aa6413733750a73f24f45b94362c43cfc0fc0508508e3f42fa4f0e8020740b33

Analysis

max time kernel
50s
max time network
131s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
22-05-2024 17:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6812d89c62c132496b2ea8aa108e071c_JaffaCakes118.apk
Size

4.3MB
MD5

6812d89c62c132496b2ea8aa108e071c
SHA1

ea8d05dcf8395bf283d72cf872bcf04008d75f09
SHA256

aa6413733750a73f24f45b94362c43cfc0fc0508508e3f42fa4f0e8020740b33
SHA512

f23a4a8f5b504c4706ca76bd4b0f2e953707e008b9505e7f64695b9a9209e4266a1181e3a7026d164e78ca65e737bb80aef829af754fc3cc5788827be1ba774c
SSDEEP

98304:lD67R19AUFg30DSyeNETlWTv8WpaiJa3J+xeO:l86UFg3b9N3vfpah5+r

Score

8^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery evasion

Location Tracking
T1430

Geofencing
T1627.001

Processes:

com.tuedayquest.hungrycat

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.tuedayquest.hungrycat
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.tuedayquest.hungrycat

description ioc process

File opened for read /proc/cpuinfo com.tuedayquest.hungrycat
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.tuedayquest.hungrycat

description ioc process

File opened for read /proc/meminfo com.tuedayquest.hungrycat
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.tuedayquest.hungrycat

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.tuedayquest.hungrycat
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.tuedayquest.hungrycat

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tuedayquest.hungrycat
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.tuedayquest.hungrycat

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.tuedayquest.hungrycat
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.tuedayquest.hungrycat

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.tuedayquest.hungrycat
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.tuedayquest.hungrycat

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tuedayquest.hungrycat
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.tuedayquest.hungrycat

description	ioc	process
File opened for read	/proc/cpuinfo	com.tuedayquest.hungrycat

description	ioc	process
File opened for read	/proc/meminfo	com.tuedayquest.hungrycat

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.tuedayquest.hungrycat

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.tuedayquest.hungrycat

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.tuedayquest.hungrycat

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.tuedayquest.hungrycat

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tuedayquest.hungrycat

com.tuedayquest.hungrycat
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5155

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Location Tracking

T1430

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.tuedayquest.hungrycat/app_pushimgs/adwords_bg.png

Filesize
1022B

MD5
baa4da557d56b7c0ac8da3fb3f8e96ec

SHA1
582141c313ddc962142604c5dea11f29756b77b0

SHA256
19eae7f25cfda79543ea12c784cd4870dbba252d6f408bea49320c3ace990b4b

SHA512
99c53ef6ea7c3917a0a82064c1025afb75f6540c09398c9edca8e5c63d4e76a0568b37185534eb0617593f537b9a12b42a2dbc8fed3514be9418038c3e038416

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/arrow_down.png

Filesize
979B

MD5
db45ab95930456e6baddab4e6fcbe712

SHA1
fa0c152e3afd7fa7026b0f688a3c6ea2c27b53c8

SHA256
5c3755a2f79003a4702ee79232d59efad418aa83e30b2691256a44457b0c602a

SHA512
d658b23e0687867f44567ae4dddb1a01cebab15508032ff7336458fa226e592db84217c852eaaa2132226cebd4bd7f74b8144a78aa85f77e979a7a1f104b8582

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/arrow_up.png

Filesize
970B

MD5
20c4a831398dd9ebd8dba380a2e7857a

SHA1
c6db26860686a65f5f402d29d98b358630c10e40

SHA256
03353442682b665da8ccb439ac22407ed53cb499266361581a818d3b267b356d

SHA512
85ca28c7eace2766c4a5d8c8b1df4dc81cdecb241e8d129b9e43ebdcc2f3c7385aecf12afd02755bba850c19260f07635199ca606f32a8ea0d71355f64e4e423

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/bottom_bg.png

Filesize
1KB

MD5
ffe93c95f1ceef187397bb763c992ccf

SHA1
6b082b7f6c55acd0987611b3b9a5aac9a5b06d67

SHA256
06dcc9066f53227b50faa763aed62944dc8d5a1612beba619caae2b1a81b42d9

SHA512
10693e4df14b0212798817d20cde37c88226353f4389968a81607fe7420244cabe2fb2074627e5194ff2c06cba0cb068598ab5078c0dbf8dbe4928f86ced6161

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/bottom_btn_cancel.png

Filesize
1KB

MD5
a7481cc1f04ff397669d5313711676b9

SHA1
6a8a1755f8bae8c1c4236420de731ac5e6479df1

SHA256
7bb0b4de65d49b7256c1083332005aac1f40eb496fe16996657721570b427c0b

SHA512
6cad2566cc0c5b2247a2309180659a883dbdfd7e546c75bdb0683e3102ccc833d63255a5776a466880cba7f7f12666c493e84043c8512ab929dbf357c32609bb

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/bottom_btn_install.png

Filesize
1KB

MD5
6a976eab4bd6a204fff19f363a3e0fad

SHA1
7815e2d7905bb25ecec99c6491e05e498baefefb

SHA256
a2520bd431de7d71c9453f9e808369c694b1214b4d13759fc0a08d5af681f796

SHA512
8f0537ebd9954fe5792421f15e499c71e009d26aeac810672e8d3cce982c4291c64917ca36651f4c7f33f4bd32480c9eb3ee6ee7ffd82d2e08d8147d850ae285

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/btn_install.png

Filesize
1KB

MD5
135b4b02c06ce896c0289c06931523d7

SHA1
219d7fcb9a47b14dc724030a5b22b00e4912c419

SHA256
7bc734fa69ef36df3ed4d3926657a52eee7f8448842586a3320804b7f86c47bc

SHA512
e9ef72d8a52cf365cc0d32d6ac9d333b3fc116b70e87d4279249efbcc0c57bae2951c4c6ecf2e675ab37f6ebc4374898cf75ca3ac11aa3286136b6770d680fa3

