Analysis
-
max time kernel
149s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
25-11-2024 23:53
General
-
Target
9ea42f4d81a9e756cb98b66b8e81c9f0_JaffaCakes118.apk
-
Size
2.8MB
-
MD5
9ea42f4d81a9e756cb98b66b8e81c9f0
-
SHA1
6de552ccf09b14d6351804e7894aa6f5abda95ae
-
SHA256
83586b8bd71b8a067993755ccfbf90d961c273fd36994bf3af54f62d4cc98c8b
-
SHA512
f34ac52d8c120c4353705e9a540b5771f55c1ba44f0b02391f4af63539ae6a1ac829c22061006c8c55ce7b8e41d52b271780d0141df2da1a62db387b3ed74df7
-
SSDEEP
49152:npsBnPFA2bKW9GbYUGDH7dhJlth7NcuRphXF6AKv5igsK3rAbcNQVi3jFf62NZlE:npMtAZmEPGD7xl1cqhXF6AKv33rAQNQn
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 2 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
-
Checks memory information 2 TTPs 2 IoCs
Processes
-
com.ezzebd.androidassistant1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
-
com.ezzebd.androidassistant:beyondAppMonitor1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD5e9a84a9a4292c6370d5519ceb2ee6956
SHA1802e834100dd65896cd338b8adfaf0e571a53a56
SHA256c136974b3a4db61930470fe214125874f7edcfd15c897be3387d05de99372715
SHA51209b2047c544415173904cd3abca829548c88f60c98561feefb523c12487ac77cb3bfee7ccbd1009fca6353cdf6cabaf6405d369ce9af89a89691c4d7027cfb41
-
Filesize
2KB
MD5f5100ca3b91a77f62e70dedbf85b4df5
SHA1fa791203b4cda8730e0bdc8de4e96f286fef7e83
SHA2565ee958b6bb31669ac28e130f5ec097e32f370800ce88f88380c11f3337feeede
SHA5129b09917cb25f60de55042e93eb1f6b5485996f4851a98cf0c0c102a0921949381a51f6bd429bf00c4b4337ed1960c610d94c422c6832904f4e590b6fe827cf18
-
Filesize
8KB
MD5298f129a9b25e321ac72fb25042c6be1
SHA10489223ceb8d5df5eabdbbbbdd12990a72be7b1a
SHA256b5e70468abd7d0ceb38361745128a6228460c2944cec553d7cf9f7002075c39c
SHA512644bf010e44ed7135bf8105fd56cab42c647604bff2db5514db1dd6007e632652e8fc6e3cbe7399e272e080366a58db9d2726fafee91fe1ca049a2adf2c3a533
-
Filesize
8KB
MD521dffb70b3082a3b7b763e7d0ce83af3
SHA174a4b72212e9b80e6e9d4148e8128f4c501889b2
SHA2566b15433bbdad5fbdfd94659a7a888220ecc375dc657e988d398d13a77b6aeaed
SHA5126f6c03047d21d92341ef47c67cd31d8907526074f4e91264861076dd2665ecb7dd5578ad09f1153185c0b3ed0674becbbeba35f4a328902db42655a5c094e46b