ee9ced2c0fd002ea1a2c7de69783a6514f9d73d478901c6b3b5da65869d5c8d1

Analysis

max time kernel
43s
max time network
180s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
22-05-2024 20:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

688155558731904770da467f6863d2a8_JaffaCakes118.apk
Size

6.2MB
MD5

688155558731904770da467f6863d2a8
SHA1

81df9aadf80b6d069e978b4b4002aecf8081cf78
SHA256

ee9ced2c0fd002ea1a2c7de69783a6514f9d73d478901c6b3b5da65869d5c8d1
SHA512

0a1f1091f4b5804667edcc410582173fb5ff5f958a7d121d7b4c59f0dd3c9d99ead3ff2e03070bf055f05322635e0d6274407d18a8ccc66b07c246f4fa6a395f
SSDEEP

98304:r0drTLhEpUcxh7EMEjze6/SzDWqy7CtyuCCW1QQDVx7efR42SUjNNkvIXkx9zf0e:rxhoze6K/Q5NpsxSUjXX4f0KB

Score

8^/10

collection credential_access discovery evasion execution impact persistence stealth trojan

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 5 IoCs

evasion

System Information Discovery

T1426

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

ioc	process
/data/local/su	com.glutenfreegames.ultimatejunglesimulator.hack
/data/local/bin/su	com.glutenfreegames.ultimatejunglesimulator.hack
/data/local/xbin/su	com.glutenfreegames.ultimatejunglesimulator.hack
/sbin/su	com.glutenfreegames.ultimatejunglesimulator.hack
/system/bin/su	com.glutenfreegames.ultimatejunglesimulator.hack

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

Suppress Application Icon
T1628.001

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

pid process

4595 com.glutenfreegames.ultimatejunglesimulator.hack
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

description ioc process

File opened for read /proc/cpuinfo com.glutenfreegames.ultimatejunglesimulator.hack
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

description ioc process

File opened for read /proc/meminfo com.glutenfreegames.ultimatejunglesimulator.hack
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.glutenfreegames.ultimatejunglesimulator.hack
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.glutenfreegames.ultimatejunglesimulator.hack
Acquires the wake lock 1 IoCs

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.glutenfreegames.ultimatejunglesimulator.hack
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.glutenfreegames.ultimatejunglesimulator.hack
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

Scheduled Task/Job
T1603

Processes:

com.glutenfreegames.ultimatejunglesimulator.hack

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.glutenfreegames.ultimatejunglesimulator.hack

pid	process
4595	com.glutenfreegames.ultimatejunglesimulator.hack

description	ioc	process
File opened for read	/proc/cpuinfo	com.glutenfreegames.ultimatejunglesimulator.hack

description	ioc	process
File opened for read	/proc/meminfo	com.glutenfreegames.ultimatejunglesimulator.hack

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.glutenfreegames.ultimatejunglesimulator.hack

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.glutenfreegames.ultimatejunglesimulator.hack

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.glutenfreegames.ultimatejunglesimulator.hack

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.glutenfreegames.ultimatejunglesimulator.hack

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.glutenfreegames.ultimatejunglesimulator.hack

com.glutenfreegames.ultimatejunglesimulator.hack
1⤵
- Checks if the Android device is rooted.
- Removes its main activity from the application launcher
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
PID:4595

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/OneSignal.db

Filesize
40KB

MD5
2479ff01e32c1445266304f37e9e7b35

SHA1
63a2b50d03eff98a4b5e684f1f95996b78219e6c

SHA256
c276033016c0ae04c4e1a7128d443a01aab24d99c434696ee1b01fef2d3acf15

SHA512
14b24f8be6f9a88e31a2d74f3f13cf9e84817bfe445b8b8a873c1678f274714237b3f1a2fc9c5821c300fc72418e3229439107c2a2ff307007409dee6fdf16d3

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/OneSignal.db-journal

Filesize
512B

MD5
3082074be84f395900630a2a731e6027

SHA1
f0c750518d30c8ee555057f70fb15f98cfc5f69d

SHA256
65bac574cf192689bc57b67d71ff6c3f8461b19a645e2ece44b68a427c2f0ce9

SHA512
312dfbd7405ccc5157a0f6145328f001a76aa8629b21c01639f2e70604e5f175ccc6fda97c68992bf2c0b75b00f0259a4333290305947f67db4ebcff2070d39a

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/OneSignal.db-journal

Filesize
8KB

MD5
93ed3e0901e27cc440cf60cdb42c0898

SHA1
01d52422ea08dc5582ab65b908f89930bdea29bc

SHA256
10e0c0a6f3891b6bc2b42d190a1ee51d0d5b0a4f41b15f14e301de0740441d5b

SHA512
d1e5e8d2e81feb90d9c270b227f8a22833977429026b4fb5612dc2897070d32923ac6b0c2ad76a2838f560ba583b9fbdb18193c7bfd4a30016d971b255351854

