Analysis
-
max time kernel
178s -
max time network
191s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
24-05-2024 12:12
Behavioral task
behavioral1
Sample
6e7a2ce4e84d3902614490971e3cd58e_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
General
-
Target
6e7a2ce4e84d3902614490971e3cd58e_JaffaCakes118.apk
-
Size
31.4MB
-
MD5
6e7a2ce4e84d3902614490971e3cd58e
-
SHA1
2704b4dc51c3b31a6df74dc993b6144d2eb62303
-
SHA256
89045f7c687bd704e7c06e065bb0c2371bbadbc9a702b2c75944cdcbbcf153ad
-
SHA512
b5b720da1ed3a9c2375aba0694628a12b77f0253f2129e2cb4a8894946a9647173d08f747b8aab17faad527fb152403dc67cf7ddafde3028f59d1df7a2c67e0e
-
SSDEEP
786432:0ZuIJzWNSJwAona707SNhfXPUaucJX/UyJzCSiE:iuIJzWNSJwHa47SfMau6X/Uy9X
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/bin/su com.jovetech.CloudSee.temp /system/xbin/su com.jovetech.CloudSee.temp -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.jovetech.CloudSee.temp -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.jovetech.CloudSee.temp -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.jovetech.CloudSee.temp -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.jovetech.CloudSee.temp -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.jovetech.CloudSee.temp -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.jovetech.CloudSee.temp -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.jovetech.CloudSee.temp -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.jovetech.CloudSee.temp
Processes
-
com.jovetech.CloudSee.temp1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4362
-
com.spiny.ma.widerouter1⤵PID:4389
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD5ff8a465bc3689b7379b63709a5145b86
SHA19c99edc81f21760e48f60cc02244e73eb3ab5316
SHA256901ad3226270ecd30068eb63cf4301bd5e84c7d7fd648af2222d983234f632a0
SHA51212fc4b839264f07f6966d214807ca62e9f216a4266870de7bb661c887f53cd165d11c66a2a47fe847321caf5f302af6541dd07848fce9c8cab93f77be9023d42
-
Filesize
20KB
MD54c80130c2701cea370fc926e780e633e
SHA18405b02abf48b365bf48dd8af2823bc969308574
SHA25615f966982746ab2abe9ef96bdf567d2b706796e0042f5e314dde5291394fb4ca
SHA512467b6e793fd47c3286b151d583a70b7e70c522cb86c2945944fac1a39cafdb151c1a28f4e60b6155fe63994604e15f76f6f0aacb03e3ad30c43369a2c30d0232
-
Filesize
20KB
MD5ae50935fc98b4522e0905c952fec25e7
SHA1e6f38cc70fbc3998cdcb3d0687c5ded00e52c57f
SHA256c2a0ce180b7dbbe6fa4c7c01637e32a6edb5a0df708e1d065085caf5407242ff
SHA5125a7c2fda762c13ea0651f2be0f4592805b83bb5eac191800a817ed70de76d74fe000fc422b500e4e47f5bea39e70db0ec8892563c1ac3e4b35f2bc64f5b1277b
-
Filesize
512B
MD5bd5d0082538de1d916e3ba4249fa08f5
SHA1c3f574a756d99f2ed5d49ed04ac59c435cfe6520
SHA25698d46b01c25f1257fb0dc9a4a63b5851729bbc8a84dd8a314a3162ea14051c69
