Analysis
-
max time kernel
141s -
max time network
167s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
02/05/2024, 08:26
Static task
static1
Behavioral task
behavioral1
Sample
0dfd3f0dffd2a2622a4956c8a213ac1b_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
0dfd3f0dffd2a2622a4956c8a213ac1b_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
0dfd3f0dffd2a2622a4956c8a213ac1b_JaffaCakes118.apk
-
Size
32.0MB
-
MD5
0dfd3f0dffd2a2622a4956c8a213ac1b
-
SHA1
2a41ee339420106fda6357973fed8805cebeb74c
-
SHA256
494efd615753dd7c3ae014d51b9fbb26ae985aa581309b6f65d46e39e0c45d1b
-
SHA512
5a717997cec33665b057a5e9adc006f8d4ca12cccecb2a75cd4ea727d18caf32e5c5cc1a23647f3d9ed3613b375ba2b520b801f8aa419e1eb0762583867d678d
-
SSDEEP
786432:6Tzq+Jmt97kGmrPxay6xrDn4S9x/I2ibn094Qn4S85sXEF:6fLo9xmjE3pDn4WiwyQn4bs0F
Malware Config
Signatures
-
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation cn.com.bluemoon.om -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo cn.com.bluemoon.om -
Queries information about running processes on the device 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses cn.com.bluemoon.om Framework service call android.app.IActivityManager.getRunningAppProcesses cn.com.bluemoon.om:core Framework service call android.app.IActivityManager.getRunningAppProcesses cn.com.bluemoon.om:pushservice -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.com.bluemoon.om -
Checks if the internet connection is available 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.com.bluemoon.om Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.com.bluemoon.om:pushservice -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal cn.com.bluemoon.om Framework API call javax.crypto.Cipher.doFinal cn.com.bluemoon.om:core Framework API call javax.crypto.Cipher.doFinal cn.com.bluemoon.om:pushservice
Processes
-
cn.com.bluemoon.om1⤵
- Requests cell location
- Checks CPU information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4612
-
cn.com.bluemoon.om:core1⤵
- Queries information about running processes on the device
- Uses Crypto APIs (Might try to encrypt user data)
PID:4687
-
cn.com.bluemoon.om:pushservice1⤵
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4732
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
MD54cfe777c9f6e7859f5efe2197401d8e5
SHA1bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a
SHA256c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
SHA5126be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de
-
Filesize
36KB
MD586752a4be6564d8370f2f0e403995003
SHA129f7d50675f6e59f3b808eb6dcc8619384412115
SHA25650484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
SHA51279c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec
-
Filesize
512B
MD505a9f0a6f8a01b25b0f1bfe39f3b95f9
SHA1404d98de4090c47c4194e1e57d2c8f3acf3af23b
SHA256cc250d1ad3fa98bd5f7adca8a9a06f0f9e6c60691b1a3b4bc2af715c0db62902
SHA512a67360a3713fbdc2e7d759bfb3780e8b8e9401dca1239c32dea98ead3c7677e7617fdd91ae06026fe22ef4b4b0413583a739d761aa6b6770141b36ee5cd71fe4
-
Filesize
8KB
MD55b3b5ca0b793175a40e6998a81bd7b57
SHA1a004c241ba7405ecdc69e18f383a1127213c3876
SHA256d19a35cedab88608e0e77a5a9398a2d674b67c46863b92c8d40a2e13b8d5977c
SHA512622beb04846f89508c3a9645a497a82ba8bee8651d15d93e8efdaa1c2324af4b57159c0b84d139c35e14fba70b92eca0dda45616fc87950861e6007c19968aa6
-
Filesize
8KB
MD5e9ad01b820c066a8dc7849f9388b87c8
SHA19baeec9d11e6364c2d122642563936f5baa29f49
SHA256aab7cd31c6cfa4f7527e1908d6228f346f5df7a4f18385705417368e46a77184
SHA5120abc8a7e1d4dbbc03a5f1ef52b9abe70f7b3cc99e002eebac76e5184669098ba3cb14a98a8628e7afe8ab51a71d04c9b7f459711a1a81c74fbb432d45f3118cd
-
Filesize
8KB
MD536627fb0277005e6aa01b1287aa7d5d4
SHA14f68704b40d3f359a189f4c47f817f9c60563fc1
SHA256431cefe4b4caed3068c45f084fe29f4108ab729969b807933c5bfe9610771fda
SHA512aa961095cf665a69fe7139378bb0cc204eac14552a44e54578c5e1dc6476112796f33a2fcc209724d1cf96d7cb5fbd9ebc2cb106dd80972f4abb422925f1e852
-
Filesize
8KB
MD5a2fbfd396c714a62931be7331aa3fa7d
SHA16d65eb9b72aeade944c6e979d293c58a1b556683
SHA25661a3f1f9a12fe5765c6755043be74c32a1b17da471cf98a403e9e0da4a624a26
SHA512f994e2b50b3635b73f47a772fe26af20165d40fd0f7cb59e349cd71779d6419f5f15d58f3f18edfb3441ba6a209c861158531a868cedb39997ce9c767fa0bae4
-
Filesize
12KB
MD57f8493cf997454f1d6b3498291b8b7be
SHA14f2e3b62cc0d9a1685bc71eeea8b883ec0eee4e1
SHA2565cafd575a438e59ef3d782b259acac2f64914caac4d3feff229e8804dfd91317
SHA512f2f179d320e94c1a1a2a2bae160d63f18299f88c4ef400fd6dfbc7925ab4badb15735cd30c7496924f956411a7e23d041b272636673ce536cc416b34b09a494f
-
Filesize
32KB
MD518a58ffcfe5252fc57c13d22b1e4854d
SHA1c2b7661c4e005ae152e984601900506c72d2e51d
SHA2560e950505b5f2d4b99234b45f5157b0f806e2e0c0331e256e83c1c71234e3ccf4
SHA512aad4d2a7a2477d1871eda9b52e751aec700637d4a742247c2ae76be377b0f7ed288ba600cb91ed7e51cf071d196fd274dbac037860e3a9003f1e909d86ccfd56
-
Filesize
32KB
MD54cac7d31fb94d5c9581893537f64c5ed
SHA196bef3288546196ac3058b5eeddbe9da1d999fe5
SHA256d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5
SHA5120ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747
-
Filesize
16KB
MD53ff6126c80c959078efe7d39eae92d1c
SHA13ea25a48714db1742ccd6e36bc0bb3ab95e98706
SHA256147f3a1d7b09998aac7aae89e18450e7f040fb5e954c9006eb4ba29b2a51820e
SHA512234d4f446fc5e3450e73d1d2345acd8df9549b443e6b13d2cee9ad7ebdc4cfd22946535d9f1ea365a90ed15acbf37420c093ce6f3b20fe0b9b103b4fd12d09d4
-
Filesize
16KB
MD5ab28e5ce2450e2e73535484a40cbc28b
SHA124fd542181f0ced1107917edb6162ce4b751e15e
SHA2566e929558d557060b24b559c3e3dc6bcbcb7987089daeef61b44761551e6c13af
