7b8cf4e86acf4218634c83a0bf1e0bf9a99f8eb766e21663e68c17ea39cc36e7

Analysis

max time kernel
179s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
18/05/2024, 05:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
533808a52a50a756872fb4729783fee0_JaffaCakes118.apk
Size 3.3MB
Sample240518-gda5baeb4x
SHA256 7b8cf4e86acf4218634c83a0bf1e0bf9a99f8eb766e21663e68c17ea39cc36e7
MD5 533808a52a50a756872fb4729783fee0
SHA1 3423f37ac1ecf7fca25fa7c605be6b1d81bfcdab
SHA512 8a169b9ffcb32cf82fea5e7d2599eaf80015214a4f6f157d63cd76f3d8c727b2582a1859e1dd2b556e05dc85740d32466a34ce782c4bd7a4d04a13825b48397c
SSDEEP 98304:SsT2L2LQChWe2XPTnszLBzE1TpYpf9zygnHTfup8OtywXL3yyczIHl:SsTo2LQChz4szLBzEBpYpFzfr0
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.ce.android.brand.streatsfooddrink:Metrica
/sbin/su	com.ce.android.brand.streatsfooddrink:Metrica

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.ce.android.brand.streatsfooddrink
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.ce.android.brand.streatsfooddrink:Metrica

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.ce.android.brand.streatsfooddrink:Metrica
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.ce.android.brand.streatsfooddrink

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.ce.android.brand.streatsfooddrink

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ce.android.brand.streatsfooddrink

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.ce.android.brand.streatsfooddrink:Metrica
Framework service call	android.app.job.IJobScheduler.schedule	com.ce.android.brand.streatsfooddrink

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.ce.android.brand.streatsfooddrink
Framework API call	javax.crypto.Cipher.doFinal	com.ce.android.brand.streatsfooddrink:Metrica

com.ce.android.brand.streatsfooddrink
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4345

com.ce.android.brand.streatsfooddrink:Metrica
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4384

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

credentials.dat

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/credentials.dat
Size 233B
SHA256 2af63b771ddb0e70ea4d37e87cb46682e659adf780a1fe892c11d3f17338d6e1
MD5 508e1ea7f574216c2a928015c90c9db5
SHA1 9752ecf0ee6b33cb3991e51f28ca7d848d815335
SHA512 c28bcdd58bd7e96b202d65c3564fe10ec0137626b5fdff02515990744f0a9274b8edfef4137ef470ae6cb898467eef588d269f6f1a646e0a731a005de084fd69
MD5 SHA1 SHA512

Submit Download

db_metrica_com.ce.android.brand.streatsfooddrink

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink
Size 36KB
SHA256 120329095c52602f8107a586d7e687eb8c8f5bf71fbc781dab7de5942dab5b01
MD5 be98e5622114c2959c5a9d5b6f86496f
SHA1 b896fb624d917ad7b6e258893fa4814a92b43bc5
SHA512 29261783ab4ab26e387d305bb78913026ba764b182fd62f8042dde2759d44f9c78facf35cea6846ce0ca753c3d782c105ae01813e0e84cbd488bd013489b6bab
SSDEEP 48:T7E8WctFMkUe9kftcPSkHwbZ3CHwbZ3OCk9xQuj0uHKXIBo2LIiq4tzvPS9wUIsD:fE8LtFNpkFcajbFBbFOA4tRbn+
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.ce.android.brand.streatsfooddrink-journal

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
Size 8KB
SHA256 3b55928d34108bdf64e21c1ae4637303e7ab6234da695387ac7c517b55555f20
MD5 f21c2485015cb1e489a3742d7f7ac6fa
SHA1 ad6a9118f4f41edb8b25d1ca7104b9c6be4e7fcf
SHA512 f0f1d244e4add2021414d66c0b309cb6c079870382e9d1c862a744861be90823507afe33f891cba9979f0b5d7fba7a88e188765b8a91dd855747886a1c5b594b
SSDEEP 24:KIlzwCdMpHaENkZ5+gncQqcdCTDREM1zPRBgncCbr:Xz0RNhgncQqcdMTgncS
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.ce.android.brand.streatsfooddrink-shm

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-shm
Size 32KB
SHA256 f32c95ebb1448121ea963fe5680af71d9287023c657cacc3dd026e701741e77a
MD5 40f550fb906d9ea4d92436d549846a57
SHA1 634ca0a8a04a7807d84cca2eacdbfab91987d9f7
SHA512 36b4b016a5fcca3b3795097e88fe3ebb7947b5a0395a5a4c8bb5387f0f704f355f0e8ff5d9c1e6a6872da80089eed1e76518f9d1c318c0584d7de12aa531d621
SSDEEP 12:jE3HW7lPTWRbewDUzceANppQHY3RgTlivxrv:o3HOWPwVAjpQ43Rg5Ut
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.ce.android.brand.streatsfooddrink-wal

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-wal
Size 406KB
SHA256 42ab207687e479f36f24093d040f707ecaceb8ee1f706c10024e77f2813c04f9
MD5 19dba8220ca3330a86de2888a91a1084
SHA1 3884e362ee519035131fe62a430e389b3791f24b
SHA512 34bbef1a35097963748bb2745177f17715331b9f87b16f3343d65600276aeaa63accda7c5dd4ea3b0559ac03a01d584cb84c06c0d2a098b356bedd21959689aa
SSDEEP 768:s1EpmYgvnWMgvrVrQYe9BrqtM3iOwiZknMM8uhF:hrP
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180
Size 4KB
SHA256 804ec8e2c14d1a4fd019e40a792f193f290a596f87558146b2f69ec2375e8de5
MD5 2d1a807fe986eaf0e46aa7f157d5e84f
SHA1 80ad71c48c9aac3dd01726ddd6ebb2c9c4639ea4
SHA512 413deef4472290479b9ed34ad9fd5f45ad989909162ad87bf3a08de04e9987e1f1a7b581096fbae15117807b78ab9e58d568320b1d2cc47fd6f945ee3598ed44
MD5 SHA1 SHA512

Submit Download

db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Size 512B
SHA256 522e787a7197df6dc4df367156178612dca2ed07ec286397bb64d44dfc2bf3d7
MD5 0545317d8b360e9fc4953cb81e9a01c8
SHA1 8e58da7108a012ac7760914d71d1ce7b9f204218
SHA512 e28d2b85167ccf98a7c7aa7ba1cc94d634e298c196a58ef88a00e248c4f3f66eba7bcd99101b52e0df118cc79c21412c40c56ce5a45c254f34f3489f1d72790e
MD5 SHA1 SHA512

Submit Download

db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-wal

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-wal
Size 156KB
SHA256 9433901494487ec57ae929187dc0455dbb600ee60b48c3455753055d4ba4a74b
MD5 840481b3ba06fcdbff1044b64721d78e
SHA1 0d262f5c51e3bd280aab2210b5364bb7270262c8
SHA512 735be7779c285640c678b25276dda9a1c3a221b7e343fc9c6cc6d6f7cb13d1e70600defd6e18de24707c81295566646479fd39de54cc3a2a02862a3207946df0
SSDEEP 192:O7HKrNpkFcGscaPsp/s8sCJsY1Jsbss+ps39Skpsw:t79/P4/tP/R7CSAn
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
Size 20KB
SHA256 e33d32d212312cb15b60471ef7aa0b74fde0870c8f2f6a0a5e0f1a1705b9d589
MD5 9c25008dd10cb1e803c768397d70396a
SHA1 07cbda0dff819038ae95ce6a78d5088d185abb0b
SHA512 d3a8b3494eb1a14bddef131ca0527ce76068903d02475fb6986b96bded5e74c46118364cd5dcf39a84b04150c5ea1e31023f66cbce036221e4035f32a02ff5a8
SSDEEP 12:KsRvE7rOUXQBncQmThzoQVrgdqJDQBncQm2zZjrqVK+QBncQmThzoQV7PRQBncQP:KO8O+gncHKqyncCdAgncHVWncCh
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
Size 20KB
SHA256 68b6e4db97e4c0944a1433428dfe2c94cdb88f5b9115eaa3d29f864776a1be3c
MD5 88b721d5bfd5923bcd9872137b6129f7
SHA1 2a1b79209d32b1d72351362476bc08aab9fa7c7a
SHA512 718b8cf29a24d6a93f76dfff9fb500d7cd9a24a952fe00091cbd3ca1d1051cc5fb57039867e1b3242145ac88819fdb6db99ef31d28fc6ea53ca415c2083c1f17
SSDEEP 6:7+/l/NWScuGsGFLuuQ7GjBU38wsGTV+GNERX4PBX4ogLugMBX4suuKfpqiOw:7+t/N3cGtSBw8w2RmBEyPbAVOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
Size 20KB
SHA256 882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a
MD5 44def4f6e42c3ec63f229d23af8c804a
SHA1 f5956d9295778b539bced03215343fd3cf7a9dd8
SHA512 a14770398044635a8a8fc0d59dc95af3a97ae78146a9ace3795d600a44098a5ff7099aa3d0ac40442f8ff8c5d3b5ceecb4b360bf47f3e8c7c902879e2e76228d
SSDEEP 3:pqRqRHvYpdlsqitXl6Mpn:pqRQHvE70l6on
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
Size 20KB
SHA256 5bf7340d205bd756e14169218b14d1f7abec23df1757aeed08c9554deb290ed0
MD5 d2827d21188f4a1883deecd434222735
SHA1 f9fd373cef7555b863ff4cde0a2ddaeefdf8fbbc
SHA512 192c148f6d7aa3172c0464151eea88b575a88b7bec087f8fcd7a0d037982917c73553b576616caacd4ab2388302c7fd55c14679524a38dc868c68dcc3624aebe
SSDEEP 12:Ki0IgK+QBncQmThzoQVraSRQBncQm2zZjrqVKHXD+QBncQmtV7PRQBncQm2zZZHL:K5gncHRWncCdtXagncnWncCdd
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-journal

