Analysis
-
max time kernel
61s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
28-04-2024 15:45
Behavioral task
behavioral1
Sample
05885556125e088105e7f1f923014c05_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
05885556125e088105e7f1f923014c05_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
05885556125e088105e7f1f923014c05_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
05885556125e088105e7f1f923014c05_JaffaCakes118.apk
-
Size
15.9MB
-
MD5
05885556125e088105e7f1f923014c05
-
SHA1
629c7296ed521dc949f0d58091186a1e2b8cc4c8
-
SHA256
06d5386ed44bd77c850acd5a9ad2334a706cb91bd23af95d94177f36ff1a4ab6
-
SHA512
c46fe0009855e32cccd00d2b2d0daa27209d099f2260581c51ea5c449ac4effbdd3a658e68dbcca98feddb6c5059ac921361c64ade915b34bb18d3040528ea06
-
SSDEEP
393216:WO8rlGKI3UV8D3r13bxsrXIJoJl/AqaIv+4SC3InQOGgkMeVvHqt9J7:WJlGKI3UV8jr1rxWYyboqHHn3IQOGgx5
Malware Config
Signatures
-
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.cook.without.chicken.d Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo ir.cook.without.chicken.d -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults ir.cook.without.chicken.d -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver ir.cook.without.chicken.d -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.cook.without.chicken.d -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.cook.without.chicken.d -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal ir.cook.without.chicken.d
Processes
-
ir.cook.without.chicken.d1⤵
- Requests cell location
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5117
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/31b76c16-11f2-4f2f-b570-4037b7b31989.jobs
Filesize176B
MD5f56f328eea1d5c96a1b96dbbf59488df
SHA1440c784cacff61932e2f61580b7cfdc3a4943c95
SHA25690949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA51236e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb
-
/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/3c481203-591a-41a1-bf6d-e6d840881654.jobs
Filesize278B
MD5a53175b06451313722be163a44a7b3ae
SHA1abf7171c61749bd070d042d24d5e13c9152105d4
SHA2561823ca7cd72e0f9667ab58cf9782caf89ab45ce09ebb1bd127bde11c6b85f44f
SHA512c5d390a5b11ab199200606629d1b850a7fca6c5f0a91a330e59c8ab3eadabb22294a2247a4e9dee76daa642c3ff041e0b9ae4fb9c7be4af00de22c39dc30035f
-
/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/79aed659-4235-4fc5-af0a-0d535df456b2.jobs
Filesize179B
MD5ac58f99a1b179d71e8621412ad31c6a1
SHA1b51fdad95876f5615735c2ab411031ff67d5e946
SHA2569537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b
-
/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/95727606-6ee8-49e6-89ab-a2dbf825781b.jobs
Filesize837B
MD593ddaa403c8e921550e1baaad6de2b0d
SHA18833181298f9714a4343293b52877dfdbbbaefe8
SHA256599ecd20d3581db6cda8f439fdfe73d26024b6569084634ea02a78f84fb476f4
SHA5128757d35ebed58938f12e0177aeb239483964435625d74ef2ef44540c04382bb77ea3e640fb0502c6b57ec136bc54ba0d56bebf110cd0db490b9e7d9b7d19ed9f
-
/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c4790d17-3cae-4517-bf36-fcc5b9c2a644.jobs
Filesize1KB
MD5fd72997555cbae6a39ebb96a1f5fcfa6
SHA1a600cb9605a6467a425662ae512c61f3c0d5bd09
SHA256cbf1a725e5061e93eb96e1cdba667c03465fc10d23a7fefe7dab7e49cd2d5d10
SHA51249634069aba4632a4acad3f4d88a61ac3c81463fb2584d8a7f853b51a85526a5000399d1437385786e5d3d96caab05e2d26c83576b5a37a6aba572d376616b44
-
Filesize
24KB
MD57234d3e6555ea6474f2d263a7299073f
SHA12e882cd02e9801dd37783575b59dae3d7bf1674a
SHA2563cae73bb309303d4bf6341c563a37a1cd24989f94b3809fb00d8e9498c854671
SHA5123d4e312afdc4ede2095d75c146845dcaa49a3ab1616df4ca99a8b1ae2e837d98f2f402a97f0626cabe816d62e01370f5631e14f5880e559f6cc12309373f88f2
-
Filesize
512B
MD5007faa97f5f134218d8639e65e550cad
SHA18da2fca3e82e7308766aca13fe6cfcdbfc0e2b0f
SHA25654005574548bdbc4a244a66b3fd3e5d9fc594d2d808645a30fe6fa5e321b2e7e
SHA5129b703359fadedfac62a60f2f1ec0eb51590128957f7372e0e0e4678db14021b363a70c5e00efa97e705fcb213be43e7d45b206968da29d3fde09bf7b118ea808
-
Filesize
8KB
MD5b433d1d51b0b4e72c2fd063e2db566b5
SHA13d024e0a737e00bbb44274f563214ea9d12b4b2e
SHA256c1f538dcd7c97e4b2276c89c138dc1b1b843dfd1190bea950195152ff435370a
SHA512c796365f26f75cd38fb4ad6a40b73b9bda3e812bed4e86ecb3aed947b0cba587d1116255cc53bea9addcf6b6d421ddbd1b23d2b3592755221d798151cc2e5c32
-
Filesize
8KB
MD57c104d6c2f2a4a48de469b17dce1bcde
SHA1cf61f47e019a71c26ca0e3149fc6d3290856e0ee
SHA256a01bc68ea619ff2413b255f28a3b4551bf3e8ddb4a5e18f267a70f087b5dbc76
SHA51220969c016c98c7da22f8927d83d999f7c1412f395f665074ede79fb565ce7e754f96bd7bb5bcf3fdf59e2dfacc33017b93c27783a4b004e2ddac945cf6686ed2
-
Filesize
8KB
MD5c022b5a56ac00cfdb5496bd1a6413346
SHA123762fdf695fdbaf5e57d740b9e91a5b98a6f3ae
SHA25659fec03d1c29411c9e264fb17c3fa8124d737e0d482c5879687bcdf8742693dd
SHA5127b3768cb23a5dbce5338e89877f43f8b9bbc8a9a2cf918e397ad71f336e6e5ff555f4768fff3b998f4cbf74d9e2b5268fd906777cf73fef8dd35b4a8413f1988
-
Filesize
8KB
MD567268a5cac74197eb0ba5ec4feb1de3b
SHA1bc8ff71331053f04ad614bc7c6b5dbdd26719897
SHA2565adabb338f5a6e434f77d431b0cfba547ec89fb2ffddc7461c1ec4da2054c220
SHA512cc9aa12742a2778f4da74b2b66bc9c37fb2c7418afa892c27e4f4639118063d6b4aee404f3bc35a70a011a44aad381221d99447fbc79645dc7b7673028602861
-
Filesize
24KB
MD5eb29aab9faa229c7b58116de879a300e
SHA1b007240747564240ac1836544c7135564c4c0951
SHA256bd1fb235250cb528c3d718a3d96d16a6e8acf0daa2c765cc837dba7510c26975
SHA512b38c812b5dc4063b0ecb2255ee8ccbe05a10f58723e0d2fd8d88a600fdc37c4e913c6658d9409cf2dbdf5dccf1b37df5e10290d9bec9c4d5a0b225b0f3efddff
-
Filesize
20KB
MD50d3d525f89e9ab3ac9a1a39f24853442
SHA18205bfb2d677c6d1e83c96333cfda5892a128c3c
SHA256900ef7677e2b26ef5b1b6087115f6a356e868c7363536421d9a3eb6b1cee51c4
SHA5125b15ef596e8c4378e88a18586f1840749b40be7a5f45571ea87c982674745da926b13633768fc16ecdfbdd023c4721e82505d01213de1019410f94018b24f143
-
Filesize
20KB
MD5b4766fe0768b39e0846cf218b438b0ea
SHA1bc7014f289ac033e1b17a5e530402a2140c302fc
SHA25619e6421e01d096a72ffa97c4a24147f4344d85ece7aca65ec52d78a49b608da3
SHA5128ebdbbd7884680e25df505a8d8ded66fda6f987bda8dd3dcf27410406d4692c7911b815967ee2b47bb3d44cc851ca8be1d1a0bd99c7c67d6eeca585a08f7f6ed
-
Filesize
24KB
MD5259a1e4e7ebc4b0d0341ffcf0c3bc2ea
SHA19b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c
SHA2564f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1
SHA512dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313
-
Filesize
512B
MD5b67795864cd0c3185d0d619b32f3992f
SHA1d5790942a4255752586ba2dae4485721b4ad6294
SHA25635fc633150a3ae7988bc59aae59c16051f0821201912d1256031cc1ffc2410a5
SHA512a8c2bd6d77f2396536378d1edaa5e01b996e5c357d2a6c9ff5c0b503687af9c2fc964368b040bccc8b322ff2f8ac18f2ebdbe25071c364a4b56724ac7977e0ec
-
Filesize
8KB
MD5fc7ebb34e3106d44e3158f1b214e0348
SHA14df22f0c96e8455c56db15d657f3ca54f293fbdf
SHA25671b1765185e82206537c980696657aaa429d3077cb0f54e92d8120186d5ae3fb
SHA512dc534bbc08d7f15f99ae0c2ee397e99686b7e727d89c041c178b6285d4a5e92a55e48240f4717de98aa4f6b4d357b54a1a076e37ab38e183efbd00d67dd30168
-
Filesize
8KB
MD5b0daaf258e9134352ef3c64fb7614448
SHA14aa87582bbb6af2e7d6707046a203eb689355db4
SHA25636d70c48f12aa0badc7695bbef61705efebbdce9b8e2fd07c7295a15e47f5bff
SHA512a8f6ec928a6f3fb4ce9e85a516d475cd75aa48e673a8c49da64ae5ae3e28370ada9f7744de12a3ecaf754741270aab94cff2a991a3a3c27492f1f1d1b5e49ecb
-
Filesize
8KB
MD535015b421ff2c51729abc9226f52fac1
SHA1a74f85057aac2c0f3400f8c5a4725f4551f61ceb
SHA256cbc2ced02e2f421f3317530ce24963941899550666f51fd33f18490cdcfc776a
SHA51269392990032a6e4ae4f0234347c09076672b088b9c319f8f71036331359a06ec815bfa6ad904d6155e3895d9db3961cc5b17436bc1130ddc54dcdad247aec7dc
-
Filesize
12KB
MD592e885d8504f66eca87f7f1623b64357
SHA1d3cbf26944488cfb9ce219fd1f273392cf0ea472
SHA25679ef3ed8381cec565180b0ba1634cab5ab39654127d7b89e2f8f31a4de319ca0
SHA512e7744e2e055509b1733ac0b0876ebd6660e0cdb9e02c281fc72da314af0d7f6e03e51b2de3f443233486c5d2bb853a14b8a8b0fe684681f7de0859ae151ee9d1
-
Filesize
12KB
MD527a192d589cc91f166e2f93515176ac8
SHA14e832a6dad208698c10b7a5afa523869de5e22c5
SHA256a9c349fdba0b4ce0ddd14822d193b3ebc12d56f460e8b6ebcd8dcc8c6ea66190
SHA512a8999c62c3737689032b41396d311c12fc0e58d3b46ee177327092a863f88a6d7cff9e1e70754c57947f22444a29c96c4459eb6b0abd3c9e94732522f85f9ad7
-
Filesize
28KB
MD5aca2740f249490616bbb5e94ac5caf9e
SHA11dcbb4cf496a9e6a6ded523f40941cc7c92864a9
SHA2563c02a762c8e27764484387cef51f9a0e543674f98535e06113157cbbfd2aaa5a
SHA512c3fea2e59bbc63a3fcaed0f787d6a3cffd45861cc74a1c73e9f48cd5ec55e23408edd51224df15d29de7b3ff14d2591c0be8f07f1cf6e7fd78ccde0789964dae
-
Filesize
20KB
MD5675411f98e6afa48601c5f9ca4016ec2
SHA154b8c63a69bf0a5c18b6f2bd1d45628f0409e9f1
SHA256179fde5cf1ece56c99261de0c52a23633f22bfb28798845a26083d29ee5da12b
SHA512a52bd92a7a0a9cc188135fffd126e1d155e5f1475377e0a0ec61fc5b48aaf14ac3b542a97237fa31bb6adbfeb139ab115b00018c767c72946404565a8e94097e
-
Filesize
512B
MD54f750c5b13f85541699cf8e4a8c4c6aa
SHA124c6d1e18dddbc298c4f61ae0de061804613d2a5
SHA256e5ec6f794107d3054c3960f9f8120b28b3fcf9683a3d87532885977120edb2b8
SHA51226ad1ebcfcfe9d0539aee492d52838678b5fc0b619a1046fa9ec20b73ab8525aadde42eaedec127eb04c398ef65355365dcbb23559c92f27d3b6f5b51b598b91
-
Filesize
8KB
MD50aaf3f2e43a7f2d4d01fe66125e5d676
SHA1c317322f2e030a131ec1337390badee8a1fedf90
SHA2563397925a37b8db077e4b0216143f0f8ce9108ca03ca9fbe2c4e36a94cca9510c
SHA51286cd6c75d6d350e44345b1debeac6e10c1489d9f5f20e22a54bd4837b2052bdaad3555ea5ab130cc381543c72bf5ac8851e90b9af85749acc0737ff1fd88cdd4
-
Filesize
8KB
MD5320cf146869961ebec86364f42a23c61
SHA1c2f0068a506e951e16517e456da8a301bd0dc249
SHA25650818c993fd591b5ce7c75720a7b08d320157f036a919db39d62e809f1573c10
SHA5124d4fd1b57053203b143e3b71161461965508072944cb2c03cd7f7d9e2763be302d16fd06692e1d389c9c0247886f92ff13d9b0f7da2801ccd57690f5227dbe30
-
Filesize
12KB
MD558800ff47c39eafa2326d223912e4c70
SHA1f33a18f243f4c7ad390531d263e0b5e406a30cab
SHA256cdb32cb55b041a22f8cee3aa3c4ac8d4fc2d32e63c27e947ecab2f9e42d899a5
SHA5121b9d16b0d7ce386f96d72b48120aa412fead99c4bf73c1eeb3f665da8bd47f2d163c0e11ee7f19c822c4def3dff4739775b3a8ecf2880f1d8ec2eb69d83eb1b3
-
Filesize
20KB
MD5c0905b77114f711153a0f1c50007b648
SHA1af75280bb6c63a7034a8ab203984c117b29ef8af
SHA256d5e893559f3dea54aeb1bbbc540c47f1ba9080f1142d0f0b6eec1d2f67de63de
SHA5127c6cbe82b3c01f39d0b0fa5dc9a3644ee6a4a10cb30af0d976c75c3e023dca56fe2648dfd7afbe56b95dd17079614a8cef4c8225c25f039a382c1cfc4bce3d42
-
Filesize
16KB
MD5341e06e56b7f494176c277fafa2e2890
SHA1b598aefe52d069fb52cb00062d2c6cf4c6f9225e
SHA256e97adaf40a8adf12d89ccd72c0c20d9628134650cc3363904d9593713cfaffe6
SHA5122f44b017be0f9a73e392195232b4c4a5f5a65e76d8ed94c6691545bdbaa0823d4c64ea64322f39fd017b38227e0a7883780b93b933b7ae9f177798f048a16650
-
Filesize
512B
MD569647246a049347d469f0b97f8a4401c
SHA160f6e54653dd0281a3735bf5dbc014320af77540
SHA25647bb0c8a00307bbad7b133ff217ce256df9824c493e38fbde24a64175486cc7f
SHA512075f60a57eaaa6795230852158002a09b7e5e81234e0519985e0b776364632a935257e21d6f109793d67396131636743afe83f549d3dab54584230f2ccc08f8b
-
Filesize
8KB
MD5517a0588ae6e22c083ee523193d91c60
SHA13aae6b993417ed096a90810537a5743ce9d59174
SHA256cc4030674a1f40558528959fc076646a4c7e5c1995618a09ed8e7b5694b9f062
SHA512316f90f31641f290ec4dfbca265ddb7aace73d93f13b041a14c4e5d63448991b61864795c6ce367875e865c29a7b94475c68f9396c5daebc7a55dc7f7f648603
-
Filesize
8KB
MD596456c0b04725ce1e1ab9c698b5aebe5
SHA1ff5d58e04cb79358f17118468d33ad466ca9dc96
SHA2567308c53a484883cdf521fa1b59df6fed6f82ccc00b00c8b48b6655a782f50b63
SHA5124dbfd9bd46837f887e4b1569107739b9518d19f68012c86fb412cecec194aa5c569a9ad4f38801ee0f6760d8b4b6c09286186d58057af8b8a8f89c0411381a13
-
Filesize
8KB
MD5eea4dc5e8c3d1584adba7021c31b06b2
SHA1029461e917f267e3ae8a0df8cb37975b062cd595
SHA256860216a647ed48074a558711b138be982ce73d18e6275e77ea5babfb1b1b9cf7
SHA51217fc779357159e6b2ae74f3fe21ce39df908ed582cd4f2ed5f07aa27283d393b52f8f3360559f9198700f22b058df018bce9c0c78bfd3bf743ce5fe7ab7a224f
-
Filesize
8KB
MD5cbbf575632f6b65a3d02a8b89b023139
SHA191cf6370319fe7e673528394a780ff8e24db68c8
SHA2564fb1ea61ebde5a8deb98594b28fc5eb5113055ba80de5eccc0a1b49bdbbecb55
SHA5125190ffd7e480f1ed6926dee875084c57f19de5a41b46d21ef543d27dc7590da760dd088315d1aa076b11a5d9df3f5a257fffee6a48cf32581e66372b96374fb9
-
Filesize
8KB
MD543af1a28038abe4fac6c1761dc10c57b
SHA1b4d0ad138541d2572989ba62a641eb697b2c7a11
SHA25674bac62a08e283897e8945fbeb034ea41110cb7f5985fd11fb2f3a7d7c4c883f
SHA5120187d7fa491072e994df6bb3182cf912f7c4d891022aee2d63b16dab918bfd7bafef8a7374b0b44a4b6733c54979dfd40cb8c9c1d2c46c82c8f6f7eb20d83266
-
Filesize
2KB
MD5968be0fdf42f51c9ff4d83cfcafd136b
SHA1542474bf5034c352374af20b125eaa620ae261a8
SHA25653b62a8d2a82018046a71b82065991a555ec0fc798f01dda138e88b5b7162448
SHA512bd6ea11037c8e660bbc1649bb5834ad46f1c4211f7a9d3e9de19947be1b40f40788d768a46f2e5b3858f958aeda3509edfa6b0fce0634400412c37929df6eae7