Overview

overview

8

Static

static

6

533808a52a...18.apk

android-9-x86

8

533808a52a...18.apk

android-10-x64

8

533808a52a...18.apk

android-11-x64

8

Analysis

  • max time kernel
    179s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    18/05/2024, 05:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    533808a52a50a756872fb4729783fee0_JaffaCakes118.apk
  • Size 3.3MB
  • Sample240518-gda5baeb4x
  • SHA256 7b8cf4e86acf4218634c83a0bf1e0bf9a99f8eb766e21663e68c17ea39cc36e7
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    evasion
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact

Processes

  • com.ce.android.brand.streatsfooddrink
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5121
  • com.ce.android.brand.streatsfooddrink:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5227

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ZPkFS.log
        • Path /data/data/com.ce.android.brand.streatsfooddrink/files/ZPkFS.log
        • Size 20KB
        • SHA256 fee3ada2a4a8c0bb873a0e29dd3b701d234400935bec0af332dec79b140140af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        credentials.dat
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/credentials.dat
        • Size 233B
        • SHA256 254f356e1e03e66460bf36be710b81f31b50daf48ff18889a1ddd1f30ec1c8b6
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink
        • Size 36KB
        • SHA256 2153f0abfa95278d57ba6b1a64027a1c6f8aa20248e0f9800fe9e0f0d55f7697
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 20KB
        • SHA256 bd3b87bde6bff8410477c78f424d68e4eadf430157c67542a100d86219c6962c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 20KB
        • SHA256 bc8ea9a0282b68c347ecf8aadd998e418c7a836fb6284fdd3da4465d41378461
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 8KB
        • SHA256 48b57868c87dc2997fd7c81592075bbe550bd28f9ea4c2a3dfed54d0d6c21874
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 12KB
        • SHA256 7eedf25879f4b7095369824e13cf29cbf3c20868eb6f5f64704c41c8b6f2d732
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 12KB
        • SHA256 f479a5f0c20058eec5b4a537b36fadc7ae7d2d94dbfd91eaf84a5556a7cb55c9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 12KB
        • SHA256 0e4861341adee192635e776fae85fcc24bdf79147f822be013afa88b080a4687
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 7a4915ba1521d1b95838afbd0c9b28ad667fada85104737729a3e55b3b55929f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 772bccb1258200e28a4c33f0eb16c1618b93ee56f0474a84f89cb590fb633e73
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 21fb80f6f3a4b4690cf9463b7d0ee5507da3713c2436d263b9df388022f708e6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 da495625041be396f890790a84bb0e0dc41ecd81d3f201320471415440396bf1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 15ce9726325d576fcf0c9951f458499531e6cbb9302e7f76dba406b784f4bebd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 6793e720aa9851ab3d6d1f855c29f689c5d3e42d7163af33e7b2063eb62d32fc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 29761def2ea5d39de1d310b832f0f43cfc5b0c11daef5b02cce7fa1a40c99723
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 0f64c52af04ae13d92432e7f07eec3925d20d8d65028370c2701d0d3bfd6c4b0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 31788d10182d77e1b72cac1498426b52678e82d47c700362e7f346b8361f2dd2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 4f19a63230d7d85a90bbf51a60b374bddf8d96fccf6612b8792b8a5cf6cde750
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 e73931361af6e83701b8d2cb743b5641fbd1ead9a6f8cc53cc7f40286ca92ed4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 a6b6ae7e923273a345ad1efa2f75318036f0e861b09733c89250efc6b4182041
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 3f2a52715fab1c6f05b93f66f4b6b597a22eaecb8ea00b6351b4beabfebfb370
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 e7bf2456afcd53fad6a6164d9245fa9b37f41095574fbf7ce16318ce317bcc7d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 62720c00091647408bb15ef1e65f6b2fe0dbd28900b2f3e51d493263f8fb5219
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 ce61eecb02cdb70c32ea86a9c106345f1b03284c2f304df715380fe1d8df3fb8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db-journal
        • Path /data/data/com.ce.android.brand.streatsfooddrink/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 9e04b7361c720be1a60b07cd877f4ffaeb2075f7a33bf5ff78822e3c87986e8e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download