Analysis
-
max time kernel
16s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
23-05-2024 09:00
Static task
static1
Behavioral task
behavioral1
Sample
6a6ac1ac881332a71970e64ffcae8990_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6a6ac1ac881332a71970e64ffcae8990_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
6a6ac1ac881332a71970e64ffcae8990_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
6a6ac1ac881332a71970e64ffcae8990_JaffaCakes118.apk
-
Size
4.6MB
-
MD5
6a6ac1ac881332a71970e64ffcae8990
-
SHA1
4575f09124853ef258d6582d15dbae5f54267f53
-
SHA256
4c57f0060f44e6ff220a7edfa7c0d82df8caca866319d9829cf456ab9afd989a
-
SHA512
62685096e2fb6bf8e01530aca9bbb8f74b777ecdb908426725190f3f737483b14ee7042f1173f069a4205cdea4aecf01013f9cbe5a4ea1c456251d01f9fbd296
-
SSDEEP
98304:7k45nMzZGN2OuVo6uT77eI2cbTT6Sp2LEpOOtN0rAS9CzhsovTKQuOjXOfj3pZUE:ojZGYOucPR2eHr2atN0rAS9udLKLGXOn
Malware Config
Signatures
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
ch.nth.android.contentabo_l01_sim_univdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo ch.nth.android.contentabo_l01_sim_univ -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
ch.nth.android.contentabo_l01_sim_univdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone ch.nth.android.contentabo_l01_sim_univ -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
ch.nth.android.contentabo_l01_sim_univdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ch.nth.android.contentabo_l01_sim_univ -
Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/cache/config_cache/-13547921261423697312Filesize
9KB
MD52394a084e267a2b9117414dda8fe7bce
SHA16fa004a59a7ddf993c9a71ed9804656082a5784e
SHA2564401514205958eef4711823e28da46176b319663321b7598cb941c57696d685c
SHA512d07d81cb760da7995d5d7f4a3cca591f68721bc3b85ea0ddd9fda95f227d8b14cc83f3dc85420688056b298d04ebdc901d83783bc8a1288afb43e0837ecd14a1
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/37d6e7caeb3e1ac1ca35f9055c97fcf5.0.tmpFilesize
588B
MD5811f4855b8e950bb34901a64353b447c
SHA13d32fbff7a446c9284907fc5b7add0dcad111757
SHA256e49cdbae08167589e4ac45e0d519da9c1b8e132bf51e78d3723855259d6d8b35
SHA5122f245b02934715dd986501fff077071e4d26a5de1d96cf0282161d632e315881d8718bbe7df0f16847a88af75051ae54c90ba228b0a46ac2443ab1ab1d36defe
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/37d6e7caeb3e1ac1ca35f9055c97fcf5.1.tmpFilesize
46KB
MD55825c3b054d56bc8d64154391635209a
SHA13e815dfb24848a93d29941cd96042a5e6c955f9e
SHA256cbb4c0ff3d49f7fdee5ef05bde75c30484c5108680ec97f7f5e7b08c715cf95d
SHA5128f6d3dbc21cf7b117c8f5a45a8a6e70383035d7fe82b5e4fab6fbd285750594cf8049456ad09afc529dc81aa919631c12cbcaa326dcac75ed9356b79a6ec318f
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/f511074925405726ae3b324666291ddd.0.tmpFilesize
602B
MD530032c1b9f3cd6e202dd50ef49a91055
SHA13c043d10d80e02cfb03c62c5c65bb302479e8ec1
SHA256a931a319be97011548a82c93ab365135b7e137655800fcfd0a11fa6e96e68e55
SHA5125506d7afea8945c1109fee870010400ab6b867eccdab0fc0feec96ac565df75b08626c4d04d20f6a03cc40968e45bd5b862b59cc4e6f6d3f07f074bdca249cbc
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/f511074925405726ae3b324666291ddd.1.tmpFilesize
142KB
MD5e9ea8ecf340761cf803f3c26a3a030db
SHA1e96c0bf3b45a44226cde9847cf5eeb83034c8e9f
SHA256ce7a485080c4c131eba6026edf5dcf83de426585ba213880a7c956da9ba2613a
SHA51207acb871f72071a98d0d6622e033233babef2b695d4e7f1dc650871d42283467962e66176de00c301a7e4fe8708868495620a549cc42dff3f751a8aa22ffe29d
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journalFilesize
124B
MD5cdd89dd10c98ff4b0cb8b5b5bcd8f839
SHA11ba6ae43d914e9ba81955bf15967a3ee7b2cd4f0
SHA2569a98e3b50c583a2c57c8b4e020c7bc48745c6312326ff4e76cc40564c1f5d7c6
SHA51250f866f27776823c6cc6b3cebbff91418bd4323f757b2d451cac3c13a2492591f81f82c2cc0403ed1c671b2541735428ebe50cbe67355c6639831cd9cd396e67
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journalFilesize
213B
MD5fafef450a58e1f804ddd594764a7a569
SHA10574955ea7d19f17b1c5f2a2a3eab4578f4a7ded
SHA2562a3b3ebab2bb485be124df1014d22bd9c17a38ab776044c599431f950a3600af
SHA5124ed7443bd5d4eb17962484fc52c07c0cee40c4a9f9709a092733b07fa63ecc013c0d4041a9cc3262cea645cc6852dce399c7eb6eeb0a77d0753278f041385b76
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journal.tmpFilesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqliteFilesize
64KB
MD5733b11bd300c484820b3d77f38172b79
SHA128eab456f2c777529c7c9de39d49b59461b7db48
SHA256efde1bca106253e407f46c5db11fc7b927e4904a5bea2ad2d081fc2c3814a24c
SHA512e2ff618753578017b60ce058188f4a4c0a99bb1da705c133904bc396a067544a752d7a5666f5e740d6b107865c151a7849afcfac61c609d8bbeb416a6c1d392d
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journalFilesize
512B
MD5decfa2ee90efbc01be12b83c40442c36
SHA17df201b9f14500b9f96dffa472b1ab3ca8516ee1
SHA2569ea1bd765a8aa6f788d25690ef93d30d54277769de2f79b1e94bf2649e8d6661
SHA5120d201eaa9f3654a9745e9ae57ef9a9ea028a1dbaf35333087fd63da5fb3957a20cba8db3de8cbdbfdff000180f04e9009d2b2fa641d3bfd6fc37f6c7122f2159
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journalFilesize
8KB
MD5f79fa38205b5cbc3aa5679b336ea159b
SHA169e7bcba32f452d0f8247b7b96e6138522ccc8bd
SHA256f873fd8591e51e5994deb9bb7514c42bbf336e129cff668962edf80fc239338b
SHA512c7434e80cc5861d73fda203434116e9989801d2c2a73c331668d346b33ed93d0d5630be3565488ad2be73448b1669ff5f72596184a9897cc8970fe04dcdb8c85
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journalFilesize
8KB
MD5c489fec2433ace001f3eca57953b9ff3
SHA1347f9deff799468827eb8475d4cc89154d64a25a
SHA256591e7ec9a1325d3d1b29e376b05c836ea1b4449df2f23047dd4c4564f36231d8
SHA512782744613b4000fba7e69dc3705c3b598966c722c60465b80ba66c7ce507da41f9e7633468838d1c310cca2295d92a095fddadf3c4e079ea6e7df0cc480ae65a
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journalFilesize
20KB
MD505a59c85d5aadf228e78fdb848a52b90
SHA1342cdfe5f4e15f66dd0d7428272811b43aa0db72
SHA256806958e1300e75a099f7795cbd5e283b8d5c2611c6e5f3c690038a2bc7360a3e
SHA512a6fba003e7e6983541e0f40199b5b685b772d9ab565fbf41d8923f06fa3f6ad4853a9b39dbbb27674a12f60e7cd925d03ac3349b1e305d7a1d4a7ee93953dc5d
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journalFilesize
32KB
MD544317b86690727c76629722c2d7e564c
SHA197133ad4024603cc5beea0a27034bb2ac2ceb180
SHA256f4d49449e780a9702ac88f8810ab76b48947fdb301869062ecd226c00fce7e79
SHA5127c73348920879ae0e3b5f61813dc7062188f9e8aff630796d4d12c1cb4e8d1344988e4151e1d6a3f0b8f36015c1ab482fb122d033d30f506e853eee3286474de
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/files/appFilesize
45KB
MD5c81b4e9118e67bc23377d5ef99f48224
SHA1024277a4f1a76a92b5b8c5ee14eae75cc227adbf
SHA2568d6cf61c54bf1f13da672926d535633631ecc04e290cbf870ab03e4d7349e1d2
SHA5122b2b213ea352bd0b003f13ce280a5a6c3d1d7e6775701687ac183fc481a2cb25cf41c38a75d5215130e3142dfe11909664788bde7fb68be4dab8260a95d481a2
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/files/langsFilesize
3KB
MD50f6393edd01d876c42f66d0609f6f6ff
SHA1d242b9b79ae49807822502160682de3fefebfe16
SHA256dbbc3a96de5104373814f8cba9f829b186b18fa41d0510f0b79be67e3dff781e
SHA512e47dc06e9be077fc112368f2b1ca1b6576c68b69a465db25ea4ae2f2712436917069029f286debb79750470063d374cde4ecfecc23a01306bb7796b485f9ed94
-
/data/user/0/ch.nth.android.contentabo_l01_sim_univ/files/translations.jsonFilesize
196KB
MD5d39064b8dc4e2449651ac09a89b5b3d2
SHA1b7d00cdd2b16f730ca843ea43194d7957bb0e2d9
SHA256b635667ff7955e49fa53c78997162c0558fc8f0c8d41ceb22a71dbaf4cc7b4f0
SHA512a4f28a4f578435d5ee78e399863abe8204431fa72dbc5a44afd3a71915b1852253e71ee47005e967c7bfb17b4f70e50098675737187d96061c8746c05a2f9cd5