Analysis
-
max time kernel
61s -
max time network
150s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
28-04-2024 15:45
Behavioral task
behavioral1
Sample
05885556125e088105e7f1f923014c05_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
05885556125e088105e7f1f923014c05_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
05885556125e088105e7f1f923014c05_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
05885556125e088105e7f1f923014c05_JaffaCakes118.apk
-
Size
15.9MB
-
MD5
05885556125e088105e7f1f923014c05
-
SHA1
629c7296ed521dc949f0d58091186a1e2b8cc4c8
-
SHA256
06d5386ed44bd77c850acd5a9ad2334a706cb91bd23af95d94177f36ff1a4ab6
-
SHA512
c46fe0009855e32cccd00d2b2d0daa27209d099f2260581c51ea5c449ac4effbdd3a658e68dbcca98feddb6c5059ac921361c64ade915b34bb18d3040528ea06
-
SSDEEP
393216:WO8rlGKI3UV8D3r13bxsrXIJoJl/AqaIv+4SC3InQOGgkMeVvHqt9J7:WJlGKI3UV8jr1rxWYyboqHHn3IQOGgx5
Malware Config
Signatures
-
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.cook.without.chicken.d Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo ir.cook.without.chicken.d -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults ir.cook.without.chicken.d -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.cook.without.chicken.d -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.cook.without.chicken.d -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal ir.cook.without.chicken.d
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/32a5d47b-aae3-4975-a0e6-fbc55079fa5c.jobs
Filesize278B
MD53c194b281da731d3d0a33ab8e74f9245
SHA1222a12fba94ed5266aec478c50da161f68c0f799
SHA2563fd9a9d558649f5ef59f544c58d5719665555d13e400f13f0a597282b1477c6b
SHA512066cbad83ec427f5447ac20b3ba40e8f41841d09e2736e182ff3158d1026b4e0ee4cd84a204e638ccde14d7427b4650087ac581e7b18a6b6216cee6decf6e3dd
-
/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/32d29971-486c-4115-8275-313d3145b7c8.jobs
Filesize176B
MD5f56f328eea1d5c96a1b96dbbf59488df
SHA1440c784cacff61932e2f61580b7cfdc3a4943c95
SHA25690949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA51236e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb
-
/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/335c6409-c93d-47ee-8d2f-1a227bee0461.jobs
Filesize1KB
MD5306263dd7518243f29c11a123f6acbc9
SHA1397a9073624a15e1529a82ccb0b8efa10ab988bf
SHA256941c0f94a7a7fc40a0be23c55e16f725cc564752041c5064013fee563b39367d
SHA512f936fbb0f6ef0a50737555cbc6ce72c5b76ea2debc52044bdd813932690b07f20530e229e486b34f6013705d6994ab84982320e2fde977bbac17221c0b49dc8a
