Analysis
-
max time kernel
151s -
max time network
162s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
20/04/2024, 05:48
Behavioral task
behavioral1
Sample
fc0f20db5f8098e42d845492fcf3fca4_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
fc0f20db5f8098e42d845492fcf3fca4_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
fc0f20db5f8098e42d845492fcf3fca4_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
fc0f20db5f8098e42d845492fcf3fca4_JaffaCakes118.apk
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.kongregate.mobile.bitheroes.google.hack -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.IActivityManager.registerReceiver com.kongregate.mobile.bitheroes.google.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack:Metrica Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack -
Checks if the internet connection is available 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack:Metrica
Processes
-
com.kongregate.mobile.bitheroes.google.hack1⤵
- Checks memory information
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:5031
-
com.kongregate.mobile.bitheroes.google.hack:Metrica1⤵
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5076
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD55f95caa096ebd3fe93432163e3fd2d34
SHA148c9bba88699f9fbf625d27b189ab4395662ccc2
SHA256c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
SHA512e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2
-
Filesize
8KB
MD5d3340ddff468841c344f7663647147bb
SHA14db039a5e03ace8dba3e8ec86bb8ca172a4c4bcd
SHA256433ee70370bf79bb1120da5d068d8fea878a44074fcefe1cf8b76f7c9860469c
SHA512228857b848f8980b8bde13b40856d1efa570a27737ac6a5b9c0280752df6d20ee93126c5bbeef1ceeee9dc4874df253812a40cf44b709dc4ac5426c1b8f02c17
-
Filesize
512B
MD596ead8ba93e6ae7755b22c0e125605eb
SHA12cc55e424bbf26b2267d969a0a2c67e1408933a0
SHA256c35c8e84b55c90589311d703b60594d3d392cd2bff5d3f2b2405e5d8f4ea213d
SHA512eb2e8ee9a6f669de90801757f0fe9b5d5958135d43b0b02f3c80c7bd6973b472035abac2ec4419d8cacc6875ea9030ae0e5ea90242d762aa8e42043ff73d1452
-
Filesize
44KB
MD5f3e908c349df56b3e5cdd8e53fc02fe8
SHA17ba206e0cfeecc5f10c6e4dd7cbf581bb7e1bb18
SHA256b588493203abae831f9c67ea881ab6f4c2240d85e4aa972c978f692b8b54069d
SHA512cbef4c124936c1ae834ddfabbfe3295270aca28eac636384303f64047cfa31574a79c693fa69cbb391c18e3c3494f2fa7b9efdbaf64ddbff8af3a42019f1e2f4
-
Filesize
12KB
MD5e378cd50c997d9047e9a0f51848fe7a4
SHA1e23b2de6ee2c390a09c9e8d43aa39ee313295f19
SHA2561375c266a7e5eb1ca50c9fea8007b40a4ad385b54c9c9acef1b974c08d523738
SHA512f837443ddb757d883746044f981b1f20a746edd84e6a7887b6c65dd68244dd310c642f4718bbdda3fc087411efc0debc2c670213c39a60cde3f79732521704c2
-
Filesize
8KB
MD5a810bdd32775a145e4891466beb309ee
SHA19260cb4f90798c98a70f51e41c7eb710b7d3e2a4
SHA25637cd6252475ea0dfab69a36f7409328c7fbe327ef3e3182e1eedc6f6e65a45f9
SHA5126ab2422fa6c35a2dc6d4cf7d414864cd842784c416c1341f22fef7b9933a1532d78104908937562445064fe7d71ad48176d58c53516271f668d7274a78bb3beb
