adb5a810346d31dbe7d239b790448ab07e219d4cf364bf4aa65612c7c60dc9d0

Analysis

max time kernel
123s
max time network
151s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
09-05-2024 00:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
Size

10.7MB
MD5

2777b5945af6abf74f1168caf41d0ee6
SHA1

a56b903d9725f377c8dbfc019307f468483b822b
SHA256

adb5a810346d31dbe7d239b790448ab07e219d4cf364bf4aa65612c7c60dc9d0
SHA512

6dcd9a790135c0302d754fd64198b33eab029d8554dc14dfba67fafdb0d598dec5658ebdfe81bbdeb63db6d2dbeba4c4b19cc2997350881cc030a503f90b6723
SSDEEP

196608:Hfa6cOHBsyQe/6IAIo/nkeISIWP1QwNdczpbSxv3kENAbIg4R7B1:HphsyQDIoPkeNQwMzpuv32bI5T1

Score

8^/10

banker collection discovery execution persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests cell location 1 TTPs 2 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	ir.fateh.football
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	ir.fateh.football

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	ir.fateh.football

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	ir.fateh.football

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ir.fateh.football

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ir.fateh.football

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	ir.fateh.football

ir.fateh.football
1⤵
- Requests cell location
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
PID:5059

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/ir.fateh.football/databases/__pushe_base_lib_db

Filesize
24KB

MD5
c62dd7d3a6192ac96a572d6dc8657ccc

SHA1
2414a0586c42c84fde006cf101994f304f89f8d4

SHA256
8917197bd3879569164b9f30fde9bdd1f8e8369cb1e0fd081905a2bc37f3ab69

SHA512
ff4806f00fb8d58ed4a4ebf98355cbe4d884472e4d76f64263ca26ce163be05c936d13af6806d5dc2f6b9e1cd8b2ca46d38ef66c92625a24eaf8a604611e24a0

Download Submit
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
e70ea60ffad6481f4cc7e04f18f637ac

SHA1
3262d35307b06d19a95257de7ccdc2e48750e816

SHA256
482e69600de88a3521c570433604dd8445a041f865fb874df2331e82059e68ee

SHA512
ca868b48cbb090ad932a4f6da21a4e6bf25deaf6f9b81aeb5b3cd4980397dca91aa57d77d30098708baaa0803c0133d7d8d1d60ba6e73489e936a2b3d0210f96

Download Submit
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
512B

MD5
266ff2d46c1eedd438196304dac6b716

SHA1
b2fd4cf228d71f25f1bd9870aa95ac584bb7cfba

SHA256
af9b3285a0ede66972bcba81d164288d1bd5b84aaa042356ca3d37a893880f43

SHA512
2272e5d1fc5e497a313de43fdc0375b25bab39d55372d337244658b88d761d2f8abd2a8c9dc9499b6035c70c72ca605438e577341645aa94edc80fbd8c2c2ade

Download Submit
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
d8c847a5bb0a9da76a4077354429da38

SHA1
5bd8b035c4ad8129640b3e764a96b161c17920f9

SHA256
6dfe8c7766a9d09ca31adc21034b6f0ee1ef873bc0b29d010453591f46e559a9

SHA512
b32d65b83ace279f0e3c548854eeb208bdf615028656f91d04dfe100bafa300f470c59716df798a221a0289c35c4b01682b41a06aa175f649332cc34c5b09088

Download Submit
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
1463f634f908bab726693df7fa4178a7

SHA1
1629ceb1c2b3613494bbcd34af3018fde18ea706

SHA256
8e2fc6cc7fbb95848992e86b92105b0e927b719093ebfd500abd1c1a4cf05037

SHA512
f7a9972867f62c9d96e896f499b4d8fda7f5c63b027bf9b5e08c4f2cdb3888472334d0b86ca67522e50858ff2326bbc42752e9af372b1c644dc2fa2952fa77f7

Download Submit
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
24KB

MD5
18f24eff56abecac3d79fd96bddc9e59

SHA1
0ab325e7b8b4ad77e28ca390556117f8870d9710

SHA256
e571e0f558ea05d04ecbd2948b8b3a7b90d6967d42985b14befa4bcd6f8a14a2

SHA512
76818f3bbdc876ec3312eec93a433240d4ab0958c4e648dc10d7b99e4b03da36c975f5f354521f104b8bca06e8f595a4e6bb9f4fdaabb6570314cd786aafbb2d

Download Submit
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
99b64f233b07bdbcbefc5ca58ae1b4e1

SHA1
d85282c16722df9aedbb5a59883145e8f0c0994e

SHA256
30558705741afa77daeae9862eebc4739a949b1cb907470c0c8ab88b7a255a74

SHA512
3d30a8a1e71fb4cc9d9c378b0f4dcb8cbef20ee4a7c88a0691fac987bf8ed801122d8ea3ff119fb5b5e5fe923e4d79b1e5b45a94492491354f9e8463a24415b2

Download Submit
/data/data/ir.fateh.football/databases/evernote_jobs.db

Filesize
16KB

MD5
80a0c85546da9d895eded1d674efa5c2

SHA1
efb6f1c8354bf164f5a8dda37db4b16947a54de3

SHA256
24f8439dfeb917d2a7eb86e9fd79d73e1a485f802def25f41bc221ace424a6ec

SHA512
7bcdccc0b27f790fef05e09261ed69569a224a24f3a2c34db32074432f58151997b227adae063056efed29c32e36d093914ab7971b0208e1c3209c538aa347fa