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
Size 406KB
SHA256 bdb7f9a3200a91237bd0caaa523c30d8d28bbd823b1c23ebfc8d659d22dd1175
MD5 a3b5f0352033965beba6f257cac8219e
SHA1 14c5e9c7bf84348b9d8dcca1cfcef684e7954c0d
SHA512 d664ed52307c34b3e8d1da5975b81b9b7f6bb4efce855e65d28bcb2ddec9d2deb047ad354f53b03f67d3d9b3b9a4c7d939466a479f2e08b2b9779659ec09ceca
SSDEEP 192:HOhVfUb7zKZx+SgSnuedsJFfSUEvHDWEBddm2Aa4lddm2AULGo/bBs5G43zMdtwV:GsJiHiHxqMjsJO4H0+jsJM
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-shm

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-wal

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-wal
Size 32KB
SHA256 89882e8dcbdd20cef09c5c7ea2572711cdaa48167bd50f55adc3cf95553f27a2
MD5 56130e0286e7295f9b76f74544558b94
SHA1 ab5608a5361f03b42ff5321e56622f36aa4ce906
SHA512 831c1bf1dccb0e730e891bdc2826da7971e73c5d5d6cc3c03037d8900a47671cafc02a9bdb5af4cf92d9c055adfc4980c2e7b01a4e58bed602edfc1aa8a7107f
SSDEEP 12:KYW3zdTRswyPbP/osUjH1OwClQWqhwfcGtSBwI2RmBEyPbP/+Wo:KYUzYwSP/6xpGfcQANGSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-wal

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-wal
Size 8KB
SHA256 c6bc6b800ef3d2d7df70128e482f90c5819a65753633889024cee593bd219073
MD5 c287015e0a0f5444dce412b9e0700efd
SHA1 0e9c31e0acf44d3a17e9c641471a7b18246e4684
SHA512 1772f596e77a9a0169e8f694dc880450e7fd58dff4b15d8760459b9d7017e78e82d59d26ddd0ea06c3c28dcd50987fe23713b1baee1d8c7dc8634ce901528da4
SSDEEP 3:OlH/l7+cKYUBMelt7f2cFppltqRHvYpdXlglgWz+GbjR9l0tXl6Mpn:Kw5BMeFn7QHvEJlgXhjR9l6l6on
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-wal

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-wal
Size 32KB
SHA256 1e249560d306a0f070af12c58c3aaf3db31180bfd28f4fdf1e8bc716efaf31c2
MD5 c6036284dc9ef690fe308e62fb905022
SHA1 e3596faa9f8d0847e0555756f1597af4b4181c66
SHA512 0ae7c02d91ef29e5a968a6899482d52fa832b95f6dd93a09157b66975e0a6ddd8306d02134fa18cfef449643c79e121e5b9af643e0154d218aead45dc832fc27
SSDEEP 12:KTMKHXD+QBncQmEVrcRQBncQm2zZZHFd:KNXagncxWncCd
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_data.db

Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_data.db
Size 44KB
SHA256 006120d1a13916368f4b2810edb700f796bdf89e9943898e5ce8f33279c2b908
MD5 90e02e5bdad00a2caeb3541299dba653
SHA1 c60f570f7dafc26def5b3ec62acffc2a34b12c93
SHA512 0f2b548e949b5a2a894d3e1516cf843b436c566838dd31bbff56f7a10cdd57975bbc773fa71ab2af5275b53898078ef47308f73dcd030f34ffcbc3b8b5fb1807
SSDEEP 96:HDP6PRbYoyf6k/b3In0yfss3AXIUnJ8lCpltQyyrcmfEtQv6We:HT65u/jIb3IIsJ84lddm2Ae
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads