Analysis
-
max time kernel
18s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
29-11-2024 12:55
General
-
Target
b15fb7b56ac9ba41cba47d842870d97c_JaffaCakes118.apk
-
Size
1.6MB
-
MD5
b15fb7b56ac9ba41cba47d842870d97c
-
SHA1
6ad7559e97813216411e88fde128ad74676a8f1d
-
SHA256
aa4d4f27aded0cebee2adb20bb633c9e091012132918a95a2d1c0a2e6e420a46
-
SHA512
15dd158df0db06c1abf6bdfa02d9efa33212dda3bac034e2eb784423622070fcae0366ad5da212e0055a8885b50372d67e510b93bd2390ef514023547fd1b768
-
SSDEEP
49152:FBS0EWQreRSdygFWMbRURXfn6YdxNrhA08UAL:zS+RSLFWMEXf6eNrhAnUO
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.nuts.beauty.removeclothes31⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33B
MD5f26bddbba411989abd01ff800affec6e
SHA1c59d58a91792bebf48b160a9cd4b84eb763ba5ba
SHA256091b003f5c437068876bf1e7dac7422471f775fe12e4946b516cb41281e8ee01
SHA51242f607a8252217caa8528dca0bd38f20375f96bee7890c72f21dc0e67a59556fd71185bda8dd4b14d6341287be19174211475160f0111bf497f4389610c2340a