Download Submit
/data/data/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
26a877125d446e1b5b6045339e5bef86

SHA1
fb3e73985e607f4bc5ff33d63113923623db3962

SHA256
3a5550453e655b8994b254904cb47e5cad53076f0e0d1dde35b09d22defeba25

SHA512
b9bef166743893a0a5364bf6edf37136572dd323066a78bb5d6612a244ddec01bd4e32c019670d610d8f7155ea7c69392727babea627f38cbbc61e7cfc5b2d54

Download Submit
/data/data/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
5a177d3675e4b85cfc1488b49ffeff49

SHA1
3bd8ddb59097473a186b15876ca90ca8e3f60f6f

SHA256
417cd8bfb375768d0d63477658dcb113149dd6ed0245aaff2b8e77cf688e8780

SHA512
9612574ae7a86792eba0ce259eaecf73f3f9cb41c38fe5eae9277b715eca2de90dbb11648a106f071d9853ebf4b376ae6a18ef0111f538c6790c39dc4926ca3c

Download Submit
/data/data/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
ecdc72cd9b306fa15b2deecf82acfc9b

SHA1
5ec4cd831649194bd7433404111e81d270b18a24

SHA256
f5d3eddae8c001f9251b14c01dcf97543ebbf767aa5eefee1d550f03a58a1e73

SHA512
f528cea6e03ecf86a806dace56321c22ae7177348605c89292f8e274e406d2451b8f22f180faca68cd148be6f4c310d2d546940a17c3e3cabc452282f0219834

Download Submit
/data/data/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
512B

MD5
93405014cc364aa0580a6159536522ad

SHA1
b5e6915919e4ceb201ecee19bdec1ea7539f3c6a

SHA256
df4a7ca601c6e6a8b8468a20dadbc2272a4e1a45cf10121b1aad2758cb95821c

SHA512
51d734d9b076c6e192348896541f3ab5615de56cf6ceae7ee42ad29dde7b26f0b69c413ce9b76aa53e9f868480e6aeaf6d4f627a31814a6f10a8b0da146e3afb

Download Submit
/data/data/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
cd94ea20a51b449ef4916986dcb19ca6

SHA1
4bf0a525f329904f79b8c3a12442d347917fb28a

SHA256
e42376aee33a127f651405016154ff72b6025edf0deadb4bc66058e3c8a8ec74

SHA512
3dd55f3e36859e892b3607327b1daf5f734a0fb1d19ffc33bc2934d24b8094f360bdb38ae5ec1c6c97fed73d79dda8d543fce15a40e354c7f022a864c5d35b25

Download Submit
/data/data/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
db552aeb5b7f3dec45a833395461d45e

SHA1
e85a6fca0d8fbff624eeb63d6436e3be06918f5e

SHA256
e17495e7cc595ce00d4cd21584993ea476c2794d1a00899a678117f94c46980c

SHA512
21de20eb3c15bd934f93aae2aed6c5166534ba5b9e28a3aa1b1d63c11446a536dd1955d1f17adbc101af8ef727cce16ce0a036cc3577f1c99757d0be6f62abb9

Download Submit
/data/data/ir.fateh.football/files/fonts/bkoodb.ttf

Filesize
58KB

MD5
2be5d53bd9404008e505c403b2af6d9c

SHA1
ee393eeb3e8cc8338126367a6dca01fe1a2569d3

SHA256
5fd93a626bda3e75f0ee6ce429f15acbd32cc5278b1d1d6fcf25a64ec693efc4

SHA512
df7da6e9bb2d10e421930ef70b7d943d2f983134cf9436723d203e79d4141ae283e032df2e6b4cb808d62f3ceaa3885b53a3e8e1e4bbe7f49833fff6ab493e73

Download Submit
/data/data/ir.fateh.football/files/kalamat.db

Filesize
25KB

MD5
c32496c248e431de9bb60af0e9a8657f

SHA1
e342b95a0b685646c3587dd47d972e8ff6ad1b86

SHA256
8cfef21c3f5ffc2dd6649d5218cc12b3c7543a4bd9f5f0555b49960a9bc5847d

SHA512
44d6969518be2b6a56f4edb536cd36d56a6eadc4a4eb5b895d19afbc676272b0a1e4b04e356e1404ff1208944060ccf835146f8d1958121f98794928822e4197

Download Submit
/data/data/ir.fateh.football/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
949bb94660d5089ee107f9be46960a18

SHA1
62a432f3b77b2a12ec716bc9926de24b6e7e17f9

SHA256
e970f6a7c43cb0d5035c252d7bb28694b9cd114b92036fad2153a1a57b37b9eb

SHA512
403caa6cb33a680fcc1ba33f5f753f25a847fc02d6e85dae22f97e752701444ae774a64aea13500430854df8773c038492a8c8a2873cf4705f2fd052a2ed6090

Download Submit
/storage/emulated/0/Android/data/ir.fateh.football/files/Magnet/close

Filesize
2B

MD5
e0aa021e21dddbd6d8cecec71e9cf564

SHA1
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7

SHA256
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3

SHA512
900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads