Overview

overview

10

Static

static

10

0588555612...18.apk

android-9-x86

8

0588555612...18.apk

android-10-x64

8

0588555612...18.apk

android-11-x64

8

Analysis

  • max time kernel
    61s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    28/04/2024, 15:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    05885556125e088105e7f1f923014c05_JaffaCakes118.apk
  • Size 15.9MB
  • Sample240428-s7j5vsba86
  • SHA256 06d5386ed44bd77c850acd5a9ad2334a706cb91bd23af95d94177f36ff1a4ab6
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
collectiondiscoveryimpactpersistence

Malware Config

Signatures

  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

    collectiondiscovery
  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • ir.cook.without.chicken.d
    1⤵
    • Requests cell location
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5117

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        31b76c16-11f2-4f2f-b570-4037b7b31989.jobs
        • Path /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/31b76c16-11f2-4f2f-b570-4037b7b31989.jobs
        • Size 176B
        • SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
        • MD5 SHA1 SHA512
        Submit Download

        3c481203-591a-41a1-bf6d-e6d840881654.jobs
        • Path /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/3c481203-591a-41a1-bf6d-e6d840881654.jobs
        • Size 278B
        • SHA256 1823ca7cd72e0f9667ab58cf9782caf89ab45ce09ebb1bd127bde11c6b85f44f
        • MD5 SHA1 SHA512
        Submit Download

        79aed659-4235-4fc5-af0a-0d535df456b2.jobs
        • Path /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/79aed659-4235-4fc5-af0a-0d535df456b2.jobs
        • Size 179B
        • SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
        • MD5 SHA1 SHA512
        Submit Download

        95727606-6ee8-49e6-89ab-a2dbf825781b.jobs
        • Path /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/95727606-6ee8-49e6-89ab-a2dbf825781b.jobs
        • Size 837B
        • SHA256 599ecd20d3581db6cda8f439fdfe73d26024b6569084634ea02a78f84fb476f4
        • MD5 SHA1 SHA512
        Submit Download

        c4790d17-3cae-4517-bf36-fcc5b9c2a644.jobs
        • Path /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c4790d17-3cae-4517-bf36-fcc5b9c2a644.jobs
        • Size 1KB
        • SHA256 cbf1a725e5061e93eb96e1cdba667c03465fc10d23a7fefe7dab7e49cd2d5d10
        • MD5 SHA1 SHA512
        Submit Download

        __pushe_base_lib_db
        • Path /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db
        • Size 24KB
        • SHA256 3cae73bb309303d4bf6341c563a37a1cd24989f94b3809fb00d8e9498c854671
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal
        • Size 512B
        • SHA256 54005574548bdbc4a244a66b3fd3e5d9fc594d2d808645a30fe6fa5e321b2e7e
        • MD5 SHA1 SHA512
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 c1f538dcd7c97e4b2276c89c138dc1b1b843dfd1190bea950195152ff435370a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 a01bc68ea619ff2413b255f28a3b4551bf3e8ddb4a5e18f267a70f087b5dbc76
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 59fec03d1c29411c9e264fb17c3fa8124d737e0d482c5879687bcdf8742693dd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 5adabb338f5a6e434f77d431b0cfba547ec89fb2ffddc7461c1ec4da2054c220
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal
        • Size 24KB
        • SHA256 bd1fb235250cb528c3d718a3d96d16a6e8acf0daa2c765cc837dba7510c26975
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb
        • Size 20KB
        • SHA256 900ef7677e2b26ef5b1b6087115f6a356e868c7363536421d9a3eb6b1cee51c4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb
        • Size 20KB
        • SHA256 19e6421e01d096a72ffa97c4a24147f4344d85ece7aca65ec52d78a49b608da3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb
        • Size 24KB
        • SHA256 4f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal
        • Size 512B
        • SHA256 35fc633150a3ae7988bc59aae59c16051f0821201912d1256031cc1ffc2410a5
        • MD5 SHA1 SHA512
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal
        • Size 8KB
        • SHA256 71b1765185e82206537c980696657aaa429d3077cb0f54e92d8120186d5ae3fb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal
        • Size 8KB
        • SHA256 36d70c48f12aa0badc7695bbef61705efebbdce9b8e2fd07c7295a15e47f5bff
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal
        • Size 8KB
        • SHA256 cbc2ced02e2f421f3317530ce24963941899550666f51fd33f18490cdcfc776a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal
        • Size 12KB
        • SHA256 79ef3ed8381cec565180b0ba1634cab5ab39654127d7b89e2f8f31a4de319ca0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal
        • Size 12KB
        • SHA256 a9c349fdba0b4ce0ddd14822d193b3ebc12d56f460e8b6ebcd8dcc8c6ea66190
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager
        • Path /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager
        • Size 28KB
        • SHA256 3c02a762c8e27764484387cef51f9a0e543674f98535e06113157cbbfd2aaa5a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal
        • Size 20KB
        • SHA256 179fde5cf1ece56c99261de0c52a23633f22bfb28798845a26083d29ee5da12b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal
        • Size 512B
        • SHA256 e5ec6f794107d3054c3960f9f8120b28b3fcf9683a3d87532885977120edb2b8
        • MD5 SHA1 SHA512
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal
        • Size 8KB
        • SHA256 3397925a37b8db077e4b0216143f0f8ce9108ca03ca9fbe2c4e36a94cca9510c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal
        • Size 8KB
        • SHA256 50818c993fd591b5ce7c75720a7b08d320157f036a919db39d62e809f1573c10
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal
        • Size 12KB
        • SHA256 cdb32cb55b041a22f8cee3aa3c4ac8d4fc2d32e63c27e947ecab2f9e42d899a5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal
        • Size 20KB
        • SHA256 d5e893559f3dea54aeb1bbbc540c47f1ba9080f1142d0f0b6eec1d2f67de63de
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db
        • Path /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 e97adaf40a8adf12d89ccd72c0c20d9628134650cc3363904d9593713cfaffe6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 47bb0c8a00307bbad7b133ff217ce256df9824c493e38fbde24a64175486cc7f
        • MD5 SHA1 SHA512
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 cc4030674a1f40558528959fc076646a4c7e5c1995618a09ed8e7b5694b9f062
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 7308c53a484883cdf521fa1b59df6fed6f82ccc00b00c8b48b6655a782f50b63
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 860216a647ed48074a558711b138be982ce73d18e6275e77ea5babfb1b1b9cf7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 4fb1ea61ebde5a8deb98594b28fc5eb5113055ba80de5eccc0a1b49bdbbecb55
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 74bac62a08e283897e8945fbeb034ea41110cb7f5985fd11fb2f3a7d7c4c883f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/ir.cook.without.chicken.d/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 53b62a8d2a82018046a71b82065991a555ec0fc798f01dda138e88b5b7162448
        • MD5 SHA1 SHA512
        Submit Download