aab67296b8145d8abd188ca9ffe65f6e0761a63e9414d2ae98c9cc47fe5143b67b48d3ed3a18951fb0486ea9e117f09c9fa24b40d175a4
- SSDEEP 6144:XBHx+oUDiZCBfGAtzxsWprPyyGk4TM9MxstfTSaDFyz:xHx+orcBx9sWprPynxTo2aDFyz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xpaper.video/files/xpg/xpg.jar
- Size 213KB
- SHA256 f5f91673e9c1eabe872694e1546203a2c50652a68cf65ee1db9aac3e7bde7e15
- MD5 24653ebc43b7934908f3aaa44c965478
- SHA1 7b114ef77f2bbef0ce95f1683c559caeaa0c373d
- SHA512 175d6da1cf6e3cd7f94419fca5c0a70937a3813a977f5f02511fb0ad310f3048d381e7efe1e58572046a74b1576edc2976bde18dfa75cd6b04e341f42fa9d50b
- SSDEEP 3072:k2MOwTOEDamNiI67Qwj9Yv3jU4u64D1v2mZFGcxNue119t1udVDQ+Ys4KBCmNlNd:rwTRDamNi30S9v4u64G0YeNWuGzOtpEx
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xpaper.video/files/xpg/xpg.jar
- Size 420KB
- SHA256 a1ce51ad603a7be3f63a8f722bcd47543faeb2b8269fcf8d9bb4ccf5d08625c2
- MD5 3a842b02dd231038d4a17354f104ab63
- SHA1 20d07d04f84cff9494fb8f49de6cb83932b38e36
- SHA512 5a092e2176c499aaea3296a966bfb9e67d41ff9e2f1aabda0a48cb621240f1443466bae43ffcf6e6b5a938b78541d457a93289f24cbde8071d242eb6057dcf34
- SSDEEP 6144:Ms9g+j9YX6ZQHsWw+kKcDwv9lgXyAsDp7Wr3Fr:p9YX6MsWWG4VSpIr
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/.a/track_id.bin
- Size 36B
- SHA256 38609435c2f3b9f6c194d925a7162c40d5ab884e26fdc61acc0fdaf0e81c7c56
- MD5 7ec679a7a4cc883c9c84a51d48b85a09
- SHA1 8dd080016e0b1af8b24854057a33a1f506975464
- SHA512 13d7fc797e52e874ca1098ac2154e1e9ae2da9c7fdb2b2210ec47386cd7afb8bad1d29bac0b9f44f919730631f8bef8faff49f979d970631401ca9d3deff2c8d
- MD5 SHA1 SHA512