-
/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/63e92a8f-8dd6-4bc9-97db-a7e3df6caa4d.jobs
Filesize837B
MD5b702b601467951f6afafcecad184a8ca
SHA12c6a2407630105484ae3b0f11b7c38496e920d98
SHA256114fdd4f80467e7df69a9ee47d4deb8d29b317e537f48058dc5b7058ffc7bc1c
SHA512c939d0589dd6da716d20ba1eb7b8fb9a41e78cccafeadd37b78403f551bc9052710e5670942a0bf62ba9071d8782cdcb0a6975971b7fad95f0a0c1b19255409c
-
/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/b9bca99c-94d6-4635-a4b9-0532e3316c0a.jobs
Filesize179B
MD5ac58f99a1b179d71e8621412ad31c6a1
SHA1b51fdad95876f5615735c2ab411031ff67d5e946
SHA2569537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b
-
Filesize
24KB
MD5629fb4a604ecf596d9d418e7c8411c96
SHA1af85db32aa1aca8844c5dafa194149c41565ca8a
SHA256601e66535ee9683b49bfdf1ab8b88e2de4e15b2e1ca6ccf0066150a4f350c3d7
SHA512783f0a1a10d86303410fc5692dcb3727b0bd363ab0651ac5f76ae525356b7d6e244c772475f990ae60888acf6cf90a5f5de98db07ba37a56025a88a8ef37c472
-
Filesize
512B
MD5c6d1007e20b0165a39413e53bf2e921d
SHA17dc6b4f4f39930674efa62cf2f410ed479c0d981
SHA25602e2ce8e1d11824e79cdc0d4686be46aa70ebbd3a6bb027b632ef99f527b2e57
SHA51270475aac3f60e8e3d58d217a2a769ee7ad7a62b4dd7b1776fb53f95d0484464125c423943ef7048835956b598f7f30eade43ee79fe9bb565b76f448e75e81d6d
-
Filesize
8KB
MD542c6e55e8d9de46f66b7a9fe5f282404
SHA1dadc8bcef62314b0fa9684c96da3a24e6918ddd0
SHA256f797766759d98c1ed5e9383bd9131dd14e0d6326ffe668d1165de0e8f303c0a8
SHA512db74dfba2b1ea24e9bfc764e1d2dddd8289467284c0211c4e226466bb1321984cf884e6c77806ed3b47b03416ccc88eed1577e3b82334d5a50ee61aeef51c8ac
-
Filesize
8KB
MD55ff7bb14ca00c9e4623d29298a5fdef2
SHA1de4ec64ae968ac71c1989930458970bc35ef509f
SHA2563fdf2192e22e423da169499ff43926ee05b78aecde09cad668cc43b7e533cb32
SHA512f15f4a2a9282d133bd89995bdc544b27a76c6e70e862efefef727d4840ac858f01765af00aa36d54baf5711bb3b7d34085c435c6961f991cd132be5ab2cb2ae8
-
Filesize
8KB
MD53dddec0c6c5b17b1bca5a0d25b6ace7a
SHA1ca065377f40ea881e475fe9fbf6a91b72bb7833f
SHA256a031c412264089cfc35b44b5e479ff4cbb62e08b58072dd6fabef8bf68b3e33e
SHA512b5e4cf7d784b873fd18ccd860ac7c965fd8f3a3128f5b47b1a0f0b2904a267e20c25dff440270f90848106d8cf84e9e888f4d781702e29c1319647e036ebac27
-
Filesize
8KB
MD55af8887b7b4d3e316f6ec5d93cb75c4e
SHA1b6ea5338346937bdaacb37c621b058cec76f2a50
SHA2569de78ae3d9b399aef985c9a8f5a70b1d89a448fbbd59961afdd9ab6b8845ab1e
SHA5129b20f0164048e6868036a23da4faadb9a5b611fe3bf0e5f0e18e92ab33300bcb3d23c061201ed6a4de35a15c99640ebd367692e7ca0ea6cff88f2cf182e80877
-
Filesize
24KB
MD560df6ab668cd1c442cf821624a6fc7c4
SHA1ea260e9f7ec1aedb6bc8dea9cdb577d86503748c
SHA256e768dd2b3c29c8ce9db4abee258ca7e99a5819554b14ef8bff02ae59786d2f8a
SHA5129c6d83be5de0528d87330c2bf59f95f6009f8c189e5466890a125d0adc177c51333544acb510c2dba10690b3f9444e2e13ed967ace5d016536dc9eca1e800d9c
-
Filesize
20KB
MD5b2f8960d70ccd5b0f93d958a1c3fae36
SHA1e1e523460b5ab4b5c0de3548af405bc1e4b3a885
SHA2565bd20a0df92836fb761f7b01ba21596f8a73f9b1d5fca1559c5ac7302169dec2
SHA5122827453eabe68a61cd742cfd35cb4bc0ffc6a230da50a8753b8d66fa0ecf8f51ea96093e10322759514bd64e8533ca8d8c3c1b398e8fcecde314bae310ac31e8
-
Filesize
20KB
MD59ddb97320e1a3790950b8e197b8f5167
SHA1298f39b53424bb3c52ecec9bfec07224ea40fee8
SHA256e7d9c828ea655da6c9b608cd13df8ba3b5b0932e1eadf0171642eb22c5f3a560
SHA51295a824ee85fffb2118a077c17d3af01c6a009e3325aad0c99c1d975f01e6b06485bc1578a4a9b8f467312862b66aa41ea6b1e23354cd2ddda9111954e2737324
-
Filesize
24KB
MD50660d3ef5f0245096a9fa0f61d6a8666
SHA1282222362a5a05e3153b7f6b49ef35c667b19542
SHA2561091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2
SHA51218bbe88051278314b76611bd68156ce60a9c3af3818d39991fa58d28bd9bcb8476eb00ef52ad8ae7d16c1d7ffcd9f2e8a858e2fd806ae59b5d85a8c3a9ca12a7
-
Filesize
8KB
MD54d7d9efcc331c42e28383d9835299dfe
SHA198e3862a06028d7a21d49809db10b0017b0c7940
SHA256b5dec14ee82d7f20896b8a10524286b9011cd43a7546e2ff937a80821dad6459
SHA512c6ec195845b0a8978a978618ef91d79112275a6ee440ae3e06f86663a23c37743d6ff38bd87298e2a07e7a15c8cb1619114fd09968fe6b3dd03220610c9c126d
-
Filesize
8KB
MD5e83da97522c0b6c72cd702b41bbf3a99
SHA1505f4319744bd12f345e937d1117f43d3de31655
SHA256415a1001017a3a28e86d51f0e90cb4cbd850ed1fa7fe50ce0c73bb17503928b1
SHA512a5f69e131fd118d5a8ab66e669756222045a0eb7bce9d3a3106b0418c959ff848e130beffb16e6845adaa8445fd97f9a00a7070382ccf29273be7caaa38219e2
-
Filesize
12KB
MD543c72da3c326d03aa7b92bfed9c08c21
SHA1d9da8e5d9e55e09a548e2f56f22d4245d0ff69f1
SHA2564b0fdb8f490f61be16b141062d43010b1b4ca4b774bb282b3fe9eda40c934bda
SHA512ec5f089939fae3de85778e85a33531a3939ed93896775dbb5b046e0650085ff494af801cf502c4753562ed3e2e2eb4740a8b37301c8537491604fcd048c6c48b
-
Filesize
12KB
MD50299ff46dbc5a250832913bfd44294a8
SHA1baa5c9628b42306e9635ab181b322d312fc4acc3
SHA256823c338430cf097afac80fd5671f953f6783ea6a420e9342e258852ae235d4a1
SHA512d93329ba9db6e7197ed30cbc7cd86d7b7259ccb648f58a04828721e18dc63a4e2d8a4bea867a188dd0d790fe85f879ca1f3512716f34351fe2ea0f2da8faac4e
-
Filesize
512B
MD5b7be9bb6f5fe1e799784b388cc36edd3
SHA1d7a7e3333c6d4f4cb10bad2eb9f08c4432c17b22
SHA256302b69925ba68b4b4998c5d1c2362bf263177c46fd3e2ebd540e3b5e65982ab6
SHA5121ae82bcfed9ff22ad425b5c4aaf136acad05a632cb15ba16519f9e23e55821ce031d2d58de4e5d520ce9eb013f979a1271cb4020d6d463331cea1c0978cc68a6
-
Filesize
8KB
MD59a20f5d9d2b0b2567f9c91ad7b80bf85
SHA178a3c37015c9f039b0d4d0d5cd0fd9d2ef23cbc1
SHA25678f482fb730fb2817b170848a914c4e57ad3be675ead0fac98419f81939321c2
SHA5125031875a5add11b5f2e00d42e2dec195cf0a37c512159b545878c7ea6cd76886fde7a37646ee5e39bdf0e581052d6eae9a205868d97854356e369e9aca8a47c2
-
Filesize
28KB
MD59000a27583e7083745d853ea082ab3ae
SHA174d9135b80ea483ae876c2670300086d1646dd2a
SHA256c96efaff60100dd321f142480869a2213f76bba72bfbf03da48f9c96d15565ba
SHA512a7d8d46203c84b49973d1afc119b7ccf04ee6dd82d16942d9389333b4e6d9a8ca1a799863d8faee7193df3b4a143ad818bf6391d040fc0f8d45dc5b796d7a292
-
Filesize
20KB
MD5611461d020dbab15ebb1505bd483e8eb
SHA190b2703ec33ac4ea56b3625a68f659af2f20be11
SHA2565361abbfdfcafd983ddffb613cc9d847d6716a3f9e748593e697654ef95d6d13
SHA5123d2f9607547d912644012bfd1cbd4edb597d88696f8226f0316e21f4357a357382e27efc10cadf21c4e80da5a42d40e52d303918342feb8559ac9b57a07de7dd
-
Filesize
20KB
MD502fbef1f2510fdcdcac4112b3365458d
SHA1e6a72d0fb6fd03687c4435d4ac5ae5c10ad53e10
SHA2569695dae86649e6673fa183f485397d513e3028a775cd69126a8edc6abeab7e1b
SHA512d12cbf9488593397a8714bf95e2fb7967dfb5554b2723aa780a1c73ca232eb06f7e64cd2f6eaf6057c338e87b49743fb70f4c8ad16f14db34e103ca893ef2708
-
Filesize
512B
MD528d6248b8b794ae8eea2e7262f07cdf6
SHA1e003f2398a25a75881bf6c2076220267c8a45f19
SHA256d10aeac993d94af1dab3dba552499f811f0b537a19ff38ecfd8938ff39c8fcda
SHA512d0e8a7e66bec6aa41867d3d0cc7092dd3ddaec87bd23030a08ad41a14e0ec3adcb47a10bbd99fc8e0c57c9923feda14c965f0b13838de8b917bea437d568441f
-
Filesize
8KB
MD53a4baa9f8305c41dcde17ab0e2ea158e
SHA1cf8f055146f5911a72c0e5eca1f1990ad286beb0
SHA256558d33a7e5b55794a58949bdeb2587535961a5a3c4a0b41f04900be5b0a2aa8d
SHA512209363fd748b55f96474ce05057bfe0ccca9df200bc210194ebaa6d402bad4f740300308f1f4be2da012a4b8a8bb5a0aa4083a0c6cb6e62dd64bc67b84f6d0db
-
Filesize
8KB
MD557deeed0961420d00574e489e18cd45c
SHA1e80e270dbac6b49ce5a079ee1dabd1b1634144ce
SHA256360afee2630e0abdf81546dd43229c5527d2adddcb5a07b38cffa16afed588b4
SHA5125c4d4f54c4a2d62d3734ed71abf236995fc542320d7336e471d11478216936e8586edd4656d4fc71e7864c395fbfefc2f99ae27969c06b40e11e1df1506d9cf6
-
Filesize
12KB
MD53a77d0585c76db131ebff1290fd3bb4a
SHA19469fa839911d0151dac273716f09ff340b443cd
SHA25656c1a93fb6a244100f33e7bbb592e462abda5272e36dbd941676d644ca68d025
