Analysis
- max time kernel
147s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
10/09/2026, 18:44
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
1_0051db2ffb.apk
Resource
android-33-x64-arm64-20260708-en
General
- Target jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.apk
- Size 29.8MB
- Sample260910-xdjdpavama
- SHA256 c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43
- MD5 4d3c0f1b8efef255d239834e2af4de12
- SHA1 bdfe9f82efdb2d7c3bff01a2f9f976061aa9a4d5
- SHA512 be35798df28e8216b42752b34216c08be02688a65bdeb39ad737d6c7f0d51fea2812cfb9910c8c615c82a2ad761af908d72bca0a64c4ebecbf64074ab8705bb5
- SSDEEP 393216:qDuF7Hwj3Uoe2H7OfglzBJmlB2Jrps8xDF56trxSXKMIRLcnsFfaN:qDKsTUoe2CuBJmD2Jletx5JpFyN
- TLSH T11067F129DCC0EE31D0F604FF0514C5B2A22A0D5DAEEF87825712BF3E24775DAA761986
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.xauvugnzl.yzmgjjhni/app_dex/classes.dex 5015 com.xauvugnzl.yzmgjjhni /data/user/0/com.xauvugnzl.yzmgjjhni/app_dex/classes.dex 5015 com.xauvugnzl.yzmgjjhni - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.xauvugnzl.yzmgjjhni - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.xauvugnzl.yzmgjjhni - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xauvugnzl.yzmgjjhni - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.xauvugnzl.yzmgjjhni - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.xauvugnzl.yzmgjjhni
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xauvugnzl.yzmgjjhni/app_dex/classes.dex
- Size 1.8MB
- SHA256 1777ee3deee70f36d3e77e9cadea9d6ed93d0dee63f624dba056850431b91f9e
- MD5 bbca0525b5a9a5736083e51a5ee156d4
- SHA1 6e163edf9404826747c541abb031441405909889
- SHA512 d5a1a3d6cebc8294a41ad9a1e84a0dfed0740c19d9d4d9eed560f14df935f5f5278d9d14c07da2d74aefce05935b4f6f8fd2a4c2bb09cb06eeedcea17eca66b3
- SSDEEP 24576:YxhNIsBnoU9tMn1dQO8pi2x4nf4kLM5/NCSdEwUJie:2oemHQO8pi2x4nmlE
- TLSH T10C855A42F6924F73C8AD833DA4E207603335A651BF8B8B07354DD6B4BD832D65B99B84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.xauvugnzl.yzmgjjhni/cache/classes.dex
- Size 859KB
- SHA256 ec5ae0db4d6dc1c2f484993b3f0221be0131c85fbe9f7560ec225af231f0d3b4
- MD5 92fede3223a07a335272c9584576fbc0
- SHA1 9ae98dcec80f8d35ca8272879cd5497de525dd5a
- SHA512 2e9fa776b6e9a931f8bec082fc67b81cf1af38add4d7fa3079329a5846cb0ef06b7d4e96f05f4652aa385208dfba81505c6dd3d43f519b1f69365e448be4a04e
- SSDEEP 24576:e6pCJq9lryk9jjJCGIohTsRSbprEKRl7tF1DGjywEvjBE:DI0Ik9RCrolFNEKRptnxjBE
- TLSH T15D15235E6EED8FD380B5F95350297C5168D923E8F88B618A01AA1379DC1CFC6F262473
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.xauvugnzl.yzmgjjhni/cache/classes.zip
- Size 860KB
- SHA256 7365b7fae3fe55df738c39332608b21eb10afcb6d732b7a2849de646dcb49ae0
- MD5 c875b0b6740b32c1792a4a5e41b0bae5
- SHA1 bf9ddb223783e305460abe268be81e3a99913135
- SHA512 a24538f0e17666958ec9592f407881d7dc4c96ca350ec6d9a0c3204411a340b53372a39c532e3286d26874a663e02793618965337f8d3354f7cdf638f0adab36
- SSDEEP 24576:r6VCZqdJrIS9xzVYIIUHtsf0xljgKVl7BFnD0jKegnjBz:uMiSS9bYRUN9HgKVpBlZjBz
- TLSH T12A15235E6EED8FD380B5F95350297C5164D923E8F88B618A00AA2379DC1CFC6F262477
- MD5 SHA1 SHA512 SSDEEP TLSH