adb5a810346d31dbe7d239b790448ab07e219d4cf364bf4aa65612c7c60dc9d0

Analysis

max time kernel
123s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
09-05-2024 00:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
Size

10.7MB
MD5

2777b5945af6abf74f1168caf41d0ee6
SHA1

a56b903d9725f377c8dbfc019307f468483b822b
SHA256

adb5a810346d31dbe7d239b790448ab07e219d4cf364bf4aa65612c7c60dc9d0
SHA512

6dcd9a790135c0302d754fd64198b33eab029d8554dc14dfba67fafdb0d598dec5658ebdfe81bbdeb63db6d2dbeba4c4b19cc2997350881cc030a503f90b6723
SSDEEP

196608:Hfa6cOHBsyQe/6IAIo/nkeISIWP1QwNdczpbSxv3kENAbIg4R7B1:HphsyQDIoPkeNQwMzpuv32bI5T1

Score

8^/10

banker collection discovery evasion execution persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	ir.fateh.football
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	ir.fateh.football

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	ir.fateh.football

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	ir.fateh.football

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ir.fateh.football

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ir.fateh.football

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	ir.fateh.football

ir.fateh.football
1⤵
- Requests cell location
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
PID:4946

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db

Filesize
24KB

MD5
90e4cdafce3be6428f67f2de8f6ce4fc

SHA1
52dda115f6140ddd07a3b6ca45d2d13455d2e73b

SHA256
269f67ec77b2cbb949861f74afd8fe5385d6f16a47dd48e65c074b3328e1e329

SHA512
811836a2e3411007c1f183a4f6d85b5ee0a3ca0a4f969925c215ce9f7ddb04b296fa1222210dcc7018839f18a8456320e5797d6dad1e704b30bd68ca9cfdedb2

Download Submit
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
8995e025b1ccd4aa672b281cb1a6664a

SHA1
d8e87484d1099ef209569fe6c31912cdbcd48e84

SHA256
e2e5b0a2b3cf4f837e8cc60b1b80e95a08db162ddc669885664b9f2dcdd14b8f

SHA512
1601992959dd80c473de7fa6005220d17aa6b4f768618db70f3f3b70edd3386374fbf94b04be1b4493384039392ad590402cf5f100d5d1fcbed0d3f9fda9a57d

Download Submit
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
512B

MD5
e1726a5d1716c594bc0cf62f1cad1bc1

SHA1
4e6aba7e56020e7f4ec4ac5e757911fd1cdf25e1

SHA256
23e4b2748be9842f97710505c40634b240231b5fe267d7442663ae9310b62765

SHA512
a4c74c7b4cfcbb974dc42d52b46f48b271ba7f64815ba3f99f693348c5c54910972535887a56e4cc3964bef77fffbeb1fac5acc2c7c1bb5a5c3b3a3cc1bc6971

Download Submit
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
669e0ffc87bfb3e811520f2f76eb0a77

SHA1
3e0d07063f280051a4a5753f1187d782dbe95cca

SHA256
f6540ba0cf88582e93e6cf4bf19775c50004a230063733e29ea9ca44e5cf1fb2

SHA512
ab8c42b7247d84a7d02dadbed687e2723b2b8bd21ce3a4d19bd62dec93bcae3fbdd2d03a3010edf985129bd082569b1d082e410ae847611084be5f49317376d0

Download Submit
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
9f5ce21b6e6a33ea062883fb9cf78e50

SHA1
c7b516b1750fdf9b9ee5932267f5964d0dcf6a6f

SHA256
66a74333b3d1a14d4082fdc1b9e353a3c893c0119ba401731345496c6814d524

SHA512
1bfa77013eb6ea0de1427ebbb2a17691e51edd827e92dede2a1a4d4cd96464b7ad2808d8ee25d217ace4f2ad8e72a8b78ce7bbef702a99b0a4c2bfc42dde980d

Download Submit
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
24KB

MD5
7a42d2562bd25a10a0e9e631c0ed6d29

SHA1
6e7d892797ef45d5fc284e362947c9af17816852

SHA256
7cd8dc798a4540d5dc6fd928bf6ee5b7124447331b62267c4ca05d1032077ef1

SHA512
4f45f9904e22b7144f60906af5e8831e40a87534e21eebd7bf93915adfc4b0b63faf727a7c0c58f94d441630d1db61f7357953e8331bb674d6fcfdbb6b034a0a

Download Submit
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journal

Filesize
8KB

MD5
2943278593804707abaa37287f80240d

SHA1
93d364c69d41f80b4675d0334a5aaf7179d7c86a

SHA256
fee7b6ac4a2702de00886a65a30b5bd43b4de49316445a91e0a4c532b5ce9fed

SHA512
76d7b6e68e5b2798cb3711b90255b7594b61731250f083dfe4c2cb8fd3c5e882f23ae218f87a42057c37adacca5d0df86172d3bd540968b53f270834c71f8cf0

Download Submit
/data/user/0/ir.fateh.football/databases/evernote_jobs.db

Filesize
16KB

MD5
3daa885828fae96b2b414a784f53826d

SHA1
a571ab90c543f60a4cc8d2d77cd93e26aa4edfbb

SHA256
5ed282c85a7f6e29a72536eb791373587c310b5ba23c4d5a9475e6e82c0ac619

SHA512
f579dd2e44eb7455d9a1f009d050f5b778e768678bd0cc61af8cd4f4ca81394e763ea14437b410f1481fcb9898cbd019f333e27c592680a28842f1439569bfb0

Download Submit
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
3c3ad74c55915d9c8620ba1c21f4c28d

SHA1
a88cb39439de59b3d1922b5e0419e17be0aee6ec

SHA256
27e1a94047dff1a0f47be5f53681e68fe3fc057aa840c36aac54837087dd278a

SHA512
74486e20fc67678b06e6cd27d78f680e1533a3ac01c3c52e7f01eb76daf06e5078874c00d62f3d161dd546b429e432f5ad599c9d29cdafdf5e6d308aa041b312

Download Submit
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
8fef1b2bcc5e27bf45261817600ad454

SHA1
7a376ecd56145f1c52594bd65423b9066ea904d1

SHA256
fd835a5d00e8c90e52cf2d22bb286eaeb2e1d095e2e44772b86591414e2a794b

SHA512
2dbe8b9df82f454bcf37f71873a1177f5a7ddbe19bb48f722a45f3580d16878a7dabc763df08d171e6e5e3fa030d5a406af816344c2eb5122e762343dc3d432a

Download Submit
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
ff3f7534dc268ed820c124aeae2c7154

SHA1
4182916a0a130757f5ce79d1458e06c14612a685

SHA256
ffaae58ea40baa1a7bdb96ff434b20a8f5ba4f5371f10b0568da4b13f398de61

SHA512
2d8517886c5307d2490f246ebf822c78956bc52af2ccad464fd91614bc05e803a08ddaa28e955bd056b340d1738e4082c71cf9f3552661a0d17ed1533827ca76

Download Submit
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
512B

MD5
6bad185f069201024840bfe4ff331c21

SHA1
93b4b643338fde7e6c1e9fa4a38e8630edb748a5

SHA256
677ffd90a9fa81ed6d25f4fe9a2c9802c7f9dda64d6294ea71ce0869b0eefa90

SHA512
eedb38a32c71ca01ac45d281cc35f57cf8302de42781da44c3bfe06cb20c0e2a95d2b41b99afe8668058006f65635cbc42a47b8a7ffc642758fb0c665e65497e

Download Submit
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
2a34f2c8f48813ded4e5f92a2332fcdb

SHA1
ebbb3cf14a33b597e6655a993514d36a1c7a7056

SHA256
3874a79e601aa14b08b4e11bc8695f3d1653e2ea92e9d0064531dc434f1eb982

SHA512
7aff77c3fdd1d06a40ad875859deca43672803101f1c1f5177616daa2a35d35d9d5b0e513363296527260a7495287e2ec3c40e60019fdd8218da5ddc7f204890

Download Submit
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
3147ef946669ba20017f6eea2babd55c

SHA1
5905c6eb6ce1e8e8b567a00b76272ce4fcfe1ae4

SHA256
ea719ca4f3c28881beaf4bf66909ad1fddf68da9d9e87f229e5876353d545fe3

SHA512
e0201f1bb069e4abb8fb69ca53385e5e9631979e2273d01cd03ee7af870413f3858662d3d376c5b23d2487f7c50874bdd9c5b04429b29a9e22b1dafe7046bf64

Download Submit
/data/user/0/ir.fateh.football/files/fonts/bkoodb.ttf

Filesize
58KB

MD5
2be5d53bd9404008e505c403b2af6d9c

SHA1
ee393eeb3e8cc8338126367a6dca01fe1a2569d3

SHA256
5fd93a626bda3e75f0ee6ce429f15acbd32cc5278b1d1d6fcf25a64ec693efc4

SHA512
df7da6e9bb2d10e421930ef70b7d943d2f983134cf9436723d203e79d4141ae283e032df2e6b4cb808d62f3ceaa3885b53a3e8e1e4bbe7f49833fff6ab493e73

Download Submit
/data/user/0/ir.fateh.football/files/kalamat.db

Filesize
25KB

MD5
c32496c248e431de9bb60af0e9a8657f

SHA1
e342b95a0b685646c3587dd47d972e8ff6ad1b86

SHA256
8cfef21c3f5ffc2dd6649d5218cc12b3c7543a4bd9f5f0555b49960a9bc5847d

SHA512
44d6969518be2b6a56f4edb536cd36d56a6eadc4a4eb5b895d19afbc676272b0a1e4b04e356e1404ff1208944060ccf835146f8d1958121f98794928822e4197

Download Submit
/data/user/0/ir.fateh.football/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
2311cf60b52785915446cb5010c94f2d

SHA1
7e176551f57409c4fd8274a0e76fdcbc96187336

SHA256
2e85a80ff46651053be6999ddcca908f32591473112902fc0281a6fbd439a3b5

SHA512
ce4cdc4e8e4af4075255fbccd2c3865a25953cbd51e833c69bf3536bd3b776f47bb517f340053d6d741e08fc6caa86d5fe4346b850c7fcc300259cc94d6eeba7

Download Submit
/storage/emulated/0/Android/data/ir.fateh.football/files/Magnet/magnetLogo

Filesize
2B

MD5
e0aa021e21dddbd6d8cecec71e9cf564

SHA1
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7

SHA256
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3

SHA512
900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads