Analysis

  • max time kernel
    176s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    20-05-2024 02:28

General

  • Target

    5cb9efd6353cc7be470364c79ed5e40c_JaffaCakes118.apk

  • Size

    602KB

  • MD5

    5cb9efd6353cc7be470364c79ed5e40c

  • SHA1

    e25edb85613ec9eb997a2b19ec6e0b21626cee69

  • SHA256

    136c126e5946181bdf194d219b882c9d2363c9952ec3e6ba8e0b7823e838a5f6

  • SHA512

    0c12a8b266a15c49888f5b92ac137ef28fb6c3077614bcb9b70c7662de8de25b607143a570cc572ca83ccd240268b289560fd71099f2350d5d23d1e5b63a3313

  • SSDEEP

    12288:XEEaFZvkGGNUuWW1NVwCKn6GAx1d9H1BY+0aTBpqSol2KpEhpX79l:UEaFmFN9v46flH72wOSoMK69l

Malware Config

Signatures

Processes

  • feifei.shasha9.meta.face
    1⤵
    • Removes its main activity from the application launcher
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4626

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/feifei.shasha9.meta.face/app_ttmp/t.jar

    Filesize

    276KB

    MD5

    9aaea567e0c93e51718ba7eade0e83df

    SHA1

    0005116aad1779361b70093db00fed5ac090ae23

    SHA256

    b30a95dff6f65f444472971c8aaf895ffc8e66e0117ce242ec4cb8a8a519a5ec

    SHA512

    2aef1034335d8752f4e25ce6c5823ce03019536cc6e51ee61b5291c77a0f356a2517e0cbe7f2c4cc2d897115dc856449a342cfdc247c9d34d313187d15b2f890

  • /data/user/0/feifei.shasha9.meta.face/app_ttmp/t.jar

    Filesize

    587KB

    MD5

    f72c3d07507c3e26d317e9117ba757d1

    SHA1

    cdede4739e9dd9fd95243aab5e44c24f93f825c3

    SHA256

    1c65834d9ca018c6496a8b9957589d0e94657911b6635dc21a448d78f9238887

    SHA512

    3420714252e7503abc13c99274d767b0bc08671d769460dc61823ab9470e145fb75c5dfaadc617d3a05cf251ed5ecf38ea7e8c1d7b343bca4d7e8296f1b805d4

  • /data/user/0/feifei.shasha9.meta.face/databases/feifei.shasha9.meta.faceb

    Filesize

    72KB

    MD5

    0804140c03f5f26114e3a4cec727b615

    SHA1

    a6cd716a9d24ae58c74d13ec5d51cea1168111b7

    SHA256

    f9174d94f2e58e5decf5c0bd883902d438d185b625b6f2b99820edd8b74c2921

    SHA512

    20777408ecf0c6384ac95c94f6b24b7bed5748bbf03ba6e562d4411e568b3e457312a884e1b26a51883db6bcba864eb82e49a5e2d84caa638681ae15f4ecc518

  • /data/user/0/feifei.shasha9.meta.face/databases/feifei.shasha9.meta.faceb-journal

    Filesize

    512B

    MD5

    1426fff184d545fcc0a3e0ff5f1f7fe5

    SHA1

    b9da8b97a9f873c4045290a5d211daad1b6e7708

    SHA256

    1dd6ce5a5d60977dff3560e31eb9199af29eefcbf97197f8bfd9a0c14f4c4ef2

    SHA512

    709a5f4548b850f0286b3ba02f237f9b583bcb3431b676fbb7011b638d0f4634ce4f622586583323048abc3324aff132f2da4888c9a4b70f53f56afc422ee753

  • /data/user/0/feifei.shasha9.meta.face/databases/feifei.shasha9.meta.faceb-journal

    Filesize

    8KB

    MD5

    b7d52530950f26511806bb8f88cc9d50

    SHA1

    f8fbdda2460dc3a3f4e7b80e8bbc3b89b24c4891

    SHA256

    27c3a3e07bbd43fd696088584cd6ab3c3ee5e3d069dd563fa83ca3c79108ea61

    SHA512

    b3de4d50d1fb54557593f7828c0d99334ee00bb15a6c3714852ce43d220bfe42e7044c94e753a37088a77fa499abbae0dbef51ea2ab1adde1cf26a623060d248

  • /data/user/0/feifei.shasha9.meta.face/databases/feifei.shasha9.meta.faceb-journal

    Filesize

    8KB

    MD5

    a056e9cfaa35cc566793657daf8d0b22

    SHA1

    40f23250caf693b80a9ec96628824553199fc3df

    SHA256

    337a0f40bf05a19b53b77e238b6956a63bf996ec06771d84a6389be686ec91b7

    SHA512

    a2326c79b23cfb31dd7ddd50009e01725d15801d3f00db985d9b3262914c3cf31316af5122c8360b4dd677a3b4279c3b0a7c5a645eb457d661eefd4ff9afd741

  • /data/user/0/feifei.shasha9.meta.face/databases/feifei.shasha9.meta.faceb-journal

    Filesize

    12KB

    MD5

    9d05bada3bf02aab6470e32a23eabfa9

    SHA1

    7f6e4faef0596b1eaba48ec2375837b854461536

    SHA256

    7ad986c3c829d0b3ee6adf5967e6b36770737dd0910cb3b7e5d27718f1fa67c6

    SHA512

    561b33fd6ed54e789212d6a878a093343c5bc82b56b8fde8efe7a5f975a91d1d23560a172889bbc84508c7e82610c7ff5a428f8054f3f65d9f74d85952a93b5c