SHA5127be8bf3e924143b738013df8038af201ee6584c4282f102a16247f71b40fb0cd0473b016f9e52e93885942c0f6b4ac61eb1b3c4fa078f8d0512786610bcdc5f1
-
Filesize
16KB
MD595122c8b4072784f9ae4e57946baa10c
SHA100e6e9aa0671893786319877227ef4179b695d93
SHA25622c3945fb08dc2a6ec354caa0e3f5fad962de8985098ff73d2bcfa1e5dd2be07
SHA512d7be7a13889431913515933ff162b12aba05e3f4bacd059ed322224e02b63c51f67340fb0f4d73deb1fe3439f711c33d7a0275fd471c0b6f1cc8444a805300bb
-
Filesize
16KB
MD5f2af64c67e2c1290bbcecd97666e83ae
SHA16fc2040351e6d94674246a31bc0b9f962691c813
SHA2561b9e390752cf05fee5f69abf6f7b3a1a232b4ca663a180a15cde3fdacac50eff
SHA512c331d2d75f0cda3936a181ad3588045b1c91f548acc99e07f0e291b913be798df8b2b604380d3202fbaf1f6325ceb6994c069eb283baf4ecc20c4ca334871c80
-
Filesize
512B
MD56b0beb924e2354ad9a973f0a3b9e603c
SHA1c88de896044e8c2ec62b1ab75bb66966a7af4764
SHA256433ee16020726b7d15311c19760d6aa3f583101f084911e988756937234d58c5
SHA51217a46a827279b5a926c84b890b610f26bdc4c63c772661f08d476d3a5b32bda1b1468aaaf5c657485b38dc55f01b2373c223b52561ad70c0889e50a9bb6ecd7e
-
Filesize
8KB
MD50767f5fccb57a44326a4e8a91a5d82a3
SHA18f9da553484c399bd00fe39016e2a07e858a14d1
SHA2560d502dd1731e40c79cd843e07575db64f362deebf801b6d06ef92eaadc4eeef0
SHA5128306484a0178bced2eb439922a647569ce9f024abfad389884b0f4a4bc2cc9838be2f1aa3fc7046a1bdada2116dbdb00cedbaeaf0b9e6453531ad5ec2d7a2eaf
-
Filesize
8KB
MD50b7a9a2a72640c7bc1fb40052f19b455
SHA10d28e1e6f14d24161ae237d53776fcf07ab023a3
SHA2563a103d50a16c095002b72ab033ee5299586034b46607c7a636bda4a96bb537d2
SHA5125fef7712f4e7b19048d06e05afd0346eb4fdec531e7ed4d315179568238367f001fb50b50f37dd77c944c71f3eafcaf35cf5a0098ae378434d53b9260a7c06af
-
Filesize
16KB
MD5026c6ec8b4c00e1a6b1b75c3020c9f57
SHA1fa1a8f0976d1ac288b308f14aa3eab3f995e294c
SHA2565ac24d7c19822635fe189ec8907f33c2c29bb9ee49e7e33ba7e1c72ea81cd452
SHA51289247ba0c25adcc129b1b9cd919bc21d02196aca95c933cfae7e53cdc72ba1c25fefbfc9352aa9ac3fdf0c5f270d92abbc0bc26ac365c855ac242b0a5c4af98f
-
Filesize
12KB
MD58fd13c271810732c1ff75263e9478a5b
SHA1561596865c628b5d78d2ce407bd54e944fa426f2
SHA256b47db892b9614862931c13b222051ff44950a4b6d757eae6afd396d44a2e335e
SHA5123f95dfb971fb12f8c762bd79608d42e010689a44670d4382ed4885a11e36a068afdd41ef28f3aadf1625d07d26695cf7424051326ce214b4068a461144570a11
-
Filesize
8KB
MD5041dc3a8717db368fe324233c02cf7aa
SHA13d61f3418fa18467aa5a0d82b48dfe18ddaf2f71
SHA256ec257660a803ccfbf8afebd9bc585b6cc4efec96631ebb7492e61689d73ba983
SHA512e931230fbaa69e67c26873b4ba947c3bf2d6521ff00363cbcff0f452d2d23b3c45c87b63ce005e4d3c6ec8f668713c284a8fb750593f6bea9b2ad2aab2a7a9b9
-
Filesize
8KB
MD5011c51947c03ad4d81554eaeec2baa02
SHA1dc31133143a4290c37c1f79875d4b6e36d908215
SHA2564d325f2925bb1bed0d7cb782e3a00ca0bd306f4d3a112238326ab49dec863cd3
SHA512e9f048b6444b0662c8fa62e7cf6c0449fe4d40690b9d6c6edcbc2bc80d498c751f6a2f5b14ea09082d612e25e689c19d8364a2ba00e6a0fb9e0ce5570cf37a77
-
Filesize
20KB
MD506e1ec5e94499544fce9b77126210c04
SHA1bef868307bb16b8dcffda267ad9381458c4a09ff
SHA2569048de35a0d3be61da6e82efb3011c5f423344cd8269a5367cfeed010c370335
SHA512f17cdb170eab7d560da85bd73d175f255c5c3770eadcfe8ca68a35b7d0eb09f9cbc03f94144c6262cfdea083a91dc5791f473ae066eb9f8f95bc36bba4bdba85
-
Filesize
512B
MD53f1ad2767562b6bf78dca60189165452
SHA1edd25d4788d1f6a69fb545e6ff5baf3afe23ccd1
SHA256eca00d63e8b6d06c3b9b78f40d2fcbe8506c30f3cf73efe1771b40531faaa01c
SHA5123a9693ba2839ca0e1ffddff05c188b347106024bdc78f9db7bc38b8342be7fc864179843ba8cc2b1dd9a43baa0b318763a15092f36e1e68b651d379723e9d350
-
Filesize
48KB
MD573470bd343cdf03a83c38c2c1faf35ae
SHA1f4cfeebfb958f13187cc3e7fd3ad8f946cfbe171
SHA2562ed48ed4c0823c3746989e56963421629091a38b6d2d7ad03a1e2f7984a073e6
SHA512489cc2fd54129c80282e3cf48bea54ccd0c7285df9ba6df5add3b0a1d02d4a1732ab045567f1c18b4c6b80e743cb9fd530c9c26763a43cbbab1ac1388b353edd
-
Filesize
8KB
MD546e5998fb1591e3cbe3cf353ffd017d0
SHA17d2c7fc141100823c7de9182bad317f13025b815
SHA25624b76c732f943d5f5261ea9f0cc25ba9f8aafde3590667f9fa22d6ed6134d442
SHA512b26ce0a7e6ba3ce24cb38a62c2e5f58f3422c2f7926a3e516a759e9b1afcf2e7933c4c7200400d619b5dde01f8676ff34caf1640acaff8e8bb296c8e6b1dfe12
-
Filesize
8KB
MD574082bbd8fe6378f8da98f1b6e2b33e5
SHA197644a03c75d05139650f6ba166bf5cb2e8fc653
SHA256b535a16645d6b4751a69b4486d7b088cbe94800bbb2c0caa3d96991d9537428a
SHA5129d2ca11472d36e514a1de7fc6a46bb44c597ffdcd552d51deaeed579a34a169f65041e5139ff553f55c9f4831ebe6df89996d5bcb2c13af085a04bfb5a4a033a
-
Filesize
8KB
MD5a638e23050883d3901e10cd8b2ef9dd7
SHA19e08f5b7803f21e5186ba662b601eb457c044e38
SHA25621e5885d5c30c757c3429e4d6cecb3a398802143239090e852b86f3b6aee6f4a
SHA512f7e6eb661a5688c127830b1fb372d86ef6a8d0c9d3bcd02d9ff4f497c7517861e37f6bcbfad4d3738d7b65bd24a2b5ba7859c0f88fc7929bcd661281f7b1cacc
-
Filesize
1KB
MD5d2c1accebefd25f83590317faa0038d5
SHA1109faff188a61848e2651719d5524ebf765c254d
SHA256f1667e53e98d9484c71781be28aa9bf5be4713b99471bf06cbdf65c78522925f
SHA5124cc6e214c822064568c0eb5f7dac55c6da0cf24f0e3eb9f5218918145a17c5df7b0cfa761613700dfaf10f951a3be12f954984868fed6ab9a1a0bc9e3d5058b3
-
Filesize
162B
MD5905a7cd994d5baa5da0861fc07782b15
SHA14606dbde0ad141eb5b2c4031ccf0ffd159877ed3
SHA25689245f2ed5b301a84ea061f100ead390116ae433cb6829f342a0a59aa3afd145
SHA512b9e30a569c78bb59707ee8a4ecf8ee8490ad52e0a825714f7db03ba85119036c33bc4b35b1726b3e30f6db2a3428e642038d0ad2b9b94b117b938a719a61da2b
-
Filesize
58B
MD525d4354d8a62d6cdf06590ad9002ef59
SHA12e0d5f76710fff204a89d7f8de0463c8589154f5
SHA256ced724c31f0091685cb504c26b5836b360bb6ab37aadabda4b7395751d6e03ac
SHA51240d3941b8923da8e334f649fec8406c62560a1800b4c0c2aa27b4af2a988bb03bcde4c9d2e6d02e2d9fe6cb64f00dd1743b2e318e2863666d19b92134ce2d5f4
