Analysis
- max time kernel
179s - max time network
191s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
18/05/2024, 01:44
Static task
static1
Behavioral task
behavioral1
Sample
52838416ccc517e0f087bc7ac0f29a12_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
52838416ccc517e0f087bc7ac0f29a12_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
52838416ccc517e0f087bc7ac0f29a12_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
General
- Target 52838416ccc517e0f087bc7ac0f29a12_JaffaCakes118.apk
- Size 21.3MB
- Sample240518-b6bzesed68
- SHA256 663aea545d600b47f6cca3eb0e99944051c46351a347233d5d6e38479fb3f9aa
- MD5 52838416ccc517e0f087bc7ac0f29a12
- SHA1 f21646d1c75faa18402f1532f0f8db7a7ff9615d
- SHA512 fb4a2eec18716ea4ebf0062b245a16b3bbf4d984e9c7bca67d15840c430c3860846e205cb1ba8526d0dcc32adaf445ef7a74a9ba64f27697b823dfcd61a3e084
- SSDEEP 393216:n1gXvlUaj3vDf4oZgYxd2Y9+mYKo6b8ESOGpV/L1f75PPSE2Ci1G:SX1Dr3gY7D+sdb8zO0B1Zv2S
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.appon.legendvszombies - Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.appon.legendvszombies - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.appon.legendvszombies - Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.appon.legendvszombies/cache/1582435991586.jar 5109 com.appon.legendvszombies - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.appon.legendvszombies - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.appon.legendvszombies - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.appon.legendvszombies - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.appon.legendvszombies - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.appon.legendvszombies - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.appon.legendvszombies - Reads information about phone network operator. 1 TTPs
Processes
-
com.appon.legendvszombies1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:5109
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.appon.legendvszombies/cache/1582435991586.jar
- Size 9KB
- SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
- MD5 e8e0527a01aefdb89afd2c508f131da1
- SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
- SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
- SSDEEP 192:uGJqbQwgQYuNUnEV4bAa0s/ombgmdxjX5fGpTVHb3qX:LkMwTTNdlns/ombJB
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata
- Size 20KB
- SHA256 a9716958d2a43bd38e04d3c2cc0e6e1e5fedb6134b50d065d6255a27679cb128
- MD5 eae76ae38075ebef59de29e10958bac0
- SHA1 77368aea497c3938ebf2c7381492db06f00829d4
- SHA512 ab5f8c95c0fa20b395361d083a9eebf924c75adff8fe487aca831cf09652eae5d37adca8e94bc3b3dcb628dc47fb2db1f3921ce55a1f8f63aa990bdbb70544d4
- SSDEEP 6:l9bNFlq4yl1Cl0tt0uO24ovm3gLuMTUNn2UyqOERX4PBX4ogLugMBX4suuKfpqif:TLm624zVMTAn2UvFRmBEyPbAVOw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata
- Size 20KB
- SHA256 7f9e4c9a46b031a4d1c95c317becaa97a56d0db71c3a17dbfc5a5b1b8672413f
- MD5 aa3c90bc171df65169a2e18999bba08a
- SHA1 b0e3808cf6736457abe861de99390812de6e68c8
- SHA512 7e46b4c617a2d16e555125c0dfe199d469b09ee7f286e7fe16b2ca259b5fd14b018443b3d8dacd2b25e669d7b4a5fbf268346f788b5c3a9aa29213ad6619a85b
- SSDEEP 12:TLyKEk24zVMTAn2UvFRmBEyPbP/QTiAe/c/RT2w/ESm:TLy9p4XVveGSP/Qq8xZbm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata
- Size 20KB
- SHA256 b1bacb7b3c84965a30f06495efe36924c1401c5cab59e22d45680b49bb1e4395
- MD5 12565b5daa74753168a5d0a38a969ff9
- SHA1 246589e6ed868d796aae816f1185840f5634ff0b
- SHA512 d07549d4cbbbf6ddd064fc685088bb0148432af6bf2265d27b303fddeffc30a0f357ef16a9feb376f5264202835cb0128049c909621a6863b1d613e93e5830fa
- SSDEEP 12:TLWROh24zVMTAn2UvFRmBEyPbP/QTiAe/c/RT2w/ESm:TLZs4XVveGSP/Qq8xZbm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata
- Size 20KB
- SHA256 fcceaa83ef580d0dcbe04d3ae50407cd37e8f61b9ec058d204b716589244b9df
- MD5 27cb8174c62ccdc3046360a595bbe712
- SHA1 1d8f5f378aca71df6c6dd8c62697a37794e5d9e6
- SHA512 c11d3eed538127f3c3dbfa4db21fd8e86714f146bf841b0c3ac0624d6cb8d04e23d404c5fd2b4bfa2601df5c978a1bfce349af75f02d3ded357274a5dd69d3be
- SSDEEP 12:TLFl24zVMTAn2UvFRmBEyPbP/otJDTiAe/c/KIfohaN2w/ESm:TL+4XVveGSP/4JDq8FouZbm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata
- Size 20KB
- SHA256 59e1c685da0c0ff120d34c8ce41bfbf54717f129c4b730f4b9b39c31a3d613dc
- MD5 b68461eb90fdd78dd54d74b49dfcc75d
- SHA1 4750c89261c972caf11739688c62931cce1ead1f
- SHA512 ea9d96b531f9a5508a0deedd23e5259ae6641d6032e2ab17de060c6c0b38b63a922b2a5205f008c3df2870671a74e0569d86cdd5bf28bda77a72064ec3c061c3
- SSDEEP 12:TLy+24zVMTAn2UvFRmBEyPbP/MtATiAe/c/Xd8VUufohaN2w/ESm:TLu4XVveGSP/M2q8NaTouZbm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata-journal
- Size 12KB
- SHA256 27eb880be9f19d5feb61bc97d98d827bab3563753bf2ad361f853379791915b5
- MD5 9f7f279f9e77e32d93c6fdce7b630dbf
- SHA1 1dff43ef650c3fdf86cef97075fa122f83106241
- SHA512 85ba688edfc60713a044d8991b8da09340a58c747700bbbff2339fbb74daea79d016f04cb30159a2e32d0aa08bcfc14be14d861173a25b5285ab78b3aa4bce74
- SSDEEP 12:7+tsvW5JWqLm624zVMTAn2UvFRmBEyPbw:7+trWqLu4XVveGSw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata-journal
- Size 12KB
- SHA256 d934231f572466d83079ded93ab6273ac776559e6f5558168c3ded1def227d9c
- MD5 d7ea38ad32a22d430baea28d4af03a1b
- SHA1 f190c2471d456e7bb70ceaea6bc35e62fa3230e4
- SHA512 1bc51f0066ee056d2c6d870fc736b58098bc32da072773c3dc8dbc1b53c7005f6ba736781ea338fb83a8441abfa601fdaa6c6d2b19772efd461d9274e03edecf
- SSDEEP 12:7+tYmevTiAe/c/RT2w/eqLyKEk24zVMTAn2UvFRmBEyPby:7+tb4q8xZWqLy9p4XVveGSy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata-journal
- Size 512B
- SHA256 7abbf690317709726462784516b7e7212066ef5e8cf028ce7b94d00fbbb18426
- MD5 78dcd86a0734c0bc327a3011196a5516
- SHA1 43643a938c4c4f43c835b056e0ef915fa5bc23e8
- SHA512 733a170a2208c2d9d7b711eff0f0fd5c1b452d7b3b093f6edf45c89660fb9817b0e1087b40a60fcb43ee1ad8a30d8fd4fd62ad6f018ae17115c6c49935d3fb6e
- MD5 SHA1 SHA512
- Path /data/data/com.appon.legendvszombies/databases/gamedata-journal
- Size 12KB
- SHA256 0b0ec54be771ec5357487d4f1dc0c892f6a07157c51f9f16d7ba5e7d35b46d7c
- MD5 a2493d3ea6e7767e2c10ef09e29d224a
- SHA1 4215d409dcd607df6845daaaced0d2039f3b9cce
- SHA512 88da44ad7b129e1e424aa16199aaa969dcec34427ee91d571b0ca2f83fc12aebf1a8cd071423ab28f327f3c6b56b80928da3b36a6203817542a04cb7524929eb
- SSDEEP 12:7+tbbwmQtJDTiAe/c/KIfohaN2w/yvqLFl24zVMTAn2UvFRmBEyPbG:7+tbbTwJDq8FouZ6qL+4XVveGSG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata-journal
- Size 8KB
- SHA256 a3afa9e78d7c85d04d363d1e81dde02e12d1e1bca6b137d99c86a28193cd463a
- MD5 2bf6a6a55e9d13117c38bbebed0f01aa
