33401ecad901aba45fa1cfc1a8e6a95557d0bdc86669c03af0b339d518124994

Analysis

max time kernel
179s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
21/05/2024, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
620b040f2b9dc535a4eaa084260a2de8_JaffaCakes118.apk
Size 5.9MB
Sample240521-e7ba3ahc85
SHA256 33401ecad901aba45fa1cfc1a8e6a95557d0bdc86669c03af0b339d518124994
MD5 620b040f2b9dc535a4eaa084260a2de8
SHA1 32c6e529db788e678558abc78d8cb1e8da804394
SHA512 9222704f2d82181560b2227438179fbc5fdbc1e944d6f3237850056d72183ff82b46ac3bd84767602e21695beb84d7c165ad879a01986d0515c67bfd0e324cee
SSDEEP 98304:5fsadOybik4gpS8U90VUJyr53bgOE25JAOPArfT6+F95UHmZkgs:MLaS8U9qUJyVgORbPgT6qKz
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.br.pizzamaker:Metrica
/sbin/su	com.br.pizzamaker:Metrica

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.br.pizzamaker
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.br.pizzamaker:Metrica

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.br.pizzamaker:Metrica
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.br.pizzamaker

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.br.pizzamaker

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.br.pizzamaker

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.br.pizzamaker
Framework service call	android.app.job.IJobScheduler.schedule	com.br.pizzamaker:Metrica

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.br.pizzamaker
Framework API call	javax.crypto.Cipher.doFinal	com.br.pizzamaker:Metrica

com.br.pizzamaker
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4252

com.br.pizzamaker:Metrica
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4292

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

credentials.dat

Path /data/data/com.br.pizzamaker/files/credentials.dat
Size 465B
SHA256 7f0e3bce95a2de0d382c523bec9f3435c17c349cb79be64e4e5f07ba780a39fa
MD5 dc36896562487d95396de14372776d1b
SHA1 6f705cd98c8d541e7f2db6c9450d855980236a74
SHA512 48e86727058deb91d14472db7acd2809bd83dad163eb3e976fb2595cfe22f9381fd049f76ed1c7c68246bdbc8de58c44318c10158e5c5c474c2af5a798a7b2a4
MD5 SHA1 SHA512

Submit Download

credentials.dat

Path /data/data/com.br.pizzamaker/no_backup/credentials.dat
Size 20KB
SHA256 d0e6438521c14c2f46ec9504ff1f6d22f53d435a5c7fd66721ae7fbd0ba45dfe
MD5 629a807bd88a0e75d6923ae816edd18d
SHA1 22e22bac5f15d06b260470c00b0891ba4e9e4062
SHA512 3ea284060773de06d850a31d4e0e162cf25e78247c0b6c98da3c7074bff1ccbd341d3cb900e4325d378ebedb2175dec8f803543e9951e7c0f45d96f8a33e8817
SSDEEP 24:Y3Vy0rW4eC8G2MpH1iEY1NgncNJoEMonp7ncCEq:YlBa4eCjLYDgncXpncA
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.br.pizzamaker

Path /data/data/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker
Size 36KB
SHA256 ec5b56744ae7f5b9fa4223c237be9b8208a3f24801b7110291107ed0ab9b9d69
MD5 2b5accad9e7c3457e6382aba47761b61
SHA1 b2575fb6950e4d07e9de303c8d1c1126d8dc4d5d
SHA512 f6e1458dd33ae28a30b8cf0e5088c2ab3ae78785da4c7670fdc381537129ac8887e4e1d3284ca3107a45bd1ac35b229536534b729c1405f73fdc569b21ef454d
SSDEEP 48:T7E8WctFMkUe9kftcPS4EBWHIbZ3GWHIbZ33k9SIyfjL6khB9QuQIOy7IpDsyvA1:fE8LtFNpkFca4EBrbFGrbFNyDGbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.br.pizzamaker-journal

Path /data/data/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker-journal
Size 8KB
SHA256 8b2fe72563a77a193e045f193cc6f671e29e0d34313b86843513e773144735ff
MD5 f9981fd08896c949fa78260db1fd0d3d
SHA1 885fb6dbf40a02248780667d8113da8a908f8c52
SHA512 0970907c05323afdf965e21d301b09ee4ff12e340d22ff00fcc51f936c0c31f953ac2b1182ce985bd5f8419e9f41ea5129278f2fa931084d2149a45cff404199
SSDEEP 12:KELttbfNUMpH7qMUdldsIQBncQmpdDpMz3EMNTpSguQBncQm25EPzn:KE5BfeMpH7ZEHsIgncNS3EMNFnncCEzn
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.br.pizzamaker-shm

Path /data/data/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker-shm
Size 32KB
SHA256 852fb38ddb59c4e5b642860a67db82b55539a89855994e7e4affffcb17538d22
MD5 ae4e50f465e6ee3efdda896d42147dd6
SHA1 b8419e4b6fa59d64f24474c97dde6205dda4c342
SHA512 e3fb0c2c3388068412ae08b5d7ee9a837f81cdb5400a2067b0b1c5d8a73d33a6330f78b788aff5793880ed4d2fe1e868f968541381f28fa924178d2faf99ae40
SSDEEP 24:KV/LG2MpH1iEY1NgncNOioEMonp7ncCE:U/ILYDgnc0Wpnc
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.br.pizzamaker-wal

Path /data/data/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker-wal
Size 402KB
SHA256 b11d9ec362b3ede0efab8489b175d4a0cb0aaa2c0628abf687d4b4f138538632
MD5 5835322e0ab719e9cd5bdc686d360ad2
SHA1 b4070b3af284568ea93bcd16a9e91f4eef19deb0
SHA512 1d5665c867d3b327e454572efd4bbdf96c26e2bfb7d6c9c455af906c42ce699a9cae7b25e0b2d4f553ff1718dd72eff5b1ddc55ad9c4f4aa77aec055a159699f
SSDEEP 768:u8kFCScCDPoDa42Ms6zGuc66v0aSRlKwaZIqB+:l
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180

Path /data/data/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180
Size 4KB
SHA256 fd9496d9cf339dbd257f81dadeba50959151af19fd3267444a7a18f1d5d17519
MD5 ff81c8a5c1f0d278401dce40d7890865
SHA1 c1b1f2fe8ea558b16ff0b64d89ebf1c2979c4101
SHA512 f844889e35d29e3cd1e22d5f1ff10cbbdb168c424f13fefa554e5dd7721f21ef09eb1a0e380fa1b9b96f154903dbb59d89e79dc731ed0e6e7529c1163bffbc7c
MD5 SHA1 SHA512

Submit Download

db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Path /data/data/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Size 512B
SHA256 e49010fbad9d95780da7c443eedf3ea2687b87249c39f0c34ccf6cfcd8213610
MD5 edc95c933c20538d4d81c90debdba946
SHA1 33bfab3c86b6a56db2d35faeef3cf1ea9a373318
SHA512 b81259c7cb6abe7e3566ed409baccb50b1947efbacabb816e957be93394c025b2987d72ff4dfa90671b42e119fbc196248f0e49249c121d22f439726753890dd
MD5 SHA1 SHA512

Submit Download

db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180-wal

Path /data/data/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180-wal
Size 140KB
SHA256 692590366693120dbcbf283b57830812c53c07aa0659341103cc80a9ecfd367f
MD5 70d5dd9a0e00c00ea289b5dc21504d40
SHA1 9befbfdd82bd17c53cba1d0fbbd4962ba792e6f4
SHA512 95052730ca428afc3082b7773852688c17b4ed6d85560f688e73234c9cb955ecc73d6bf4718fe34d6a8a74f64e0ec6ea61f7a53573dc7927e58df15735120fd1
SSDEEP 192:xKdrNpkFcGJaZ2QXR3XhPE3P+ihm6o7rybNP:xM7pZ2QXR3XhPE3P+ihm6o7rybNP
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db
Size 20KB
SHA256 26e2e289822f6aa34b8ff4b29e25e8ae469997b1b71f77cac4ef428aff551588
MD5 cbf76ce4b48f12aa79c97bd4993297df
SHA1 87308d389cd3fa49f40d1cfcffc19e4dce832daa
SHA512 7ea1abd94423be737c954e305324f8761960a9265397efd977bb004cf33ce7c3ae44bd4c7fd6dda31fe06da8eb956d762f593c5088d0c553a888d06fc820d4c6
SSDEEP 24:K5Nw/LK2dMpHqwnEoFIgncN5PYEMwRusncCEwQgncN0/ngncC:e16oGgncjBBncOQgnccgnc
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db
Size 20KB
SHA256 3e17649d43d42d9e056480570caafdf56237c9c4141d41e7301b37c25c8c796f
MD5 d71e6963e4209af440cf81f1a0459fbf
SHA1 2d8b65fb2a67481111f27c9299beb331f523d65a
SHA512 96d2e76dd690e2b2676240bf6ac07e8fc9a4da26e308a6130faccc1ecb80c1caa061854d1e21c5a6d4e8e4361ed6b56803f428fc70cd12fea0836bdbafa46d0e
SSDEEP 6:7+/l/DltAScuGsGFLuuQ7GjBU38wsGTV+GNERX4PBX4ogLugMBX4suuKfpqiOw:7+t/DXlcGtSBw8w2RmBEyPbAVOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db
Size 20KB
SHA256 3dbf28ea5983f0dc2d1f012b666219bf75e7e13ed73de897a9b68cf6bae2a20f
MD5 06956fcd61dde81412cb470eaaf15574
SHA1 d2c4ce7f735d5f7d834928e5e1b1e635d1edeed0
SHA512 8116faef3c3ddf6433dedc38420fe569e29a884cdbd7dec8bf454a22db41f9f5fd80b14a5c36a2357f9bc448024c77f619ab6f1a0b71fd2a195334b7d4726ba9
SSDEEP 3:qqxl4qZl/1kkmYpduhz/t6xs96qjj2sY/9q7q5qtlx6RpnYstxs96qjj20:X2ymE6HjKsY9q20EYswHjK0
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db
Size 20KB
SHA256 a33a5aad31386fa915389969094d1998d121b484f832f9a148905d7abe5d6ec9
MD5 2caab203846a8538a261005a43c66a55
SHA1 f94a79e5e6c1711cf7567f7766e4d81fc551c56a
SHA512 14801a9ea713bca9abba43615c1d0483a31ed83835451e9765f03b0553b8f7401281c381d271801ab0306352303762e68fe365e0b19a18d8ca30db4060d6d3f8
SSDEEP 12:KAdH/dCIGN+QBncQmpdrUQtJ0I/ntRQBncQm25ElqdAD+QBncQmpd62KQBncQm2p:KvGgncN4I/ngncCcVagncNpzncCp
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-journal

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db-journal
Size 402KB
SHA256 eed1376685087bbd6be03db0f2b5561d6654bb96afddb46aa77d6a6243dcbeb2
MD5 9d9cd49a62ec25947d3212096d224ea2
SHA1 ef7cf73fa6bd6c4ea5d3fc28b44c5cbc07c3b7da
SHA512 3b3b07bdb4b4976de5d09748600152307520d830fb4097f93d653846db4f742bba91eaef882ad4e9bcc6a868cb9099525773072fcf4a0fb019be36010d0f4af0
SSDEEP 192:5WXATX5AquNw7HYijQoAZk4Ab7MAsZYAd6TAm2NAPMXA+/z3+jAhwOA6gxGAjrKi:zTYiCEM9XzfX6pXrYiLB8a
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-shm

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-wal

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db-wal
Size 32KB
SHA256 9a876d9891b89677a3c753e01c1e4f8b08697eeecc059c9414dd147f4dbd0b6e
MD5 60046a39a3bb71991efdc7540449f31b
SHA1 ee87c14841ff2c1c238f5bf75b57c8dae288e97b
SHA512 b022b23e140c49ab1aaacf20f84ebea5c26ff2fa3981becfae87477a21a2231a31a5b67b1ea516723889c55cf78d2e8d624758552f3ca6a363cbe8a57f862787
SSDEEP 12:KTe7eqzdTRswyPbP/ZeElG9AuOwClOeq8hwfcGtSBwI2RmBEyPbP/ZeFVske9p7:KSaqzYwSP/guiQq8GfcQANGSP/gFev7
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-wal

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db-wal
Size 8KB
SHA256 d88d72d192d4f774d195bd9d0a82d3612465493c303e9bc442436c902f4212bf
MD5 8121e7d43cab7d6284501d51bfe1b599
SHA1 b3691172dda647c3a1ffa76aff47dfebeb571ec0
SHA512 c53254d127f841dd1917c62d86f906608255dd5b074f14a95919883ba16ef42b9e6a8f13cb8cdf2c18d94cab02f56aa14dc917b5e33b3da53d64e8f4a8637c81
SSDEEP 3:OlH/lZX1Xnm/7//Z7T1XrVolvqxl4qZl/1kkmYpduhz/t6xs96qjj2sSolKRXY7g:KwTNX2ymE6HjKsh+I7zF70EYswHjK0
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_client_data.db-wal

Path /data/data/com.br.pizzamaker/no_backup/metrica_client_data.db-wal
Size 32KB
SHA256 b388083c934630ccd549615042e33e80fe87d97df751437e0429948410b99533
MD5 d05ed22190098872f71f9cee98c37eb7
SHA1 ab3e6359fa124528b7e30fb3d271aedc6982ca4d
SHA512 d93fb816cc182555199dbf38dca95aa7ca887d8c26019ffedcec744b4f73e45b81bf217578273abfd6f42dbfa1b7de108183f3dcdd61ad8f82a69df09b945e34
SSDEEP 6:KY+PdDqrvxC/DPGQBnR62g3AmzAnVtmE6HjKshP+E/Rl4QBnR62g3AmzS5EYswHz:KYsdDEAD+QBncQmYd65KQBncQm25EC
MD5 SHA1 SHA512 SSDEEP

Submit Download

metrica_data.db

Path /data/data/com.br.pizzamaker/no_backup/metrica_data.db
Size 44KB
SHA256 d025c7354e78540ba0b38fecd1546e9978a54483103eb2bc5c30f126c0d47ad4
MD5 4ddc489a4e2092581dca07a41af10817
SHA1 274ee22f51b9a142f4e3f64a14616e73757810a1
SHA512 c980a4ad2d8db6e4a5fd19e8da465523abc5b25c0aad00c53b720f937186cd9cce641769d6c46467b410babc9193f7fd4cef234179b263742d509378b8ce5726
SSDEEP 96:HDP6PRbYmRNS+AMbs7jYijKq1Nynf0S5SoR3sA7F:HT65ZVAMYHYijif0S5vsK
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads