Analysis
- max time kernel
148s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
12/09/2026, 00:44
Behavioral task
behavioral1
Sample
jaffacakes118_5f694603f54ab3c2d5bee849422f65894811973c888897c6e7c222ee200f5f14.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_5f694603f54ab3c2d5bee849422f65894811973c888897c6e7c222ee200f5f14.apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
jaffacakes118_5f694603f54ab3c2d5bee849422f65894811973c888897c6e7c222ee200f5f14.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
General
- Target jaffacakes118_5f694603f54ab3c2d5bee849422f65894811973c888897c6e7c222ee200f5f14.apk
- Size 9.1MB
- Sample260912-a3vrpaywcy
- SHA256 5f694603f54ab3c2d5bee849422f65894811973c888897c6e7c222ee200f5f14
- MD5 82af0d06cf3300c31260c3e87ea66a1c
- SHA1 4f21d937af5647e7b90cf6d936ce6de833d927c0
- SHA512 2db9eca56ada876da8377b8e328f73b29336262062d4c8f663faff32054d722d6c43efbd4da0ad0f5bae555d06d5c09de0deb047146b71ca0bb58637214a4d45
- SSDEEP 196608:a4B4HUYfjk8EGjVgldmS/+5g76m8zesOgfJjMJyMNJP8FIdZRjk:a4BJijCldr6c6bzesDfVsVw
- TLSH T111A612E7B7D96D75D43290B1C85D27A1650BAD248E17AA0B6C00372C78F3AD43F89ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.zzn.trqwdmdp - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.zzn.trqwdmdp - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.zzn.trqwdmdp - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.zzn.trqwdmdp - Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.zzn.trqwdmdp - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.zzn.trqwdmdp - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.zzn.trqwdmdp
Processes
-
com.zzn.trqwdmdp1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Checks CPU information
- Checks memory information
PID:4907
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.zzn.trqwdmdp/files/PersistedInstallation2324470057763291973tmp
- Size 90B
- SHA256 739e7cc4acce4d0ee8e122c6e4aa6f1e1df339cf21cda4879d1390c23274beaf
- MD5 c3d0a7a006eb0b75759e72077fcce605
- SHA1 812cc9a9cd0c7e7db9b8e2c3dfe34ce3e3727802
- SHA512 3c9ecd32f28edd9c6a231cff2d4b0ba5f83bb839d882dffe7b8f15e7377853a3f1c0f4452e35cc7a49dbdb8fb282c454459597cb76f503f35b9ae9b3f138f59e
- TLSH T111B012805A7041518587B3061E8ED2805DA024C054098E044B0C945000811D4916399C
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.zzn.trqwdmdp/files/PersistedInstallation2906963341654081299tmp
- Size 114B
- SHA256 622533af94e32082804adeb8bd94c534f39ec24d7b81a3f4fdc5ab957f28ea28
- MD5 ed1603bde0a1bcd199f86eab8cf22c8e
- SHA1 f4e4fd8d96a4f31927799ee88532c3b958f7a19c
- SHA512 3a23ce439647d327881c19c5c6c745b7a68bcd566d54d9bfdb381aded89929b140f90d962b3060a84f5413b0613018c3b9d0d32a3651e96bced75b67397f257c
- TLSH T192B012841B7C89518647B3071E5FD2A02EF665C0581D4E048B1CD81010986D5D663EAC
- MD5 SHA1 SHA512 TLSH