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/img_bg.png

Filesize
2KB

MD5
089965b9fb96326ad74e361a9a524e4b

SHA1
528cc6c7a10de9f525919a477c9e20d6b6e93d55

SHA256
d7c9eec30a30c3da3e80d2f7db31ae1ceb542c590f5ce8abaa77f39a16a0cf46

SHA512
b19f99764693882cb845b024bf5ef42121826dc92047532df19ff3e236c5e5e57e1390b942182275cc906fea83c541190325d21c88f70bd1041288b17489a579

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/item_btn.png

Filesize
1KB

MD5
c273f481a2774797a0f67a6f4a042bbe

SHA1
2858e907a559742835b1d820c8fc635ec5f7d094

SHA256
bb44dacdbda4803c00d0d7ef98376a2c3ad17d4c8b33084918a4986c744135ac

SHA512
75ee76ba31b62d0fbf0d17da7db4732664bf083e3848a1c38d82aca70d8fdeda54b3bef06c6df833fb9a4459c7789db2240dc886e52f2d82b50c464d505716cb

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/m_star.png

Filesize
1KB

MD5
590dd3230f50ba57b7a828cf1ad04aa0

SHA1
d8cd7d9cca6d011d3d4f6cea8c76fc3c1a7898ee

SHA256
d67f2ece3ab36175096b96cf121f83b0e44d7bf96fc5c8315b0c26ceb6d53cb7

SHA512
449dd317e61e063b342fe5491f8f09344699ec92a7e46aff6eea231472c55a0ee772ca875f46900de7f20c9d760fe20a662aea42551328c0f3cefe9bfaf82b79

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/pop_back.png

Filesize
1KB

MD5
64e607b18ceed3c184658ad0bead2c87

SHA1
ce0da694a61264c3dc52a42c5e4eef67c267330b

SHA256
ad6e950cabd47d19678ed9e243a954c428e11aefc17b14b03929ff9e7379a7ad

SHA512
a37c72b611a02dbcf6621904e34bd80fa2f0c71b5ff0f229cff91794924d3a8907d5971bc3dddc8a81536e78ec7b92cc1ca4c782ea91bfd065defbd842cdf63e

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/pop_bottom_btn.png

Filesize
1KB

MD5
153c4a358fd2029b62d88c5abc8315f8

SHA1
b8db469b4ed0798040ed2cd7618fb31c143bb733

SHA256
6d7b544ef6694a9440ab7b2fe902a67480f4cfdca37156b12db1ecb4bffd1945

SHA512
7cf959e5fa3bab95af3efe74e56b82d48e393b5ef1b733fd37e2f5f62611083fe58ace340a3b0bfea2227e94cae921714a82bcf64d1bb5834ca73ef088876850

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/safe_icon.png

Filesize
4KB

MD5
5101a78d00419574d0dcc0eb1f4b75a1

SHA1
c4142d79270fddb27f24d6e8e8b61e9837b3de48

SHA256
abe1bd342d024dbe2e1e853af11ce74d2e3d9286a8e44c6d94b4b5e4e7abf999

SHA512
cbe4d2438dbde51d36c19d26afc826d37d8221bd76a6641e93e6c2e6e4e124fedf8dd5ae10c90c882ae0220ce4647d7dd469c53ba5a8c2769e0a4983c5df637e

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/safe_line.png

Filesize
1KB

MD5
1533f88b71966664017deaa78437e057

SHA1
7b68a5bc7a6808a041c05ac7adc5da0fd378aecd

SHA256
ba11714200029dfc64b90b9953f80cdc49f30eaac9bbe8597d949f7a89b52b8a

SHA512
f04b79396404b4cf1cda6ad3ed7af3137b177d0da249d59a818c9a8ddb1e80cd98d078bfee9c352117f8c62303f08c9b3565bbd558a08d5aa07cf07527318728

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/sc_circle.png

Filesize
5KB

MD5
e50c867a1725d1a77477d0a3931266f6

SHA1
1561a6d26dcc43254237e0dd99a8c1a8f0ad7d67

SHA256
0a549f08924e57ce9a5142fae8932efc57eca3454ae80ba8af57553f834be8be

SHA512
88faee49b0db9a401dee69f8fccb96fd2b671bb646a3cdb91d5f53a110e470d9fe027cd36684c77b0aed4e0f19d71522b1b88551ade135d5828ce4f41ad4c28f

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/tj_line.png

Filesize
934B

MD5
83f9aabf34554a65a8f47514703ea69f

SHA1
bc3097db92c0f1821d60779d9b1f712cd0cc7866

SHA256
a5d81d5357d00dcff6099ee28f989711e289cf1e41fc6ef0903640d5ee73fd6d

SHA512
11fd5b05b830a48f658a9767556b8dcdfefc864bbe0ce5278f40c272879326fd03100cf73e2d762c3ae674f2eafc2ae5ea0285e690c4c18c7721ddfeb447bcbe

Download Submit
/data/data/com.tuedayquest.hungrycat/app_pushimgs/top_bg.png

Filesize
1KB

MD5
17f5c25477711a64b0dac419b8d68c0c

SHA1
475301f9d8143ba1548114d1de9272a18298a5dd

SHA256
b0e6d8458712cbb246fd4022cefee92796e55858a2c4f25cdec4dead894006a8

SHA512
09050759dca1837f59ab10d8c2531d986483ce50af2ab5038aefba3e5255fc8f67db1412f50717022b2c54fc39acc5ceab7ef3dcd51b38a61086ecedb885d478

Download Submit