Analysis
-
max time kernel
123s -
max time network
151s -
platform
android_x64 -
resource
android-x64-20240506-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system -
submitted
09-05-2024 00:39
Behavioral task
behavioral1
Sample
2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
-
Size
10.7MB
-
MD5
2777b5945af6abf74f1168caf41d0ee6
-
SHA1
a56b903d9725f377c8dbfc019307f468483b822b
-
SHA256
adb5a810346d31dbe7d239b790448ab07e219d4cf364bf4aa65612c7c60dc9d0
-
SHA512
6dcd9a790135c0302d754fd64198b33eab029d8554dc14dfba67fafdb0d598dec5658ebdfe81bbdeb63db6d2dbeba4c4b19cc2997350881cc030a503f90b6723
-
SSDEEP
196608:Hfa6cOHBsyQe/6IAIo/nkeISIWP1QwNdczpbSxv3kENAbIg4R7B1:HphsyQDIoPkeNQwMzpuv32bI5T1
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell information.
Processes:
ir.fateh.footballdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo ir.fateh.football Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.fateh.football -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
ir.fateh.footballdescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults ir.fateh.football -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
ir.fateh.footballdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone ir.fateh.football -
Acquires the wake lock 1 IoCs
Processes:
ir.fateh.footballdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.fateh.football -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
ir.fateh.footballdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.fateh.football -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes:
ir.fateh.footballdescription ioc process Framework service call android.app.job.IJobScheduler.schedule ir.fateh.football
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/ir.fateh.football/databases/__pushe_base_lib_dbFilesize
24KB
MD5c62dd7d3a6192ac96a572d6dc8657ccc
SHA12414a0586c42c84fde006cf101994f304f89f8d4
SHA2568917197bd3879569164b9f30fde9bdd1f8e8369cb1e0fd081905a2bc37f3ab69
SHA512ff4806f00fb8d58ed4a4ebf98355cbe4d884472e4d76f64263ca26ce163be05c936d13af6806d5dc2f6b9e1cd8b2ca46d38ef66c92625a24eaf8a604611e24a0
-
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
8KB
MD5e70ea60ffad6481f4cc7e04f18f637ac
SHA13262d35307b06d19a95257de7ccdc2e48750e816
SHA256482e69600de88a3521c570433604dd8445a041f865fb874df2331e82059e68ee
SHA512ca868b48cbb090ad932a4f6da21a4e6bf25deaf6f9b81aeb5b3cd4980397dca91aa57d77d30098708baaa0803c0133d7d8d1d60ba6e73489e936a2b3d0210f96
-
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
512B
MD5266ff2d46c1eedd438196304dac6b716
SHA1b2fd4cf228d71f25f1bd9870aa95ac584bb7cfba
SHA256af9b3285a0ede66972bcba81d164288d1bd5b84aaa042356ca3d37a893880f43
SHA5122272e5d1fc5e497a313de43fdc0375b25bab39d55372d337244658b88d761d2f8abd2a8c9dc9499b6035c70c72ca605438e577341645aa94edc80fbd8c2c2ade
-
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
8KB
MD5d8c847a5bb0a9da76a4077354429da38
SHA15bd8b035c4ad8129640b3e764a96b161c17920f9
SHA2566dfe8c7766a9d09ca31adc21034b6f0ee1ef873bc0b29d010453591f46e559a9
SHA512b32d65b83ace279f0e3c548854eeb208bdf615028656f91d04dfe100bafa300f470c59716df798a221a0289c35c4b01682b41a06aa175f649332cc34c5b09088
-
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
8KB
MD51463f634f908bab726693df7fa4178a7
SHA11629ceb1c2b3613494bbcd34af3018fde18ea706
SHA2568e2fc6cc7fbb95848992e86b92105b0e927b719093ebfd500abd1c1a4cf05037
SHA512f7a9972867f62c9d96e896f499b4d8fda7f5c63b027bf9b5e08c4f2cdb3888472334d0b86ca67522e50858ff2326bbc42752e9af372b1c644dc2fa2952fa77f7
-
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
24KB
MD518f24eff56abecac3d79fd96bddc9e59
SHA10ab325e7b8b4ad77e28ca390556117f8870d9710
SHA256e571e0f558ea05d04ecbd2948b8b3a7b90d6967d42985b14befa4bcd6f8a14a2
SHA51276818f3bbdc876ec3312eec93a433240d4ab0958c4e648dc10d7b99e4b03da36c975f5f354521f104b8bca06e8f595a4e6bb9f4fdaabb6570314cd786aafbb2d
-
/data/data/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
8KB
MD599b64f233b07bdbcbefc5ca58ae1b4e1
SHA1d85282c16722df9aedbb5a59883145e8f0c0994e
SHA25630558705741afa77daeae9862eebc4739a949b1cb907470c0c8ab88b7a255a74
SHA5123d30a8a1e71fb4cc9d9c378b0f4dcb8cbef20ee4a7c88a0691fac987bf8ed801122d8ea3ff119fb5b5e5fe923e4d79b1e5b45a94492491354f9e8463a24415b2
-
/data/data/ir.fateh.football/databases/evernote_jobs.dbFilesize
16KB
MD580a0c85546da9d895eded1d674efa5c2
SHA1efb6f1c8354bf164f5a8dda37db4b16947a54de3
SHA25624f8439dfeb917d2a7eb86e9fd79d73e1a485f802def25f41bc221ace424a6ec
SHA5127bcdccc0b27f790fef05e09261ed69569a224a24f3a2c34db32074432f58151997b227adae063056efed29c32e36d093914ab7971b0208e1c3209c538aa347fa
-
/data/data/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD526a877125d446e1b5b6045339e5bef86
SHA1fb3e73985e607f4bc5ff33d63113923623db3962
SHA2563a5550453e655b8994b254904cb47e5cad53076f0e0d1dde35b09d22defeba25
SHA512b9bef166743893a0a5364bf6edf37136572dd323066a78bb5d6612a244ddec01bd4e32c019670d610d8f7155ea7c69392727babea627f38cbbc61e7cfc5b2d54
-
/data/data/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD55a177d3675e4b85cfc1488b49ffeff49
SHA13bd8ddb59097473a186b15876ca90ca8e3f60f6f
SHA256417cd8bfb375768d0d63477658dcb113149dd6ed0245aaff2b8e77cf688e8780
SHA5129612574ae7a86792eba0ce259eaecf73f3f9cb41c38fe5eae9277b715eca2de90dbb11648a106f071d9853ebf4b376ae6a18ef0111f538c6790c39dc4926ca3c
-
/data/data/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD5ecdc72cd9b306fa15b2deecf82acfc9b
SHA15ec4cd831649194bd7433404111e81d270b18a24
SHA256f5d3eddae8c001f9251b14c01dcf97543ebbf767aa5eefee1d550f03a58a1e73
SHA512f528cea6e03ecf86a806dace56321c22ae7177348605c89292f8e274e406d2451b8f22f180faca68cd148be6f4c310d2d546940a17c3e3cabc452282f0219834
-
/data/data/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
512B
MD593405014cc364aa0580a6159536522ad
SHA1b5e6915919e4ceb201ecee19bdec1ea7539f3c6a
SHA256df4a7ca601c6e6a8b8468a20dadbc2272a4e1a45cf10121b1aad2758cb95821c
SHA51251d734d9b076c6e192348896541f3ab5615de56cf6ceae7ee42ad29dde7b26f0b69c413ce9b76aa53e9f868480e6aeaf6d4f627a31814a6f10a8b0da146e3afb
-
/data/data/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD5cd94ea20a51b449ef4916986dcb19ca6
SHA14bf0a525f329904f79b8c3a12442d347917fb28a
SHA256e42376aee33a127f651405016154ff72b6025edf0deadb4bc66058e3c8a8ec74
SHA5123dd55f3e36859e892b3607327b1daf5f734a0fb1d19ffc33bc2934d24b8094f360bdb38ae5ec1c6c97fed73d79dda8d543fce15a40e354c7f022a864c5d35b25
-
/data/data/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD5db552aeb5b7f3dec45a833395461d45e
SHA1e85a6fca0d8fbff624eeb63d6436e3be06918f5e
SHA256e17495e7cc595ce00d4cd21584993ea476c2794d1a00899a678117f94c46980c
SHA51221de20eb3c15bd934f93aae2aed6c5166534ba5b9e28a3aa1b1d63c11446a536dd1955d1f17adbc101af8ef727cce16ce0a036cc3577f1c99757d0be6f62abb9
-
/data/data/ir.fateh.football/files/fonts/bkoodb.ttfFilesize
58KB
MD52be5d53bd9404008e505c403b2af6d9c
SHA1ee393eeb3e8cc8338126367a6dca01fe1a2569d3
SHA2565fd93a626bda3e75f0ee6ce429f15acbd32cc5278b1d1d6fcf25a64ec693efc4
SHA512df7da6e9bb2d10e421930ef70b7d943d2f983134cf9436723d203e79d4141ae283e032df2e6b4cb808d62f3ceaa3885b53a3e8e1e4bbe7f49833fff6ab493e73
-
/data/data/ir.fateh.football/files/kalamat.dbFilesize
25KB
MD5c32496c248e431de9bb60af0e9a8657f
SHA1e342b95a0b685646c3587dd47d972e8ff6ad1b86
SHA2568cfef21c3f5ffc2dd6649d5218cc12b3c7543a4bd9f5f0555b49960a9bc5847d
SHA51244d6969518be2b6a56f4edb536cd36d56a6eadc4a4eb5b895d19afbc676272b0a1e4b04e356e1404ff1208944060ccf835146f8d1958121f98794928822e4197
-
/data/data/ir.fateh.football/no_backup/com.google.InstanceId.propertiesFilesize
2KB
MD5949bb94660d5089ee107f9be46960a18
SHA162a432f3b77b2a12ec716bc9926de24b6e7e17f9
SHA256e970f6a7c43cb0d5035c252d7bb28694b9cd114b92036fad2153a1a57b37b9eb
SHA512403caa6cb33a680fcc1ba33f5f753f25a847fc02d6e85dae22f97e752701444ae774a64aea13500430854df8773c038492a8c8a2873cf4705f2fd052a2ed6090
-
/storage/emulated/0/Android/data/ir.fateh.football/files/Magnet/closeFilesize
2B
MD5e0aa021e21dddbd6d8cecec71e9cf564
SHA19ce3bd4224c8c1780db56b4125ecf3f24bf748b7
SHA256565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
SHA512900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874