Analysis

  • max time kernel
    172s
  • max time network
    136s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    24-05-2024 07:00

General

  • Target

    6dad1f6455eae80229f26bf0c618b79e_JaffaCakes118.apk

  • Size

    24.4MB

  • MD5

    6dad1f6455eae80229f26bf0c618b79e

  • SHA1

    450b25de73028d57a2af456158612d9642f12500

  • SHA256

    108c62a1ad3822a05c6483f8b129791976ff6e76bf86f2327c5d7f80a871646f

  • SHA512

    c8a4e977706347579115f2c9ae8d76148a054d8f18c1e25e22c6e33368528b00c0f4643f406b9702bdcd5bcf78dd046d3783481790cf5223e4092f9ce2ad815b

  • SSDEEP

    786432:zzrGxSEFxfTqdROpum8xdWIkT+S/g9md9HiLk7:zPGxDPbsxdbY+SY0HiA7

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.yahoo.mobile.client.android.weather
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4663

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.yahoo.mobile.client.android.weather/app_lib/91596014-1716534016430-4663/libyahoo_nativefx_v36.so
    Filesize

    333KB

    MD5

    c583eb81e0984c58c650c400a43989de

    SHA1

    f1501ed3a39fbafe3067ed8711c72c1414ca6647

    SHA256

    cac4630bd4597e1edadbabf748cc724f8e3d9b283035b32127ee77bba099dd02

    SHA512

    d57cdbc3862293e0305fdc1f36134bbf8afb2e5cd408cdf05d91a3aa3fc2ac9aa9336ecf4d8519c834b419bdf87a5fde9e89192295e1cf4f7d9b58b884004db6

  • /data/user/0/com.yahoo.mobile.client.android.weather/app_lib/91596014-1716534016430-4663/libyahoo_nfx_weathereffects_v43.so
    Filesize

    229KB

    MD5

    5d392983162b3d97b1f715f1fe29ed2e

    SHA1

    ea8efed22bbb190e9ef8a7f27bcf2f5f016c4311

    SHA256

    50269b3021f7c2ca73cd772f5bc3db81384a020d33d2fd9f7fec81e7021320e6

    SHA512

    7b201fb2a91000ab42ab633171b43088a500827e79022d6c07df7ab41560748226ce9314776284481ecd119edffccfb9f359346741a67da98b790063b321b9d4

  • /data/user/0/com.yahoo.mobile.client.android.weather/cache/uil-images/journal.tmp
    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/com.yahoo.mobile.client.android.weather/databases/weather.db
    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.yahoo.mobile.client.android.weather/databases/weather.db
    Filesize

    4KB

    MD5

    b9e10ce4641ac1eb042b25c43bc3d8f3

    SHA1

    85c15efa83a28a083b900375dd8d8f90b307f22c

    SHA256

    fb2d2d7f4ccb2251604003206df006b69f41705f0b265ddec061ac6beb30dd95

    SHA512

    ae8944f77dc535d10cde4970cd9966500686c4aecd3411d9eaa5d8d5d548e36a9e6be7225f30fadcf0d2d893fe976966ead7ea391bd89e2bcbbc55feeffa7ccc

  • /data/user/0/com.yahoo.mobile.client.android.weather/databases/weather.db-journal
    Filesize

    512B

    MD5

    48aaeb65a8d24d3f0724db6b3a879dce

    SHA1

    4c6d80bf4239366514d1565dd6082e661def2092

    SHA256

    7216650f45e813006f757b8c3463c60f1a1534e70a477bf3a4371f738b82dd66

    SHA512

    c88a08f74bb7a1154fc3506e3df85260f05a3fd2b5046f32c078c1c6dcbc9243d6572d52b7983ebbb4acc770826b8cdf8420feab5b8ec552fd4b9677620357d6

  • /data/user/0/com.yahoo.mobile.client.android.weather/databases/weather.db-journal
    Filesize

    8KB

    MD5

    df8534f2bee66778d94535879d2b2dbb

    SHA1

    6615d689a029e3365b48cdf19bd94ff2af23dfc2

    SHA256

    6f39b390cc4fa94e30587e7da29c5d7cbb0ba959632a9cec1a3b58c6cfe3f807

    SHA512

    8dd17b6721035ccfbe1de7b7c4eca78ddb84d596178af792b34354bf621bda76902e5ded66a2fa88db1c7a461cd8e3ccbef88efb927d31df9e9eec5b60ab7bfd

  • /data/user/0/com.yahoo.mobile.client.android.weather/databases/weather.db-journal
    Filesize

    4KB

    MD5

    99b2fc77751c9465e05afb3e5062949a

    SHA1

    77b7effc8c3f4602d5543542e3ee3186fb252fce

    SHA256

    be9ba963ef99cae7fbed3042e79d9436074fd397691b055f1d663b8aaca0bb63

    SHA512

    c3be4ea27f09fac0ca5d71636e6d8493376fbb771aea202d94bc35e966518014ec24bb0b4cfb7e40cd14ea6c37313f74cf89fa1ba3472b89da9b20b82e23d565

  • /data/user/0/com.yahoo.mobile.client.android.weather/databases/weather.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/user/0/com.yahoo.mobile.client.android.weather/databases/weather.db-wal
    Filesize

    88KB

    MD5

    a1df62e120ffb0f18ab953ff7aadcf07

    SHA1

    7bd57fc1f2d130ae8eb7e24474bdb44c2d623914

    SHA256

    d68609d739d9edb5953b3b03e252248d4aa36bf65a293a6e238dd0679c095ca3

    SHA512

    8de02a52dec983813c841eb7bf1963dacfe5c1b2b6fb1741437d43a5df46b132591462dab62280ce9751dae2bb2dfc97ba36e4f7d7c7f6f7eec4a9f5cc49d9b7

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/.YFlurrySenderIndex.info.AnalyticsData_S5NX93BS8BW7HXV9T6ZK_280
    Filesize

    88B

    MD5

    7fd1c907ab4fcff68ceb41ca407e9d5b

    SHA1

    8657d21ebd6eb1c7896591bb09c6b39c38e09e36

    SHA256

    74493b2d286f7e01b8998740486e4c73a50992cfd5e3d847aafe7fc6df365381

    SHA512

    54e953cf851cb77457f14a168ea61cd367cefe45d69737ab37bf1f19024d4441346a3fc75bac4a112f15c55740c52aa3bb4cbb1d84c2c5c5175796ce94995dfb

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/.YFlurrySenderIndex.info.AnalyticsMain
    Filesize

    72B

    MD5

    6698d851b861cde19fabdc253a1b4aae

    SHA1

    bd774ab4b710e93e88c1083e16138d29fecf7d38

    SHA256

    f0263b023f82655a902b31a5757140b7d919f8bceabaee03e16f9f6158bc0dbd

    SHA512

    6fc4f09cb463cbd09eac6a1db3377141b3bbde9bba44b6fb6a6b12deca2d16e878b2ced363b51816160c9bcaa35cdbc75be977e8c469d33ba0b0947a6a76e1e1

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/.yflurrydatasenderblock.cecc8645-94ff-42bc-a9a2-ea336e021a98
    Filesize

    352B

    MD5

    a5ca11d4c8ec4832cf1800a80a43ee59

    SHA1

    6adf293f97cbc0d7faac340a820beeff15e331c8

    SHA256

    f44ee4293fe8121bac89b973e2bab6927fb3fc88fb8766009ba74e9319da2052

    SHA512

    f8a4585f56b477a6d45dee35cd926d41f135749a3683addaa03574b28225c606bc24ff1ad7fe82f35826108dd075496429fdce001988bc15ea1177c8ec9454bb

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/.yflurryprotonreport.-6a7fb6be69b2b814
    Filesize

    49B

    MD5

    f22ec16634274595490a31e11943644d

    SHA1

    cc09cbb43f55f8a97b3e651eebe00f602f5990ae

    SHA256

    5f9586a9c97a984fb723be5183996599e9c688a772f3303ca6bbfdd5ff7f2504

    SHA512

    72a1e77ab1bbff83f661a510d8ca0589b85e406a3dfb9bb13e78eec1db15f9adf036bdfde8f1239940d45f9a9c0192fd1acb6b047deb9ce9c6b5f2230c807165

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/.yflurryreport.-6a7fb6be69b2b814
    Filesize

    1KB

    MD5

    28b6267d3d77a7b555cc5a040a7ed236

    SHA1

    a11c4485a7f22cbd304563a2711fcffd9e8b811c

    SHA256

    64f0c418689476eb6f756fc56af0830fc6b8425e782826a1a5c8c941d2a80091

    SHA512

    f6f401a5930083ab325dc8c35765151459c6d28bf8b0bb74574623b0c1a9439798d857dd5b339ce72c2d322ee2ca36e13fd506c5eab34dbe8c8680c79046797a

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/.yflurryreport.-6a7fb6be69b2b814
    Filesize

