663aea545d600b47f6cca3eb0e99944051c46351a347233d5d6e38479fb3f9aa

Analysis

max time kernel
15s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
18/05/2024, 01:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
52838416ccc517e0f087bc7ac0f29a12_JaffaCakes118.apk
Size 21.3MB
Sample240518-b6bzesed68
SHA256 663aea545d600b47f6cca3eb0e99944051c46351a347233d5d6e38479fb3f9aa
MD5 52838416ccc517e0f087bc7ac0f29a12
SHA1 f21646d1c75faa18402f1532f0f8db7a7ff9615d
SHA512 fb4a2eec18716ea4ebf0062b245a16b3bbf4d984e9c7bca67d15840c430c3860846e205cb1ba8526d0dcc32adaf445ef7a74a9ba64f27697b823dfcd61a3e084
SSDEEP 393216:n1gXvlUaj3vDf4oZgYxd2Y9+mYKo6b8ESOGpV/L1f75PPSE2Ci1G:SX1Dr3gY7D+sdb8zO0B1Zv2S
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.appon.legendvszombies

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.appon.legendvszombies

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.appon.legendvszombies/cache/1582435991586.jar	4518	com.appon.legendvszombies

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.appon.legendvszombies

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.appon.legendvszombies

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.appon.legendvszombies

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.appon.legendvszombies

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.appon.legendvszombies

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.appon.legendvszombies
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4518

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

gamedata-journal

Path /data/data/com.appon.legendvszombies/databases/gamedata-journal
Size 12KB
SHA256 91da067ae1cf257df460dcc8f81c6ebc9cad6a99234401451fc4be5029c889ca
MD5 ed3a9adccd45798490baaa5ed78d0f4e
SHA1 35968459903f1f78f800f50231c3b5761cb0488f
SHA512 016d481dde40be79696280097288977887e62e05b6dee351d5db568c608521d8e9a90b2bbe7b779fdc1f41a4d4f92278a1697d7da4af603c5df3a48ffbcb6191
SSDEEP 6:7+/lBSg9a/+ll/ng9bNFlq4yl1al0tt0uO24ovm3gLuMTUNn2UyqOERX4PBX4ogO:7+tP9ZRqLmi24zVMTAn2UvFRmBEyPbV
MD5 SHA1 SHA512 SSDEEP

Submit Download

gamedata-journal

Path /data/data/com.appon.legendvszombies/databases/gamedata-journal
Size 8KB
SHA256 a49d4fe30381f74b9d33ccd31ec722b9bf75ef71e9a0d852ea21d40eb18d5cd5
MD5 484ddc8950abea79ffcb1dc4dc5b14f9
SHA1 32bc949d4b6eb1c7052acb34a0f2148c6cc095ca
SHA512 1a55b0c5006254c9f57e33f7a9c717c5b83573a1540b3ec7de7586f1274b458ea814790a168bd5f98a97224b9d3b492fa4af0a9226625f64f5472a70a4ae8939
SSDEEP 6:7+/l9kl/imdO8ng9bNFl8l/yl13l0tt0uO24ovm3gLuMTUNn2UyqOERX4PBX4ogY:7+tzmMUqLyK/24zVMTAn2UvFRmBEyPbL
MD5 SHA1 SHA512 SSDEEP

Submit Download

1582435991586.jar

Path /data/user/0/com.appon.legendvszombies/cache/1582435991586.jar
Size 9KB
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
SSDEEP 192:uGJqbQwgQYuNUnEV4bAa0s/ombgmdxjX5fGpTVHb3qX:LkMwTTNdlns/ombJB
MD5 SHA1 SHA512 SSDEEP

Submit Download

1582435991586.jar

Path /data/user/0/com.appon.legendvszombies/cache/1582435991586.jar
Size 20KB
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
SSDEEP 384:Za0jn+huC5sMvRuvypj6f2ZzJgm+poK+l8m4qxXpj/7wyxBLBiok+9VQ3AKm8:ZU5sMvu/f2/gm+pDAPzj/Dip+9y3AK7
MD5 SHA1 SHA512 SSDEEP

Download

gamedata

Path /data/user/0/com.appon.legendvszombies/databases/gamedata
Size 20KB
SHA256 bff2c02064bf5375631274e4d5e1eb4860a69a2e5c238d17534eea2d5c5bda8a
MD5 5a30673391256aa21f290a422ca10df5
SHA1 3e3565a52149a45da258a9dec4de6ccfd13e27b5
SHA512 dc21c038907070b69bbb2cc73a15f52625cff3b00980594bfa8993bdb3c1a13468cb17b98f6fbbeccadf2a0fed7e138823b464d8eb465fdded87fbb0b8668855
SSDEEP 6:l9bNFlq4yl1al0tt0uO24ovm3gLuMTUNn2UyqOERX4PBX4ogLugMBX4suuKfpqif:TLmi24zVMTAn2UvFRmBEyPbAVOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

gamedata-journal

Path /data/user/0/com.appon.legendvszombies/databases/gamedata-journal
Size 512B
SHA256 155944497088396ee0ff6718ad394958e8b080a744fa3aecbf13d73d55b41b42
MD5 dc81e9ffe2447f28a9c6424969a337d4
SHA1 4a2202f4ae60b3dc3c619e918c94a9b9676bf679
SHA512 991ce382deccbb29ea8afe7268eda54832363021a41ffe8c72288d2f5390eb712f15208190fb636d55a18e0e83ddbd1df01bfc11e0df3ca91a98fddb071d39f9
MD5 SHA1 SHA512

Submit Download

gamedata-journal

Path /data/user/0/com.appon.legendvszombies/databases/gamedata-journal
Size 8KB
SHA256 f5dd743b1507ef61c88de26a0854aa3da8a230369d247f4c00cf8a8c50d7512f
MD5 110f010668636c9a26751bfe9a06c8ab
SHA1 479a3931767c270b7cc421601f814b48dd15367a
SHA512 bffeb66dbf59996036f46276ff96b733785e8f389948ab926004026f1717c254a5d7a2c738a2137e88467cbb7e73668ef0b4deac7b93bc9fb8ca938ec02d2c57
SSDEEP 6:7+/l99n1+g9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKT:7+tUqLiuWdYRmBEyPbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

gamedata-journal

Path /data/user/0/com.appon.legendvszombies/databases/gamedata-journal
Size 8KB
SHA256 f5f02855a770879b2c544ea88cc61cd4d3e54d636dce83f85717338ad0ce174a
MD5 83bda82360a8e69cfb98f414ce5e0602
SHA1 6f46c072773a6fa2f03317ec39108d859885e3cd
SHA512 61bbce78fed6250df43d98c9266a7e8f839a484a18198cbb44579e38e4806ba25a73f4c400b683be4a6bb5a293510b693f9ba381ecdd2ac32072e9b3c2c500b8
SSDEEP 6:7+/l9nKtgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKLts//S:7+trqLJdeWRmBEyPbFS
MD5 SHA1 SHA512 SSDEEP

Submit Download

http_auth.db

Path /data/user/0/com.appon.legendvszombies/databases/http_auth.db
Size 20KB
SHA256 6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2
MD5 ed710a8968441282a5939621c2771927
SHA1 b6ac28b3e32ea66790c52d6934608b5e71f3d5b8
SHA512 547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364
SSDEEP 12:TLmCwR6YDRAXk3GMmJVMeNZ/tgVNRmBEyPbAVOw:TLDwRV6/MmXNZ6V2GSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

http_auth.db-journal

Path /data/user/0/com.appon.legendvszombies/databases/http_auth.db-journal
Size 512B
SHA256 620d46c4cce069816c7190daa828741ff82cfe7d437933b65c6da8877ca444d4
MD5 b4ec731762f4489db34e16ceee2b32fd
SHA1 f2b569f8fb8c47abd588bb3b7a5c6cc253c8c030
SHA512 e1643448d058dd1619288abeba5038121f1757a9146199eeaf6617ef0c8333cf71a86412aa9fc3811b185addc9f1a99f00e3ad0ac16e5d52384a5b8c56a1c54c
MD5 SHA1 SHA512

Submit Download

http_auth.db-journal

Path /data/user/0/com.appon.legendvszombies/databases/http_auth.db-journal
Size 8KB
SHA256 5f56b9fe5b1b1e0c4e2a4e4d4381bb8323f704878bc587716d2f44777ea3f384
MD5 c8335e93c9d1c40661984a1efc4077af
SHA1 0e011e8f7d195fef9ea64c515c3d6784a895e85d
SHA512 fe5f05ccfd07332e12e1aced71eb153206fedf0b75cf1256106270a0fddfa2c70e3d5f891126f9cbdae91bb4325d26780c4e2cae17b3d34fea5f268b3f925629
SSDEEP 6:7+/l9KHn1AWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKI:7+tQ1qLiuWdYRmBEyPbb
MD5 SHA1 SHA512 SSDEEP

Submit Download

http_auth.db-journal

Path /data/user/0/com.appon.legendvszombies/databases/http_auth.db-journal
Size 8KB
SHA256 d4092a2e98b246ec63208e3ca4211e82207ce56f70186dfc67ee846832aa2c20
MD5 b784a6923490038f02cbd882f900e35c
SHA1 549a438eb7551eae8ca2b549aa7cd4614fa387c8
SHA512 3360a0adea5047c23eb055620067694dbd2f4b1962257f63ed13793eadfa79ff83ceb199b79f7939198a59de763e7d7bcd4c1107e0b1f9157cd92cc38eff73ce
SSDEEP 6:7+/l9FZuHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK9//B:7+tNwqLJdeWRmBEyPbKXB
MD5 SHA1 SHA512 SSDEEP

Submit Download

vungle

Path /data/user/0/com.appon.legendvszombies/databases/vungle
Size 64KB
SHA256 d3a6f4e75570ef598efcfcfc45f3f827af243f45340c72a474615af4c768a4c5
MD5 202561263b04ad944f149efca3bec534
SHA1 ec98a49244e5da035cde3a2d6e34c63e1b2805e6
SHA512 744c876fcc3e35ea56e0c994e51ffe0f821b7b70cac754c98f62ff5e8d2e2092695235076e72c97332bd3edacff6a0b6021ee3a330f8ab9233a52de67ae82f35
SSDEEP 48:T433FfpGnMIgLVHmbbo6uSf+y49B1wSh7ROPVS:CVQMIgpHm4Su1wy8P8
MD5 SHA1 SHA512 SSDEEP

Submit Download

vungle-journal

Path /data/user/0/com.appon.legendvszombies/databases/vungle-journal
Size 512B
SHA256 e5cee6c018159e4ad0e811707e95a3b46b2ce25c9c16deef16b4112b6e86a1cd
MD5 af28cb27b63a32dbfe4b1f42912c82a5
SHA1 b1e712607fdf666de2427203cc3e0f5003838360
SHA512 139220765c78969a1343df6293b699437250d70b5f6b5eee1772edf412cc360ed37932e616a65eb5f536ae7d328943f79bab2a1681327e3dbe7a01e0c4f27d57
MD5 SHA1 SHA512

Submit Download

vungle-journal

Path /data/user/0/com.appon.legendvszombies/databases/vungle-journal
Size 8KB
SHA256 b1f3ed02e468f443334a32f8195569ca5233ad584dc5048280015765209c10a1
MD5 017c64d265957881942a78568b1e536e
SHA1 6c4d0e3ac48e21e84b97e6f361811cf2b4f8d98e
SHA512 d1762b49cde00aa4e7e7c97c7e8686bd6973834758ea2f30d5b44aabe6a6a19b80c30a0d2cecaa47271aeed63e88cb6c223ba121aa233226ccbef92b9d36e6b5
SSDEEP 6:7+/l93Ugn18/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKs8:7+tV6fqLiuWdYRmBEyPbu
MD5 SHA1 SHA512 SSDEEP

Submit Download

vungle-journal

Path /data/user/0/com.appon.legendvszombies/databases/vungle-journal
Size 8KB
SHA256 289069fd22160c9f0e27be710698f12e0951383caad78bdfc00ba6fa8edc1e54
MD5 c7f3bf402fdab2122eba5663927d55ca
SHA1 be39ed8f4326e143cd29859fa4b86f30818d4fae
SHA512 093bab7be86fce9b396be280079c008cd7476878c5b9620f4f7c6d7a9ad1b20ebb584a2c9e6d1ad177320203ef12791e462d960737c530f4e2590cf226c5f107
SSDEEP 6:7+/l9flGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKPIC/N:7+thl6qLJdeWRmBEyPba9N
MD5 SHA1 SHA512 SSDEEP

Submit Download

.flurryagent.-329ab78

Path /data/user/0/com.appon.legendvszombies/files/.flurryagent.-329ab78
Size 58B
SHA256 e15133adaf94b1102585916e1deca356b9c9fe4c25f77c00190fefaec981ee38
MD5 b9aa96fdc6a8415b1b60ba3c9a9d44c3
SHA1 2f931015e31294f9ad232f347822e1f4c6a33f35
SHA512 3b9f283a3ff44cc234214969c522dedab45381a068ca051f619f6bfcf479a447c373307067cf3d3719643a9cc5b7dc9514f7758faa36a6975de9cda8b5174d59
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads