Analysis

  • max time kernel
    48s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    23-05-2024 09:00

General

  • Target

    6a6ac1ac881332a71970e64ffcae8990_JaffaCakes118.apk

  • Size

    4.6MB

  • MD5

    6a6ac1ac881332a71970e64ffcae8990

  • SHA1

    4575f09124853ef258d6582d15dbae5f54267f53

  • SHA256

    4c57f0060f44e6ff220a7edfa7c0d82df8caca866319d9829cf456ab9afd989a

  • SHA512

    62685096e2fb6bf8e01530aca9bbb8f74b777ecdb908426725190f3f737483b14ee7042f1173f069a4205cdea4aecf01013f9cbe5a4ea1c456251d01f9fbd296

  • SSDEEP

    98304:7k45nMzZGN2OuVo6uT77eI2cbTT6Sp2LEpOOtN0rAS9CzhsovTKQuOjXOfj3pZUE:ojZGYOucPR2eHr2atN0rAS9udLKLGXOn

Score
7/10

Malware Config

Signatures

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs

Processes

  • ch.nth.android.contentabo_l01_sim_univ
    1⤵
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Checks if the internet connection is available
    PID:5072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/cache/config_cache/-13547921261423697312
    Filesize

    9KB

    MD5

    2394a084e267a2b9117414dda8fe7bce

    SHA1

    6fa004a59a7ddf993c9a71ed9804656082a5784e

    SHA256

    4401514205958eef4711823e28da46176b319663321b7598cb941c57696d685c

    SHA512

    d07d81cb760da7995d5d7f4a3cca591f68721bc3b85ea0ddd9fda95f227d8b14cc83f3dc85420688056b298d04ebdc901d83783bc8a1288afb43e0837ecd14a1

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/37d6e7caeb3e1ac1ca35f9055c97fcf5.0.tmp
    Filesize

    588B

    MD5

    d7d64ceeb8479d033caec4acc2ed6ce9

    SHA1

    03ee9d5c5da7695993ee400df89bdcb4cd69f906

    SHA256

    79ce3de0685bf6393a1662d3ea336b6647b688fc0e32869e9bd01f79ebd96de6

    SHA512

    1a3f86429d488c52acfc4e4f1e05fd1ef7ff99ef92f218305f569c9c133f4a95a7f15d9df082c1981050f8b9520e78f06f90498341a0cc87b6aa919728e08f6b

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/37d6e7caeb3e1ac1ca35f9055c97fcf5.1.tmp
    Filesize

    46KB

    MD5

    5825c3b054d56bc8d64154391635209a

    SHA1

    3e815dfb24848a93d29941cd96042a5e6c955f9e

    SHA256

    cbb4c0ff3d49f7fdee5ef05bde75c30484c5108680ec97f7f5e7b08c715cf95d

    SHA512

    8f6d3dbc21cf7b117c8f5a45a8a6e70383035d7fe82b5e4fab6fbd285750594cf8049456ad09afc529dc81aa919631c12cbcaa326dcac75ed9356b79a6ec318f

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/f511074925405726ae3b324666291ddd.0.tmp
    Filesize

    602B

    MD5

    460d9a76720a855ab3f14083b6c00da6

    SHA1

    7be0e79ffee3eb3f29d3eefd9346d40b5f75bd43

    SHA256

    ead7e5c0ee45c17d591432a415f90bc6beb3975fc1e4d351a7924d6593174407

    SHA512

    bcfe6f55aa553da12f2781349e1d9d410d6af2bcdcac984fee4d0c09f7754275ba6de68eae4955cdec79558acfa916419a6aa207b2208466625ef917c235ec83

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/f511074925405726ae3b324666291ddd.1.tmp
    Filesize

    142KB

    MD5

    e9ea8ecf340761cf803f3c26a3a030db

    SHA1

    e96c0bf3b45a44226cde9847cf5eeb83034c8e9f

    SHA256

    ce7a485080c4c131eba6026edf5dcf83de426585ba213880a7c956da9ba2613a

    SHA512

    07acb871f72071a98d0d6622e033233babef2b695d4e7f1dc650871d42283467962e66176de00c301a7e4fe8708868495620a549cc42dff3f751a8aa22ffe29d

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journal
    Filesize

    124B

    MD5

    cdd89dd10c98ff4b0cb8b5b5bcd8f839

    SHA1

    1ba6ae43d914e9ba81955bf15967a3ee7b2cd4f0

    SHA256

    9a98e3b50c583a2c57c8b4e020c7bc48745c6312326ff4e76cc40564c1f5d7c6

    SHA512

    50f866f27776823c6cc6b3cebbff91418bd4323f757b2d451cac3c13a2492591f81f82c2cc0403ed1c671b2541735428ebe50cbe67355c6639831cd9cd396e67

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journal
    Filesize

    213B

    MD5

    fafef450a58e1f804ddd594764a7a569

    SHA1

    0574955ea7d19f17b1c5f2a2a3eab4578f4a7ded

    SHA256

    2a3b3ebab2bb485be124df1014d22bd9c17a38ab776044c599431f950a3600af

    SHA512

    4ed7443bd5d4eb17962484fc52c07c0cee40c4a9f9709a092733b07fa63ecc013c0d4041a9cc3262cea645cc6852dce399c7eb6eeb0a77d0753278f041385b76

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journal.tmp
    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite
    Filesize

    64KB

    MD5

    3788b634893ce2d151886e4c72cc5198

    SHA1

    b25685dafe2590cf8c89f50ea6cb0a95d0a0b1b5

    SHA256

    373be72ff70fd138ae50384599c6aa4796d7b6ef16dd5700b2d948c22d42b028

    SHA512

    5095b9ba2bd69d691346f3a50a4b1cd4305ceff78e1636ce5e9f9c1834f64e6b0e0e120470aad54363c64a06a8743da95f82c5152f1604a470780f02d2d0831e

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal
    Filesize

    512B

    MD5

    11201a49509a64e25d3743b1a284d2e0

    SHA1

    24fd519c836294e66b35c1c89f1c44acf07c735f

    SHA256

    97b18e5862530b886f3794a380aa7d924e9c4a357df4790fb28316cd21a7f4c7

    SHA512

    7269d600762c81324cbb735f1d73cd3ad8da7cba68b9e78a6b91453c2c875aa5620cbd44558b9ec0a12efe32399a0e88899f51555d7dc2cd8a3d9b8fd6384c23

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal
    Filesize

    8KB

    MD5

    c564c911a6b65b01d5860c65ec075ca1

    SHA1

    925ef0e2714aa2fbcde6eae066b895a56d6c7522

    SHA256

    b0a17573e23ff5e5fefb5fc1041e594224a2e5eada1467d5b60725856ea859f9

    SHA512

    918f33f15de3a2af05719220b1498a35203717d14ba8a6ce822e0c6d6106111d109cd3eb23be6522cbcf5008dac726185192b42d00cb15d07056e4a44e24ce94

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal
    Filesize

    8KB

    MD5

    b447d9318d3bd041195d0288bfcd3ee5

    SHA1

    fe49e283555f0d0b4b7bb8b38e629cdbd3fc0731

    SHA256

    ee4acfa44b39fd6165950908a6816ba5b1dac27114c2fcb7368e27ad5e37b618

    SHA512

    d4882c366f810b313c07db5ec3b470d9d0041b780e7c09181ddcbd83f4d029c05e864c5ab9c9916f4cbf7e2a783b2653b16e721365569dd5792a8e2947e22b72

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal
    Filesize

    20KB

    MD5

    0b6e0d601c7e99bb4803687bd3e4786b

    SHA1

    d51ee6ad9b417c1edbdd1528fc8c23d91a59de60

    SHA256

    6292b29339705746a9e47c78238c1a594efc51b2ac038bbec733287d038a163a

    SHA512

    b3443a500232c6d51f9daf21ba02571a66eccfb76ae308b9ad32fb3310d9678a0edbd5f6ef00caefadd407b82837ea7c6e8660df302a9183f311743ca7d0151e

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal
    Filesize

    32KB

    MD5

    3eec343b13951fc4a7d3bd0bab9bd430

    SHA1

    73b5de553cd91e714a9570b6167781a7cb0636a5

    SHA256

    36aac9de708ee7779ba64521a509236e8abba418ac0f199397de87626527c387

    SHA512

    f7b0624bf0078b3d8d30bf3859325f696f5607ba61a8e137b348edbe4666dee7099e8347ba5f2cde6dd5707a89fa0d044da36f3d867f495bbcb454f2337c8bd6

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/files/app
    Filesize

    45KB

    MD5

    c81b4e9118e67bc23377d5ef99f48224

    SHA1

    024277a4f1a76a92b5b8c5ee14eae75cc227adbf

    SHA256

    8d6cf61c54bf1f13da672926d535633631ecc04e290cbf870ab03e4d7349e1d2

    SHA512

    2b2b213ea352bd0b003f13ce280a5a6c3d1d7e6775701687ac183fc481a2cb25cf41c38a75d5215130e3142dfe11909664788bde7fb68be4dab8260a95d481a2

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/files/langs
    Filesize

    3KB

    MD5

    0f6393edd01d876c42f66d0609f6f6ff

    SHA1

    d242b9b79ae49807822502160682de3fefebfe16

    SHA256

    dbbc3a96de5104373814f8cba9f829b186b18fa41d0510f0b79be67e3dff781e

    SHA512

    e47dc06e9be077fc112368f2b1ca1b6576c68b69a465db25ea4ae2f2712436917069029f286debb79750470063d374cde4ecfecc23a01306bb7796b485f9ed94

  • /data/data/ch.nth.android.contentabo_l01_sim_univ/files/translations.json
    Filesize

    196KB

    MD5

    d39064b8dc4e2449651ac09a89b5b3d2

    SHA1

    b7d00cdd2b16f730ca843ea43194d7957bb0e2d9

    SHA256

    b635667ff7955e49fa53c78997162c0558fc8f0c8d41ceb22a71dbaf4cc7b4f0

    SHA512

    a4f28a4f578435d5ee78e399863abe8204431fa72dbc5a44afd3a71915b1852253e71ee47005e967c7bfb17b4f70e50098675737187d96061c8746c05a2f9cd5