10e046aebf5edc55dc6b1268f82ff0d302634dc259fa61fdcb81f88cd270cf8c

General

Target

62be1a48220023e087048f914c52a431_JaffaCakes118.apk
Size

9.8MB
MD5

62be1a48220023e087048f914c52a431
SHA1

54b03a053b659a248782598a4248339be88eb45c
SHA256

10e046aebf5edc55dc6b1268f82ff0d302634dc259fa61fdcb81f88cd270cf8c
SHA512

eb095c8e5d2c32616193fafd58469d7d1ea8f5e4b97b409c6cebfaa7a8dcaf2788a38351366521143ef047e74997f984590babdac720497b18396dc8667c76dc
SSDEEP

196608:5fdBEil2/uwZNQ2m1cmmSQznvcktKBkH0GvsjGnTM72wiN:9dz22wrmRmSOn1IQznTW2jN

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	net.kairosoft.android.pirate_en

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	net.kairosoft.android.pirate_en

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	net.kairosoft.android.pirate_en

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	net.kairosoft.android.pirate_en

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	net.kairosoft.android.pirate_en

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	net.kairosoft.android.pirate_en

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

net.kairosoft.android.pirate_en
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
PID:4494

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

System Information Discovery

2

T1426

System Network Configuration Discovery

2

T1422

System Network Connections Discovery

2

T1421

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/net.kairosoft.android.pirate_en/app_sslcache/h.online-metrix.net.443

Filesize
6KB

MD5
31e376878275f8b2d7e8d00b2d574859

SHA1
db2ee8001adf008d832e2d059d93dada12ac15f0

SHA256
78a02294169a2eb97e1d654c9cce1b547824674ff9b3abdb8b9f3993556e042e

SHA512
ca095f2a8d710ce877eca0fee94928ba02508d880d90b934fea67bea57e67e3c5e8cd7e1bb8b623971376ea0a14645e258461a8d2f78174618185292101aa4f1

Download Submit
/data/data/net.kairosoft.android.pirate_en/databases/google_analytics.db

Filesize
64KB

MD5
e41bc57d4e09a1a84d6a194a671ae7c3

SHA1
83ec712798437df10a3daaef541a1a46164e5222

SHA256
a844c9dcb724bd8ef7ac34dfd9e8759d7e102b68756b3911214adeec1db6b2ff

SHA512
2c5adb469c6161da9aa55f90991159ceb7090f4ddc2d7f0bf3f88d1b76496186197d03bf70854449c7b7eb21500082f139c523d389a5fa4d55c2fc72940c651b

Download Submit
/data/data/net.kairosoft.android.pirate_en/databases/google_analytics.db-journal

Filesize
16KB

MD5
31f9eba907f9bf691feb6e27a4b283a2

SHA1
6cc1628671f08d5de88e5b2ee85f6e3026eaa1d7

SHA256
89f1da13ae1cad9fa50ee446a29b5aa6961cb41fd21b983c4848e98a8587b6b8

SHA512
2f765efb7b89df1be3cb5e1f24c1ced6b8ff1bf5b69758483908507ce44d46bceafa56e4bf7253c42d986c2b2556b4e1f59ca9f6ebcb488fa7dc1c5c9e3cb258

Download Submit
/data/user/0/net.kairosoft.android.pirate_en/app_sslcache/h.online-metrix.net.443

Filesize
7KB

MD5
8ab4960800f0b9960ddced240eda0db8

SHA1
5f82d0e09d4235ba67c25212852cfea07f436e20

SHA256
ad5975fe5390178eecaa2596ab4b4e84a3ecf488e8c3ae504cc5bb9e9ae84f18

SHA512
a1c647574fd870e8bc78bb5aa3b49af0c61887a27d57860dec74b4c1eaa58f769bbcfff20629b061d3754d1a8b19b58a7dd50d566cf153236806176a973e1721

Download Submit
/data/user/0/net.kairosoft.android.pirate_en/files/Tapjoy/Cache/305e92b552f0b149f572e401c5e9b4fb1d1c5bbf57888f31b39e47b04b42e92b

Filesize
3KB

MD5
5de4c723cd74e72aab3768c822b59f6e

SHA1
6bcf0e7641be9d5f6a9a360239ea17180c5c24c4

SHA256
634117884ad6e001da18755836bfb8a3ab8140a00d8e8e8a5ff401fb8fe31a4d

SHA512
f3d074e6fba27f33522f58efbdcc07ab5b01ef3c7f86ad62ed4fb15a25441e8b915f9a5160713c01ed4fba74dafbaf0523f2a172a54e5fd8e8008f3799b426cf

Download Submit
/data/user/0/net.kairosoft.android.pirate_en/files/Tapjoy/Cache/72cc2ce4c849a74a571306657b38154530fc013c5619d2756cb44006b71281df

Filesize
23KB

MD5
cebd2eac9e5d22dde187020b1456ba55

SHA1
080d9bf7be8dcd1d0be2db35b9f377313e2ca64b

SHA256
d65370d78e962ec8db098b0209f1de275bc20df21e4889a5ace5c818968c4091

SHA512
3b90a1944af8cbd4f15b2f2c8963e69e3353b47a0ad1205ca79bbf630efd2a66f9e1fd66a3a862bbedc997af3ed29cfd9dde4eb6d2056aa074e24854542a9432

Download Submit
/data/user/0/net.kairosoft.android.pirate_en/files/Tapjoy/Cache/fe34bfffbcd29b1755f133c19aaf4621aef426e082ee6ff530f12b91de36a0bf

Filesize
49KB

MD5
ef998efc9d10eef6fcd3d5dd8149c84c

SHA1
1c5089ba85c24230fea9b646e7c860354f71a03d

SHA256
a84b4119c5ae21da53194e5dea2ee3f9bb12e51da81dcf8f1823305603262ee4

SHA512
d3c937fc1aa8490d5348a73efaab7d28f1af4e20b3e43189364344efbf6abc2e2d6ed6dd03116d014ce94346265e6c293e01545bf246d57d8ea477aac47ec3e4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads