Analysis
-
max time kernel
151s -
max time network
147s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
29-04-2024 01:19
General
-
Target
06801922e51f9599b3f78a19c7be469c_JaffaCakes118.apk
-
Size
602KB
-
MD5
06801922e51f9599b3f78a19c7be469c
-
SHA1
4104aa1fe43314df19b61165af1d6da2941778a4
-
SHA256
28ff56f012a5a2f3d9484483f7e101cd779a16dc40ca55134b942278dc0c7e6f
-
SHA512
811fa3114754939e52383dcae81ecb5a79ce0410068ac37f645a4f583961beeeeab87c0b2c2cf2a022e98c69cbd90c1c20f7c1840276ea344d2564138f9f93a4
-
SSDEEP
12288:IEaFZvkGGNUuWW1NVwCKn6GAx1d9H1BY+0aTBpqSol2KpEhpX79w:IEaFmFN9v46flH72wOSoMK69w
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
feifei.shasha1.meta.face1⤵
- Removes its main activity from the application launcher
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/feifei.shasha1.meta.face/app_ttmp/oat/t.jar.cur.profFilesize
646B
MD56129e70fd903c4d4d2549a0069f7ae95
SHA1afebf7a509dbcca5779bb0c12de146416de317ab
SHA25631940a8c1ec3598763495dd634a5642ebf324aa7ee615dae2b477d9200ec3965
SHA512a57075d631f57c78d328a960f51c774351e7ecd4fcaab5f851763a8e5357e552262ee5b8673303e0f10a17e55583a3d69b55b06ba62f6f7231af494e168e5d3d
-
/data/data/feifei.shasha1.meta.face/app_ttmp/t.jarFilesize
276KB
MD59aaea567e0c93e51718ba7eade0e83df
SHA10005116aad1779361b70093db00fed5ac090ae23
SHA256b30a95dff6f65f444472971c8aaf895ffc8e66e0117ce242ec4cb8a8a519a5ec
SHA5122aef1034335d8752f4e25ce6c5823ce03019536cc6e51ee61b5291c77a0f356a2517e0cbe7f2c4cc2d897115dc856449a342cfdc247c9d34d313187d15b2f890
-
/data/data/feifei.shasha1.meta.face/databases/feifei.shasha1.meta.facebFilesize
72KB
MD5c430c9fe64b6c9eca7cba7d5a32cbe1e
SHA170179cc6c76cef14b926749fbbf9b096dc342eb1
SHA256fcb90b90e73a2a240c2bac34708b2bbd4bfdfe7b4cfbd30e05a1b9231f27d0a3
SHA5126a4c6102b4e0fdbff3ceadd43b93b6a4d1bba574199c4dfea917d13f49d030d4810739eca7807683f8fa8c31f0673d93058ff74fb67ed21f95a2bd353ddfc934
-
/data/data/feifei.shasha1.meta.face/databases/feifei.shasha1.meta.faceb-journalFilesize
512B
MD5458398e99e87263ed38379d47ad4eb3f
SHA15e8b195b062fa74a90c275a6259634d1936cecd6
SHA256a856655f42d68490254592ac88c06551d9f5eda88d2c393bbad5a6252bb40311
SHA51206bf31c0c81a3a36f931f83697f397d81d1c276a328448a1ea3e479f295daecf54b5a9e9c0cff354e986673a8e00a040b288f6f95ecd8cb663a083890e45067f
-
/data/data/feifei.shasha1.meta.face/databases/feifei.shasha1.meta.faceb-journalFilesize
8KB
MD5116559f92800c7ebe8779a8019f117da
SHA13d276106605105786dee9af1ed80de61d07792b4
SHA2560976e69204618c87062b1d88ed24b9de0838e5bd047e5d5c0cac03dd3258277d
SHA5121ab5eba2476fb565c89d2d884a5bfdfa4a546a3bf56e2256c8400c8d4af1ced806c1b0390ea664d45f54dd3a371fef3270a40c76d26c2f0bc9d549b0137090c6
-
/data/data/feifei.shasha1.meta.face/databases/feifei.shasha1.meta.faceb-journalFilesize
8KB
MD58eb6725db5a56140ccccddc177bde824
SHA1a622c6684c664cb9188a75951fc4ed35e917654a
SHA256b60f6cb8623a13c7038071c7144be1586662f24bda5484c0458ea8294790271b
SHA5126b4cdc027160b647069266341099a3f9b6f38240d9ba791b24d8907b2dbe5ce6f55543c3c866c5b963211974c9387baca0b2c7f99b4c2123e80f0771f1165470
-
/data/data/feifei.shasha1.meta.face/databases/feifei.shasha1.meta.faceb-journalFilesize
12KB
MD56ef5a70340d715e47554b0a4dccb3ae6
SHA181b986c6e2caf3d9d2058e2ac3fbb9faee3f65b3
SHA2567cdacec38f723ee20689c1b44cc285902bc32270a4dbdda128a2569c9a32d08d
SHA512f84156a5026efeb5d715d51462b12c9b36d2d044408b5e96890ce46d25bd757a64bc07abb93bf79d34c4457f286f5d9561cd19eafb39625c4d7a83e7e2bbb437
-
/data/user/0/feifei.shasha1.meta.face/app_ttmp/t.jarFilesize
587KB
MD5f72c3d07507c3e26d317e9117ba757d1
SHA1cdede4739e9dd9fd95243aab5e44c24f93f825c3
SHA2561c65834d9ca018c6496a8b9957589d0e94657911b6635dc21a448d78f9238887
SHA5123420714252e7503abc13c99274d767b0bc08671d769460dc61823ab9470e145fb75c5dfaadc617d3a05cf251ed5ecf38ea7e8c1d7b343bca4d7e8296f1b805d4