-
Filesize
350B
MD512fec398460cd64a8719d1c5175a05ed
SHA1d80c17463aba2877a8277c389358a513018c26b6
SHA2564282ff2b6970cb01a362d5f8979d8344b3f63f6493255de56133373eb898fb82
SHA512ea48048982b857e5718c48e02454d0f50bc6104b0dfa1e61d9be0f82d1bffa3c137f90de81abb47f925472fe343bcfc632b3dd7c43ffdfe7d0cdd4a5efccd7d2
-
Filesize
5KB
MD50abba7b3d90eb464ecd4caad1689ff42
SHA1ef23034f1dc410311d62c8590db97f00479a5b71
SHA2563fd80c73a35ad3b72d5ba6cd154af89b183e7c8636575531785e1b4e395dab7a
SHA512f090aec17a24c5f75b1679806f5ae991bdc2a8bafb842b8e55c1dbd7685cdf1bcaa64e22d3ef689bd26528779b48c3fc24facbc326df535092a32974bad699f7
-
Filesize
158B
MD554e182a175674a3de0f3338b4e7048f5
SHA16dc81e46baf16bb43dd8e165ff18b1f080e08045
SHA256f312a04dca3904e893f5b329bba57f444b6d47864e8b31a55d0e1104e79c05d7
SHA5125a92480b1d6818f5a2e4099ecf4ba5261ae8905e393cf66191e6ba66a5b44df59cb1826b92a39684c3ecf12d6d9d5d8fda539269adb0fa44f268288710dc4e59
-
Filesize
96B
MD5a6469afeb62482a9238288ac9c1d6de5
SHA16b168825d4d6a508635959787d996759a075affc
SHA2560875dfb56aa1c9125684243401ce50aa8dbe16c6bb22c0cf1c48c1a1122051a1
SHA5126becae8f8099a5c4ccbf95e72b7413f21530ef909d251079b1b5268e6c66c9a3ea56328587555c79cddc2e81c1701c26bcc88f6c7bb94467e38a14c09bb4fa60
-
Filesize
94B
MD5ae3316f2395a75788198d5280341a774
SHA1802dc5e1971018045915e136884ebe4737580dcb
SHA256bb13d52f4a2101be2480c726be790aa0dea151621dcaa10282865c9110685d1a
SHA512b4587115ac0c543bf8034b4e23e4192e1b61be9bdbbb353bd29aa3abd05bcab733f9a3c53ddfd28928d6bc614def89418256da0c95f585b72b74e1cbab67db9c
-
Filesize
140B
MD50edc1c6393f5bf395e27de0da274a804
SHA1d01ab037cf1190a3373713db23f5193de88972f9
SHA256f984c2fedee4dc1c3ce97c1cc0ed65f3d1e305a03d2e40cd58ed307acea861ba
SHA5125f635c03906f2daddca9c334f2651ab288461aff9a959cbb52dcfd8f5970b95679f0ea4ed462a68859332bfa97318c392a8b9618e57449e32e396c4b54a96394
-
Filesize
143B
MD584ce51f3b7ede2b13a2a1d5d6a935d36
SHA1cadbf7b43079dfa17bc2df55451444e323e071fe
SHA2562d0cca624b6f05bcb1ab1283c1670be264d530c345441cabcc9018925e1ed18e
SHA5123e815a9efe06d194556daed990cb4da1eb1622a4a9689295f37f32a50ba6e252cadf51a90ef6ce8bdec05cd455d62a4f31fd5a3eef773262c0764b043b5ae71a
-
Filesize
161B
MD58b2e01fda86bedcc5a3db5a4affb43aa
SHA1f90f8a3d19b77a0eac3118aa5a632ede775ed231
SHA256a936fbac61e8fefc602803820974d821bea4a97ecde77cf8e0f1bf3c4bd8da05
SHA5129e89f1a8c29e0d248d0783371b8764db4ffdd4b38ccc34583f3fb772ddcb9fcfe1107ce5a87b0ee012b8398ae21c2654d77d8ca4e88f1bb2017d87a690b4a75b
-
Filesize
8KB
MD56728f4bbd2313e22275212ab63030a9b
SHA13c0de215154fbee4aaf9a6997e5854315ea1749b
SHA256200713e2c80e0e859dd9f94bd15e8f2f0bd7b07305f12a443a0c0651ace80e5c
SHA5124013ed305bb50c0530a918685b766d56ef806e948c58986d72182cb9b72aec84de4cdda3deb47c212ca791dd8d3d58bf5366c28b26ebf0ada965260b99cc8518