4ba057e7cef1e49089e4ce6eb7e6774452195e8b18e19776d4bf0c840e21e877

Analysis

max time kernel
148s
max time network
159s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
09/05/2024, 07:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

28e52e897d16e1dfa670232cb42669e9_JaffaCakes118.apk
Size

5.9MB
MD5

28e52e897d16e1dfa670232cb42669e9
SHA1

a96a1db3cf72652a8c2a3e4f16e6fe97f83b2e59
SHA256

4ba057e7cef1e49089e4ce6eb7e6774452195e8b18e19776d4bf0c840e21e877
SHA512

87e9535014c86f73ee73cf069a6fc8c7057a5e994dca5bff9b38d7d9b661ce54e5fccc2fd1147bec03eda85594865783dd56fe0effe34440ba2004444908a6df
SSDEEP

98304:nzkK40Bn5rKfSO3RdZwhUyTCHPndYaaSQinFZ6/qncPNArfiyJh86JImS62XF:AK40Bn5m6O3vyhUye2vUn6/jg1o66xj

Score

7^/10

discovery execution impact persistence

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	br.com.oneside.deli.acai
Framework service call	android.app.IActivityManager.getRunningAppProcesses	br.com.oneside.deli.acai:Metrica

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	br.com.oneside.deli.acai
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	br.com.oneside.deli.acai:Metrica

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	br.com.oneside.deli.acai

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	br.com.oneside.deli.acai

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	br.com.oneside.deli.acai
Framework service call	android.app.job.IJobScheduler.schedule	br.com.oneside.deli.acai:Metrica

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	br.com.oneside.deli.acai:Metrica
Framework API call	javax.crypto.Cipher.doFinal	br.com.oneside.deli.acai

br.com.oneside.deli.acai
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4495

br.com.oneside.deli.acai:Metrica
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4535

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/br.com.oneside.deli.acai/no_backup/credentials.dat

Filesize
233B

MD5
a26bdcaed92c9e3f6d9179d7a69bc67e

SHA1
f265638a9aa86a167304ab42b003c81ac3b30a9a

SHA256
ac018fbc7e80de6f5c38b83d97c5e12c4dfbb209d1c06fce391e95af06f38093

SHA512
aea1f1e943a11492bb2a9b4bc477a11e7609aba632f3e46529a994ed0563495f247330dd5e4c458f16ec48107bef56de0a69ce67ceda1c1a8ab47eaca316c7ee

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai

Filesize
36KB

MD5
76382b99ee451a3e98102b403d7485c1

SHA1
0aaebed2f39e07ccc3dae1626af45bfca5e171d5

SHA256
8dcf79646dde4beb0b770a5795ddec109a2705577de03cfbb08a6bae627cc937

SHA512
6d204e33a3809c08ccc1cf727dc492d71bba3a76e0438fdb561517a1b3a2e1b1a7ceb23fc011e2d39730c3da1ab5da8ebc7a9c0484277302eb74669fb7368bdb

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai-journal

Filesize
8KB

MD5
594062ebafc413525dfbdbe4df411783

SHA1
c135233ddae02800167c297db795d66c3b40e529

SHA256
b64904deaf3200fa30a6fae87c05c815462d344cd0cef4700d514953242a3107

SHA512
f4afdd6201ca54a434941c83b7fd4e3df04e9ba524932354bd450838f8bde871b2f3de9c4e2c84d8034742abe132b76d22446448b0f5e9a509f3cad626d03200

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai-shm

Filesize
32KB

MD5
29c970f684a8e8a044088044ccafdc43

SHA1
cb0fc5968662ebaf9f535c8a44d3b89f720cba83

SHA256
15f1a58fe008f6823572349a56fb2ed6fc0cc6a80bc9ef18c58ffedcf4634591

SHA512
f9e119c165d361e4c3154842fa2df14b35b544c884e4dcbc96986904971274003213fde1bcf8d3c28f8f350f8cc64b9e1de673383731070bec8471a9e2be60cb

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai-wal

Filesize
406KB

MD5
4106e50bd8b42f75f0ab5c4923180b4e

SHA1
e015c1f92830ba00dce8e0f7f123d252aeab92d6

SHA256
1480b88b007d789a1803ad8cb20d9182a30239db3291efe29690cfd746bc2e3c

SHA512
bf34dbd914aa43eac7d05eb1844e2a6747a056b8512720c2615aee941b4a648b475fd654e2f448213dfaaf38b3706e77ac028d48523f1a16972529502348c4cf

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180

Filesize
4KB

MD5
0620f8c9282965428ebde3831fe9892e

SHA1
858b7a9234504ee7b7ca9bd8788909ff8e6a6d6b

SHA256
d0f94a43cdd1bc5cba6f6e7721b07108328c89ca6786a469f0529bf94f2a5b8a

SHA512
2192b84a973fec830e15d1f48ff3674d15db34d5ba04115af8923f884e3f7d84a163fc5eefa257c1270bef8a9f8fe5bc2971731dd8fa9a523a354ce8ee9262ce

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
512B

MD5
1527062e5b1055e9f0751212f075ff07

SHA1
2dad27cf191cc2677579a4a023df152e09a8e1e5

SHA256
08a5122c0ff883c6deb764bcc52d34c18e2345d07afa27171a05f317f49bccd4

SHA512
829fe6484408b8e97655d35cc3ae62ee45644aff6dc5bf3d4bbeee307ef171b123ef2872cc8b23e519133d5d0805a1bcc39d2b976e71975f7242f0dfdcc55464

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180-wal

Filesize
164KB

MD5
abae9053e2459e6a5a544c29c2d6a6ce

SHA1
91d93ca6284203910c14a0a62b6cb1fae50e173d

SHA256
d003a020d70c76903140d1f0140c20ae8583b28eec3175bb08605c313053dfe4

SHA512
5043a07ea8878f02077b2062179f5d4c53c5ebf562344000cab327c614e2103f4dc45a0f3e31828441f091868a9d421d4b668637afeed35c6622cea1c47950b9

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

Filesize
20KB

MD5
1da700033e2503325560e0769d228d13

SHA1
174c18cfb039ee9ed282f7c86d3c243f618f7e17

SHA256
f76136b416e15002957e10a3055f48d317e9657942efda94944771d89b23a729

SHA512
5df23ff60cdba40e5ab7261a8efea2967e613f7c4f95daf8c5e35f2b154b6c73ebef5e936c801554605047a3ac6cd61a7dea9c49ece66a4f829469dc6c6e7abe

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

Filesize
20KB

MD5
6ca4e066cae95fc2f0cbd52932abfe70

SHA1
b6f08b7081c51e20df4fb7d22a5df2dccb63215d

SHA256
6191183ee0f0d84f3449e5db6f3f75d3ba02c39565df39a619a5dcdb6c16fed5

SHA512
e4f55f89417bc300621e3a22707230fd4a5827aff761c43ffeb05c3e31d6ab6bba8e4164d15084f0711ac4bc343311eb982c92040b7f897f89c8eed8ec0945b9

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

Filesize
20KB

MD5
44def4f6e42c3ec63f229d23af8c804a

SHA1
f5956d9295778b539bced03215343fd3cf7a9dd8

SHA256
882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a

SHA512
a14770398044635a8a8fc0d59dc95af3a97ae78146a9ace3795d600a44098a5ff7099aa3d0ac40442f8ff8c5d3b5ceecb4b360bf47f3e8c7c902879e2e76228d

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

Filesize
20KB

MD5
02363b602f14466b2441480505416d6b

SHA1
319da090d60c2face8a91cfba13511d23ecf8b37

SHA256
1fef948860b33c4d752595573353c7b851c60ab5cedd676161861ca318bbfccd

SHA512
aec6578fae0d2e9e1407682ca83940c1842310c80a8cbf9dcc9bb93a1fffa8afe6bc2fcebd37ce1ecdba1c1fb1de792e2d65b6e4e1d18842fada6c1eea14d6c0

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-journal

Filesize
406KB

MD5
759f6c1f880c4439e2bab91b22aabcd3

SHA1
125ab11d1c08d3fa30ae25912c1cb5479d7d128d

SHA256
4cf308a54f5ffeec95c410bf6799e6926fccc3ade6fd5e75298b16b644a9893b

SHA512
9943cdac4475e7e538ee19b4ea27290ed127063a0b51cf277ece9535ecf6e06d6160b4a6d69e5337f8aabc525e292b3b2ceb08ca69e44d2f63e942b8944612a5

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-wal

Filesize
32KB

MD5
1ef556b9ef5607f71ffc54e6071816d8

SHA1
7225d722ec3c787670a332ec0bb93c526c94f4a1

SHA256
f76124dd514326584f9b52d80e17211c18b433f6cddeb64dc59fe4309e120ffc

SHA512
922135035be8bea5bedd0a7db765f82d3f23a3860c94cdee0c8528e3ce3b7082b94d0e003a6b859a8ce3c1f35c1915a08b626b6ac09eded8c6f44e5d9d639eed

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
7afad05e94ab8f106f32907100899f40

SHA1
e9e62acb2fb0e19faca2de74aea5b640a8950c74

SHA256
c6bad568d1208789411a860159c5c08399a4bf8eaedd10e388fd68a09ea7d19f

SHA512
12fb890c6e30fd57aaca95df2b047e33195ea7e8a17a620fb0f85d14ba9113a67d7c9db7d932e1e8259378ad0312f901df435202d1103a4141e694b819d90d07

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-wal

Filesize
32KB

MD5
6cef14f241e2679adef7651726bf7ed5

SHA1
f9ecd39c4f62460f0535c98fa5ded9d86dfb06c9

SHA256
2e266499fc3518f196045b8a63d52d0f8d6dade38702a564abda2cc47b4dacd2

SHA512
d869acb58f88705a7d3c953f5b3b58b5bfe96f83f4a94cc72c934c1e0e1c502644e9a514875cb76063f66c7808e5b907d0b6fdd64a5b8566e8f408121c05ddfc

Download Submit
/data/data/br.com.oneside.deli.acai/no_backup/metrica_data.db

Filesize
44KB

MD5
bbc715da22c400a7947b37d6a26e3f03

SHA1
76fb652fed27a6789335f0b9d3435a2fd77592fa

SHA256
86bb1c9be57f5f3e03f9a5b724d3896ff6dbd671bafba6e86ccb40b8b90cc24c

SHA512
7e9cdbc7e72674aaa6c86e3a61a360960b47e09b721ae7193e0e60a7b21159da5180585a9ca8a38bb56db54f46ab53a1554156959683ca2632305f2001f35c4a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads