0a5e9af7c0176025227f0322994c584d9d6ea8ce860652bc0d3fafbcf6da169e

Analysis

max time kernel
128s
max time network
134s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
22-05-2024 15:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

67d0ac9f6ffbdee556d50c0994bbec8b_JaffaCakes118.apk
Size

2.8MB
MD5

67d0ac9f6ffbdee556d50c0994bbec8b
SHA1

0aeedf3dbd1d3b9bbf0227a784542387d831fcdb
SHA256

0a5e9af7c0176025227f0322994c584d9d6ea8ce860652bc0d3fafbcf6da169e
SHA512

e4abb1989864f6028620987632efb6675230407eb3121acb628be83fc933b76c5665f19681560f3fe3130245c95a10531bc406b4f81b25d5b7795723ecfedb41
SSDEEP

49152:soiJYkYiv0YtEtcMwqvFb/R27Nkc6R7Rau6hbLzt8Q8Lo9azQEnvLnBFVwfFcCSE:s3TYi8oJybJeNoau6d2Q8oGvrBFVwf6o

Score

8^/10

banker discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.mopote.app.market

description ioc process

File opened for read /proc/cpuinfo com.mopote.app.market
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.mopote.app.market

description ioc process

File opened for read /proc/meminfo com.mopote.app.market
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.mopote.app.market

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.mopote.app.market
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.mopote.app.market

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.mopote.app.market
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.mopote.app.market

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.mopote.app.market
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.mopote.app.market

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mopote.app.market
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

T1422
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.mopote.app.market

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.mopote.app.market

description	ioc	process
File opened for read	/proc/cpuinfo	com.mopote.app.market

description	ioc	process
File opened for read	/proc/meminfo	com.mopote.app.market

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mopote.app.market

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.mopote.app.market

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.mopote.app.market

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mopote.app.market

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.mopote.app.market

com.mopote.app.market
1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5225

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mopote.app.market/databases/.ua/ua.db
Filesize
32KB

MD5
f750ca123267877c607234a51c8f72b7

SHA1
fdf845f89fd2ef5f9a48bc77ba3f42c001478522

SHA256
17917a699858cb58cfe71771ed3d4767de84d24793e674ab3a9c21a37f91d28d

SHA512
c44ed8606a7fd23d6433de9256553e2b32ea8e65d5cfdb5031310eed9326d4ffee0b399ea3b26aaec6c1b899218dfc931bf12ed6efd6391efe5c7e26dae2c980

Download Submit
/data/data/com.mopote.app.market/databases/.ua/ua.db
Filesize
32KB

MD5
38564ad4c73e5619bc2264b0c44997a5

SHA1
e55f6fe1b20347ad4cd58d77af0b0feb149f63d0

SHA256
1820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8

SHA512
30d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d

Download Submit
/data/data/com.mopote.app.market/databases/.ua/ua.db-journal
Filesize
512B

MD5
de93b6fd43ae6a3a5af603f31f87bcbf

SHA1
ed5146fb5b6ee6c505b05fdd1a038ae7f06fd10b

SHA256
8fcada832748302102f69af3589db849deb8abd8e0b241c33e2d5bfe076e8c63

SHA512
ebe48bfb4fe193e0acf3aac0c9d540bfb370faa4b04a46421253a5a8c1c9a47dc7eb467020c30c40127354c71aa9776b65554c99fa224aa3a760441d3e13dec8

Download Submit
/data/data/com.mopote.app.market/databases/.ua/ua.db-journal
Filesize
8KB

MD5
058a62eaf8331c49a67e6f33e6db97ef

SHA1
39b6f7bf917a8cfe1e11a32eb143c6570c281d6e

SHA256
77e152ef3b8c2943708fa139e80137a3f8203a64c3c14210beb93138d2f4f820

SHA512
98581fed6fd535ccbdc562c0553fbadad2159fe62f75344838add8325fc88f21a1556206115ed5baba853d1973c6841b464b74fb00903a85e1be7d15946d99b2

Download Submit
/data/data/com.mopote.app.market/databases/.ua/ua.db-journal
Filesize
8KB

MD5
c30702c44a68aa3abc4bc6e444d2390d

SHA1
04e1465e2e434fbef876f810dea4086703b8a181

SHA256
5c2d75e798f08645c0ce4741adc65dfdb60f45dc992040be99a84951b23d2773

SHA512
5859d10977c9971398a1c6e2ee968c380cc9ecbf03c264b7928933a8ba81a5241f27913b9f80499db817ab5a5fe6b0702065d32afb20d247d5eda19a6f575280

Download Submit
/data/data/com.mopote.app.market/databases/.ua/ua.db-journal
Filesize
16KB

MD5
b2c45bbfc2f23b91d59fa48ea965b7ce

SHA1
5bdd3adcb4733169353b39134f718e632d081637

SHA256
34e021b91eec6b6a2af820e3d2024b68a10de269281a0c9d22a13b5d715fd15c

SHA512
5e74dfacb41eacdcc101e558c7332d7cacd951ca58e5d1ba0a71a70430d671274e72d6ad1952f6e65528a270a4342dce462e4c4dc6185f065d4bf7c18df549d7

Download Submit
/data/data/com.mopote.app.market/databases/.ua/ua.db-journal
Filesize
12KB

MD5
e3b4e9ec8de5212af40433147787787b

SHA1
ed8b10d688834cd9fb531092b8fd9883378af27a

SHA256
34c82625b5a8d1086dba6a5c54452a812838e8e1e5b2c601e0c18631973d4657

SHA512
c8852aabe6202df97242f2828e67f5238d2be11bec697be64548ee381340895673f4c5abb3b9485815a169f598e4d198899d8cdebb7644647c451dad1d7b3ddc

Download Submit
/data/data/com.mopote.app.market/databases/appstore.db
Filesize
20KB

MD5
9f39174c2317f9fdcaadc9a98bf21c11

SHA1
18422dbccc443f647b884ab40615f891b2c1c52c

SHA256
2470980e9c50612fe2bd959ced61f58aff1a31ff5aa6c7c283fa751dfde984e4

SHA512
da5d1ef83ad1619b5a3d2e3cb95d20775481237b6be8377237393a4777a87b7adf62ffae55b4af3e18080f24aa52fd74324db06ec3023cd21e6967a3ec0bbf28

Download Submit
/data/data/com.mopote.app.market/databases/appstore.db-journal
Filesize
512B

MD5
408057aad0c11a6f2fe72c9f26803b75

SHA1
3002c1e0b93770331920e0faf4995b444d39d2ff

SHA256
4c2034ee217c1cd0c0267be40b350c8fe4fc82c75b3f955a9b7b8da2702a60c5

SHA512
d6b3a094504c8b0a856b201170aa7400c079d0cdfe81e52dcc00d2b7c40cf5b4ebae9ed9637a25f883ff4c05c6fa93b32b93ef1629ad012a0e4cd90400286634

Download Submit
/data/data/com.mopote.app.market/databases/appstore.db-journal
Filesize
8KB

MD5
c96027d913e8edd55ed7182874e84c6c

SHA1
afb09279038d03d8bcf6687c529c9a807e4b9dda

SHA256
9e5ecea520c6698a46b26660d253d0ce4c8c7b0e101f5486c15a79b4c708f1cd

SHA512
2e1c37ba35ff65bd297be1481346593255d6c605d6b97269d784ed1f45ba952880ca2d017476bfb645c715289987d77036cdfaa3d99d7fc86cac365fa1ffbbf7

Download Submit
/data/data/com.mopote.app.market/databases/appstore.db-journal
Filesize
8KB

MD5
e8a903b41e5e4dee6a33c71361e8dbdc

SHA1
08e9d687e887d577f36a1b62c5b01ab65b2d28d8

SHA256
9a235d0802b42726d84197ca76b4e02f9d2d5b3f49833c91d76c915320d6e9c1

SHA512
a4757dc9317bd7f7e74883142f849e162913595d4a412d348c164423a9fe341f39cc0bdcc9ab0d8b3c91245403f13d8c0f52fc2529c04e3684c91d49706d5f83

Download Submit
/data/data/com.mopote.app.market/databases/cc/cc.db
Filesize
36KB

MD5
67c12933d1e0e63d9801a6aa43092ce7

SHA1
b6936908554e4a1986b8eb08289e2d3545e8ff74

SHA256
abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

SHA512
db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

Download Submit
/data/data/com.mopote.app.market/databases/cc/cc.db
Filesize
36KB

MD5
0908e924aa236931dc7166fef6e00862

SHA1
7782648d6d8f6e835bd47058d4852932c096a467

SHA256
38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

SHA512
3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

Download Submit
/data/data/com.mopote.app.market/databases/cc/cc.db-journal
Filesize
512B

MD5
b0c46b588a574534f10b35bf09b09fa0

SHA1
04570751452bc38d673b29daca0f373b8f70d6cf

SHA256
253b70ff9dba5325b3c1454fb5695a95e0ce7e7313a3f3ef7ef04b92b9d27409

SHA512
a5151a1ecce49fac4dce8b7b968350cdce5586b3a158560adc778f6308172fe58dce9d6a1d6c7ba26f1c93b5f9fead6c8a982ac136c47c95f0d8b52c876bc137

Download Submit
/data/data/com.mopote.app.market/databases/cc/cc.db-journal
Filesize
8KB

MD5
069652beda3b11e6a48568408f31916f

SHA1
fff2ad59301a92d501f85e614de07005c359105c

SHA256
f53fd96177d7aa51c958463bf87fc475deb9f52f95e3d04e949bff23512fecd5

SHA512
89f3da3b2282f3c800d6d00470b9b8bd1c2bbde6ec0120b53f890672ca54bf3c7885fe31e0dfa4e616d438d473802c25fbd226ddb05d0e3b7f0ee326d149c993

Download Submit
/data/data/com.mopote.app.market/databases/cc/cc.db-journal
Filesize
8KB

MD5
a9293676fd5e8208de9a60e6e01f79ae

SHA1
8cacab5ca44544494d4ff48739063f2caef1aa04

SHA256
d76e518da138068b07696451326d369637bba9ff534263abcb572901036fe154

SHA512
27636b58a3dd1510c7f74d8101703231a22e7bd60ff0a96b78afb68ad6074418e3caa252f0300b0eabd81ab64295c40983b16a6c630a4c911c59c5d3f545f183

Download Submit
/data/data/com.mopote.app.market/databases/cc/cc.db-journal
Filesize
8KB

MD5
eed97fbbb0256bf42a1e7d249d24d756

SHA1
e16e64c3f7863c3b6c9187a137b5c2f8ddd737ff

SHA256
a87bfc7fc735081294a9902ada47836779093394805ea45c217e542f1707e3f9

SHA512
77e2deb7a0070fa429666df98863bedd819beca7c2cf843dfacbdd69d4c8b9b16e1023327d9bffe34ad0d304a20c5fda490efc7dda42374a42f2c26a6cacac4b

Download Submit
/data/data/com.mopote.app.market/databases/cc/cc.db-journal
Filesize
8KB

MD5
05c803ddecacfffba50cb09805d9d8a5

SHA1
781ca9ad4d0c0b9af826db7b42fd6f03ed82da55

SHA256
b0a22b9b1bbea901d806525759a0a50416c5eda579a5bbf72e563f3b95ba26c7

SHA512
06599d042a37e7a555f8e6f879a5b7d74bef2768ff29feff096ffe9a824f0500e6c7d18816c41109624edfb4a34e3b98cdb98a3492e200dbdf8caccedd623179

Download Submit
/data/data/com.mopote.app.market/databases/cc/cc.db-journal
Filesize
12KB

MD5
bcd8feb5d2eadb5d55b877bb0e305465

SHA1
3a7056ec23238c885ab4c8463031f8c18d61be55

SHA256
f85672e4126d700435a50ef5241764a8f853b2f1ab0fc385b4a444bb53cdbcfa

SHA512
484ec366847129752a599ba4a4f6803592232ca20edfbf7ea36c61fa0900ab7d36788d11d653f787441be272be73464a97d90f50692de2b19f57e3c132d3c385

Download Submit
/data/data/com.mopote.app.market/databases/com.mopote.app.market.db
Filesize
24KB

MD5
26bcd56688721b99023bf3165e842873

SHA1
610b43718f6fadcb9068c19430a14a012f37c778

SHA256
f12dd3c81d592f9b76fcdfe45e0806c518bec9ff7de6005d1601e9de2d3c3b10

SHA512
7fe197c70bcda6e86530e6b1683b71e6620ed76fdb04b968bfe92b982e46d1eeb49fa5826d57d7425c7b775d135e32456983e5ebca69932272b1094a4e312150

