Analysis

  • max time kernel
    155s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240506-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
  • submitted
    11-05-2024 11:54

General

  • Target

    3475da3ce780ca3d71024a1a539f402b_JaffaCakes118.apk

  • Size

    3.9MB

  • MD5

    3475da3ce780ca3d71024a1a539f402b

  • SHA1

    66d8a64ba094974704d04cf03d2010ffebb9b7b0

  • SHA256

    c1d988f6b880019d7a2bb996f09783d4cbac6122b839db9d74effbe2ecd2aa0e

  • SHA512

    055f6ac8654c33af3393c989ab3381a6f27a4579002e6aba66e25962e2c4ed57a0ba1c5a194ad24c99b16c5816345117210464a2dc79fddef6595ac89db2a160

  • SSDEEP

    98304:GeZMesXrtHu25IeSl/4yqFb9co+30Y7pNt5gKzw:G2SrtO2iFl/4yWZcV3Zt5y

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.viralapp.juicerecipes.viral
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4888
  • com.viralapp.juicerecipes.viral:Metrica
    1⤵
    • Queries information about running processes on the device
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.viralapp.juicerecipes.viral/files/ZPkFS.log
    Filesize

    12KB

    MD5

    d99c4e1ec2cb0909d776e1916f6a61f9

    SHA1

    d0ec05c3afa3e924be9ddc4329e1b9b96bc72bc2

    SHA256

    a42b2818d06f63107aeb32d42385a160159d63a30c10a04c0a41c405c56d63c0

    SHA512

    daed734f79ab398a6b825b481e4b451684f782a884f93aaafe47f78981b189cef856d6fc87cd68ca355cadc86ea990ca64823bb5dfcf013838af5cf90623fd22

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/credentials.dat
    Filesize

    234B

    MD5

    870358b1f16d9febb9b51339a13af969

    SHA1

    b30bd54fe2d52e8f6f58a7def983b443dd9eedf2

    SHA256

    be407dee27b5c7b4dde2fe31bdf55cf3de5279fca8be2bd25e76230ee2108453

    SHA512

    1bd9341f7a3c89bb66709caa61256abb2e219e7a3f1f877f723c00076b9c679cc44650ae5bb748144d5e3efbe51ab62b9f15dd474579a580abb7d8a1c6f79d4f

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral
    Filesize

    36KB

    MD5

    8c7b2df28b23ac74bc3dd2374802dbe3

    SHA1

    6fd842137ca71c96c6f290f78bd86e4d010f540e

    SHA256

    ca6f4d1a930424b27d27d06ef28504406aea7f52a310b483c540176e75f91a37

    SHA512

    fbc6b05537c7cfb35f17a54ede1998fc268b4b38694a5ec85206bc49303ec870db8160cc29a1c1ad1075dea55f84a07839885127e362dd4473d25e395c9ee0b5

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral-journal
    Filesize

    20KB

    MD5

    cb62d5e788e9a7f5429043881ba38838

    SHA1

    5aa8169eddf44c9804a5625c4fe93402d92a8af4

    SHA256

    69a7ab0188b2f3fd53cacfd2688f74004bb8bc3a64fbf02db49d73c619415209

    SHA512

    e0100703346187088c09c8c624a13edea9e47b1bc7c105f2d7c416cc35fefd755af2d5c5e9dade991f6e11d661b83c3f920955692f4fe09f04808849ae758bd6

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral-journal
    Filesize

    8KB

    MD5

    a0bf0a13be3391e0aedd468e309c60cb

    SHA1

    10cff47f6e8732a0da2bc27c690dddf07aac133b

    SHA256

    10c13eecdf66237daf2c639a79bf2ea43a1089a1951c52d7fb63e1b0bd71fc81

    SHA512

    2455d7f98524158e61e3dce8c7a60bcf7bad0d3c08f81314897ab85371d3cf1f796349bf26bb82d33f610ea41ecff90809ca124ecebe71576e7c0d85055f7750

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral-journal
    Filesize

    8KB

    MD5

    3fca8fc279c4de9a32d840bea0f2ba5e

    SHA1

    66b2874147c8396cb9600b5c392f6db0f6968f24

    SHA256

    3e02d912b76774d370d5cd07b3d90f0ce52698560bfb1e3640e194e9cabeaa97

    SHA512

    74d0c6c44c9d42221bb3a519e9f3b43cd46bde9c58abdbaed318e6a508593b514431f033cab018d1ef44a9574f0134f5789be4a139cc42ba0b75e4aaff21bc15

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral-journal
    Filesize

    12KB

    MD5

    a645d2f0da78a5e32420263436d21a82

    SHA1

    5aa87770ffd7338e84e7a298c0808b77670a6aa7

    SHA256

    bb5f3292f2b66f95a5d15e6a0bcda32c13f7e965c80dc2bae0cf2e505a04d0b1

    SHA512

    54d5565cb83e136f88c98d468a64351ff49f862299cd870cb891f4a1060d5716e47c5582615cba5cb2ee762395c3ac62c41ebf7200bdf27b48bdc7253cd8e396

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral-journal
    Filesize

    12KB

    MD5

    78779b8dbc7c3be22274d7c7e91ec0d7

    SHA1

    10a103cf6de3cc24967b2338829c9643337f3f2e

    SHA256

    63d07dcf0eef82935c609a7783179b6f306467765a51b0585754e7271b10c90e

    SHA512

    c1893ffb4f0626937b0bb7004d4163985be3b0e2d33a196849d50dab0d879d304883e7f9bb6ac98d607ca9865ce3ffe491d76edcf17ea190fa8f34f15ad0e29d

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral-journal
    Filesize

    12KB

    MD5

    0c9a6901a22e91bf15e1a45379bf75d2

    SHA1

    28dc0e66a30d0b88ee5872e63d7db4f8d8ad9323

    SHA256

    88ef8a88e1f57e89c74df3b4c9c8672981d4199f907f1bc3dbfdb6cb06a1a836

    SHA512

    c316b7917a8584a9d5045459d79518e483dc3a1c178493814a1ba397ad63061a0e71a285065596a8a6631449a4680da6f35744d8f1f02653c34c4827def2fec4

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral_20799a27-fa80-4b36-b2db-0f8141f24180
    Filesize

    36KB

    MD5

    f997e8d3b71c360b65bd03ba28e24684

    SHA1

    04c98dcd563c7be1ca13d92a0212c6bb2e0b2b2f

    SHA256

    f9ed91b0d944da0e0855b5da5f01870222defbb913204d4288466808a876bf57

    SHA512

    c837654cd1dd3214a95d94b95c9ac7bff2b331ceace2212ccb83a8c039e688a1f0808a21dd94aeb9d40c8a5c94b1cca3519a745e98c300eefaa98dca1b829c2b

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    512B

    MD5

    2d7030fcaa52fd4ae4286d227ea16e82

    SHA1

    5605a5090c5527df38f5db8cc70eb3503bb5e6f0

    SHA256

    e1ec1f0f9f70fbe087fe859b14a2755d358f2ef60383f93647c70c000c034cc4

    SHA512

    d2c6a5f1ebe3339c16d6b12b3cbfc2c51d6205d015f9d070d8b3907e6e967a9e0f8ad1ce5bff7836dbc33e17db8c84b223c37cd2326b83236be61bdaa76458c4

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    8KB

    MD5

    7202d35a934004191813a595c5ba8c82

    SHA1

    16fb85a21a6c66e87528774d2f06c92dfa6ac096

    SHA256

    cb8beed19d061ae3ae08d85e3cce19282f9f03ae4d79c025d95479a55e4d8210

    SHA512

    42e721cc652f5998a8da8570484e761e6d9287ef19a1a02c5e9aa2550bd5b644c4320fdabd58b270de74f43ad1f50c6d7bd840347bf9b208e405570f7b6d252c

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    8KB

    MD5

    8ecd500675049579cbbc2da1d0aa87ab

    SHA1

    edf83a92abd632fc3e7c41bb8663e6dfab6f0eb3

    SHA256

    905e4c17c93781bac02d3b2faa74ba613077017990c7e3ce8258061ea56f5e4e

    SHA512

    faa880501aa5fb618cee841ddb61071f3819936d99150d90181091b73bbd8d731003535d3baf76f4ff7d6b6c5e9fe4de4e173704b40b13f3d28403b125056d31

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    12KB

    MD5

    af9312e3a6ebad8c8de80396757e08fd

    SHA1

    34b8f2b3b5624c460cfca5abaddf1239d95ef97b

    SHA256

    262ce633620dab9516568587d1bd600f960098c4d8c18ea5aecaac8755eb8b65

    SHA512

    c91b9fec1ea80965bcf379d08d462a1ff59d2f2a48de55bbd4a904236f9f044f80bc03c56eb69b7a293c07c45897ceeaf398fc5e5666b239cfc17702772e9f64

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    12KB

    MD5

    41d9d6662d48042d37b4bca326c0aa7f

    SHA1

    698607948b83184102a113364673106852f0dcba

    SHA256

    d4a6030fe3930ba5b0918addad9fe800aad890317bfee7fa8ecd3f177031a4bc

    SHA512

    baa1d4c57cf0ea2376476f0949d7eccd911df715bcbe82d1ff0afd6cc531f90015ffa6b1fab634f40d0f84db67d43250aa151c6e0e60f90ee981de5dadb2dcdc

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/db_metrica_com.viralapp.juicerecipes.viral_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    12KB

    MD5

    277144607a7bf075a198d4321a0bb104

    SHA1

    49e535379ff45dc1e97a546711912a44f6e4469c

    SHA256

    14f1e9ccf184eed066cae916547df39aff454dfcd2855392eb7b9575d1dd7cb3

    SHA512

    4dc788b34a5a87ab0fcc5e24ff82f6d6f56c34dbb820a58f59f5034f56165839b9c40328feb14b35b287353eb0b45fe98ecaa0db11a7fdc3efd234072854d7f7

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    b8d1dc7fbf804a43f7b9908bea7fcd0f

    SHA1

    38bab43f116d64d4b7f9efd37f734935197771c1

    SHA256

    2fa9cebe4a22eed2419b6b163321b39c8967e293d0a9bea6e70692e9b1b05004

    SHA512

    82d0512e49a1ba14d11af205bbb08cd3de72d4f5206a792682e58042c504dc5ba870afdca1e144fb757c2a1cb01c71d1fec0475714ffcfd071069416f7068bff

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    29afcf0767057e895a0a1d58f7950ce5

    SHA1

    ebfc7c7d29d62d530b7878de1fd73212079f682f

    SHA256

    f3259c0681fcb3e3e07e056176e9e1ad81e7522fd64b9edd386dca29ff6d7cb8

    SHA512

    38adcecfaf0c3403bf7ffee5966b59343313248189c99b1a9642e2a2760a453a4f101c24daf1c62872c3e8643ed85fb88e60abd0a3b497a6722c069b891aab81

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    e5639b469346d3d19c79ae3bdc2f4a9a

    SHA1

    b4d9041b94176f65417e63e77f0f324b81e8dded

    SHA256

    cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf

    SHA512

    273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    9944626e63a511814dbf06a8dd129e4a

    SHA1

    154948cd4c30703df241fe63eafb87f8d1911656

    SHA256

    406dfd6caf61866918b8954fb5f783092fbad2f8796efbe784f1671b7b4127ee

    SHA512

    353f3d02327be97d2c095b510c2a72d2b26a2864c1174fe4c04325788bf41a1a24f86ecb461bcd55ab990204f3afdc48fb058cdec57cd01ee77ab78403d9a7ba

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db-journal
    Filesize

    8KB

    MD5

    61af2134d78b5264f00185ac5c3bde62

    SHA1

    722f4f63b2e1cccce047848287535ff8bd63072f

    SHA256

    a88d502d9c9c97327000c2a3fe8eb0e4009acc59777f75ffce0798020ec151a1

    SHA512

    46ab633d49d27df819097f53ef8387ae0bdd33da4f1101de02ca7b9cf23396692001c50590696a8b42c01be067b972792c0ffbd104b2cfb95afbec2599a4c680

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db-journal
    Filesize

    8KB

    MD5

    eb562900056227752095f3229feace6c

    SHA1

    2fb7ebe71f5aa44dc9576fafa40a4c9838558101

    SHA256

    a04949eda3b9f26d95d150cb1799bd14185c182dedd0ab5751d7749db092a290

    SHA512

    ad0a83bd93ef2b6e91580dd40962b42903452e36b778a79d4e7d708681404d4f2f67e60e5f7c7319cdb00ff0cf61ae7ed7cc484789bf4df29684b76c4006c9a1

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    9da2dc81ea72b4dfb27b43129119122a

    SHA1

    6fde7d7fc4c16d21f435725f544995f570bca91e

    SHA256

    9d94cba76a55db59b778c1e985852dfcf22a32baf41c6fcebc7d685f77a7666d

    SHA512

    88bb756755e528f778b206c3a2b2d0cf356e3b37a104e63ced572a7bac249c00e430425105cf9b0f55614ef6010cff3bced7508a4af423fe4743e360887aab3b

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    15d647055116ec14405359452e7c4438

    SHA1

    ee0c93c2173c788c0b94fe0f860277f2b3473eee

    SHA256

    ee35f0b9fd1f88840857465095e8b836c71c3cdbee59925e57143925d99a93f2

    SHA512

    d8fb0e27872ffb8ac97bc047adec640d241b80a1194bd3536ed39922524071355b3678c8e8cb0cbd299706f53d46434366e7839b8e8da9e64c789632433e7d5a

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    24043d8e7083fdd9937c5ba36d0cf314

    SHA1

    7eb92d9ab66b61dacae031a9243ca2cd3745fbbf

    SHA256

    c65a982b47658dc2894257d18417a5ebaf7b471c674f996004bc5c4f5721ac3f

    SHA512

    025801ef026098fbb0e94b29d3c8bac48196429d32bb5097e138bf7c561e2e2b89d9a010974bfd55b91d1206d46b68ec646d5f101b1e563b4870a191e3e8d784

  • /data/user/0/com.viralapp.juicerecipes.viral/no_backup/metrica_data.db
    Filesize

    44KB

    MD5

    d4e66d417a998bded837ddfe233d92ec

    SHA1

    aa824503f2e590f6859c5cc6f58c300cf542aa16

    SHA256

    f4892afeea133944ef6d82bb1855d073753400e8a4131a7380ec1849875adf6c

    SHA512

    347073890f3a18c0b858de5c84da6bc1002a8724484d33bf0357227ea792eecde4bc670dd8a5ae98332be6be512cfd9ea9491f4392922f92e0f60908d593220d