Overview

overview

8

Static

static

6

55a72fb1b8...18.apk

android-9-x86

8

55a72fb1b8...18.apk

android-11-x64

8

Analysis

  • max time kernel
    179s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    18/05/2024, 16:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    55a72fb1b8a8e144012840d0d3e63d82_JaffaCakes118.apk
  • Size 31.4MB
  • Sample240518-ts8ekscc38
  • SHA256 b229e10a82ac52b760c069f94754df2850e21fcd92a5652b9ee9feb5740f298f
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
collectiondiscoveryevasionimpact

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    evasion
  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
    discovery
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.tuokio.soccersumos.kyx.m
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4596

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        gdt_plugin.jar
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar
        • Size 126KB
        • SHA256 d9b02c86d74519a646dc7a56f6bf89f0394ccade23cacd7ebc08d080f5b927c1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        gdt_plugin.jar
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar
        • Size 302KB
        • SHA256 4f1113e0affae6b92c252e70f4b93bd74589e46f5dd2d475199b7a6ad00778b5
        • MD5 SHA1 SHA512 SSDEEP
        Download

        gdt_plugin.jar.sig
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar.sig
        • Size 180B
        • SHA256 c8d0a365ddce81dab25f8d3143ae7e58a46199d744462fb51488db697656e248
        • MD5 SHA1 SHA512
        Submit Download

        update_lc
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/update_lc
        • Size 4B
        • SHA256 0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f
        • MD5 SHA1 SHA512
        Submit Download

        update_lc
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/update_lc
        • Size 1B
        • SHA256 bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec
        • MD5 SHA1 SHA512
        Submit Download

        0M3006CS7U0ZC2K3-access.db
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db
        • Size 20KB
        • SHA256 950dcb46fb427d6c603ddf7b05954f5dcd02840e0a0657a40b71d0d6ebf488f0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        0M3006CS7U0ZC2K3-access.db-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db-journal
        • Size 512B
        • SHA256 ca11ac4c88e1260ad2b0ed7e16c6ba9e2472c477aab4c0062128b27f101c8e6c
        • MD5 SHA1 SHA512
        Submit Download

        0M3006CS7U0ZC2K3-access.db-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db-journal
        • Size 8KB
        • SHA256 f2ecdf40e4e64ebd3fd97e054e5e3db81f56fc9375dd7e2c0cb3f6dcb10c23b7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        0M3006CS7U0ZC2K3-access.db-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db-journal
        • Size 8KB
        • SHA256 8e1c2a46867aa8fcb61843eea1ae65e236e462ddfe7172bd938bab388c64fb01
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ownad
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/ownad
        • Size 16KB
        • SHA256 6d517767b4a447861cd669c54712a899c27c90e1729621326ac2476071225b81
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ownad-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/ownad-journal
        • Size 512B
        • SHA256 12ab76f50b282d80103a2f510b4f878831f755d115293091428be1eabcfba639
        • MD5 SHA1 SHA512
        Submit Download

        ownad-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/ownad-journal
        • Size 8KB
        • SHA256 61a9d7d3afec32aa949f9b3e54b90ea5b5b38cac6b87db69bb59da3b60a3bbac
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ownad-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/ownad-journal
        • Size 8KB
        • SHA256 d27c8813c2a3fa87e294767cca42f136687d0d43c36d3a024618ee09b9ef240c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m
        • Size 40KB
        • SHA256 ec62041940c01e9508bfd594a97eb406a1c9a0db60c41dad86f6f0305e3a058d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 512B
        • SHA256 4bcd4738971e5bf522bf3457d772540b94a6623594d7d99cb05eeef091080190
        • MD5 SHA1 SHA512
        Submit Download

        pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 8KB
        • SHA256 2f55c2507918d3a4aa89e68a4fe6ba3ab159473c5737adb4f00b2bead7758e5f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 8KB
        • SHA256 35af7bae76cd4af30a310b47167b99b6845f7f643ec7dc0a7ac0a392eb334812
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tencent_analysis.db_com.tuokio.soccersumos.kyx.m
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m
        • Size 48KB
        • SHA256 d4deca0914ec7552429596bcca75d858d98dcb81c76d6164276d1d18e1af5bf5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 512B
        • SHA256 1073143df1cf5b3e856393e4b9735e4a3528271f033ebba57aef6ccf1cb38e69
        • MD5 SHA1 SHA512
        Submit Download

        tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 8KB
        • SHA256 f85f8e49d3020a98b53cdf734f5d00a2396014d9224fe1b9a8762856e9787877
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 8KB
        • SHA256 2c731c64059f9ca39c43b86d8a86d1f9b5071bd6deb7b487d43a6b3c3336ad52
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 12KB
        • SHA256 3a736f4a2ce8831b66ab0655a2121a2f5cb5ea92598c8c002cb2f82721cfa977
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 12KB
        • SHA256 73a5173cb2ed393f0b7908edbca5e818b0953f1641f1c114687826c4f4457ff4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal
        • Size 16KB
        • SHA256 786916195615d60e791b41fd7c1d879776eb44ea01e3da48b2b10e465ae8c40a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dex.jar
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar
        • Size 1.7MB
        • SHA256 b26c7cd26ad5c4cce725a49d3fa9df5d437bf552f7cbc49619d04e612ee14476
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dex.jar
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar
        • Size 4.1MB
        • SHA256 9d7c2786ef5b0b0d60ed43cc3be3da2f3b43c1309dd3fb2532745164711d166e
        • MD5 SHA1 SHA512 SSDEEP
        Download

