Analysis
-
max time kernel
177s -
max time network
190s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
23/05/2024, 03:48
Static task
static1
Behavioral task
behavioral1
Sample
69a39e4ed6186d0e4275be3e5c452f96_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
69a39e4ed6186d0e4275be3e5c452f96_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
69a39e4ed6186d0e4275be3e5c452f96_JaffaCakes118.apk
-
Size
29.3MB
-
MD5
69a39e4ed6186d0e4275be3e5c452f96
-
SHA1
6a5c8ef8a84151928eecc8a8d7099382c82d64eb
-
SHA256
4a851b67386c76954b3b3c666ecbc7a894cb0cf2a221f1abc5fd11602ebb7269
-
SHA512
b26dd6aa3df977dc17e5638be64b67d5115c9cfe0275873758654adf0196a404ec57205c13ba5e714bec2cb34143ac7d73c86c68a8a2f61fb652dba740806f74
-
SSDEEP
786432:44Mz+eo3F/3Ewvq1frVcpwwKvyXayWQ0QPyo+0:LMiesFMwvfkvybVP+0
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.erdo.android.FJDXCartoon -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.erdo.android.FJDXCartoon -
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.erdo.android.FJDXCartoon Framework service call android.app.IActivityManager.getRunningAppProcesses com.erdo.android.FJDXCartoon:channel -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.erdo.android.FJDXCartoon -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.erdo.android.FJDXCartoon Framework service call android.app.IActivityManager.registerReceiver com.erdo.android.FJDXCartoon:channel -
Checks if the internet connection is available 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.erdo.android.FJDXCartoon Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.erdo.android.FJDXCartoon:channel -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.erdo.android.FJDXCartoon Framework service call android.app.job.IJobScheduler.schedule com.erdo.android.FJDXCartoon:channel -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.erdo.android.FJDXCartoon -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.erdo.android.FJDXCartoon Framework API call javax.crypto.Cipher.doFinal com.erdo.android.FJDXCartoon:channel
Processes
-
com.erdo.android.FJDXCartoon1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5144
-
com.erdo.android.FJDXCartoon:channel1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5439
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
1System Checks
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
MD5e78acc7d7bd5cf0158d6c95f2a857e95
SHA17b23988e2ee192c93f12b6a7d2b7b3983263036b
SHA256b90b1f271133b9a9e729eea18960505055f6ce3915d44e3e7ac11e95f7323e99
SHA5123e1d32327d930ca4c23599b30371ce8ee7703620a67479c39084ae0d88e302b3013f54bdd525cf9f65a90bd811099fa7632fefc77c4295f75d3d3c86ae5d71ec
-
Filesize
12KB
MD5ff8d17c056c31ed91ec8a74a491eb3e8
SHA1cdacd0671c1ec3d6f9fbfe7a12d429c9b9aa57fe
SHA256d9ed9a1d6fad45270940d713ad18a382dbf9d87e77f19b6ee2898f0871e9e024
SHA5122fc86d98a60b2ebb6b2d48e10a5caebbaf518c7c32b1df98165ae172e763da0e5c9b84667f16ee723cc3ea89513a1be09685617b3186e9bda0093084b1770b8c
-
Filesize
12KB
MD53fe040272179c2f678572c0dfcf72303
SHA137e848a591be04728f2e54f43b93483ff70ba3e0
SHA256ca3fe8eccbb46e39eeeb2430af5f18d596e034b089fdc0eba223ece938b1e68a
SHA512e1242eda65446158133495f61b8dad99348efdb6634f421dbfcbed8aa7f0036deb27ca752c2c394c10a9c51823b6a885b9328f20cf090afcb112db3c06441fe0
-
Filesize
512B
MD5aa4646a32bb87c5c8e1038138795357e
SHA1ec7bc6a6dbd29cd66b70a46873f9b35e65e1c706
SHA25678b6975e83a23dbc3015bf11f86a0ce7387881274c9f0791925d1a7e77a25ce6
SHA51270733cc09423b543673bd9f9edd105d2cd5512d6d14124d9014fc2b30243efb4b53cedea4a71f166ca2e358a61d1e2ece6c41481fb0867fc479b5c289cd44842
-
Filesize
8KB
MD58f6b4afc1d3bf4e67524254d0c5bf712
SHA1f530e8b587d0801dd773a46eb508ec2e6d34edf3
SHA256ef338b375f686cb8918f227bd8c4dfa2de162c0a185a7573325933dbdf61a875
SHA512e5bdc3c00dbeb37cac1ad1cd370728ce8f697eb3d79a703c3b2ad6755feb68f2fac8e6f74dfae1c19b4b344899cb15f8c7e697671ffe59f732ee6ace74a94e3f
-
Filesize
8KB
MD5cdfd20f67bf1064b05b8b2080d8ece3b
SHA1e108cd6206240386d67c4de86f5e68b1013e4fc1
SHA25610d91cca281cf621bdae61ddaa3778d36fe0e4eef7d786971b5c575730f9542e
SHA512ad4fc693fa91507c7c5149de77eee65240ade8e6d6890ebd209caf66f4e108780403778ed04538b45ad7a807b640fd9d96537170cfb5eedd589ab01ed454051a
-
Filesize
56KB
MD5307f67879d3734cdcd2e17c5ab68b1ed
SHA16d8ad9a0a5b42df065a46e2c48fb2e64d08c5a08
SHA2564d48b4a6c8c2c99356f0a3ea396435c71c77fd74b3e14e5f5cefdac73d5d1594
SHA5124996d03bdf009b39c634ab9fc24bb1f1f008ff3dceb4f3447294c6699d003a254ecb862d574794e761fec4a7876ce2a0ed563feedaa3c552054005242b09fc73
-
Filesize
512B
MD52bcfc6a107580659fbccbb30b4cae3d6
SHA17c108ccd5343d799b3ff449ab3afde5a659786eb
SHA256c0b13dfd95a8d099f4ec51b264c4739e1a71b1d2691d4f65e319a4fd14caf2dc
SHA512235f4289f2fd831612a0ef650829e3d612ead758ba2bd87f7e0aa781afe30964709cd69613422cea344b7fb2425f130469340455cf665ebde53d0316de41644d
-
Filesize
8KB
MD5ca2400eda4323e5720a2d0d4bb8ff958
SHA1f427d2acb70c7d184f9a6a08a99ec26970133bcb
SHA256981f09d6549d6b9ebfbae7cc944a3f48a1f74b40912da0a25ee597b31e3cdbe0
SHA512334c1c2b694f09a245aaf9fb7d7ade4a5ae7332c9ffe808a0c4d1f1965d7733fe91b6795914678be43c8a22a57464b7054c3d820c41dde900d645f70914c0fdf
-
Filesize
36KB
MD550f3d63f4b9241e212be8ec20bf3e374
SHA110353f506f0aa9dfab398275482eb42da167232a
SHA256be9049dfc1751c212273b6e4d07202e47cc7de289dd84d388a27675609056653
SHA512dfc6dc641041edc77b5b77bda43ebbfd0eb6c0f4d55d05a7a914f77c58f2f465e8d29aa7e2c9773ec93a257154a6c779a6b165b8765a214aa154976887d8ff7c
-
Filesize
20KB
MD5a852ebc3321d2bc807b23175a6a71edc
SHA1645a7fd33cf75a23628d576e6c6fa5b454d16f13
SHA256256fb4171fad95478a5a6615ef2bf8cdbb9948eb7f60ee6c909cf5480436128b
SHA512145ecea475401cc23e175ae5410fe8bea6f2b2aa7f9dcd40ea048cc60f57f48395cf6aab3681c35a3d275d20e79a342de3e8e2302ea2ee234e53ec9f34b5a831
-
Filesize
512B
MD5153dc0c97164c6842dd73c1b3a579bd6
SHA13893c959b2aa3182895dd74c0a2612a9bfec2e47
SHA256ca5c8c8ca4c4388880e2fead861ea3e9e7c28e93e7d722a101b45d90a92eebf8
SHA5127915d53a366c61a88dc297d846a7b81af2dd6a3552bb184bc190efdd36a15995ff286a3a512b9823d76451edc36cad54ef19b7905a4f4d95abf66e69dfb8d9b7
-
Filesize
8KB
MD5584185833d4133327a97042cd99bbff6
SHA1619584efa143959fe71681a91de44c31d35e011b
SHA25618fbc3844531db447bea438a2d792d7d5c0e8847d1fa4e9c4da54c77a5004bbe
SHA5126abb06013f4da8ab35751c377429c60bfed7881ff8227d2560e5b9d1c8dcb50177d24904bbd8a5a2d4b27c2701785dd20fa44085642ab1fdfa7c850299d4f7db
-
Filesize
8KB
MD59796bf8984ce6179fdcb780a585fdd07
SHA1b6b82897251435d53a64735f3c94271847345f25
SHA256d51ce503c6eafde8048833334a2ecf1271e65e4886f3c888227e93992ff4d1ed
SHA5129a17aea71a32c13a86788aec75f52401867688fb34edcc5e215caa3c2a41fa349df8debd64edb48a214e9e317683d95c5b52c2efcc2d5d28ee660eac26a61df7
-
Filesize
20KB
MD5d95e1280cc553509d7b5b7851398db12
SHA1121eb76ea37f3407d0f3b56392f6f67893fbe649
SHA25658e0eeb309805e54342d5ccb3f9006751543d5a1306898dad2c09048b294153c
SHA512f52c432894144ad581d36d447ed61ac50485dbc931ddd9b2ba5ce399642dcb361502e6492f28e05dc7cdbd5f19126bbc6cc09e62586b73bf449da950a6de1284
-
Filesize
512B
MD5957cdce3588c716f8a87eb0660c68122
SHA157fcdda6844948f3229c0f215f162b9c8f320a0b
SHA256ee1dcce2b454c0a576ef117a4d1b9327a9990cd76fc1a340867e76dddc264ed4
SHA512bc11214d543a407bb030344356d797ae5427f76f989de346fca8c188d5847e058c48b4eeca85cb745248af7ce34ffae723a0ec2f652ae4bf600ecd1d6e1b74cf
-
Filesize
8KB
MD55c2679cdde4fcc172135f8c1c51675e3
SHA1a67685862e8d23775298760c88b54b0380e22c13
SHA2562eed7e49ab113217398853d7548d0c76b1e50674c64b05fa6d7b4b708ea15f2e
SHA51264b273ca753698623a4a247f88ff29e8f12da9610fe6f0707775202f20a27c2a57968baea86db3a163c2f9499cb6a8b337cd292b2b12d3848b2f614665e5bf12
-
Filesize
8KB
MD53cedfe49d2b3ce281e0b4819f9e1dfad
SHA146d99fe26075a893c315173291b30cc50a783a55
SHA2560543d536906507b40abd62452c78c68ab90454f19937d529f71ab43b547f7263
SHA512017e164f2855c864eee2df2eab7fc7254aecfb1badc4b77f55485bd7073e405d9dd0454d44c45a04ea6328103a156499649a12197ce2abf3db6f275ad827b4db
-
Filesize
12KB
MD55669a3ce887d3836f835c90e49ba07ef
SHA1f2d0ba3724567fc6609eeafee23feaebc5bd5176
SHA256e8db7537ddcbd26f6e3e63708604cd78418d69f13d134c5a80c4316fbdb86145
SHA512494cd104dfa1970060234451e7c814c4a53e261a7508aee30ed21ca2faa2f013231ef7656f1d5bbe358852afb9314c25c7cea8599818c5ba1da7c068c37f79eb
-
Filesize
8KB
MD53043e710748a807e47ebcc2e54177bf7
SHA1050f2f4b1171e77f1b7d1a80f5dd48553d7867e0
SHA256b148897cd76d2c04e79127c8d98e7f8edda27d4ac75a206976004074e9eb4406
SHA5124c8c00c6a2c552d7f62d5be331d587d730367c21e4abc0174d315c5bd9f8585654bfb7e8b9bb33173d2e80c84a80098b5817a9dc5ff8fe227ff7b85f9af61e24
-
Filesize
8KB
MD5eb4342984d339267b0d5a3e597e3e600
SHA1019e3de27595d271e4ef7e1c692308a7d2824c24
SHA25660139d5f1a7d988641347c8102cfce5b745f16d3000789baa8809d85711e15a5
SHA512d328c5a0bb7dc7c19cd4badb2ae510b8ef704733a3ffe54d9dbc56b056a8ef27f2e0302634dff29dc9b7810fe632d8d8410a801fea7868eab0a5c3976864f497
-
Filesize
4KB
MD5daa061c6edab7727c87e9ab1fa437eab
SHA13dd589d4f76d665666d64ac0b218e446bf71342e
SHA2567d3d1be33dbc96f3e92b7cf82a53861f25a21a98ad8e2dbfb91a2aa57c09674f
SHA5129d1a6d8713e7940fb5780c73b26647e6721c412de2ab1cc79d2f57e070d8474e9a4c539bd6afb783f0e8af1ff4bd013eeb20d6dac194ccfa2f9c8ca4d08b337d
-
Filesize
2KB
MD5d215cc8d7c8c5b5271f5f9c6fc46466a
SHA1f0ce966d0b796726defdc57d3c36e1b8bfadc112
SHA256bb610b24cfa2420d20f561b4f1b3f18e9b313cf8c121f4efc2e2bfe7d7113f35
SHA51290fefca0597728556a5fcca23d7424848098dd25dcafeabb324da6ca6357aa3d4bbaef670fdfa2321cde7a070683c46683a56c30c62d8b423969bd29d5e27cc1
-
Filesize
413B
MD557dddbe75e3aaffd98d5c766e51d2928
SHA17c4f2f10326560ecd2d6dc0906d3ec12892f4923
SHA256dca9d7a8d3a3ab966f5bb5d277d65b74ea0a5660c2690c3dd62ff6a123d29ffd
SHA512138f61c79f97356eb072a5b85a946d65bb70ab6cbf8702af32d5de458020f060ebb9d91f45e7ff9ab8491b529f8c4c1e9edfbf0de974e6a29b661acd250059cb
-
Filesize
162B
MD5bc18130179c4969bafed7b57e06e5817
SHA12a13bff84896b264e61b3b4edac9b4b427d5386c
SHA2567f99f5b43332d789a7ba52ed7e6a9431440bda85f2a641e50c902af6ffea17bf
SHA5121dec2c695c912e383fe76998fb53b125616570b502449e72beab02c4675f668405e94a3450aabf88d0814856ba8d57d2d0312cec87f92cfb332f5c6a3c0d39b4
-
Filesize
82B
MD50b68eca92e3e2e79bee6a1966f037142
SHA1b7ae3266452bebceb1f1dc0984baa7b1bf0768c0
SHA2563473df54c4a0a8ce8e61855c6733d115112e2d25b40f13e40efbaa4c45f25b90
SHA5125ca15bb65aa98c56cc80d4c49b9808784be680500af74ad7b5a92ee7ac3ec1b1dfe964fbd6cd60c85a8362127520687be18e0f4fc84f358cbd7801b04125d281
-
Filesize
132B
MD5620973ccdd21659ae610c06bf206e796
SHA1bc908dd7b0e6f5501ef1e8df81eef5dc0a301862
SHA256a6b613ea851cc67dc0f540c80962aad5f2c70dd440af505c0072ef18143c8ca1
SHA512578b44ca7f0080ffde8e2d0fd54383369eacd851b6fb63d2330104d2e430fcedf186c562bdb27331f67fa91f03a1093e6c3d4695f04a8438d22eebc5f6cd2b8a
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
23B
MD58e24e79baab91c4d0604eaa9006a0cb3
SHA1e427afc94a4b957a7096f73e395a10ea404c076b
SHA25665ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA51245bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae
-
Filesize
32B
MD58c0a1d63bb91acb5e09c53a571ca4f71
SHA10a7d46b2212d566a0c2517466d89e9c95feb59b7
SHA256cafab6451f5cadff75ed5e5c9589006c1cbe466f97bc90323d466e00b080f1b5
SHA512492108249afa366a8c0902643154bcf7f59630a3f15da0e0fd0dcbea474ca7922eeeba3cff50b112620268a22d370dbc85a7caf8e1ae07c9e2935a952d590442
-
Filesize
32B
MD50a2d79a36c45bea595fbc72719198d1e
SHA18418d2f8c0bf1fb48b8a2ba836fab14f0e16f260
SHA2562a09bf63b30a625f4879383cab31557b4ac346d525c16e8ad1884888c984a2b7
SHA5129e2723e27b1a638fd3ec7f90dcca42b61410cefbc0bcf6e19a91a85bf2480ef53a0f4f1e07c01a27ed901488b8699e968d2ebbdbe923220cb3ab32631e2ac811
-
Filesize
59B
MD51c1b0f792ca25c4d95059313bbc2f92a
SHA1c38ecd81ef4d9127a6eb73246e44b12e110e36bb
SHA256665ec36bfae4b41044ee86b9784e6873694ff013c0a9d5c524571d7d9c5cf471
SHA512030ed981075d6b80186ef67b435268ccad90ba2489217201a660be8e0cac3b6b47d439c3aba90bc1c0da93e3dfdc645f6111674df94bbb511bfcd33c37ca4c30
-
/data/data/com.erdo.android.FJDXCartoon/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDM2MTUwMDQz
Filesize1KB
MD56d1cf95b1816e2e8dbd0b00e5d1566ad
SHA1156db8e8fd976b1efbe5abfbefc16fd7aafd488d
SHA256975c3d3c1a15198cdbfde1a703d2aa7aa1e0876141c1c17f0a4cb7d403b6306a
SHA512c0cb541255102b540f043f78e4b227d97a7ef678ef5a899f80d4e546b4ecc4b5f8cf79899329f25e2816d4e909e906942164f3177c0a0977ece7aaa03c1e3916
-
/data/data/com.erdo.android.FJDXCartoon/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDM2MTgwMjcx
Filesize1KB
MD531a5ba5def6a68d50ff9ce6f80ce3a5c
SHA1b2126728e377e68bb368bd1d0d0df8a647cdab4a
SHA256d842b8994319ae61d019a2df26a6dca5f88ad0858ed8ad7fdd71fea981dd13dd
SHA512f6c79c9eb5ba1c696b129ecb93a75224a27335e1c43925f64d5228acbd98cc48346844a8661dd3df7ffdb9c371db836c7e01203c0a9a9c92ebb9644459a8405b
-
Filesize
433B
MD5a991470bd811de00a1dc4754814e15f8
SHA1b1fda1580419351cba03df68d2a8c9dbf7353df2
SHA256206360860f201b0220a70747477d08889fa475854e7793269e59cf755095408a
SHA512eaa89f35d72781cac79195a97fe3fceb3b4d1c06642e396e191fd15575ffd8ca4d81536253ced5a6668bc666ca1170dbb6bb02ac754913ed3696228e74b8a73d
-
Filesize
220B
MD54732f3bfb1488b10a47304f6edc7227c
SHA101ac7edf3e8b655d8bc79525fae4b69f33101054
SHA256bb0f9505a579fbe9efb02dfc06a6a63693c435f074c62cb4584c6bf5191a0cef
SHA51225c87e6b92f1ecada4cdc62537066c9c95b9ac36e907d9f2dabfdec689aa8a9c41fe9aafa6d7ef5a66f89096c310679e0fc6922a2f975ff501f3cb20999c0bd6