SHA512a5fda9cbe0103f2df337becf1612f3392954e771cf113d82d1d9b1e647b9965ce096450c8586940b326bc2e96499dc19439e41933f156d84fcf7625fd1041c13
-
Filesize
44KB
MD555a035740452456fb52e301d018163b0
SHA1803b21bfebeb8e0fcc322582a74c0bca7a4009b2
SHA25653bf0f2cdadc7748fbc1e5efbd546bf1c8477ba6f95fdf7902b8195108aea5ad
SHA512de9d7c0b4f344c7cc83e8781a66bc263bfde2f505ab2dc6dc4f4b4c78b8916e06cec284904707395a928bfbc6b6a36b1759233c8bd89d5c0baa5415c3cb45727
-
Filesize
8KB
MD54b473d9bc0ae83ac0a44c8d94ee770d9
SHA17b5554649ef2b81ddb37c1fef11c7f315e5dfe3c
SHA256374b47cfdf3a259e7ace2db31188da528d34e4a00c0a73ccef3419bc91fd19f8
SHA5122dcf0672e3b66718b493f740742df905979f05b682e9687033c6b6be627f8ee2dfbccf7ef4d4788a8a9f775239dbdca8c6d94c654c8e509657f5fd5efbe179d5
-
Filesize
4KB
MD53be6d6e9da67be5b0e51d85b9147ea44
SHA1969f4bddf55dc00c0d327515bfbb3991e4c2299c
SHA256532012ed884dced4094880cc56e5100aa157dd984c1221920692b6bdecfc8446
SHA512338fb0055d03d7bc2d9e68d25ae43c04dff3357dd51777667b699e032913640c158a704320b78b26615ddad50db5365e84209c5c32f06b61940b950b56e5d515
-
/data/data/com.jovetech.CloudSee.temp/databases/pri_tencent_analysis.db_com.jovetech.CloudSee.temp-journal
Filesize512B
MD5587b7d8a20d64212d6ea0fb42bc2eb69
SHA1de9f44f570d91d1a92e1a5fe5c22143c7b4ad8dc
SHA256e6dc2c0c5d372985c8130f09c4ce884392233603871a0b67b907d13d975a6b83
SHA512252ac3e0e9dbf72f82676b28825c58da913906b6c02340bb92fc6252ded9938e6dab22979d9ecd1b22072771aec7fb08b4caf7ba7cf3fdeaabe73e24c1a6a62b
-
/data/data/com.jovetech.CloudSee.temp/databases/pri_tencent_analysis.db_com.jovetech.CloudSee.temp-wal
Filesize64KB
MD56493a8c433a09fab59bb75fb46f760f2
SHA1856895222447ca104577242c328589607e4f9cf2
SHA256a307b607b7a16652850276f5741bbc163411a9fc6d41298f924e2fbf5188717d
SHA512b7f711efd148b3de52bf7f238e705d3d13a838d124194d2cefdec6e3fb033398e0b629825d2b79f38f32f299a78c6779ca1b5f23a90a0ed0f496159fb567ce5c
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.jovetech.CloudSee.temp/databases/tencent_analysis.db_com.jovetech.CloudSee.temp-journal
Filesize512B
MD5fdcfc6153ec55ed15e8b80ed4b256ac5
SHA1bab856e28a9528c4a28e008c3b0e9ecced3ba368
SHA256d38a0b9c5e8033f0a3f4ef399ff7313657130dcfe7b65029ee64ae89af81f159
SHA512a5877341241cb9cfaf3ebcf188a3a89d5d65185d6b161b911cad95c314dc7ea8121384f08ce0393a44b000c5a3f921f7a36537685f230a0a2608e3056bbd6283
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
72KB
MD53f5c3adbeaf33863ddacbeaba2dc5ff0
SHA15b2ec0326a9d9554cd916b10de092a1706aa419c
SHA256c41fbba9d6fd49e09984695089ea2a316ea1d8d6b891f26314c2269c52965a9c
SHA512ed1c2430025806fce2b6f7cbaf9e6314888e74ed4c366f67193f285ff9715cffb415485b4757cd16d2386ac117ff301bddcede4be7d75fcf2a673318385030ac
-
Filesize
1.5MB
MD5cc900eb425262c17bbbbb45e7eada97b
SHA1fd5161ea13d197b1f3e729ce76c2883c5ccd0ee5
SHA256d9f529e466d69f86bd46a22d333054f7170896fbfb5468b77b787998e72c3de4
SHA512a1c2d254ba932d66d1209d6310b4aa345e660c79db183549489c84e08eba1e75caf9d0a8b6e9e2d1653d7c4ca8c15114f31199820e4259066f1807138252d83e
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
327B
MD5478e0e6a5690e46ae6fa2ebf362f44ec
SHA1c6f009565825aabf5f05be817c6975d775468f10
SHA2562cfd33eef0e167a1a58a3ccf18446cf02084713f7b6d1d8ab11469908f2e1884
SHA51214e475ae793f90ce2057f2eb1921a1fcb9a652b5f92b7d76513b568c11e42624fc78599f3c54989daec51c474d3b9e4e9a30f63ee4fc271e6787d39c2f03dae5
-
Filesize
423B
MD5455f2ae5ccca32edb4e4e9c9d6235693
SHA1c156f49ca63da4ccd180da1f36851173a79cdf35
SHA256eb70ee914c7811eac17bf1562f34c9ef7889ba128a51c21020c017204cf320e5
SHA5126dab9ad1d65013f28a3eea8fb5cfa78281d21d737479ed125b51e7ea8774f23fa91dc11c1840405f32b8da47aeb3d827a2e66d9ffbad53d40a7c2d13bc8ea99e
-
Filesize
513B
MD56c75c88a4690d5918ac616ba288fdc66
SHA10dec0e62d8b9370393c8e47e39675f9b1190217b
SHA2566b004897eff736d0c0379a55fbfb2ba233a03d350392f0ebd1d36c559e7e2c05
SHA5125a8c72b1a01c93bbbaaa22b6ee6a683a8a656ab7ae342047d1d10a104822149293c7205e9f2dca5bbbb511f66bcd42c338b88421846d6393914b3f0fe5bdcd05
-
Filesize
7KB
MD55491cc2dee881ba6979bc70d51e19cb8
SHA1d8d727ee5fb334f1a9998c78ee1f6922494fef8b
SHA256413e5f766eb38e05e66bee9aef01414d2967f06fe9c4e61b25dc83ac2a43d22a
SHA512220a3733a535507e2e0ce1e40473362c5696ea1913027b22c0da272238e28d81f81803b6b79fb340f05220b3dcf737a3da3b32f53ac3f9b52669b0f0924217e0
-
Filesize
104B
MD5dc3b9068b0dc013229a6e540c984c172
SHA1a52ff23a2979aa199402614a8f06044c2afca2b1
SHA25664bd613735aa0406ea5570d16558e01128dbdbe6f9dd7f6da6cdbb6e808be063
SHA512db438d0074bc2fd3a479dbca8e44fa4a9aee9f91ba38aa7866ba2184cc4d5f88c9d8b7e363fad608e48cb1697f03f48ef1290514e6db2d3d05118a5af31dbdd1
-
Filesize
248B
MD5e35a1307da0ee76abdb19fad3ede2f42
SHA17cc3a3fbf2e5513e1cde12d27c8ed37945a1315b
SHA256bd391166ed553f1d19ec8367b8e16c0177d7a2089b04eef1e2693c8c0a1550b3
SHA5122dfbca20dfb83bae42f05763a0d0405aa0b0637709b0a9110ca4d39d6631b2b9b57f261e1f92316acf9ff9f9599c28b5e0681a12a7f1f2b8c59c72d05a205a58
-
Filesize
41B
MD596ec69eef4fe04cda7eb0dbbcfabcb8c
SHA160e1e6ab3d3c017159f2550966389d5de33bca1b
SHA25683cde305e37ad1deb17d86f23a39bd2434d6719e30b307adebe5a189a78ff6fb
SHA512a8bc5a95767b3cadba530f1a5c6201519a6df25a969f86bfca1a46a86641f8bce1d2983f51322314bae5aa841d1db774adf1093a5a3464e0d64eb94b1269ac7b
-
Filesize
147B
MD5d52328159d40f287fad5b08a3f77aea0
SHA104295973e685bf2cc031df99acb4204093fefd15
SHA256dbec904ed2ad1756e8d468a35b4c7344c8401346005a6e1390abad64357a8318
SHA51294a647eff08b7c9b5630bbb25515a5a2fcd8c97d75b2acdc5c046f9800195ffe45dc1a7a64e8a5fd21b3ebd8185a307221b47116a3ef1941a7f992ce22d06b2f
-
Filesize
147B