        dex.jar.cur.prof
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/oat/dex.jar.cur.prof
        • Size 464B
        • SHA256 ac601e6210515128d269de91f2dc6078dbf08bec0fbd1b669542e7d9e51d1f9c
        • MD5 SHA1 SHA512
        Submit Download

        dex.jar.cur.prof
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/oat/dex.jar.cur.prof
        • Size 1KB
        • SHA256 51a5cc807800158a8fa5412f89e4c072cd9ffec242248b86dc369b49a2a8117c
        • MD5 SHA1 SHA512
        Submit Download

        dex.jar.cur.prof
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/oat/dex.jar.cur.prof
        • Size 1KB
        • SHA256 00767ac96db66b7a3883649b5357dd8a716f3c174d8e2917f0b7c3d80827c1ea
        • MD5 SHA1 SHA512
        Submit Download

        pack
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/pack
        • Size 4.5MB
        • SHA256 86de77500c377943548d94491da92cd61566a3a52bdba51ea8b05b6998b493de
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        md5
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/1339/md5
        • Size 32B
        • SHA256 8fb38b187912e8eb63e8e04c59389c2052c76a50629e9c29fb55348a4ec2bf55
        • MD5 SHA1 SHA512
        Submit Download

        update
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/1339/update
        • Size 4.5MB
        • SHA256 070455b25f8784ae7a886f95f0128ef40c993d84917efa3c969c594b5f858a9d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        checkupdate
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/checkupdate
        • Size 8B
        • SHA256 6043f17d6402bf237f74a611ca900a1f3f79543a2e3d2240558cacfc43579607
        • MD5 SHA1 SHA512
        Submit Download

        version
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/version
        • Size 10B
        • SHA256 53b858861d020c3a566b74397cbf669ef6cfc650bb4776dcc7765db6d3e3fbc9
        • MD5 SHA1 SHA512
        Submit Download

        libtencentloca.so
        • Path /data/user/0/com.tuokio.soccersumos.kyx.m/files/libtencentloca.so
        • Size 19KB
        • SHA256 7e713c464d2e1285098b82953d2103e43e43bd42dfcdbdeaccc0cfb115b9e155
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .rwtest
        • Path /storage/emulated/0/.rwtest
        • Size 1B
        • SHA256 e7cf46a078fed4fafd0b5e3aff144802b853f8ae459a4f0c14add3314b7cc3a6
        • MD5 SHA1 SHA512
        Submit Download

        StartCount (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/StartCount (deleted)
        • Size 98B
        • SHA256 aa473895d5317f403d1725d2db23221c753fd20c01e09ad138d05b654a087792
        • MD5 SHA1 SHA512
        Submit Download

        config
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/Unity/492f4e86-3eeb-42d3-b9e9-09e5375aff76/Analytics/config
        • Size 293B
        • SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
        • MD5 SHA1 SHA512
        Submit Download

        values
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/Unity/492f4e86-3eeb-42d3-b9e9-09e5375aff76/Analytics/values
        • Size 152B
        • SHA256 de438490e19a5604a36ea592ebd95ad02e954a7a0adaffe80e4161b03fec6b81
        • MD5 SHA1 SHA512
        Submit Download

        global-metadata.dat (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/Metadata/global-metadata.dat (deleted)
        • Size 2.4MB
        • SHA256 1c9d3b7333f27d6305f8555096bb044d493f2a77e8c121e0e5c08d0509af4a8a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        mscorlib.dll-resources.dat (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/Resources/mscorlib.dll-resources.dat (deleted)
        • Size 329KB
        • SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        SymbolMap-ARMv7 (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/SymbolMap-ARMv7 (deleted)
        • Size 334KB
        • SHA256 ae44695f1cd0a7dc62482f7f547755331a27250b015c5f8bb903fc7e6fc492c4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        SymbolMap-x86 (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/SymbolMap-x86 (deleted)
        • Size 339KB
        • SHA256 81faa4b9a2a0ab499edbc32aa4b773ce2f03957018b563bfabe8162b81f98a1c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        DefaultWsdlHelpGenerator.aspx (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx (deleted)
        • Size 56KB
        • SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        machine.config (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/1.0/machine.config (deleted)
        • Size 16KB
        • SHA256 eded908c507a7a230ee7ad3146d8893cf140638e6eaeab58bff05c95c2f3a7e3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Compat.browser (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/Browsers/Compat.browser (deleted)
        • Size 1KB
        • SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
        • MD5 SHA1 SHA512
        Submit Download

        DefaultWsdlHelpGenerator.aspx (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx (deleted)
        • Size 59KB
        • SHA256 ae044cd9cc2c7c42f8864195125ab440472d657e5f0d55e131f7890bd45c518a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        machine.config (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/machine.config (deleted)
        • Size 26KB
        • SHA256 531d0d5bc30466a8a7ea6c032639721d7f16aab57c9701ef0afab5fdb432792f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        settings.map (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/settings.map (deleted)
        • Size 2KB
        • SHA256 ca89036b7d7f1ae9311a6a2fbcf05fc5b997bd43fd21dd54e11c18018ef65f08
        • MD5 SHA1 SHA512
        Submit Download

        web.config (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/web.config (deleted)
        • Size 11KB
        • SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        browscap.ini (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/browscap.ini (deleted)
        • Size 304KB
        • SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        config (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/config (deleted)
        • Size 1KB
        • SHA256 b585c70c70c88b3e03489361558f5d711c2ef71df9baaf37d92dbf95fbf6cd92
        • MD5 SHA1 SHA512
        Submit Download

        config.xml (deleted)
        • Path /storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/mconfig/config.xml (deleted)
        • Size 25KB
        • SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download