- SHA1 ad79755d0301cd80df26fcd3c8b5acdd0823628e
- SHA512 c16a446a2c3b2d36abd1493dac4b96c13a62b3706613a637e9e74d703502f81b33e98a73ea64e893227b6fe285c34c269eb9040c6590f5f4a596723bd591d807
- SSDEEP 6:7+/l9M8Fn1URg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKg/Qn:7+t74qLiuWdwRmBEyPbC
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/gamedata-journal
- Size 8KB
- SHA256 e0a964c95e772a37294a22fdaee75a38a4a177157c2cef57409373ba18766f7d
- MD5 1011d5f074977a77ca141b50df35c295
- SHA1 d2d0603f190e3540676b95c2cfdd4acd756eaac4
- SHA512 3c1fcb2b9f1450a9761ce36bf5950740fd469cb974f0833d629a0d20adb6aabc73ec7230cb1926a473e4ffee85a551c6f1b78b5217bfe0360ee499113d3aeaaa
- SSDEEP 6:7+/l9TdPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKXK//in:7+tbqLJdTRmBEyPbwqin
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/http_auth.db
- Size 20KB
- SHA256 9ae0206411304ee027e0cfe3b4e6732ced5b423f99c33340dafb68d2b5b215f6
- MD5 62a3561989ede658cd16cc1f14199c1d
- SHA1 6320791cdfd16b26450bf711bd6776d80a396912
- SHA512 c4ef43e702e053ee39153149d1fb11311c57c6ad5393ea905df942df8bcd3625e2224563eb4c35bfc45e140aa09135c5123f48d220fe622d9dcf2a4cdaf5dfe4
- SSDEEP 12:TLm6wR6YDRAXk3GMmJVMeNZ/tgVNRmBEyPbAVOw:TL7wRV6/MmXNZ6V2GSE
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/http_auth.db-journal
- Size 512B
- SHA256 052ad2db6bc2a2a0d9e5a087592844824280fbf80237f79336af17cea4f8fe7a
- MD5 19d21fd4962ea2605f3b4c3359ec1ee7
- SHA1 0321f102f5ad19b61731fd88f41dbf75e8721b6f
- SHA512 427852589ff146edac64f147979b6fd8286a91af019d870fbc690595201685e139c32e4b7a49364ca264d461ea80b9db40489d0cb380c7426cd90c92b1b6e671
- MD5 SHA1 SHA512
- Path /data/data/com.appon.legendvszombies/databases/http_auth.db-journal
- Size 8KB
- SHA256 39c5bad0af944d9efdfd5dfda143cbaa4ef40ddc2468b45e44006e3986131d08
- MD5 d1c1eeb82c1078bcb9e25deec36d8d32
- SHA1 447728ad5f5fa12952d226ca533ba9c91140cc29
- SHA512 4b5544c3544c1771b6ed288a5c9f388e6954e7edffad7becd4a2e7c61a4f7117d20df849af50936636bd14ab37fc0f99669104fa9881245d7232d4697a19bd19
- SSDEEP 6:7+/l9AHn1Ewl+Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK2:7+tuawlpqLiuWdwRmBEyPbl
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/http_auth.db-journal
- Size 8KB
- SHA256 bd62dc829c872e2f117a6e680ebe488f71956d17e895c799d0e6e5b1d52f7386
- MD5 64093d64324faac2387d5920937b3562
- SHA1 aab203f43b7c94918969ead2ad36eccbb0316859
- SHA512 6e9fab7ba945686497af175e370edae5429d259c78653698416bf589430c4a3b5197a0bbe14b88c4a1f6b92f53cd3b8717564ce5f7d54ad69b085507592ae9dd
- SSDEEP 6:7+/l95Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKVs//y:7+tLqLJdTRmBEyPbisXy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/vungle
- Size 64KB
- SHA256 3ddbfcd398b3daa2542c0f8447fbd59c0bbd4a9de644c7686c168b8291498e50
- MD5 2d7cf849cbaebe3a0f80a1b40c17e9d2
- SHA1 5b16de957ad469dee2d7e07226272d996661c341
- SHA512 b2f03a6eff0e958ea978d39630bbbfc305e4d4bc08c688dd9c7e0e469eaa114f1deb69f140b782a469ab9ac2711559cd95283984e8340b874c193f1672879777
- SSDEEP 48:TQ33FfpGnMIgLVHmbbo6uSf+y49B1wSh7ROPVS:qVQMIgpHm4Su1wy8P8
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/vungle-journal
- Size 512B
- SHA256 628e3209cd82333c392addd5a0367b9a40d41497f88880f11f265d72582e51ab
- MD5 d9e4ed2a73afc20aa3c1b8224b06d8b7
- SHA1 568cd4d466b0cad8f7a5d16c04cfd56e2f0908af
- SHA512 b3012464ed5f68e57f820d08d606f3f29a03cc7a88ed50d8929e3a0d5b672470f447a6d730cf0f11be788de321cf7bb703a7b16bc74871eca7fa882db53c73e6
- MD5 SHA1 SHA512
- Path /data/data/com.appon.legendvszombies/databases/vungle-journal
- Size 8KB
- SHA256 0df562122367a9bc07fe5c54e9a817b5fd3b10cd386254888d9bdb3e38bc14a5
- MD5 7a935d3ffeae9306fc3e03e3a261cdf8
- SHA1 69ff4be6dcb0c3b40f09f5980ad8b535509bd9d4
- SHA512 6782f150929fc87a7cfa5506a490dc1b9f0e7c6edd3e3f06d0a321ba66c915809e1a9fdaef874f1b5a8012b8351e609ec552a83f864c61c738ad2229923273d2
- SSDEEP 6:7+/l9oHGn1AJg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKmM:7+ta1qLiuWdwRmBEyPbXM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/databases/vungle-journal
- Size 8KB
- SHA256 39305dff2f08fd6b273cc9551832788b12390a53bbacc3cd43141cbfa5d107fd
- MD5 f382f665dfef88dde28dbee390b7d778
- SHA1 1e5c1cd11d9e913d8e34d4fe182345abcea742ed
- SHA512 7ea44a64c6de53943b66ba165617cfb9f306339ed70e9489dd4280a9d0250064e3bcda8c987812fb1844bb8b0c1039b229f3edd02e2c6bf00ce413ae54672094
- SSDEEP 6:7+/l9unFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKZl//WGp:7+tQnBqLJdTRmBEyPb0Xf
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.appon.legendvszombies/files/.YFlurrySenderIndex.info.AnalyticsData_5TPWT9RSKZH2RWH7MYGJ_182
- Size 88B
- SHA256 4657c78e1fa9695e8406c22737eca667ae52fd3918d979b6a6f7518ab31b0197
- MD5 5e5bc42717caed3a38aacee12d72151d
- SHA1 01c0a8e554133abfc2fcc7530a8132d2309f44f8
- SHA512 082da39d35c3454d07f2d02bfe3785b9b835f7595ef4186d2818c82590804eb5d2b9f9c185f32e466437f7e51496c2d29009b8d0140fbfb7e121002226d987d3
- MD5 SHA1 SHA512
- Path /data/data/com.appon.legendvszombies/files/.YFlurrySenderIndex.info.AnalyticsMain
- Size 72B
- SHA256 b57a75be88f0eeed1699ce5927b51c7f031fed86fd0a82a9c279bb858c068f96
- MD5 67077b6a45ae27a6e1d3ff91be8bbf08
- SHA1 4b77a12a57055bcf7c6535af37c8351aa163436d
- SHA512 bffd9966a4263e9a3f37fd5c4a08a36fab708a089d9ab69704ec9ef8e5e80472adee388a19a5bbac04460ebcf16ef156d705219de8c1f605ef8bde6265fdcd5a
- MD5 SHA1 SHA512
- Path /data/data/com.appon.legendvszombies/files/.flurryagent.-329ab78
- Size 58B
- SHA256 0f869b0218049807c50754dece26cb24bd74f11653353cb059468151c38297d8
- MD5 d0af6fd3678dca44c88eda9597337ec9
- SHA1 d6af7e639fc9f4bc5465a195fef3e915929e56b6
- SHA512 9d2d0d0f749df8935700cf11f17f74c5c5a0c9dd0562efcb677f7a8852b492a646995be45f6de0b18db4c1b50b0f280e37dc3c1a4f971f5c2683fd947fd2fe74
- MD5 SHA1 SHA512
- Path /data/data/com.appon.legendvszombies/files/.yflurrydatasenderblock.0b319e0c-cb61-44cd-8bee-36032c03989c
- Size 315B
- SHA256 652cc0f6af46c954de9f8b3ee9139ecf198738780c809240effe732fcc83ec15
- MD5 b3e3f6057ba0bca76cb645d6eb974076
- SHA1 1554c654fa823378f82d803c8cf1507f028e3f52
- SHA512 cdae3559e2e05c03ba062ea5c8aba145337e01913c40468c66327ac9ee4c5b486572bf043128548ff227b987aa69cc061bde74f4ddc1952e76b0db7472d5a410
- MD5 SHA1 SHA512
- Path /data/user/0/com.appon.legendvszombies/cache/1582435991586.jar
- Size 20KB
- SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
- MD5 fde2ee00cbd121cfab5290b078aa3ceb
- SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
- SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
- SSDEEP 384:Za0jn+huC5sMvRuvypj6f2ZzJgm+poK+l8m4qxXpj/7wyxBLBiok+9VQ3AKm8:ZU5sMvu/f2/gm+pDAPzj/Dip+9y3AK7
- MD5 SHA1 SHA512 SSDEEP