Analysis
- max time kernel
149s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
12/09/2026, 11:21
Behavioral task
behavioral1
Sample
jaffacakes118_e73557bd2b392ad529037fd47f8778fdfb7ca1fe1d7bc66add0c5439938c8d00.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
jaffacakes118_e73557bd2b392ad529037fd47f8778fdfb7ca1fe1d7bc66add0c5439938c8d00.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
jaffacakes118_e73557bd2b392ad529037fd47f8778fdfb7ca1fe1d7bc66add0c5439938c8d00.apk
Resource
android-x64-arm64-20260325-en
General
- Target jaffacakes118_e73557bd2b392ad529037fd47f8778fdfb7ca1fe1d7bc66add0c5439938c8d00.apk
- Size 716KB
- Sample260912-nf95ravhpe
- SHA256 e73557bd2b392ad529037fd47f8778fdfb7ca1fe1d7bc66add0c5439938c8d00
- MD5 32c783266e17ca5eddb97e9fcff412cd
- SHA1 ea18ba65d0a2706c028aefc6226e1fa436c4e1f8
- SHA512 73e4ee96e2cc2ec48905f6b163ffe6ee01f7833e2d6928ed8666bc206d921bd8f618dd7b3e1f2299f8bbaaee1e8cdbb076f696472c55520eea71c20ded55455c
- SSDEEP 12288:LcZZ6zl6WCR6g+s2cF0UUN4DC24u4c5z4sAQz7TusT3cgtN0FMk6Rq215gF0tWDi:LsYNRs2+FUOO24M5cZQzfHT3SFMkGNaw
- TLSH T181F41203BF459CDAE7E355368A5C42D5153F7FB90C428693BA4BB22E88336D0E791E48
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.appser.verapp - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.appser.verapp - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.appser.verapp - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.appser.verapp - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.appser.verapp - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.appser.verapp
Processes
-
com.appser.verapp1⤵
- Makes use of the framework's Accessibility service
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5064
Network
MITRE ATT&CK Mobile v16
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-MjAyNi0wOS0xMg== .txt
- Size 36B
- SHA256 55106cf8a3fe38e18570e635b3fa4019a563c0921773fcd926e510806cdff3a9
- MD5 ef7483d30f9937599061cf8fddcea864
- SHA1 6e31006bbd96ae01f49964c16851be3185ffcf40
- SHA512 43bf4e0d05d4c1bbb86a4605169a2623490481c0a0630c9970f91138174049d800e2a9259b63c610c7983a528cf1dd6e8c98969981e3289e0850ccadb52e74fe
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-MjAyNi0wOS0xMg== .txt
- Size 24B
- SHA256 3c5f2c9318209bfb1e85b0bc7d92b4c038881913854a4ea1fd7c4fa46cbd0dde
- MD5 8b7b3f50eed2777d6c50bdb3e883519c
- SHA1 f3f04b5679105f5bd0efc3dda76aa29258ac006f
- SHA512 037435b68e40006b82c78989d7ed7b4751b7026859f62c0c2ba58957638d75be284509b6fd108557fcf452d5696f8e03e32b520d56b37d8f3416a519b6c0dbc4
- MD5 SHA1 SHA512