MD5972aa3e942f0cca4c4efd9dab978dfe8
SHA1c6faae3aeec9ae5650a7decd932ca76edf647505
SHA256d88ef8a8e5659ea38dee587780ef25d515d58910a2f6743a47fc3c81e37fafba
SHA5123bd7e64a64d86bf474a686845f3ad93113e2317b6e395200b4e18bb1ce2ea67fdcb29b14cb29f81a94ab7d84dd5c377fbd62d8d86d67fae6b029a2e1da71dd4b
-
Filesize
20B
MD589fafcbe46950b587c0329a4b74ec20a
SHA1b9e5922ee41508479d08059c2446cc11a8b55bf3
SHA256af3ae003f6e71212b1bc58685280005f6976c2b8553840cc31b798a4c980cf4d
SHA51265f82157166620e38e93058a0483bc0c8dc9b60c3f9ff44f9035d2c9fbf9c4c1f881845f72e9c28438c09aceea2c1e0331f07c58f7a8420b1d3e2460916acc9a
-
Filesize
19B
MD5b7e00a0a7607fd25626807581e269b1b
SHA13be37d8ebda4a93c3b4c85b7e1185f0b8caf3801
SHA256495adc5eb4bc69f3cba964aab12c8a4fb59173fb9b07ce7b6ba8d50bf2aceb57
SHA51249aeeec05e697f9fa0ec461e6599aeeecc266e6903c6589b7d5ce5243426fef443e5d4ef05c4c2cb38e5348dd439672ef4e6063aca0faf305396678740074bad
-
Filesize
19B
MD58d501032f2a737ead767b47ef349bc12
SHA1057aed8d9123459911eba655eceebaaa177a9111
SHA256d730b29223e1ce9a4b09abc8c20febfbbaea497f7cf649cff6df2495ba78945a
SHA5127407da024025cd734676838576d4ad2acab0487e27543c117522d914a0efa8d7304871acc1eadcbc42775f06febbda05d2590c4c6a4b7353f33075417ce8d422
-
Filesize
19B
MD56b81d6b4add127e8ce151364d174a9e0
SHA129d21797f0d2f08e9ec4f9868319e72335fff0fe
SHA2565910486ea88ba324955b97b06d825860671522857a8702ccf14beb65ccb19f5e
SHA5123336fffe6bc329766a1c4366d461dba9feed6841c1c033c9c0de6249550e4355dc02915c1e7e7ffc5288e2558dbf8addddf23b17cdac00a0904f0bb581a08b07
-
Filesize
19B
MD58689b2b3b03512ae64a38dabb9e53431
SHA1f74240c7e15f3d7b3ae235e1eaef8b928e6de517
SHA2562ada6f28b0cd386731f470728548619246541d38bc6a7e64e6235232e09ad5c9
SHA512ee596d46bb69982576a75220a2e6f647d50fd15df9cb7f097d45973d026486f5ce23c54c55f992392b9520f9ce7ba3a09ef53721e54f1d89131f1576ac022236
-
Filesize
19B
MD5d6eb7fa0f605c689f254bcf0c4c7753f
SHA1de81d61641ab292dfe41840efc96b352bdff600e
SHA256e389fe050ddb56fc5a2d1678461e1860c3feaa1691ffacb07081b6593453b79c
SHA5129148ec07cb12f757c4f11bee12211981590ef45a7f23bd52cb23e163b1bf73e771b5a76cb4a8874fa205503d500ec4ba23372cce148df52ff9302c7392b9de16
-
Filesize
19B
MD5b8069b1cb006e99ffb51f352dd0be1ac
SHA1693e948708b0fa3472a96c318fd4ced18efdda56
SHA25680e2a35dfeada46720d943b8842a53e339158f36446950eb1ffe0c8e3d2fb67a
SHA512f257b94b6e103f1e1a345d0e546fc07261ee5c5c561a9f2638cb7cbd6da6b01cd6516c0cbe47d36c916c298bfbab505ee9643baffc9e92ab15163cd53fee9a28
-
Filesize
19B
MD583ff3c4794e65dc84c93684dd5578821
SHA1f6ba7baf664b7ca0f94e54b15c98fb59c59003f6
SHA25658b8d7703a456c6ba593d569036fff133df498186e39d69c9e2d43d26b830505
SHA51215842e16e469407bd4ef433ab624bcc65aec6ee40f80529ffa6ffa9acb5170247e714dbcdcc8c0ee85039d7663530f811595a75546b592267b79ca8afec891b5
-
Filesize
20B
MD5a88d7980fb5f983219dce1dfe26fea5d
SHA11b8d44565dd415688eeb9ae3621460e2db763318
SHA25677fab904a1239385ba87968094349e16ed977543d0d1e8a0b4da40dbf5ecc736
SHA51272adb306a42dd5a2f5c5a5b7ab67e308228d8a032967813b0a33d7046699af8de5d6cf785dd8c35bd6066b59afa7e3f9a2d7b208cb59f4f9a9821fcf822e4b03
-
Filesize
20B
MD56e9221b33c23aa4f860769408279b42b
SHA1c9d384c282ae709690b853e164f6627ea53a6e2d
SHA256c51f6ec37fb8ebd2535907b34af607224b75ce56cc832388518598a44acba191
SHA51273e08104217324e4ac80b3eafb2d495ba726361eb34636aa74e8fed3dc62566ee3571bab3fc0f3f2accb885d7b7c3359bdc1aced9b4f70f3e36a2c6f4b434539
-
Filesize
20B
MD578a58ff056bbeca2333dc557dc94acc9
SHA14062636cc15a4157dae1c1661f24585fdff1ccb2
SHA25687ceeb884dc096d6ebea5794e1a774eea87a82367b662cded80d55000978bcbc
SHA512341008d78b99368926c297305af0919b2f0818a29f76f26e1061f7b32af848276475f8add59743d6b235984c09df89648b50099d0e84582ae47757925049b377
-
Filesize
20B
MD5b9fbd989fe9460d89fb919d2b3dd1636
SHA1baf03b21d462d29a215c669c82ae2543cb0058c2
SHA256b84a46f3065fcef418994022bed7aa1a6163f976683771a56a727ad901abf93c
SHA512d4844f9cfc3a17c5fcfcdb28d1031ceddf3fcc8db6204db19a6d39facf3769514475682334046d0fd4b37d47e49d54ba10aee139300a6768f4149d7e47e88df0
-
Filesize
198B
MD5e74de2579fb73c5636dae6480ff6720c
SHA1cf05e31cbe6668422af237dd39fa8b528d7c5ca3
SHA25681e3bc339051e009fea926f6035e89496a472509a6d0c7d36938df53dd2fcbf3
SHA5127216bb6c320afd5b264b6b9fa6770238e36272fa6c43f99fc03e5f6f5356d2639a87fbca29da25b7a795fce63224d18d9288270e2b17c6ad6e9a7f1177b7f2be
-
Filesize
147B
MD5f0ce11a35f0bcf1a7207e854512ed68d
SHA1e47e024165b7f8a48e77cb253e1b502050b4b208
SHA25673c6aca2c9cba7b3f6d1dfe9d933d0a832fa8e54f9fb17ed33ead46084d891df
SHA5121ac9ed426fcb1f49af8a1029043fc2fb365bf45f725ad09e50bb162bb1a50bb0ae6dc2b33465bcec791810996b811da26eb6bdac6e791d89dc80779390b30015
-
Filesize
21KB
MD544d63a302181320e146a447321b5ae89
SHA19923c94d960719f322d57d5827214ea4ae3cc5d4
SHA256f21e1ee4d6665aec8560c6b3fcc15085441bcefd8941ffd8511c07f1423ff61b
SHA5128380a609593f327288a6789037a46accd1f445ee442f377cc87b63daf8c7b255afee8a90e51fb578dc444954df3404551e4073db088c02a083f286d41dafea2a
-
Filesize
815B
MD5b9a069212e0e66d296a4d6a14cb5a9b8
SHA1dfa8f5118678e28d695fbbcf9d2fb77e8ebb66fa
SHA256c903489d516453d6cfd729b9f86ed244de43159358d9bf516e94618d51751636
SHA512a2cde561aa7eaa8949df445db8624a2d3ac85a81055ecb93379f22e870205965a8f6d40927cdf5bd5456e9c84ebb4ada7408524452122af658c1c9e1ee64e200
-
Filesize
80B
MD50b8b7b2cd618a08663e64e7b8b311e15
SHA1997505050c34ebb90b06493766764037bb79b5e6
SHA2562cb4f310a9c05801c59884313e52b4319bad99c77a4601f10f10226b767de3b8
SHA51262c1eb7b7cbeb7b98a4d8d8deddb48aad9943f245f3779788db7a3f1fd1470087b98d3622a4e0b2664cc26b31b04fcd25dfcb1ab2b09cb8922defa3340af193e