Download Submit
/data/data/com.mopote.app.market/databases/com.mopote.app.market.db-journal
Filesize
512B

MD5
20ac26edbda6bdbfc4b3f516109dcfbd

SHA1
eb6c67b0d156f5f70b8e658a46139aa88f5c2d8c

SHA256
2790c578ff5883a845c6066bc1e5376e7412549d91f7628c589c2ec06b2bdaf5

SHA512
dcc8a7e59985096eb6b1b77f5866bdb5794553c95fe44c1029be99214c0a14e9b7bbdee39ad87cc43fb5b5c0200fc66bb0d4fa012a95a4cee46bbff46557cdf0

Download Submit
/data/data/com.mopote.app.market/databases/com.mopote.app.market.db-journal
Filesize
8KB

MD5
6686a28912a1f1a7989fd4304ffe1131

SHA1
7b6a549bb9a1a611419a7fef963df2fcf0765738

SHA256
72bad7412f97afa87c3a2b6dd6cb5cf8aef9a771baa3079a81b57012ce907581

SHA512
91a8f00c177f619324b21e9026b2e96e97d179b4d3efbfb96503d4e34ff018d48f226ac6b4f32fded7b3a883542b96588e8e62ce1628a31e9c5fe6fd6a9415e2

Download Submit
/data/data/com.mopote.app.market/databases/com.mopote.app.market.db-journal
Filesize
8KB

MD5
485b60f50f95841306d17dd6a63b254b

SHA1
fbdb162b08cb73aaf52c3fdd28f8515c44301409

SHA256
e4f19b6758a82f1920d321b3b182bf1a2a13f055e8fb2abdbeea542d3b0722ad

SHA512
6662baa3b85458759494c5bb3d68f3ad9c11cd4506b023ebc6971b85e657235c60986745760b266aeb975b7fc332f52d4aa0b847cf714f8c61257ad90f7c01ec

Download Submit
/data/data/com.mopote.app.market/files/.um/um_cache_1716393666539.env
Filesize
1KB

MD5
25e64b472b9ff8e897a9e62437077936

SHA1
ec0bc1116982c19880b54c1c8003b47c01deae0f

SHA256
9faed97b32702e934bbf2d1510f0e6ca6984061b05fdcf5766885eddd181c144

SHA512
59d0ebe7d7ec4892dcc35f75df720bea84a97b9c19994a67692e35d7baff7cad8dc788782313e6cb69595ae47d8efefa3fa5a8da3d39f481ccd1005833f4e288

Download Submit
/data/data/com.mopote.app.market/files/.umeng/exchangeIdentity.json
Filesize
162B

MD5
a3b03acb0255d9f59ef1e763c6a584d9

SHA1
63ed428f61b91aa9cad6b8d896de1632ee315e1c

SHA256
0b040d2f89cdc3f02959125cf022bd38dd01d3be6800a8257d9c78963bc1a721

SHA512
2fea4c8f13921bd00a2d2cd8453b54263b240a83b8b98b7ccb3392214f3dd60c1467780d41d1bc99cf08c33feccc4fb5d6040140b7fb33a69ecb79c0150a453a

Download Submit
/data/data/com.mopote.app.market/files/exid.dat
Filesize
62B

MD5
8c04cee02ecb204fc8de0f2936fe314c

SHA1
0fd52514dda24b717ee5fbb9852073766a3ef445

SHA256
4fa8ff07fc4d4a21297965d472281a0a7ead24e4e5914a9904350a05aac2d13e

SHA512
a661e1ed32838fe5405d0d4c6a7a644dbe0c6347e10d5e5d2790e5fff240c5cccad6253bfcf9c94f124b640276ec95ca5084d09e4cba0e4a230b889960e7737b

Download Submit
/data/data/com.mopote.app.market/files/umeng_it.cache
Filesize
350B

MD5
79a4b0454a4df046beab08d1ef8ccbfe

SHA1
3377e61806198bc4033d9ee921608e71beee569c

SHA256
6997cd32b95bdbbf6e75166f2e49c8517e5d7b9aada66de728ac47f71ac9dd3b

SHA512
a7228447b941d292dbb4c95c41699ead49abbb87df1bd8edfb670d16c8c0918e8cb3fb363b66883c1922879a99e72ff97cc0888ab89c0bd5f4e39e4153eeb75a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads