Analysis
-
max time kernel
110s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
24-05-2024 17:09
General
-
Target
6f3b42c3b3eefba228151c2726656609_JaffaCakes118.apk
-
Size
27.5MB
-
MD5
6f3b42c3b3eefba228151c2726656609
-
SHA1
ef7fa8f4b318fa3cdce84972a0e3c9bcd31b537e
-
SHA256
1f72cf0c757ac796bc910f0ebacf060936fbe66f3a593945678094180e1d7edf
-
SHA512
38668d28dddeca7c405fd1a9290b5e2c94afb6914a6f3c0baad143c770f5c6841905660aa52bc8d5e25e5877c7b6b0bbea8db89f9a7678c98ecc0f53a9cf0364
-
SSDEEP
786432:iwNjOhbAlOR2KTOhWcAtksERnU8RjrAvfe8Gtmu:iSOhc+2KTaWc5s0UWQHe8GtF
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.cyberpony.stickman.warriors.archers1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.cyberpony.stickman.warriors.archers/app_working/facebook.dexFilesize
252KB
MD53bc7b2f808b674ad7d0f475e32f76a41
SHA10f0d3cf3f3ee266940a2efb766956bf4d6665812
SHA256ccca0b419dab1b2dc7f617d3d038040ff17323d847df5ea2885ca21ab323da25
SHA51251fda7c7b420260a45c6ee3a0fa6561fe190d6fabade54f6939a26eebc0b27ff53acf881989dcd8352971e179879d6474985b172ff74d6e927db0a1ce5a3dcc7
-
/data/data/com.cyberpony.stickman.warriors.archers/cache/1582435991586.jarFilesize
9KB
MD5e8e0527a01aefdb89afd2c508f131da1
SHA1f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
-
/data/data/com.cyberpony.stickman.warriors.archers/databases/google_analytics_v4.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.cyberpony.stickman.warriors.archers/databases/google_analytics_v4.db-journalFilesize
512B
MD533292157cfcdb1244e2e960704d44eb2
SHA19198d09a46a3b36440c1663d946b62a4f4a6b544
SHA2564263c0e03a304dbebb7871edba07ea7a7409cc37a6326f1151f431615ae31f69
SHA5123dce24312cf8644d1bbb39cd00b77279b6d064d3711c2e1e9f4b38e7533c41ac00f622fbb560420c158d6b02e4dd660f14b246fc182330b871d9c562cf8b850d
-
/data/data/com.cyberpony.stickman.warriors.archers/databases/google_analytics_v4.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.cyberpony.stickman.warriors.archers/databases/google_analytics_v4.db-walFilesize
52KB
MD5db172769c689f7b3762ff4787c9712a5
SHA1f711702fdc5948cd4f0bf472eb1e13a305939957
SHA25651cb13dd23ff2b845556f8c1558bddb1d8b9369596466a9d07b0059ee787ac96
SHA51251b9c9892748a0012400f1f278f35a87c933bf00648ab6de3458c70813b6e763f59b0aec9de53fdc9be060f71d717fa22aae9482063c6afe13b8789a5ae6e764
-
/data/user/0/com.cyberpony.stickman.warriors.archers/cache/1582435991586.jarFilesize
20KB
MD5fde2ee00cbd121cfab5290b078aa3ceb
SHA1e2b77d5320e155e413d040a8c20020962065b2f8
SHA2562897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
-
/storage/emulated/0/.appodealFilesize
5B
MD588278dd6f1c310e699905218a9161893
SHA1616e70e35b2ce06b150fb71911606ea34fa100b6
SHA256469abedf5797bb56f1afa35a227eba1d8f7b3e22c99426e527da4b0d839dde15
SHA51286b75a46ffbd2c5f9d3dc8c3a3ab8c52a5a93ae22c669c3f20b7a715be6875af0fdbe25e7899e6b4c8ec9d328b634d2674d5749c2174ad3af0e95b3483fbb106
-
/storage/emulated/0/Android/data/com.cyberpony.stickman.warriors.archers/files/Unity/77c9d3b6-5871-4364-b8fc-00e781b8c99b/Analytics/ArchivedEvents/171657061800000.64db0513/eFilesize
42B
MD5bdc0a40d3055e2bc19c9f0dea0fcf564
SHA1f244e7640b7699d0e3bb2ab8ed3fc56453ba02e5
SHA256c9e3d71b82473e88a3f5731bdac1ed45e5ec41bcafe2b466fc9ca307f87c5133
SHA512eaf4a1853a1770d4777329d58b03ec40c834f0a13ec5a8b775b5790c7a81efe951099fe6fc2d1465b351e32b392cd8a3d8223fa8bba54f6d51bb513a28136f85
-
/storage/emulated/0/Android/data/com.cyberpony.stickman.warriors.archers/files/Unity/77c9d3b6-5871-4364-b8fc-00e781b8c99b/Analytics/ArchivedEvents/171657061800000.64db0513/sFilesize
286B
MD596da2ddc56938a84781632fe7df14aac
SHA143ace1a87adcc3df4354f0807f7831fb11127d59
SHA25670e5efa094390ffcf9d963e19d7b273307a3dfd648b1f3847823d5b681e8738c
SHA512428b657a240f82dc7ba39354571982cde908d8128c3a98c5907e42d99e13982fc1f1d47622df059377177b60260c3d12b3db06b77a2e2ad2bc6b4c3ce63513d2
-
/storage/emulated/0/Android/data/com.cyberpony.stickman.warriors.archers/files/Unity/77c9d3b6-5871-4364-b8fc-00e781b8c99b/Analytics/ArchivedEvents/171657061800001.64db0513/eFilesize
82B
MD5bfec179340648e989688d4e300cecd9c
SHA1101e304109bedc9343688eac4a00300f19d8ab03
SHA2567b96cf5278b5ff117b53e73f97d3265aac1db9308bd99377296813072858857c
SHA512596d4cb5e2830768ee75cee8a7e56f85ccc29dd88471e959ab40ca8ab085a59a95111c6efe110345295436f21df60a610cbcea344aade9d0b4d924f222f0f18c
-
/storage/emulated/0/Android/data/com.cyberpony.stickman.warriors.archers/files/Unity/77c9d3b6-5871-4364-b8fc-00e781b8c99b/Analytics/ArchivedEvents/171657061800002.64db0513/eFilesize
902B
MD5e5e6a075b5b7c06d2788b6746251f9db
SHA1f9251c937749c5cf24476a4d17dfca834b8b4a24
SHA256149facc4d1059bb6937bebd3bde6052da3b579e25070907ae744e18fb5f3d60a
SHA512b6ae6eb5742c4416f9989e9839e1355482238a6ff939c56b565775b92ac0094dcb414dcb8c56d642dbd840f6f9216910a0bce140f19e3174ab216b70ee393853
-
/storage/emulated/0/Android/data/com.cyberpony.stickman.warriors.archers/files/Unity/77c9d3b6-5871-4364-b8fc-00e781b8c99b/Analytics/ArchivedEvents/171657061800002.64db0513/eFilesize
1013B
MD5f39e468c0b1c052d609bd4e9e482f23e
SHA145f9c40589fe21efcf83aed1d471dfa26212cf4a
SHA256081bd0677a39913fe3425b146e55a7587f3f6472090f5ba9db7d4a2b0b9f46e3
SHA5122910fc5abb90f81fbda8a223fabd50e1cc0571771ffff89b1f5a4cb6862095a07a99fa426364c7191862fa0216e411804224e36a6c6a949697328210fcd7deb5
-
/storage/emulated/0/Android/data/com.cyberpony.stickman.warriors.archers/files/Unity/77c9d3b6-5871-4364-b8fc-00e781b8c99b/Analytics/configFilesize
293B
MD58673a8ac0b06a9d056d08d62f857ba4b
SHA1a351bea1932270bafbe468584058fef20dcfc31e
SHA25683b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f
-
/storage/emulated/0/Android/data/com.cyberpony.stickman.warriors.archers/files/Unity/77c9d3b6-5871-4364-b8fc-00e781b8c99b/Analytics/valuesFilesize
150B
MD5611693f5c5af8e7c99f06f713c965acb
SHA147f861ee254121d06070c80e2641bcba93be6fa0
SHA25675fe4ec897e7fea5cce68878f5e5e1e53b553de729f289676d0899cf98332272
SHA512ff41d678bc0bae6d01f1398b8b3e24025cf795b656f8e0b27f677fadb8a42f9ca6144db7a41f83a2f3e9fb8b8e8cc53fea05d16948481a3ca7553244c5027de7