Analysis
-
max time kernel
143s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
23-10-2024 16:16
Static task
static1
Behavioral task
behavioral1
Sample
6fd04ee775cbf375b44f1f07c9c4f06e_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
6fd04ee775cbf375b44f1f07c9c4f06e_JaffaCakes118.apk
Resource
android-x64-20240624-en
General
-
Target
6fd04ee775cbf375b44f1f07c9c4f06e_JaffaCakes118.apk
-
Size
4.9MB
-
MD5
6fd04ee775cbf375b44f1f07c9c4f06e
-
SHA1
843559e486187792c183d1e400f4bf340584efdd
-
SHA256
5de805bafadf9c1965b488a9720728febd87cb03ba0cd1eb4e4e44dd37daaa89
-
SHA512
23c22707699b78e07807c1167bf0f1c4bb12e346109794115ac9adacf11fd5dd3aba79c590dfaed614700c2e91bf09d17076f001a78da16745fdc45d5777b866
-
SSDEEP
98304:yJtAQEY6PHv5lvnGsJbOkNZNkt2TLhENUOHudezPbXafuN2uV:28DuwhfNktuLhENtOomWci
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes:
com.nemo.vidmate:coredescription ioc process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.nemo.vidmate:core -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about active data network 1 TTPs 3 IoCs
Processes:
com.nemo.vidmatecom.nemo.vidmate:remotecom.nemo.vidmate:coredescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.nemo.vidmate Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.nemo.vidmate:remote Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.nemo.vidmate:core -
Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.nemo.vidmatecom.nemo.vidmate:remotecom.nemo.vidmate:coredescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.nemo.vidmate Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.nemo.vidmate:remote Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.nemo.vidmate:core -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
Processes:
com.nemo.vidmatecom.nemo.vidmate:remotecom.nemo.vidmate:coredescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.nemo.vidmate Framework service call android.app.IActivityManager.registerReceiver com.nemo.vidmate:remote Framework service call android.app.IActivityManager.registerReceiver com.nemo.vidmate:core -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs
Processes:
com.nemo.vidmate:corecom.nemo.vidmatecom.nemo.vidmate:remotedescription ioc process Framework API call javax.crypto.Cipher.doFinal com.nemo.vidmate:core Framework API call javax.crypto.Cipher.doFinal com.nemo.vidmate Framework API call javax.crypto.Cipher.doFinal com.nemo.vidmate:remote -
Checks CPU information 2 TTPs 1 IoCs
Processes:
com.nemo.vidmatedescription ioc process File opened for read /proc/cpuinfo com.nemo.vidmate -
Checks memory information 2 TTPs 1 IoCs
Processes:
com.nemo.vidmatedescription ioc process File opened for read /proc/meminfo com.nemo.vidmate
Processes
-
com.nemo.vidmate1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4255
-
com.nemo.vidmate:remote1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4298
-
com.nemo.vidmate:core1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4325
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25KB
MD5c1a97e8bb34d219d329a7269a0daefcb
SHA1eca07f7cbfca9caf2fbdc670a9afc56955805f7e
SHA25647846073ae64c1187ce26a74157ddcdb7a7aa84775fe651a0242bf0428d794a4
SHA51203a04fa469a35672de2efe4941706238a0a1538615bcf26b18ab00a347e71291e77dd7e5c104585a0b0a748811c1d67b4455fdc3d6ff87fcfe4bbe157593e5e0
-
Filesize
37KB
MD58b77bd605fed731a527dc8312e4cf2d1
SHA1c2b1c9f4075eed7ff0bd8e56e257be831627ab16
SHA25683eeb8b4649d66ec2f8c237d25409b1af88ff0ee64fab3d38c770424d7f9f4e3
SHA512692d069b7f82b69a85d7724d197e2044d259203ce1f1b2af287f5d1506af306594ec2c70c3ff2f85bd80e12dd0fb9282ce934915ef3f327fc427f87a035c7cf2
-
Filesize
512B
MD5bf22b26a6432a38ebf2458d3f2c1cd0f
SHA199e8d075cc1e93a57ce42646929adaaee9a2566a
SHA256ac453825ea9cc29b7a8dc94cf827198baee2b4932b54501709ce6078bf3f8c5d
SHA51207a24f89af9c71f6fbb908feeaac2782530a0578fc910adc36464eb872fcb489b8a16d1e5bb0b95c21f1b151334e7b115706d39a3b519a88c89cbb85c2bf5ca0
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
40KB
MD53310b9ffebbe1c7829a7bfe468d24c24
SHA144021998945be6c6422dcf7b0516e0a8e5f3b688
SHA256201fb5a80e16633b87e227adbf8b8b381fc425b1cb132390c5d24a4e9b5ad083
SHA5122377d5cfa372445930a1019b3a89c2b842266e0c16b68ee286c9ea30f2c3db34989de693f3f69c43fe610e5def6301debcbdc8e20e9419bd592d5ed5adcc4275
-
Filesize
32KB
MD5949eee2645983f2bc18bcdd3480e762a
SHA12f3dafbd382ee8fb3a30b3deb23a48dcd06e0167
SHA2562dad4262a24bebb82f540becf9227e5a294dfc9751644cc08372e820e9a1c4d6
SHA512880b66de05762db684d4c3b65562f5e67d80f766c10d7f18855bab12a67f5a37d56a55e17227a2a16b5472822aca099248279390f6f5eb38de077defef079ec5
-
Filesize
32KB
MD561054c0f213b905a785d337f9660831e
SHA1a15e5f904baf300061d274e5b831ae9669f381ce
SHA256dd38872168a16cdd4e023e9362618a369ae418d9e6c675ecddd94049d3ee72e8
SHA512a4c54ade2c7acab905a3050859f213c73143b6e63e2849a5a5a99d9606b8792e266f0bfecacb4b52e9541765ec9c69ef524b91c685edf89eb9310d21195ddc1c
-
Filesize
512B
MD575896dd0ec5f4d7ef5c21a97c6314648
SHA196cf5a3d10f30a0ca7fe5ccb89f3c4f1e3bf67ef
SHA25617b57cc1bad534b22ec1d47b2f519de35b947f32052890ca841b49ba9f6b1f38
SHA512f231a07c7572f5f6c6090d40cde483b99f823d5d1b676052878f1018c3fe47165aa235cf292b94a47b8f8e6c7797ff93699e4dd9fbbb6c66b6990e19f5de289e
-
Filesize
32KB
MD56845bf3b700155caa2c4f9390e369d4f
SHA14eaab018efd9c601c3da4b83842eb961be93e87c
SHA2560f8378feb64385335db6e8383f4201ede3833f4f7ded714eb3ca609b54303277
SHA51281bc591191b22756a360dc09600be5ce33c5f2ebfb7ad48bb281954070d8a609d81354d79054a38347ee485bc572a36d0fd1e5c1c20a51e6b75c84635ac11320
-
Filesize
32KB
MD55738b1e92cfb48174b108cdbc85e7e28
SHA11eb3f4e1ca13bc3a8228d20d2ed9d7b64858adf9
SHA256c6dfbc69296f6a0edeea278c6ce3286521e3fcecb13853820bc7ad49cebf41e5
SHA51211992ba73d2e1c9623dd939cfe2f7bbeb06cfcef494975b85f56ebc83fd8218eedc845c6d3c1567c886ff7a03866fe10434deedfe57e59857fdc7ae8a876ecbe
-
Filesize
28KB
MD5664a9ee2a790b5ffe67e2515a9c7c0c1
SHA1f39eefe35eb78cc56900508ff28b50c047d5f00d
SHA2560a67ec76087f143c7181a59babd0ac5ccfaf60209f46660d680a3feaaec09822
SHA512217c6a468e4082bd37e13fa5546d9a09ac0d466f194756bba3242e9d2b704e29da262710f47a70c14d21669c81a36a282958fa48239f36bb464f4fd033e5222b
-
Filesize
2KB
MD52bb4ee1a3f8fe0442fcd5188967f5a9a
SHA1ccae6aae3575063c357776d857d0b10eb03fed6f
SHA25605dfdad8b2c94182d8f9ad2229980b55b88d7d15596345bcf3519c9a96f59f8c
SHA512d842095d3c5f4d585b696550a84d410a939ea5349489fc33051869d6bd341ab86305a308935d157db9d7c5437202d495f1eb8651fe327d38382397a83b2292f2
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
1KB
MD5669473f4d87d9c9dc97e0cb184eac5e7
SHA1600ed2fbee399540267016c44eef34b0388ce250
SHA2565c3278b018dd9353f59f2872afacdebfcca1556b29cce4777e9f7821e25b804e
SHA51230f97eacfc2d6ced4fda61fde725de54c7746e33f64dd48cb8821efa9c72a119a0323e02352a9648ea1a5c6fda5e3b82ce62aeb24e3f5d4a2fce2b746fb7ba25
-
Filesize
857B
MD5496fee12776798503c9da05a69657457
SHA17bb56ff581c55e25d16b218bc6ca29efd0e207bf
SHA256b2a013232be45a05cf4bf8dc59b58e18e69f3e44935dd95c7041884c271bf208
SHA512f8dfa4f677682db7f510b66eea83eb8f7a752a06819e2420f24284afc2f0844033d5b515c37dafded08b8b5f59a62c6c565d745fc660439f069776fab62c31af
-
Filesize
685B
MD5da73f9836f9e7543f4bc3de392ee13f5
SHA146ddf69082b354aefa12b8e37d59c4b2990bc45a
SHA256baecb2f616f896ddd946e794422d2f5f0cbfb2c39dafa42e909baa8c1a94090a
SHA5129829732e69a14b0b86ca927da2974711933c35cc353fdbaccf215fb7f3cdd54eb63dde50423928b6cb18b80a60b21c8816c9dc8818dda9f9b8fcfe1646bcb018
-
Filesize
387B
MD54e8e0e80aad5e09ecaa9e87dd71692db
SHA120b34f6c7b8bad3a7eb967714f476cd2a3a2f225
SHA2561aa305a95651408c3d7dae9aa40e0b2d1e506785102886c00c876d7fadff7dc2
SHA51202cd008b39bb1fe6a8b11c27fd44a98fd6461cbe5ed72099735a882e32654d0f11901dfbfea68f8eae1b7c7d7d16783aa09f1dfbf29296e2193aa66b6e2319ef
-
Filesize
14KB
MD5855c468315d90d62defac2ea312d1ccd
SHA14dda6353130b6efc9d3b1662353049ab7abfc518
SHA2565ff81dd7bb2f9269f689ba0c3ade89bdc121780260ea0f44a985206736470b48
SHA51214841ad463dfe0c70a36e6afcec714e796378eb8a6adb53e34f27b74f2478911018aaf8ec2f1cfbdae3efce63bbd9ea59b5ab48a668b37f0cff7a490b56a093c
-
Filesize
1KB
MD557f3005ea5231f2212a777ec42d9b0ce
SHA1efe5070229a74e6763d6cf2bbf23e569418fcede
SHA25694d1fef87899678ad7bc2fcfd7a3109b5988ee43d37ddc704bb468d8a960eef3
SHA512296b15072ef7eec80f4c8f7677f17ad7a587982afd7a53d617733e95ebda12c1558a94e5d4ddd6290894e2a77b2ab5475b15e7e51c91aa723f221f4ae3ad8075
-
Filesize
16KB
MD51b1f2c9f2248713390ec44101e33393a
SHA1d4e5ff8a28d9909d33dc91d0c61b8104f9796b6f
SHA25699d78dec6b2723a68f038cf93064292442ce91372da8191d0f462092c73ce0e9
SHA5129598084f1545c7876243e546d95592785a4b706559a31833dcb5bc3a6774734383bf8b90d26fe3b93ed5b0522df849fec3e992c7e89f06c70a3ce49355690545
-
Filesize
651B
MD57fefa94b622707b6dcc07ef967df9f8e
SHA13c35e5dd3ad1742ae5ae77bb01a24d634f0fd888
SHA256cb15a2e414ded57f58ec830f6e71e0b4094346e1c896d1c7b0dac13ecac997f0
SHA5127eb1dda8dc44fc5a007a3ecf5119b1e4a7b9cd90cb9f4cfd7eafbfbdab843974b8ec9a29228b0ed39ef44d12114de63f4e320242e4b7e096494976b995f2eb9e
-
Filesize
772B
MD55571d04feb7caaf58241e951f26bf573
SHA179709a2bc0876f8854274bf1cb255702e51b0f27
SHA256014a4ba56d5012d3e320b46e933d2921b9baa6d3c109ee79d037152d1f7f2ed4
SHA512389d4f5738bac79b59d5d6c139508ac72d5430598049b971e6aa078a43d52ff1f546f3f3619c25a45a69385a9cbbb4fa31ef864b7e94e2051d5dfc9f2a67a034
-
Filesize
2KB
MD51ca76657e5ddf5f448657be8e00da355
SHA1b3124d4f0028da6bacbba704d4357b85133b4ce5
SHA2566c552fb3ee515562c78e187a6fa60b17cf4c024982b80aecbc0020b608310e2a
SHA512909255b3fa8b827469ccae9489c7ed4beed1c412bf30b84941a8f4ebd3fa8417727e0b52ef8ea5d3b7565f39b050d4f864785864a055cab9ac28701480e02967
-
Filesize
828B
MD5bbab24a2b66fdf91ddf2bfd10a3da620
SHA1d06f39d22a1e1354f7c5f8fc4553e848b47509d9
SHA25650b4b37f05a67c94d1af9bb9487b8260928439288362ee1e4161d646bc464a79
SHA5127e2d34643407d0323cec27114a651fb0709d8d965007998861fd71e59cc8b361bf11e99bc5e5983f9bf9758a162c0dac83aa22c1a17a2ba0dc1d64695f725d40
-
Filesize
552B
MD5ce1a811002e8365fcfbf00f71d636e4d
SHA17e84d0ef17ee4c91bc47de89465ba62dbaae27ce
SHA256427fdb94c5f8710a554eedc4c656cd0a65ccb0ee59e8736b7402a8ea9c1a3f0a
SHA51251604782cb4f9c9af7a8a148e5730ff6371b25ce2e503ec10987d74ffcb8b1e468c0a877054294755aa39fd151c62d75568eb8dda72699ab4cb9438dbbc402c4
-
Filesize
22KB
MD56eec07313ea17f76de72618491a22134
SHA180bebce1b8741eae8cc3e6e04bfa47a8323684c6
SHA2563829657ac434e5b25bc339380a229fc09837d486f99bc6719fb2b53cab91799e
SHA512cd1d1121e02f8f115ae72545e691264ebadcb4e8f0ead0e8079a3ade4e0946cfe227edafe343da06eaed77a1f69cfc424e448e6f5907403c1114e7e6aeab167c
-
Filesize
1KB
MD5cb530f2acd9e6218d014061aeabbdffe
SHA125cb73cd0e5f2accf7b2ae426759645d066ba197
SHA256cbe9c6323564d90762d5cdb572b106b8963aa5274c474fb56d414990ccee4449
SHA512e0a43e6a8c132a72c450674b12cc2325caf4329408b38b0fd25b0afa35b019470b69bb957b6cdcc8e6d4ecfedc97de9d6e1b2fef6a3d472779afe827396cf20f
-
Filesize
786B
MD56d0fb3928647f0576ccf9d3cbb170d40
SHA144b411528bfe94a6eaa688c3d23e4cef86f16e3f
SHA25613a31fba45c8e79795a87b14bd9d705de00fde1819b4cf08c68f5e59f92d9a0a
SHA5129613e151a79e530e024e238aaa89d034426a9ff25c07776c19b20baf6480f019936b90d78003290c7036917f191833c151c59bd70b1010db9d6e86fd5c89ffaf
-
Filesize
978B
MD5ec53a2544ab7d4cf268abb2b2c314f2c
SHA1febc7de66c402ba4d8cd9ee0ae2070d286e66bf1
SHA256d234a226a7afd757953ac468e3be4e7b6f9742ee21feb2d6816f0d3573906746
SHA5129de61992f982c2713d9c37c46b028621b5a1f1de2831cdc1979a9a921c4353f165498796a129e30adaf813ae7afd80504cdbd8c4b739679d31be594a90feae74
-
Filesize
7KB
MD56f7a114430ffa782d48b9876c5a72b90
SHA1e10c61804e7ad4703452a4c4f7aff2225dae0a06
SHA2567c448fd18ca446d33d178640a733c270e356aeb67a13367992c1dbc28a6e7f83
SHA5127296f531a1af56bd8cda99ff5f102e67a2ad7f3b322fd62e15a11f8e2bf01b5fd0fc92969799dbd30c881acf44e9cb22dcb328fc2afae0457bd5f75eaafad16b
-
Filesize
80B
MD5b19bd4c462fdde6bd61571d960eb6415
SHA1099b1768009c65dea0afb75bd96366b0029aa497
SHA2561df53d49d9b15bc744abed9db8b212e42f180c044fa5156136a007f26be50eaf
SHA512294739fd2537d9b507253814f2be585d087cf1466853eedd99878c9eca35d472660803ddea3aec2a13f2611dfc804dd889354b8d027f45cf429c4906c367a277
-
Filesize
512B
MD52c06963962cd698bb354e79f2d9141de
SHA1443142b1069d47d67396f0b4284528a07e6b9520
SHA25611496017bf8d2800f84f18dff0d1661eb003c55b58f595b534cffd4a703c6f8f
SHA5128ae49823c035d854d61d70559bee6ffeed3f8f56063976bd5054f73c819223095c2abaee21e6ddeb1151a6339f6edf9ee3f4bb30bc253d363418efb9fd8d2d28
-
Filesize
48KB
MD55a7bbd7976f574b9a3feb2c283c612fd
SHA1d34ce3be2d73725ed09791bc6ca55f5fc39d0e12
SHA2560ff49323ac7fa7eb9cd73d1243e7b7f1340d8c6552c3c81a881c5a53b8249b84
SHA512e9680d1ffe7490cde17797bfc9b3b25bf74d4b17a5d7bca8572c15b222307f7ff715eec05077da10d18c9028b9643af0764b94135a076eb2edf066b47b65d3e6