    1KB

    MD5

    9f4fbaff48a1af4ddf101cda83f05a5a

    SHA1

    7cb620641dc90cd82ee6f10d889a8b673db3e862

    SHA256

    04188a8121a55e55ee74724e81b8f3657f5feb445ad791d1d641958d4af1aa80

    SHA512

    53df3e021014b984a9aa1b593641b9b0365244570ece797b01b5c4353f22c86266e97fb3959bfb8faa6472137da3d7097954ffde684c40cbd23a1a4cb5ce8bb0

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534022784.YI13N
    Filesize

    1KB

    MD5

    c3d0e817e8048c2929ccd9e59adadfbc

    SHA1

    11a1b8f5380522b2303d3531b50386d778417cd7

    SHA256

    3e1f2b16ea344c16b3c5c8b5fab5ef553d6d36e33dd938303d894eb2db079593

    SHA512

    6b320cd7db99ed1d32e40229d62dfee99800ce5e19934abb058243737738f74a9d170ca01a994a3c32fd2911b649bef7e27169aee136bf565ec9e56ec748ee78

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534023426.YI13N
    Filesize

    1KB

    MD5

    d0b0166983b432fc6753e746439eb6b2

    SHA1

    43e182908cff66c7131c1fd838b9786821bceb88

    SHA256

    0398c3a78531faa0d0355f60f5195fba22b7e3dc3bb2168209e50091ef03e1fb

    SHA512

    cf735f5ad2b8079d6b7a4b1582fc8ceef435336cc4f5ccd4f4fbeca9ab8ffd1a0a80124b40d3ca6bfc3a4adea07a9247c4b99bb7fc3bd294c2c7566f7a4efa54

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534023518.YI13N
    Filesize

    1KB

    MD5

    eaf3878b167579293c78db2e067aa4a3

    SHA1

    3c73d1af82805c3a0a2753c73d74ae967ff47012

    SHA256

    504690bb1b71897fbdd51a76b5cb3bc613d5d442cc0e816827506c7b7fe4c74d

    SHA512

    66af2e7e5ce963fc47ae40a56f0cc9ad15979f30da48fc3c2cc0f586542fd4a9156f1316897b8fd2a5b6da80b4c6ef21a516a59df4ae62858abfb5e7a57eb8ca

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534025898.YI13N
    Filesize

    1KB

    MD5

    0d40ab60f2a8adc8ad7ad3af01775b9d

    SHA1

    3f8d64daa7865b828331cc44b9a5977172aa31c7

    SHA256

    3e3ebe4d2313f704acf3a6e1a2e04dfae59316e5ff06c50e1ebe1017a5c50adb

    SHA512

    82aa1211f04b54b4551a0852905c0831415d3041911494619b8ad7e4a438378210d038389334239b9bedd3947b475316c101a03f529c9bf13305cafdb6ecf16f

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534026379.YI13N
    Filesize

    1KB

    MD5

    91779d442b58903959508857fd76963a

    SHA1

    6c9c098dd30e15d7d6eb2733809b4c34599779cc

    SHA256

    b3f37e1830d0103de938381e0f6a68ba8ca69552e973fc98ae965479b0ac4792

    SHA512

    6630574ed4082c8062bf83d779dca69648b9f4dff1abcd138e2def8673666f44a27fab6c97ca9bcf1a0bdaf0b315468ea96d38807a004fdf958775967e6b852b

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534026506.YI13N
    Filesize

    1KB

    MD5

    49797c30ef1d601c2f0ad1e2e2c759d0

    SHA1

    09993426db81ead3979f6757929211af821a8f73

    SHA256

    ff4c5cb4d235293d00137fd9390cdccae4efbf9a9802ef0a8d29971ec025339e

    SHA512

    861d62bfcb5e7bf55ec73c1b12612dd489ca311a985343beeb7c6b10d40cd50bac4f88a7e602cfa57dae33ad46a4b1a6f09a78b141a4d5d5ae6dc60c5a4d118c

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534026820.YI13N
    Filesize

    1KB

    MD5

    250c9968553a67a6730b8798be826ae6

    SHA1

    fbdd7d1df2c890d0abdce347d08d4bf1a50fdaf2

    SHA256

    a307e0762fb35c428fca518b61ac1bdd5fd45a1898b60ee2adb7f1f1b885cd51

    SHA512

    d8832058d0604f3501906f7533addcf568263bfcc68c59ccb96c82d374b49332bb42bd8f86a04b02a02c137d7ee577aa19a36e3239bf7e8487edb06f1c10838c

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534028459.YI13N
    Filesize

    1KB

    MD5

    5fdcc12a54e5d5908bfb78b1eb74c437

    SHA1

    0ab332bfe41ffed0dad0a2de0253f1c054bb01c4

    SHA256

    6684988b369528223349352c50b71d416f8d24d82a084bcaaf62d443ad9f7830

    SHA512

    167bf6660256d4d534c5f6aa6836094a06c712d4733032066662db6de1f5da064f56a1bd04eca8fe5e8086f5a53b8bb3897bc61f377d3e435ee5162353c61daa

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/1716534047841.YI13N
    Filesize

    1KB

    MD5

    0524f3f4513921dcaaf4e584439f9b9b

    SHA1

    31a9a05011efa523e66f35be2b08401e5c399227

    SHA256

    de9565d3b831d8baa70343450c6407cf9a60ff708f374ee5921caf4e2a40d9b6

    SHA512

    3359349b2f086a97297f86fb07c8ab741f5f5a275d9abfa93070ed1e9951e599f9e459694ebd92d07afec01317db143b6bb2532a11db12de5505fd2aff35ecd5

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/YCM-INSTALLATION
    Filesize

    36B

    MD5

    e33996c02bb914be62d703206adfb406

    SHA1

    933b102aec4d647d3a3a0619fd232d3514b56754

    SHA256

    ede510c4f0c2eacec55a174f7523640768bd5bc6454bfec52b0fb78445bb54dd

    SHA512

    cc3744def9ceb1624e2479d6a444a57e88174cd61ad795241ad6c85be19b7b92a17557f2e619225f1d0b1419b50b6f8298cf420172828b94492f1e28d3585e72

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/com.yahoo.data.bcookieprovider.diskcache_file.aocookie
    Filesize

    11B

    MD5

    eb4152c9e8eff809e28185f90d9b8c0b

    SHA1

    3aa6d24ebef7584750589145e2116779200a0ca7

    SHA256

    743f863522d0badc9abd871ad856de1131b2e88101274b20fb223c3b68ae9624

    SHA512

    fbc86992c4dea515d8cda5587f7445f39e491bbb3565f447044d8ec981549d7c2771bcda129f1500eb9c856c7b78ce1fc2d3c3e78327e236ca9664c04bf7e8f2

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/com.yahoo.data.bcookieprovider.diskcache_file.bcookie
    Filesize

    60B

    MD5

    19ac63436fc1fa79232460bf6cf6bd7c

    SHA1

    20e68d805abbb91d948619931e9c90febca0122a

    SHA256

    71f7467e3d5cda306b14cba50e56d2792917aadccd913001c6db5a651239df54

    SHA512

    5bfe835e0d9ba93917290298a4cf7fdebfa2df54b66908f97b068869814a2caf2d11000a08a7e6ab7f2153e49e9f3197dbda0300c9702786c42f0461ec667fa4

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/com.yahoo.mobile.client.android.weather.experiments
    Filesize

    5KB

    MD5

    fee9b28474f7877291c26e9ec8c73acb

    SHA1

    028839190aac5d534e0b65d8453f1f64aae3e7c2

    SHA256

    58b7daa513811086ab6a6540e32fbaf66b4ac2cc9c54ae751dbd6602055a0e1b

    SHA512

    29a57d2e782f1eab4e745771c6bec441973495f995703d0c670630d15f004494711b955ce52f758ad34b1286465bc817eff21323b550040bee3ea4789109304d

  • /data/user/0/com.yahoo.mobile.client.android.weather/files/sampling
    Filesize

    2B

    MD5

    a3f390d88e4c41f2747bfa2f1b5f87db

    SHA1

    b4c96d80854dd27e76d8cc9e21960eebda52e962

    SHA256

    a21855da08cb102d1d217c53dc5824a3a795c1c1a44e971bf01ab9da3a2acbbf

    SHA512

    7ec8040a523b302bd6a6ee818a79fc25208f99f937fb8364444813e09498b5d31c18f67ccb7dcc79f3c3ceec724c4c726f8559319b7f0d7c3f8de26965f73b94

  • /data/user/0/com.yahoo.mobile.client.android.weather/no_backup/.flurryNoBackup/installationNum
    Filesize

    100B

    MD5

    90ea8d7ae4c98ec35096374e4bdebc11

    SHA1

    42a072befd33b7665e927c6b70234a97ba56005e

    SHA256

    2dac0b86efcc2bfc36952478115ec97702433aa023009cb0fc2d753e2c09b4bc

    SHA512

    c7e46ef390fb76b6d1ef096b63e91cb171806f96bf9743134e0b0dd7ff96b09f9954faa2dd85fb9fb5b1cb8846dcff8ab092f6a815337d4ab3fd9f4aec997012