Analysis

  • max time kernel
    61s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    28-04-2024 15:45

General

  • Target

    05885556125e088105e7f1f923014c05_JaffaCakes118.apk

  • Size

    15.9MB

  • MD5

    05885556125e088105e7f1f923014c05

  • SHA1

    629c7296ed521dc949f0d58091186a1e2b8cc4c8

  • SHA256

    06d5386ed44bd77c850acd5a9ad2334a706cb91bd23af95d94177f36ff1a4ab6

  • SHA512

    c46fe0009855e32cccd00d2b2d0daa27209d099f2260581c51ea5c449ac4effbdd3a658e68dbcca98feddb6c5059ac921361c64ade915b34bb18d3040528ea06

  • SSDEEP

    393216:WO8rlGKI3UV8D3r13bxsrXIJoJl/AqaIv+4SC3InQOGgkMeVvHqt9J7:WJlGKI3UV8jr1rxWYyboqHHn3IQOGgx5

Malware Config

Signatures

  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • ir.cook.without.chicken.d
    1⤵
    • Requests cell location
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5117

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/31b76c16-11f2-4f2f-b570-4037b7b31989.jobs

    Filesize

    176B

    MD5

    f56f328eea1d5c96a1b96dbbf59488df

    SHA1

    440c784cacff61932e2f61580b7cfdc3a4943c95

    SHA256

    90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918

    SHA512

    36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

  • /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/3c481203-591a-41a1-bf6d-e6d840881654.jobs

    Filesize

    278B

    MD5

    a53175b06451313722be163a44a7b3ae

    SHA1

    abf7171c61749bd070d042d24d5e13c9152105d4

    SHA256

    1823ca7cd72e0f9667ab58cf9782caf89ab45ce09ebb1bd127bde11c6b85f44f

    SHA512

    c5d390a5b11ab199200606629d1b850a7fca6c5f0a91a330e59c8ab3eadabb22294a2247a4e9dee76daa642c3ff041e0b9ae4fb9c7be4af00de22c39dc30035f

  • /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/79aed659-4235-4fc5-af0a-0d535df456b2.jobs

    Filesize

    179B

    MD5

    ac58f99a1b179d71e8621412ad31c6a1

    SHA1

    b51fdad95876f5615735c2ab411031ff67d5e946

    SHA256

    9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb

    SHA512

    faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

  • /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/95727606-6ee8-49e6-89ab-a2dbf825781b.jobs

    Filesize

    837B

    MD5

    93ddaa403c8e921550e1baaad6de2b0d

    SHA1

    8833181298f9714a4343293b52877dfdbbbaefe8

    SHA256

    599ecd20d3581db6cda8f439fdfe73d26024b6569084634ea02a78f84fb476f4

    SHA512

    8757d35ebed58938f12e0177aeb239483964435625d74ef2ef44540c04382bb77ea3e640fb0502c6b57ec136bc54ba0d56bebf110cd0db490b9e7d9b7d19ed9f

  • /data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c4790d17-3cae-4517-bf36-fcc5b9c2a644.jobs

    Filesize

    1KB

    MD5

    fd72997555cbae6a39ebb96a1f5fcfa6

    SHA1

    a600cb9605a6467a425662ae512c61f3c0d5bd09

    SHA256

    cbf1a725e5061e93eb96e1cdba667c03465fc10d23a7fefe7dab7e49cd2d5d10

    SHA512

    49634069aba4632a4acad3f4d88a61ac3c81463fb2584d8a7f853b51a85526a5000399d1437385786e5d3d96caab05e2d26c83576b5a37a6aba572d376616b44

  • /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db

    Filesize

    24KB

    MD5

    7234d3e6555ea6474f2d263a7299073f

    SHA1

    2e882cd02e9801dd37783575b59dae3d7bf1674a

    SHA256

    3cae73bb309303d4bf6341c563a37a1cd24989f94b3809fb00d8e9498c854671

    SHA512

    3d4e312afdc4ede2095d75c146845dcaa49a3ab1616df4ca99a8b1ae2e837d98f2f402a97f0626cabe816d62e01370f5631e14f5880e559f6cc12309373f88f2

  • /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

    Filesize

    512B

    MD5

    007faa97f5f134218d8639e65e550cad

    SHA1

    8da2fca3e82e7308766aca13fe6cfcdbfc0e2b0f

    SHA256

    54005574548bdbc4a244a66b3fd3e5d9fc594d2d808645a30fe6fa5e321b2e7e

    SHA512

    9b703359fadedfac62a60f2f1ec0eb51590128957f7372e0e0e4678db14021b363a70c5e00efa97e705fcb213be43e7d45b206968da29d3fde09bf7b118ea808

  • /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    b433d1d51b0b4e72c2fd063e2db566b5

    SHA1

    3d024e0a737e00bbb44274f563214ea9d12b4b2e

    SHA256

    c1f538dcd7c97e4b2276c89c138dc1b1b843dfd1190bea950195152ff435370a

    SHA512

    c796365f26f75cd38fb4ad6a40b73b9bda3e812bed4e86ecb3aed947b0cba587d1116255cc53bea9addcf6b6d421ddbd1b23d2b3592755221d798151cc2e5c32

  • /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    7c104d6c2f2a4a48de469b17dce1bcde

    SHA1

    cf61f47e019a71c26ca0e3149fc6d3290856e0ee

    SHA256

    a01bc68ea619ff2413b255f28a3b4551bf3e8ddb4a5e18f267a70f087b5dbc76

    SHA512

    20969c016c98c7da22f8927d83d999f7c1412f395f665074ede79fb565ce7e754f96bd7bb5bcf3fdf59e2dfacc33017b93c27783a4b004e2ddac945cf6686ed2

  • /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    c022b5a56ac00cfdb5496bd1a6413346

    SHA1

    23762fdf695fdbaf5e57d740b9e91a5b98a6f3ae

    SHA256

    59fec03d1c29411c9e264fb17c3fa8124d737e0d482c5879687bcdf8742693dd

    SHA512

    7b3768cb23a5dbce5338e89877f43f8b9bbc8a9a2cf918e397ad71f336e6e5ff555f4768fff3b998f4cbf74d9e2b5268fd906777cf73fef8dd35b4a8413f1988

  • /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    67268a5cac74197eb0ba5ec4feb1de3b

    SHA1

    bc8ff71331053f04ad614bc7c6b5dbdd26719897

    SHA256

    5adabb338f5a6e434f77d431b0cfba547ec89fb2ffddc7461c1ec4da2054c220

    SHA512

    cc9aa12742a2778f4da74b2b66bc9c37fb2c7418afa892c27e4f4639118063d6b4aee404f3bc35a70a011a44aad381221d99447fbc79645dc7b7673028602861

  • /data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

    Filesize

    24KB

    MD5

    eb29aab9faa229c7b58116de879a300e

    SHA1

    b007240747564240ac1836544c7135564c4c0951

    SHA256

    bd1fb235250cb528c3d718a3d96d16a6e8acf0daa2c765cc837dba7510c26975

    SHA512

    b38c812b5dc4063b0ecb2255ee8ccbe05a10f58723e0d2fd8d88a600fdc37c4e913c6658d9409cf2dbdf5dccf1b37df5e10290d9bec9c4d5a0b225b0f3efddff

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb

    Filesize

    20KB

    MD5

    0d3d525f89e9ab3ac9a1a39f24853442

    SHA1

    8205bfb2d677c6d1e83c96333cfda5892a128c3c

    SHA256

    900ef7677e2b26ef5b1b6087115f6a356e868c7363536421d9a3eb6b1cee51c4

    SHA512

    5b15ef596e8c4378e88a18586f1840749b40be7a5f45571ea87c982674745da926b13633768fc16ecdfbdd023c4721e82505d01213de1019410f94018b24f143

