Analysis
- max time kernel
46s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
09/10/2026, 15:58
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.MobiDash.z.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.MobiDash.z.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.MobiDash.z.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.MobiDash.z.apk
- Size 7.4MB
- Sample261009-tekflaca23
- SHA256 1691ccc7a3f6bd68216b24640a7348da421eb214f76d866e5ae81f52e833ccd7
- MD5 f89d248f30c65ebac8471dcf67cecfe3
- SHA1 e3be4661eb2b7a71608be63357bc2ac7d0ed23e6
- SHA512 f1624fb175cdf7764be6e13081bd683b29955afa4f0698b0871b50023f85fbecf626a5bee1ab70de48d8981433118d6ce7068f18b225f01bf44e5a4f1ca92aab
- SSDEEP 196608:2IAk7nQtr7BWdrIAk7nQtr7BWdCIAk7nQtr7BWdA:3QtBWdEQtBWdDQtBWdA
- TLSH T15C7633D9CE8F08F64321747B6542A17CBBBAD0723DC1EC6988BD8475444F9622DCDDA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.zu.zu - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.zu.zu - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.zu.zu