-
Filesize
12KB
MD50f13cfca183eff6179c9f702bd56baca
SHA11e411a1a3bf3816f776cf1f2387c3fbf68e1c66a
SHA2561789484c5526cd03250e7dbd335bb7bfc702e6b39204ed8140b58a7a12e26a33
SHA5120a771b1ca7d3341e341fdfef0c053bbe58b8715df352ed781ce7f1ea268e1f1b10dea98d7da7da06833bcade60d73ea52519a0ba60e4abaceb497cb5c5000621
-
Filesize
116KB
MD58f964e312c4c63762bb973b625f74897
SHA14d3f5bf4c26946cb9f18b157ebb2c1edb2220fb7
SHA2569890c453ce5521fcbcc1ff251891365bdef473dbc93cf8cc90b7c4d360c14839
SHA512575c958c8b04b3f704afb31d0896ab5d5e53955feec2af4fb9a24f0e5bd18a2c4d6cf3cc44fa36cce4373c7b95384da501483cb5435f2736c2e4640127af6a37
-
Filesize
32KB
MD55d4d196d1bb51e8995c169ad1d594a9d
SHA1984652f9c36644766463bb1b988ebfdc67dd78dd
SHA256a70a565881fb886eaf93622f6954bd57f793bfa3ec11a5ddfe329bbd551f0302
SHA51293a3c0c2149e1a76ae7ea7c4398c022f935528c0e84536aa42851c857beac463989d20411069f75038389cad1bca35a21c35496a011a65498eace19155b1571b
-
Filesize
16KB
MD5baf2694bc68071ca1074864b18faa683
SHA1a71e92160ddcaf245160f526991f9d2cedd5e495
SHA2566c5520484d1e72c410665ed939ac97d3b9de0facfc40abdf0bfe00f1473f18b8
SHA512e380c2077b4f4721178b657afd8b210c7e6ada7d2111135cb1d53c1efc13ef1f27eb2adf275182f14cd6a447925fbceb34accf186f8c6cb8e6e74372f64ff671
-
Filesize
108KB
MD530c761ca4f43ba4e2080a3871b920e0c
SHA18e658a6d1be23a579403a288f0b636ae2e8ddb2b
SHA2564cfb67f7d87d8894f201b813b3b7dcbad98519771bcd4693d939a502d140e935
SHA512285e1852ba513cd91613d80d5362a3ffbcc09d0f92e53b2c85441fe8a595871a30b450428ef27bb484063831a389227d29c531b473e24085e04ab8979db4dfa1
-
Filesize
253KB
MD51f0b1c5f6e0c1604aa3412d83567e3e5
SHA1bb39a004fb6855afe8e579c44e4f131154df885e
SHA25677daab22176a3091003f86358461f605e98bf304274720c1bc8297c54ed18a60
SHA5126652f08caaf2565f6c866fdcc367c51161d45df32eaef411e8c0a4b873601e625509e2c3627948d9c26c294e7e830d0a330c848dbbf2cf8bb226ee658374693d
-
Filesize
2KB
MD58fdb940be604055df97d62269f633fd1
SHA1dc3fc95bc936abb227bf2463d0136a7128d7d21e
SHA2568bea9a5d2f60278a7b931468d07623469de2d46df52aed42a6b09c0357bb6f15
SHA51235a5f38cd89f445b6b0cf35861a01c19062d50822c44f406b9017cd4610f0c00c7ece8b9c94808080802597e11a996643596cc622ac7c429e568bee1b30f3fb9
-
Filesize
226B
MD503d5af1ca3f7e138a5c943b51af23eb7
SHA1b27167eb86c5d19f2163f52c1bf8727f8b5a9da9
SHA256104957a241d580845ce38f29006eeb4c21bbbf030be52f136d8d99dae8524332
SHA5123180bfd28fecc993f4bdac5bbb78c897d9d6d99a58f9985f651a3ce7250a04a1362707dbc19e851f080af4ceb47c715aded8572875aa88714747e879e0f27a62
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD5e4c87b624d2028e16e47e79e21aeb254
SHA15eafccf972c376ea466ff6a7013397ed38588a98
SHA256c9f754226a8cc98da68dbb3565c7eb2ddaa1b01f89bddf0a83056deadc5143f2
SHA512d07afe541babe99623c57f09f8c5b2a579f876e6b64d1b7d9b52b71f878668eeecf3feef92a6b1de1d790ee69f39cce38b93b26493e990f59ac7f806ef413f67
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize12KB
MD594837c589fe4187cd7c0d672bb638a9d
SHA178628125117e8b2ee29fd433bcfd537e4007eb6c
SHA2563d405e72d09621f582bbc68a11eca6ac979ddbec3ab5609d262d4f6f466bbb82
SHA5121dd5901b0caae6d506bd3ed675b3c81353f7396dfe8d8e3caaa83886bda5e008a16807cc569072646d75682558622341d6ba90f94e9c072d8b628d4a35951d6c
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize277KB
MD5668de2cd3fa8baf0d9f45abd68d4c905
SHA1c6d6482a00a1c2a9cd7c2e6feeda85843a64e76a
SHA256472ce87b69309cecf62fcd2fc28655f65e45ab46792e1feda58efc11ae7064a6
SHA5129d298af3ad55403daf2c302ee15d623a7f15c37d9ab9818a8c3906e9579ebab53dc52560ba1174a365f6fcb616c7bec10728935d1b4c8bd69653117ef06b900d
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD529609bf4307956e68c6e6c21e2510f34
SHA1f4bb2937f7a8377235378d6780691d3681800ecb
SHA2569a9810a4c20e4fd2c52757fba93fc490982f7e201a9357f4b8e26f61cedd8510
SHA512327ad83654d985c2c1d35a0d4d3aa33b2ad73a9cbc9c06c687c0e355945cb89c240a171bcab2aa57c3ded5f145f09e5a12aae740d6e0c80b0a922a9f6a60bbd4
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5d58bde0022c00e37f1ebdcced0454ba2
SHA13ea913c209deaf007090c7c27a917135b8aba357
SHA256dd53946e5e80100756988995f35dec4146fd499d9fae0bd847aaa7de25834c23
SHA5125adf9990cd615304c2e45634fbc8c4ff534b29cc1dc26de3e010619c60bcab7bc9b61bb8bc8b90e97c9e3303ccfc881b12371f74779f5985668e81311cb80dac
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD55b892741051f52df1347e43fb9903a19
SHA107ee04418c648d8fd16107e30b1d769dbb9bd088
SHA2569b6356265ca95bed6afeaa6d828f3ff1568ed8844542c0388aca321a5ad66bb5
SHA51206a5bd6a41f8b4429717e742342b973c3330e202811ecdf73b1d64b7b3ea0ea77b0951ca1801c217277191bfb9900bf1d613434f9f083b9f05a1ed658994919d
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD56c17c6fb8f41773233fc4b2eda41041b
SHA190ed416a7814ea32e7c2b0743a658d3180c093a4
SHA256aefa43c63f5b31fdebdb9f4f2ac7e25cdd7d1461cf900a55518166ce223969ae
SHA512cbf298b7d8cea8bc9236b6d722a209f70971666445c44d7f3b5179b5fae485007d364ab83c31135043eca7f5c4a7b57fae6fd1b20527b8617b156ae7df923704
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD521702342a9f3e9bd72f117e97b000b71
SHA117843fd8365be1373f048e68d05456903c12c06d
SHA2567c521d60e286c646d484711236d472b53ed88d5adbeec44c3b819569fa9d7557
SHA51248a271a2164407a03bb28abb3b47a7c959da753e31a6dfe5123944d38bb9fd986e59b4326b42272d84fff190628cb576d54cd28affc0ba1bad1945919eb00e53
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD564ba271246d2d64ed676414f62080370
SHA1faa85b022ab4f908879333d8b2ed9908a780b75b
SHA256f2c8a51dd30df01a49fbfe1846539de6a335701b578f2e9c36d2eb3c92968bab
SHA512d1f5d0a01021e93de7d827048698399f845d341df00b20ac434b4ae265f850ff46b3415c445fc5b6deb04f905e202c874b5db6dca1f68974db7cd13094c151d3
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD51b1d8c8e72b605a4da9946e80f6d219a
SHA1680afb10a9a8580af044337966ddbc16eba372ac
SHA2565ef5e7a03be9bd3c1a3b198e83a9f88bf41999714b39fd9792cc23df2ac83024
SHA5120cfff8e09a92221ffff4af37e15a700674bedd14efd0d10196b5fd847857c80cedd775a5f1eea5de35422f93fe56aafb5e98e337198dae0e800180d78e07b865
-
Filesize
20KB
MD55405f7f9bb07e89faf6addd0d91a45c3
SHA14c150c87175d2ca0eac152194d169c63e7898cf3
SHA256e86ba3041e9c1a5d545d468dbe6df3dafad7095e4b7c500b39d0dad281cfffdd
SHA51233338c73eb33584b38659737f97148c205d41a96f98c430a2456484ae46a9e62e6a416415c3e23fe35e815a74791e5a50012bb7650e8b932e35de804693a4200
-
Filesize
48KB
MD57abbf2ce64773bbe347e226454327459
SHA1764a2c749345f875e4403f7e87e8d45ee2535fa4
SHA2569fbe301ce393513fbc59da8db97591a8b7e41d9a65eea48f7e034fc67062fed6
SHA5123c4a1104e678ae4b97d20fbf7b6437bdfe7f860c13425692635e0f3a47f57859f3c3ac166f55c44c20b9ad5dd8cfcac1621f48c0c67216ed4e2c057aa39e09f9
-
Filesize
20KB
MD5a0a548793a510f9caed081689f935eeb
SHA12d1aad0213b2b86bfe52dd2485741fb00eb02f3a
SHA2564564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
SHA512624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367
-
Filesize
20KB
MD5ccddafa5f718bd9de9ee9379da4422b5
SHA1a902478b084440ed83ea42482b950c69a33d82eb
SHA2562aaa20efba2e9306e0f9c59658fa9a3d9c5c6849903f78435badf577bb5f258c
SHA512d79f37a1e9ab14c117677db9a4406b1c528249ff4721d178f2f61b77c3bca506d36a3e4f31ae631b2780e48e78eebb6f7299094b15e167c7157bd1c49b138053
-
Filesize
12KB
MD51d4e7b20f6f952f399be035995601b5e
SHA153f1f27e2ad467f56e9527a4c2cc60f78c9544e7
SHA2563c510f272afbfe33681b1cb0642cfe7d65bcfbe785a0aaf7229ece9a001e479c
SHA51298fd1f694a6dd8d961c98b4f56e4070b0f21e01db3a803fddee0198018b0c6fcb1849b28d4d685f3642567ae51f95a2e288eda5e4f9720ed5d14a5803df70910
-
Filesize
512B
MD549eec469c86e973f3b709162fb982a5c
SHA18e512e163ad0291f71274e8ec92e45c789e467d5
SHA25684fa3d078ab955acf9df28f05a14b0b0b24e2e45ae30e344b19410d7323e93c9
SHA512d616da13004c58689ba71284956e3203464f9cd46f6de171792c80013ade8e5964dab187d6145c315b25d8d96288c09436b3a8231a4415e6165999737c5d8dc9
-
Filesize
12KB
MD5b7e9b98dc289a00b8e866af29e94616d
SHA1d219073853f5f24e04649afc94c7b7fea36c26cf
SHA2562abc6c1991fc66552e0be82f80c28b3142b04405c556fd8edad721357b740e09
SHA512c3a69a8aa0ad1c167ab0c8abf3eac05129818b08e74ff51e88f6da57465c521d713541661ae88e901e7117f4057373dd608da10a087eb32fa491b9f13f41ff17
-
Filesize
12KB
MD5b63ca35b1eea85fb42ade4efa12d0a79
SHA1e3bacf895c68db185e33e16b9a77149ae455269e
SHA2561f9cd44e3b5a1693ace799a14fc187ff41e356fae1f1ead32cc04b75b7eb1313
SHA51219bab711486f90fd6a169fd744f85dac79878180dba8049320e18c5cf4c093ffd7f0e1fed8cd12e5500afc28d137ec50d860f719568a5cb70278d0360408bff0
-
Filesize
20KB
MD5b33b13a3c79de411a6f64fd20490aaa7
SHA1f1e0f35df28a10bc9ccd094ed821c50d0de49799
SHA256241d509f6874e4f2840983c03cae9d821b00b3c91564c5ad8fcac34d0effdabd
SHA512f73a105f6be48a463d0b5812abdab7a724741d9eb0d8b62c3003cc7c7b25ce1abbaa75270c2979e67a3f39446d560b556dc3debacdec473968b148027f4b8357
-
Filesize
12KB
MD51c74f2fad2cbf0fbb4b1c5f2fd5388ad
SHA119848ff913462077ef08b5ee91a000e2dc0c0556
SHA256d7062df926475ef4bbab59c439984276410e8036dea6c2234aec421dbcd1f370
SHA512cf9303802d40905ec6b77336ec6bf4439025893ef912c8ac942b07221ec02c1d0b6cdada425bbb1e83b87d18a18e6653eb146b43ae57ac1942213a933ea8c319