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb

    Filesize

    20KB

    MD5

    b4766fe0768b39e0846cf218b438b0ea

    SHA1

    bc7014f289ac033e1b17a5e530402a2140c302fc

    SHA256

    19e6421e01d096a72ffa97c4a24147f4344d85ece7aca65ec52d78a49b608da3

    SHA512

    8ebdbbd7884680e25df505a8d8ded66fda6f987bda8dd3dcf27410406d4692c7911b815967ee2b47bb3d44cc851ca8be1d1a0bd99c7c67d6eeca585a08f7f6ed

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb

    Filesize

    24KB

    MD5

    259a1e4e7ebc4b0d0341ffcf0c3bc2ea

    SHA1

    9b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c

    SHA256

    4f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1

    SHA512

    dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

    Filesize

    512B

    MD5

    b67795864cd0c3185d0d619b32f3992f

    SHA1

    d5790942a4255752586ba2dae4485721b4ad6294

    SHA256

    35fc633150a3ae7988bc59aae59c16051f0821201912d1256031cc1ffc2410a5

    SHA512

    a8c2bd6d77f2396536378d1edaa5e01b996e5c357d2a6c9ff5c0b503687af9c2fc964368b040bccc8b322ff2f8ac18f2ebdbe25071c364a4b56724ac7977e0ec

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    fc7ebb34e3106d44e3158f1b214e0348

    SHA1

    4df22f0c96e8455c56db15d657f3ca54f293fbdf

    SHA256

    71b1765185e82206537c980696657aaa429d3077cb0f54e92d8120186d5ae3fb

    SHA512

    dc534bbc08d7f15f99ae0c2ee397e99686b7e727d89c041c178b6285d4a5e92a55e48240f4717de98aa4f6b4d357b54a1a076e37ab38e183efbd00d67dd30168

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    b0daaf258e9134352ef3c64fb7614448

    SHA1

    4aa87582bbb6af2e7d6707046a203eb689355db4

    SHA256

    36d70c48f12aa0badc7695bbef61705efebbdce9b8e2fd07c7295a15e47f5bff

    SHA512

    a8f6ec928a6f3fb4ce9e85a516d475cd75aa48e673a8c49da64ae5ae3e28370ada9f7744de12a3ecaf754741270aab94cff2a991a3a3c27492f1f1d1b5e49ecb

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    35015b421ff2c51729abc9226f52fac1

    SHA1

    a74f85057aac2c0f3400f8c5a4725f4551f61ceb

    SHA256

    cbc2ced02e2f421f3317530ce24963941899550666f51fd33f18490cdcfc776a

    SHA512

    69392990032a6e4ae4f0234347c09076672b088b9c319f8f71036331359a06ec815bfa6ad904d6155e3895d9db3961cc5b17436bc1130ddc54dcdad247aec7dc

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

    Filesize

    12KB

    MD5

    92e885d8504f66eca87f7f1623b64357

    SHA1

    d3cbf26944488cfb9ce219fd1f273392cf0ea472

    SHA256

    79ef3ed8381cec565180b0ba1634cab5ab39654127d7b89e2f8f31a4de319ca0

    SHA512

    e7744e2e055509b1733ac0b0876ebd6660e0cdb9e02c281fc72da314af0d7f6e03e51b2de3f443233486c5d2bb853a14b8a8b0fe684681f7de0859ae151ee9d1

  • /data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

    Filesize

    12KB

    MD5

    27a192d589cc91f166e2f93515176ac8

    SHA1

    4e832a6dad208698c10b7a5afa523869de5e22c5

    SHA256

    a9c349fdba0b4ce0ddd14822d193b3ebc12d56f460e8b6ebcd8dcc8c6ea66190

    SHA512

    a8999c62c3737689032b41396d311c12fc0e58d3b46ee177327092a863f88a6d7cff9e1e70754c57947f22444a29c96c4459eb6b0abd3c9e94732522f85f9ad7

  • /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager

    Filesize

    28KB

    MD5

    aca2740f249490616bbb5e94ac5caf9e

    SHA1

    1dcbb4cf496a9e6a6ded523f40941cc7c92864a9

    SHA256

    3c02a762c8e27764484387cef51f9a0e543674f98535e06113157cbbfd2aaa5a

    SHA512

    c3fea2e59bbc63a3fcaed0f787d6a3cffd45861cc74a1c73e9f48cd5ec55e23408edd51224df15d29de7b3ff14d2591c0be8f07f1cf6e7fd78ccde0789964dae

  • /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

    Filesize

    20KB

    MD5

    675411f98e6afa48601c5f9ca4016ec2

    SHA1

    54b8c63a69bf0a5c18b6f2bd1d45628f0409e9f1

    SHA256

    179fde5cf1ece56c99261de0c52a23633f22bfb28798845a26083d29ee5da12b

    SHA512

    a52bd92a7a0a9cc188135fffd126e1d155e5f1475377e0a0ec61fc5b48aaf14ac3b542a97237fa31bb6adbfeb139ab115b00018c767c72946404565a8e94097e

  • /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

    Filesize

    512B

    MD5

    4f750c5b13f85541699cf8e4a8c4c6aa

    SHA1

    24c6d1e18dddbc298c4f61ae0de061804613d2a5

    SHA256

    e5ec6f794107d3054c3960f9f8120b28b3fcf9683a3d87532885977120edb2b8

    SHA512

    26ad1ebcfcfe9d0539aee492d52838678b5fc0b619a1046fa9ec20b73ab8525aadde42eaedec127eb04c398ef65355365dcbb23559c92f27d3b6f5b51b598b91

  • /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

    Filesize

    8KB

    MD5

    0aaf3f2e43a7f2d4d01fe66125e5d676

    SHA1

    c317322f2e030a131ec1337390badee8a1fedf90

    SHA256

    3397925a37b8db077e4b0216143f0f8ce9108ca03ca9fbe2c4e36a94cca9510c

    SHA512

    86cd6c75d6d350e44345b1debeac6e10c1489d9f5f20e22a54bd4837b2052bdaad3555ea5ab130cc381543c72bf5ac8851e90b9af85749acc0737ff1fd88cdd4

  • /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

    Filesize

    8KB

    MD5

    320cf146869961ebec86364f42a23c61

    SHA1

    c2f0068a506e951e16517e456da8a301bd0dc249

    SHA256

    50818c993fd591b5ce7c75720a7b08d320157f036a919db39d62e809f1573c10

    SHA512

    4d4fd1b57053203b143e3b71161461965508072944cb2c03cd7f7d9e2763be302d16fd06692e1d389c9c0247886f92ff13d9b0f7da2801ccd57690f5227dbe30

  • /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

    Filesize

    12KB

    MD5

    58800ff47c39eafa2326d223912e4c70

    SHA1

    f33a18f243f4c7ad390531d263e0b5e406a30cab

    SHA256

    cdb32cb55b041a22f8cee3aa3c4ac8d4fc2d32e63c27e947ecab2f9e42d899a5

    SHA512

    1b9d16b0d7ce386f96d72b48120aa412fead99c4bf73c1eeb3f665da8bd47f2d163c0e11ee7f19c822c4def3dff4739775b3a8ecf2880f1d8ec2eb69d83eb1b3

  • /data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

    Filesize

    20KB

    MD5

    c0905b77114f711153a0f1c50007b648

    SHA1

    af75280bb6c63a7034a8ab203984c117b29ef8af

    SHA256

    d5e893559f3dea54aeb1bbbc540c47f1ba9080f1142d0f0b6eec1d2f67de63de

    SHA512

    7c6cbe82b3c01f39d0b0fa5dc9a3644ee6a4a10cb30af0d976c75c3e023dca56fe2648dfd7afbe56b95dd17079614a8cef4c8225c25f039a382c1cfc4bce3d42

  • /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    341e06e56b7f494176c277fafa2e2890

    SHA1

    b598aefe52d069fb52cb00062d2c6cf4c6f9225e

    SHA256

    e97adaf40a8adf12d89ccd72c0c20d9628134650cc3363904d9593713cfaffe6

    SHA512

    2f44b017be0f9a73e392195232b4c4a5f5a65e76d8ed94c6691545bdbaa0823d4c64ea64322f39fd017b38227e0a7883780b93b933b7ae9f177798f048a16650

  • /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

    Filesize

    512B

    MD5

    69647246a049347d469f0b97f8a4401c

    SHA1

    60f6e54653dd0281a3735bf5dbc014320af77540

    SHA256

    47bb0c8a00307bbad7b133ff217ce256df9824c493e38fbde24a64175486cc7f

    SHA512

    075f60a57eaaa6795230852158002a09b7e5e81234e0519985e0b776364632a935257e21d6f109793d67396131636743afe83f549d3dab54584230f2ccc08f8b

  • /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    517a0588ae6e22c083ee523193d91c60

    SHA1

    3aae6b993417ed096a90810537a5743ce9d59174

    SHA256

    cc4030674a1f40558528959fc076646a4c7e5c1995618a09ed8e7b5694b9f062

    SHA512

    316f90f31641f290ec4dfbca265ddb7aace73d93f13b041a14c4e5d63448991b61864795c6ce367875e865c29a7b94475c68f9396c5daebc7a55dc7f7f648603

  • /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    96456c0b04725ce1e1ab9c698b5aebe5

    SHA1

    ff5d58e04cb79358f17118468d33ad466ca9dc96

    SHA256

    7308c53a484883cdf521fa1b59df6fed6f82ccc00b00c8b48b6655a782f50b63

    SHA512

    4dbfd9bd46837f887e4b1569107739b9518d19f68012c86fb412cecec194aa5c569a9ad4f38801ee0f6760d8b4b6c09286186d58057af8b8a8f89c0411381a13

  • /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    eea4dc5e8c3d1584adba7021c31b06b2

    SHA1

    029461e917f267e3ae8a0df8cb37975b062cd595

    SHA256

    860216a647ed48074a558711b138be982ce73d18e6275e77ea5babfb1b1b9cf7

    SHA512

    17fc779357159e6b2ae74f3fe21ce39df908ed582cd4f2ed5f07aa27283d393b52f8f3360559f9198700f22b058df018bce9c0c78bfd3bf743ce5fe7ab7a224f

  • /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    cbbf575632f6b65a3d02a8b89b023139

    SHA1

    91cf6370319fe7e673528394a780ff8e24db68c8

    SHA256

    4fb1ea61ebde5a8deb98594b28fc5eb5113055ba80de5eccc0a1b49bdbbecb55

    SHA512

    5190ffd7e480f1ed6926dee875084c57f19de5a41b46d21ef543d27dc7590da760dd088315d1aa076b11a5d9df3f5a257fffee6a48cf32581e66372b96374fb9

  • /data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    43af1a28038abe4fac6c1761dc10c57b

    SHA1

    b4d0ad138541d2572989ba62a641eb697b2c7a11

    SHA256

    74bac62a08e283897e8945fbeb034ea41110cb7f5985fd11fb2f3a7d7c4c883f

    SHA512

    0187d7fa491072e994df6bb3182cf912f7c4d891022aee2d63b16dab918bfd7bafef8a7374b0b44a4b6733c54979dfd40cb8c9c1d2c46c82c8f6f7eb20d83266

  • /data/data/ir.cook.without.chicken.d/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    968be0fdf42f51c9ff4d83cfcafd136b

    SHA1

    542474bf5034c352374af20b125eaa620ae261a8

    SHA256

    53b62a8d2a82018046a71b82065991a555ec0fc798f01dda138e88b5b7162448

    SHA512

    bd6ea11037c8e660bbc1649bb5834ad46f1c4211f7a9d3e9de19947be1b40f40788d768a46f2e5b3858f958aeda3509edfa6b0fce0634400412c37929df6eae7