SHA512dd6de7ca07f5cb30bcbe890b0190dcde183af6b24321eb56c8b836d57482fce9cac8c065d7a9d69d5ac6bc7503b7dd8763803c8f7ea149f280c132f49452baae
-
Filesize
16KB
MD5027516b86b55b941e3de3106de206660
SHA149d69d0b51fa73b6a9e489bb2ef2eae515f0279b
SHA2562558cd9ce471780e82b0f771413ccb0253ba9ac1e252606e564eaf7290175b4a
SHA512d38c9ac3c492758c30b211d53eb62f3560e95e8df048216db7849e2fb9e3dff606331681c8e75bfa5bb8e876dac2ab105a1f279022ce186a5e7da760f1d89f96
-
Filesize
512B
MD580135e4ba0fc2ca58fe9c98b5eb41957
SHA14b8af2b9d89260d9040b50dec44bcdedbcda8b0b
SHA256aaef5c1f237ad2a1f9af78d6768e6733aaeb0accddf2ce4db2d1f3cfa0619de9
SHA512bc7b264afdd2816e4a0e8da195b540586b11682bb17b0b2a3d704f0ebfec7ed25353fb572cf73647ac73cf932a1c2e41c3608c8edafced1f0744a16c3aa9bbcb
-
Filesize
8KB
MD5ae7e4d092443f18c65f627c8f39c6651
SHA11287eeeb179a93276641a48908b2d68783be9c81
SHA256c29bf296d732bde54d8fedfe6008f9303d0ba403c0d53650c44aed3f56972cde
SHA512f33b274a50e4c0af716594f823b46f670bd584a00f97565cfa96f684aa0cf4b314295e63a1841c4a35a4e6368c2454bc7768dfc5339c5617bdbba360702a90e8
-
Filesize
8KB
MD5ea9c5efcd2a891d82eeff59fc64bb2f1
SHA13402de381b619f7dab42421110c2b1fdc2f24d40
SHA25600f4d2d26e6d8ab17ac49907a5462f5cb5bdd50af7007dbd1d6036888db9966e
SHA5127ec9f7b3781329be35ecf2ee2e34ccd276967a8ba23611e4acfb7075e174bf1ae6d6234f5b8b5d1378608a16ecad09996a6ec39aec2b4c6b3c69ab81890fc93a
-
Filesize
8KB
MD5129a1667cd3edd78d14285d1ac472dce
SHA1351e504ef8fa89af655cdf3f3a23f83be6a4a77e
SHA2564777893a05504f3fca8c1e04dd178f3d41acdb8bf7552d403693a9f3cc5075fa
SHA51234013c26c0dad9e0779b580a73591751d994eb4adfe3ee6ac067a143ccdb2b3fd32429f956556c9e3c0db0698f14d7fcb0d55f5c093169c847be364718bf8648
-
Filesize
8KB
MD5a8dc8e1889ca23f545a2e6cf10b1c2da
SHA1989dce9ef1737f115a0d83f02a84a15274420fc6
SHA2567cd27d8c874c39f586d64bea94d5d7205fec5959eb076897fb7f6990747ec7d4
SHA512059ea88ff479b0385b45110abb1de45cfb3323b1e77c216198a9d9a3b1bb8b0cf5465c310188635d4721e1071bf91a90c48ee672161bb6b84ad988de42abb6b7
-
Filesize
8KB
MD561ef46ca056b6903f7f5c84d992b9ebc
SHA1500142ac0c98b609592df60d61a3bc545593a570
SHA256e2b2a0a398f013e43c466999a344cd756b5ef4e8257d6493b94a26ce2ea8fe8a
SHA512df223a3c73d1f8586ce366430e1283a25b15a828fd179916b3eb3b8e35d5fca2f7bfbd72125c1c78b8415fe8d2ff21499f47b0b35692864a7e9e8535a6728e13
-
Filesize
2KB
MD50897f11e866a0bcf76626d81bf019707
SHA1f2632ad54d2aa7d7bc434913f9416b82b091a2f7
SHA256da4519826d830ca46a422f89c2912e96df4c5d33cea06b8a454080e9683b78b6
SHA51231c476218a0833544831ef4279262abe4d993506d8f158070f03a1f26eba294a70d383db9221b53309f163ef9699f20552df2a1c21f1cfe89663c75a22c99c96