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/OneSignal.db-journal

Filesize
8KB

MD5
8d88faadb25b09c132f88e17bb54d8d4

SHA1
b2577fc3abc24da336dbe0eed152f5b4565aefa5

SHA256
4278ec6c624572e04e3b8b451f6fe911b63e2862ceb5f1d4dd9817ba804a6cf6

SHA512
2d641d6b9f84b307d4653be28d3d94a4626d7e9d0e7cb5be768d3be8bc265ef921281916194d7044da2178a10a0ee1759938f75e1b963dab99b8d03878982dd1

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/evernote_jobs.db

Filesize
16KB

MD5
805d118c7d7de8979ff64ddee3db7a38

SHA1
23a6489e6539cd58b5933a859c3652dbf44098e8

SHA256
d13713c08cf9f235cc075ef2cbdc9e76282cc074293d4e7a68036a96b396e727

SHA512
32a3f07602f8bfb16ee292dc44dc6487c7c27829e4e196bc8233250d21b2bcc653149010d6116ea5fd58104562796a0d61898e07bea8ddcce7a76ed7d6106c12

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/evernote_jobs.db-journal

Filesize
512B

MD5
a2ad466017e18cc59e8a41bba3c28a32

SHA1
13ed0646b4d7079ad37c07aeea1cd1484e8661e6

SHA256
fa5f1a80611269463c329e2440d70c402a6457c0b9b5e8ecd4e5e7797eb2e00c

SHA512
08ef0465f5c7b7e1354669e74f7e2187b162f65af8aae91f920aa0f80c6bc587dec6832d5fc056bb110e54cdc08b1857735ea4f36ad1fd6a29b8f1c8f63a0d54

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
3909faeb6620fc0468475697aec70016

SHA1
8eda9e78371d3aafcb34aaf2d88d13d216d5a4bc

SHA256
903b5dc5213b3e1f5f614e44c422197a5c123b65d9a9c1d11ae96c678b579a88

SHA512
f03507761a9ac92c5321009ac5a5c6f10c39ccc01db028ad08bf10bf5b2d8c9569603c06af418d9d8aa0bc65d295ebcd2012a1bd1bef7e70b34e83ba39a28a23

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
08ec7c164e25917e4908c7baba23260a

SHA1
2f7c2a8c61a959a39f943a0812a1801759da019a

SHA256
610758ec368ea82b27808c394eb5db7481427c4fe078008cc77ef064b4ec795a

SHA512
8d5762349c4b39c92c8cb2327d151f5508c39172d2d6ea52bf05c3d2acbc17dc8e34975abc838b299417954fa4f0306acd43061bd409fea4c8c06cbee755e97d

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/evernote_jobs.db-journal

Filesize
8KB

MD5
68262a49d00a9d8de3d85f8061368b43

SHA1
488ab8cf6721c731ed6ecc451f5214f3bd72ca07

SHA256
a0bf77ebbaa2e0ccdc581466517278635b8cdc5ecf4964a654267a4d2e15693e

SHA512
5a057325deaa147aa747f3cb5f28e18dcd650bffd89c7cac5d50aaba9bcb68364f552c6d17dc58575114efd53c698d7db7be8278fc4cc26833fbcfad77358302

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4ef26ed529bef001ee5a1164ec4b0bb7

SHA1
6078cc33304abdb3f5deab846acdfd9cbce938ee

SHA256
0da7260599f180390b22e7e980109af270b3488318a61eea9e9cb9a5ce5be3e9

SHA512
0822ba9200bc2d8558cbd70a2a3360dc6acecf171ce7f17e284fda40828503c8e7ed5266cc3ef65973324c6253d21dfd011085c19af0d8f0031dcac0e3e08e28

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db

Filesize
16KB

MD5
550ee4319f78b240c3bac7998f6b713d

SHA1
02204f07df6347fcdc1dcab40b0096898a430a9b

SHA256
54ed5a657630ce2c2530315899ba7e839991aa7b639bddad9baef9ff8a6997d7

SHA512
3761759f3e34917e459f738cbf89d21baa5f616ac91482ea8057823d6778146222ae0901029d82afd327faae84f8dfddfe5d163eaf4c2c834dcc81596b7f63fa

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db

Filesize
16KB

MD5
42c002f96fd81df36712616bd556920a

SHA1
0736e0bbd713343814161800956c5d1a6e81f927

SHA256
e660c207e70c34afae71d7a883f34e1304ba6b0036ac6de97a6875b13f3cf05b

SHA512
885d104cca7ef5c9034ebd7dec1ebbfdaf45d71a728d45ba2696fa2536fb1caca81ab36f323f6a138507130b19086e123f0df8c38d6acc19a7037f8a70b56bf7

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db

Filesize
16KB

MD5
aa42142fdb3f393044c8261de188447d

SHA1
5897d7e593b7d52efa833cddf32a038e8756913a

SHA256
e32bd42301ab5d322aefe57584f6f1106c09cd236c0b7c68f7cdfe27fe7c18ce

SHA512
867e25be56d3b4c21fc9c883f770a0d8d41d9eb8f4e6d9c3744cbc0b75d59ce14f4446f538547d1b8f9583e7d0127dd47163baccfac2a70f787790f79c5a8e80

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db

Filesize
16KB

MD5
818548be1885386cc995f564f36a8e8e

SHA1
008b0c602ed55b1122dadfb3a20db517d55c10b3

SHA256
b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d

SHA512
47840561a1eded73600b656576a7a9195bd1beddb79b08090b9e6bd9ab610de6cfb0a334310bfefe0b33ef157d420aaa17c6315fa2e689398da3328c4460a02f

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
94bb8b35522989d55f683f047b290242

SHA1
9057d2e6070adedb2aca85107781fc25d11d66b8

SHA256
6d65f15a462980a9a0a28b18a0a4fca15d7dd17936907fea4c50edc364b8ae99

SHA512
ba660ead777fbbb818e63ecba9d31d0b027c244e873fa047cd003853f9c35479fb7ac6a17ecae14b98b942be6b8db5de938f392fc4493bf25b6260216c6f1eaa

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
4aa0fc1a2ba549508a4938d8413df14d

SHA1
4bea0f6d4c68a3ccd71afca90b85d07a53039f13

SHA256
ab3a743fefb53cff028c7b82692120aee98d33a90ec3bea794548e3539b1cb01

SHA512
b0fbdc87873d3f6809d30eed37d0f8c654f818848d202a16e56e50057e603949841d9f793ab644181ed1d67a096beff56897fe4ddafc7f0e51e5d952126d0d0f

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
c1234e82fd6cb5fc71eb19cfe988760a

SHA1
6477b6cbae36cfa8b52a2110f1ac4bbb632bc492

SHA256
4d396cf2f29601c5feee24a087cb74cf0f1b38361591e99d0cbb7ca43fb0bfdd

SHA512
902d22017c855b6dd603d36906d76349459c0f6125c27b3f4c34017cfb6cbe29ee935665ec85427d6a9dcdf0d5f5dfc50623b5b00d27a11136c7308b027c0af5

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
385d48e47e8d65b1bea7b827385a728f

SHA1
81d98d25ec7f4e1db1914c0708d1330f5d9ff032

SHA256
e88dbd697dfc7b871f6d6729f7c9d3ff94b8810f3215eba981aa4d6a383b7237

SHA512
0116aaf624bde7868efb80b51639032a25a6062ec9d039124d9c9099bd93a50859afc230d3119283fe3e03213c773a024771b3d1d842b33ad7782633a6405a67

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
0c07ea625313c350af0896d382130332

SHA1
dd2ebd947ce0cb2b7519df18a3e3426199cf892b

SHA256
5a2d6094bb4a21e1a215c35aca369b5650c5fadc24595feebac28a9e54ae29ab

SHA512
2a192ed31848cd2ebc357b534adce8fba0ac586584e6335f990b54465ae6ff708ca17887d0f253d8f547e7b09b890a547ad0a1d3d72b2d383cb082e50596d1fb

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
750df0032877f3a6e17d2c835e4fa475

SHA1
c0ca9b9ea5a5d9755a329a9fa0279322028900c4

SHA256
40d909bcba9a45108ab69035adce2a5f3a93fed60ce6f7cd00f8d1936a5dda4b

SHA512
18adf1fd9af1618ea6edf883df24f085748a09fec21387dde4cdf2ccca795529aab0c5e03e24f347ee88ba18cc48c8df54d6d02567e9ba921e104648d5540536

Download Submit
/data/user/0/com.glutenfreegames.ultimatejunglesimulator.hack/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
d838dc54a86fdeaddf40e5dc1b0ce442

SHA1
659822a94c371499187d13eeafef6f4d9f1bf679

SHA256
4dfb651d2a065b054245f0770e08a9bba1978ca2ca6423135bcb90b3e9af8e1f

SHA512
8961695b3e869630dce5c2b83e9e7b34916f6cdb76b697508d2590e3d6977c65cb86b9e9f86c89e8a1fdeca53ee44ddf16d946a111bd1a780f94b95fa18ea0d9

Download Submit