Overview

overview

8

Static

static

6

533808a52a...18.apk

android-9-x86

8

533808a52a...18.apk

android-10-x64

8

533808a52a...18.apk

android-11-x64

8

Analysis

  • max time kernel
    178s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    18/05/2024, 05:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    533808a52a50a756872fb4729783fee0_JaffaCakes118.apk
  • Size 3.3MB
  • Sample240518-gda5baeb4x
  • SHA256 7b8cf4e86acf4218634c83a0bf1e0bf9a99f8eb766e21663e68c17ea39cc36e7
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
    evasion
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact

Processes

  • com.ce.android.brand.streatsfooddrink
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4464
  • com.ce.android.brand.streatsfooddrink:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4511

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ZPkFS.log
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/files/ZPkFS.log
        • Size 20KB
        • SHA256 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        credentials.dat
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/credentials.dat
        • Size 234B
        • SHA256 ac22e7ef797490b55679c2c7f0ab2f41b5ca77fec4ae9fb273c69e23923aea26
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink
        • Size 36KB
        • SHA256 26764eb240c02057a97fadd004743bc049454640603ba35ba28f43ee61ebf9c9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 20KB
        • SHA256 fb1d4496c52fa3a33770851054a3caf4afac593576c48d7a8952b13c070af3a6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 20KB
        • SHA256 82bc1dd90eb49d9c60569b528ef0b1f43f82375c260a7fe9f446ff4f4b21bbc4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 8KB
        • SHA256 03e6b6a0b9a8b35de675edb78650cbd7ffab86f550a3a0972d599fcf1d4e77b9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 12KB
        • SHA256 99a33d2b763cdf58dd4f6197a43447179424c2ac1405b782f5f16494e25205bb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 12KB
        • SHA256 eef5233fe382d910d323566a502683e21e7a1a007ea168c50034031d4c80149b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink-journal
        • Size 12KB
        • SHA256 edbb4c7c7652e9dca4dfcc9945b2ac8236b96ab46a1c7ecd65487f0f0a4f0d30
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 ff8b6a006cd6bad162dcaecc3b24a1ad61d9d44326e0045d3e67f8956d39651f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 e70ccd7faaf0c3640ea1b3c041591cd26f8da75a28a7f6565965aa3758b7d6c9
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 0efca1bc0fd999fcc5a418a4f0d241fc8bfe5a0e3105c1ff11cc954b176a88cd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 04b3e9645a29bb41bced494070c10ab6946a8b0432e2924b5867322f7c859647
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 82f40526097711247a03bd9ad64674f1415a3cc652f0357102f6442c52f258cb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 a163fda72c2e72cfd0ccbbfa44eafebbbf363a8f814de89c64830533bda93f0b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/db_metrica_com.ce.android.brand.streatsfooddrink_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 1afba722c13412aa97a583f4ce03639b9ca2a79035c23b5a6b1d0e572641730a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 8ed5d6b80330786e3878406cec5a400f13b084c5a1d6a92a642dc0d314d3f87d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 64a98ebc499d3b2a89f9cbd4ef6754a5abf860f971ce307f6e2d6db767834869
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 27eab4112954fdacc54c99a665e21386951df2d4b0a895042694a78f171a655f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 c48dff183cc71c5805d9d389ecb867d078481197c9d2e9ceb51a2edd4f5eeb5e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 88a37d5ba598f81a4e3a7caebee796c3a9dc2ac61009fdd8058a9f2d5126acc7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 6ac1a69e52181e928d9f0cff6fbaae34c6977b2a7faff7d9b32ad1124b7288af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 c3747fcf9c0a5aa3c3d9b5c32ea9507177d64e126642d2f2e1f3c37aa5dc9dd4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 69984ca6aa99b5d73a7e67cda260b9ae8c1af7be6d87b55818ac5a4d5b40011c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db-journal
        • Path /data/user/0/com.ce.android.brand.streatsfooddrink/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 67b9f13bbd18e1d9d6ce1f5a1fd14aeb866676296a7d4278dfc987300d3d177b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download