Analysis
-
max time kernel
123s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240506-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system -
submitted
09-05-2024 00:39
Behavioral task
behavioral1
Sample
2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
2777b5945af6abf74f1168caf41d0ee6_JaffaCakes118.apk
-
Size
10.7MB
-
MD5
2777b5945af6abf74f1168caf41d0ee6
-
SHA1
a56b903d9725f377c8dbfc019307f468483b822b
-
SHA256
adb5a810346d31dbe7d239b790448ab07e219d4cf364bf4aa65612c7c60dc9d0
-
SHA512
6dcd9a790135c0302d754fd64198b33eab029d8554dc14dfba67fafdb0d598dec5658ebdfe81bbdeb63db6d2dbeba4c4b19cc2997350881cc030a503f90b6723
-
SSDEEP
196608:Hfa6cOHBsyQe/6IAIo/nkeISIWP1QwNdczpbSxv3kENAbIg4R7B1:HphsyQDIoPkeNQwMzpuv32bI5T1
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 2 TTPs 2 IoCs
Uses Android APIs to to get current cell location.
-
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
ir.fateh.footballdescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults ir.fateh.football -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
ir.fateh.footballdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone ir.fateh.football -
Acquires the wake lock 1 IoCs
Processes:
ir.fateh.footballdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.fateh.football -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
ir.fateh.footballdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.fateh.football -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes:
ir.fateh.footballdescription ioc process Framework service call android.app.job.IJobScheduler.schedule ir.fateh.football
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_dbFilesize
24KB
MD590e4cdafce3be6428f67f2de8f6ce4fc
SHA152dda115f6140ddd07a3b6ca45d2d13455d2e73b
SHA256269f67ec77b2cbb949861f74afd8fe5385d6f16a47dd48e65c074b3328e1e329
SHA512811836a2e3411007c1f183a4f6d85b5ee0a3ca0a4f969925c215ce9f7ddb04b296fa1222210dcc7018839f18a8456320e5797d6dad1e704b30bd68ca9cfdedb2
-
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
8KB
MD58995e025b1ccd4aa672b281cb1a6664a
SHA1d8e87484d1099ef209569fe6c31912cdbcd48e84
SHA256e2e5b0a2b3cf4f837e8cc60b1b80e95a08db162ddc669885664b9f2dcdd14b8f
SHA5121601992959dd80c473de7fa6005220d17aa6b4f768618db70f3f3b70edd3386374fbf94b04be1b4493384039392ad590402cf5f100d5d1fcbed0d3f9fda9a57d
-
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
512B
MD5e1726a5d1716c594bc0cf62f1cad1bc1
SHA14e6aba7e56020e7f4ec4ac5e757911fd1cdf25e1
SHA25623e4b2748be9842f97710505c40634b240231b5fe267d7442663ae9310b62765
SHA512a4c74c7b4cfcbb974dc42d52b46f48b271ba7f64815ba3f99f693348c5c54910972535887a56e4cc3964bef77fffbeb1fac5acc2c7c1bb5a5c3b3a3cc1bc6971
-
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
8KB
MD5669e0ffc87bfb3e811520f2f76eb0a77
SHA13e0d07063f280051a4a5753f1187d782dbe95cca
SHA256f6540ba0cf88582e93e6cf4bf19775c50004a230063733e29ea9ca44e5cf1fb2
SHA512ab8c42b7247d84a7d02dadbed687e2723b2b8bd21ce3a4d19bd62dec93bcae3fbdd2d03a3010edf985129bd082569b1d082e410ae847611084be5f49317376d0
-
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
8KB
MD59f5ce21b6e6a33ea062883fb9cf78e50
SHA1c7b516b1750fdf9b9ee5932267f5964d0dcf6a6f
SHA25666a74333b3d1a14d4082fdc1b9e353a3c893c0119ba401731345496c6814d524
SHA5121bfa77013eb6ea0de1427ebbb2a17691e51edd827e92dede2a1a4d4cd96464b7ad2808d8ee25d217ace4f2ad8e72a8b78ce7bbef702a99b0a4c2bfc42dde980d
-
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
24KB
MD57a42d2562bd25a10a0e9e631c0ed6d29
SHA16e7d892797ef45d5fc284e362947c9af17816852
SHA2567cd8dc798a4540d5dc6fd928bf6ee5b7124447331b62267c4ca05d1032077ef1
SHA5124f45f9904e22b7144f60906af5e8831e40a87534e21eebd7bf93915adfc4b0b63faf727a7c0c58f94d441630d1db61f7357953e8331bb674d6fcfdbb6b034a0a
-
/data/user/0/ir.fateh.football/databases/__pushe_base_lib_db-journalFilesize
8KB
MD52943278593804707abaa37287f80240d
SHA193d364c69d41f80b4675d0334a5aaf7179d7c86a
SHA256fee7b6ac4a2702de00886a65a30b5bd43b4de49316445a91e0a4c532b5ce9fed
SHA51276d7b6e68e5b2798cb3711b90255b7594b61731250f083dfe4c2cb8fd3c5e882f23ae218f87a42057c37adacca5d0df86172d3bd540968b53f270834c71f8cf0
-
/data/user/0/ir.fateh.football/databases/evernote_jobs.dbFilesize
16KB
MD53daa885828fae96b2b414a784f53826d
SHA1a571ab90c543f60a4cc8d2d77cd93e26aa4edfbb
SHA2565ed282c85a7f6e29a72536eb791373587c310b5ba23c4d5a9475e6e82c0ac619
SHA512f579dd2e44eb7455d9a1f009d050f5b778e768678bd0cc61af8cd4f4ca81394e763ea14437b410f1481fcb9898cbd019f333e27c592680a28842f1439569bfb0
-
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD53c3ad74c55915d9c8620ba1c21f4c28d
SHA1a88cb39439de59b3d1922b5e0419e17be0aee6ec
SHA25627e1a94047dff1a0f47be5f53681e68fe3fc057aa840c36aac54837087dd278a
SHA51274486e20fc67678b06e6cd27d78f680e1533a3ac01c3c52e7f01eb76daf06e5078874c00d62f3d161dd546b429e432f5ad599c9d29cdafdf5e6d308aa041b312
-
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD58fef1b2bcc5e27bf45261817600ad454
SHA17a376ecd56145f1c52594bd65423b9066ea904d1
SHA256fd835a5d00e8c90e52cf2d22bb286eaeb2e1d095e2e44772b86591414e2a794b
SHA5122dbe8b9df82f454bcf37f71873a1177f5a7ddbe19bb48f722a45f3580d16878a7dabc763df08d171e6e5e3fa030d5a406af816344c2eb5122e762343dc3d432a
-
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD5ff3f7534dc268ed820c124aeae2c7154
SHA14182916a0a130757f5ce79d1458e06c14612a685
SHA256ffaae58ea40baa1a7bdb96ff434b20a8f5ba4f5371f10b0568da4b13f398de61
SHA5122d8517886c5307d2490f246ebf822c78956bc52af2ccad464fd91614bc05e803a08ddaa28e955bd056b340d1738e4082c71cf9f3552661a0d17ed1533827ca76
-
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
512B
MD56bad185f069201024840bfe4ff331c21
SHA193b4b643338fde7e6c1e9fa4a38e8630edb748a5
SHA256677ffd90a9fa81ed6d25f4fe9a2c9802c7f9dda64d6294ea71ce0869b0eefa90
SHA512eedb38a32c71ca01ac45d281cc35f57cf8302de42781da44c3bfe06cb20c0e2a95d2b41b99afe8668058006f65635cbc42a47b8a7ffc642758fb0c665e65497e
-
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD52a34f2c8f48813ded4e5f92a2332fcdb
SHA1ebbb3cf14a33b597e6655a993514d36a1c7a7056
SHA2563874a79e601aa14b08b4e11bc8695f3d1653e2ea92e9d0064531dc434f1eb982
SHA5127aff77c3fdd1d06a40ad875859deca43672803101f1c1f5177616daa2a35d35d9d5b0e513363296527260a7495287e2ec3c40e60019fdd8218da5ddc7f204890
-
/data/user/0/ir.fateh.football/databases/evernote_jobs.db-journalFilesize
8KB
MD53147ef946669ba20017f6eea2babd55c
SHA15905c6eb6ce1e8e8b567a00b76272ce4fcfe1ae4
SHA256ea719ca4f3c28881beaf4bf66909ad1fddf68da9d9e87f229e5876353d545fe3
SHA512e0201f1bb069e4abb8fb69ca53385e5e9631979e2273d01cd03ee7af870413f3858662d3d376c5b23d2487f7c50874bdd9c5b04429b29a9e22b1dafe7046bf64
-
/data/user/0/ir.fateh.football/files/fonts/bkoodb.ttfFilesize
58KB
MD52be5d53bd9404008e505c403b2af6d9c
SHA1ee393eeb3e8cc8338126367a6dca01fe1a2569d3
SHA2565fd93a626bda3e75f0ee6ce429f15acbd32cc5278b1d1d6fcf25a64ec693efc4
SHA512df7da6e9bb2d10e421930ef70b7d943d2f983134cf9436723d203e79d4141ae283e032df2e6b4cb808d62f3ceaa3885b53a3e8e1e4bbe7f49833fff6ab493e73
-
/data/user/0/ir.fateh.football/files/kalamat.dbFilesize
25KB
MD5c32496c248e431de9bb60af0e9a8657f
SHA1e342b95a0b685646c3587dd47d972e8ff6ad1b86
SHA2568cfef21c3f5ffc2dd6649d5218cc12b3c7543a4bd9f5f0555b49960a9bc5847d
SHA51244d6969518be2b6a56f4edb536cd36d56a6eadc4a4eb5b895d19afbc676272b0a1e4b04e356e1404ff1208944060ccf835146f8d1958121f98794928822e4197
-
/data/user/0/ir.fateh.football/no_backup/com.google.InstanceId.propertiesFilesize
2KB
MD52311cf60b52785915446cb5010c94f2d
SHA17e176551f57409c4fd8274a0e76fdcbc96187336
SHA2562e85a80ff46651053be6999ddcca908f32591473112902fc0281a6fbd439a3b5
SHA512ce4cdc4e8e4af4075255fbccd2c3865a25953cbd51e833c69bf3536bd3b776f47bb517f340053d6d741e08fc6caa86d5fe4346b850c7fcc300259cc94d6eeba7
-
/storage/emulated/0/Android/data/ir.fateh.football/files/Magnet/magnetLogoFilesize
2B
MD5e0aa021e21dddbd6d8cecec71e9cf564
SHA19ce3bd4224c8c1780db56b4125ecf3f24bf748b7
SHA256565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
SHA512900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874