8ff3425f4fdd36628caec9b7839fe643093eb4f793a49927ae2166033ee1111f

Analysis

max time kernel
11s
max time network
135s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
27/05/2024, 07:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

786df312c2f223c112b748037795ec40_JaffaCakes118.apk
Size

9.9MB
MD5

786df312c2f223c112b748037795ec40
SHA1

6b7097eb16e078930873a19cfa49cc90e1fcfc81
SHA256

8ff3425f4fdd36628caec9b7839fe643093eb4f793a49927ae2166033ee1111f
SHA512

13c42714e4fedaaaa9ab450751282829c5690838dbb9af925e5ec9ece44ba5a968497dd2891e18e846876a1d4df379e82876848a99a3ade61eec40033b078f71
SSDEEP

196608:xhEdHNCB/zsBzrZqy/UPKvflvswxCPaOzV5I53R6bYQh89qgjAN5My4LbmC5:QfDBz4y/UPKFEOOx5In6Hh8MguR4LN

Score

8^/10

collection discovery evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	to.talk
/system/bin/su	to.talk

Queries account information for other applications stored on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect account information stored on the device.

collection

Stored Application Data

T1409

description	ioc	Process
Framework service call	android.accounts.IAccountManager.getAccountsAsUser	to.talk

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	to.talk

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	to.talk

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Reads the contacts stored on the device. 1 TTPs 1 IoCs

collection

Contact List

T1636.003

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	to.talk

Reads the content of the SMS messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/	to.talk

Reads the content of the call log. 1 TTPs 1 IoCs

collection

Call Log

T1636.002

description	ioc	Process
URI accessed for read	content://call_log/calls	to.talk

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	to.talk

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

to.talk
1⤵
- Checks if the Android device is rooted.
- Queries account information for other applications stored on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Reads the contacts stored on the device.
- Reads the content of the SMS messages.
- Reads the content of the call log.
- Checks if the internet connection is available
PID:4662

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Protected User Data

T1636

Call Log

T1636.002

Contact List

T1636.003

SMS Messages

T1636.004

Stored Application Data

T1409

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/to.talk/databases/mixpanel

Filesize
28KB

MD5
3ebd5426ebdcd88bb5acb9eca20fba37

SHA1
b630be0325b53bafe7a5fd0ec430fefdd929b498

SHA256
0be0d785f14286134082dd4a03fefea2ebd773720bf61f3efd4b439f81abe7c9

SHA512
14c3fe6ee4c1c097afa8e1381ebb69ebf0da2ea3c6f5288d0978399a92fc096aae5df2f609fb16696507f7055b6d7068a53f03079e7d3a8ba6a2bd667b7ee7b1

Download Submit
/data/user/0/to.talk/databases/mixpanel

Filesize
28KB

MD5
d8c8777e0eb1b49d31701a49534242fa

SHA1
7c4de55dcf22901bf4a31a8cff86a160473b37ca

SHA256
9b8d30f38e331d6bb6cbf8341b67d88b6e50ef58a93ac8fc483ba63b5a0959c5

SHA512
bc823d0e0839d3255ec83e734abe5051f01216df22bbe8be4871d88bb567de2acd9aaa8ddb3efc4ad62465ca4893cbaab0cd21855382573d2b577f918019b438

Download Submit
/data/user/0/to.talk/databases/mixpanel

Filesize
28KB

MD5
0856d5fcefc990bc44a0e313537cdd48

SHA1
86ece7fd52b84b8e567784dfc12a8809dbdd0c00

SHA256
b6e7f7e84155e7a2a3b6df0fc747d6c7498115e76b7709f89cc012f297d282c5

SHA512
192168914fe7e1f3143ee247f2c7b6f1e467e5cd151271e3c224dadf839cbc39e83d0f9a8a78269895f0a1485fd0f2eaa92d7de574882b6c02c17bf5557c7f06

Download Submit
/data/user/0/to.talk/databases/mixpanel

Filesize
28KB

MD5
3bf70f4c711e5ae0b31775c37664bae9

SHA1
339c29412a60454a61633083b7817e362f8e0db7

SHA256
018406717e8857a86faf03f8edd3cc0bdad48d8a057fedaa94a28d2ef9e8716d

SHA512
5713d2039d3289dbac871c607bf20f4115b35b597c19091ff6a297229b640ae716cf8283c649aa9ff11427f695ba5ed4e2fbe243edefd433f8461ae939f9c80f

Download Submit
/data/user/0/to.talk/databases/mixpanel

Filesize
28KB

MD5
50eb6beb74c3b10ef1abb3bee57fd3eb

SHA1
c09d02b65d7c5399857523abca36294a59dd1f98

SHA256
5aa49aae03d43ffb7daa3e7b28420479f1af8e226aaad2223780c65893a87d60

SHA512
8218752346128eff21d5a05b900fbea4905af2e261c95802a877acbfbc7af60d819f14416b6d7678be5530cc13ed17ad314eea0088a643891ebbd740368f7d41

Download Submit
/data/user/0/to.talk/databases/mixpanel

Filesize
28KB

MD5
d37d71ce647026deeed45c74b1cab42f

SHA1
d61e2549be0e76c8643eb745971369fc5da51fff

SHA256
5d4d306a6f732d6efd5d260c54c725b8331b07b675eb6873854a4f5962add3de

SHA512
674a7aa1f9f4de0e67dc4f5a7f98960936ebb51c0d455748759801484f24a8e1d5bb385f4e1c5ddfbe83aabde362687700ed69be7ae797939c74ff6cff7502d9

Download Submit
/data/user/0/to.talk/databases/mixpanel-journal

Filesize
512B

MD5
c29b4b92f9fdd16bce5cacc3ac2a3c2b

SHA1
f8a3a8006acc59b4e3952a667a470de324a7aa66

SHA256
a5dd7e71245e970a53d0dfc8a1f63d49811701cbad5ce523cfb7331bcc736118

SHA512
58757e55a690f71932e3d677db87bde1c843135a76cce41350e82ec4f7d85e9c7b845b78e245946bd705b27222101e9bd428e21533223ddb5c9b93b31028408a

Download Submit
/data/user/0/to.talk/databases/mixpanel-journal

Filesize
8KB

MD5
52978c8fb97c482eb68a47d55328a4dd

SHA1
b9eb560523440705b3b50c8221c5a0c9e36a9082

SHA256
ab7023339d0520a25de4ff4e3604527c74f38338424ebc5656d9537cf13f7239

SHA512
4511a1489d3fd662336517d2a18cdf3ee54689f8237038714e629e1cdc786e17c7672075ab547540725f1cd0d3ff61b90cc12f3315e813230f66a8cbd0abee55

Download Submit
/data/user/0/to.talk/databases/mixpanel-journal

Filesize
8KB

MD5
92caf414125da59d8bdc5d9e5e227606

SHA1
8a6191035a2518d88b4845d63b1079eb063425c2

SHA256
0aefd077cb96080ead660b9c1f1de37790af4edfaa33b332c58789520311ecfb

SHA512
1606b7972787df8abc8b6733ecba571f204702514279e18540ce71c09cf5870157627a51c1e102c5d7392c041b883430067d2864d920dbf864b32304d69e6ccd

Download Submit
/data/user/0/to.talk/databases/mixpanel-journal

Filesize
16KB

MD5
1ecc361df77ed5ed5c6ff700adbe61e7

SHA1
63f768dd459e319610fc58105b1971a095ef026e

SHA256
65f1ddacd1b81cb651862700bdfb9893246ec4b961c299b1ce2c43fc62d8e7bb

SHA512
dedf08e197863fde714fc38cac0ffe681a4779e2eb4e4fff9d80f4c9e9014eadb26045e842fd4ed07ab355d144d3ae3036c47ea1b7123e8945630a43aca2eaa3

Download Submit
/data/user/0/to.talk/databases/mixpanel-journal

Filesize
16KB

MD5
01aac02337ac3cfd2d28e9d6b20a890a

SHA1
686c7af94c254eb9e7e3c1c600b4b5dfa1e89b5b

SHA256
4671e2155f662c8824066a86591f4ab2d2331550935a8a325d320a926273cc93

SHA512
e71ad07324f1365fc915141a0196a59bd75d9ddaed711f7852d36ac0476df3e76c63513f8954e6160d493db3446f044b3425708bb3a556b92a9a9634f7c368c9

Download Submit
/data/user/0/to.talk/databases/mixpanel-journal

Filesize
16KB

MD5
ac9c597881fe336e61c2dee596c2d0a5

SHA1
d513bb0ececc7f5c3a9a57624cb5c646fed1d4be

SHA256
fe55539abcb42b37982e53a66d410bc19fc36cbf09a0cb29ecef6777f59e69fb

SHA512
e6753492a522005166adcbe7e8818015fcecf42b736cdbe29164d754a2bdb7c2c923c405bd955480d3cfe8b7a949c558b315a673fc6938f6af6970be3505bb2d

Download Submit
/data/user/0/to.talk/databases/pwdb.sqlite

Filesize
120KB

MD5
8f9d67bb9bf5744aaed09340d93dbfd3

SHA1
3a1efdac5eb1131ec8be979fad9bd4ccda4758d9

SHA256
a295d146ec12ea35004479efdd860d082f3026776fc3f0f1d6e2732078eb41a3

SHA512
2b6c19544be290fc069890e03a5a207871de30089a34730c458e1467a2448ed163f24c65bdf44a9befe5ec56affbba715de33c6700d5e1ef15a54eb4a0c253ef

Download Submit
/data/user/0/to.talk/databases/pwdb.sqlite

Filesize
4KB

MD5
6b3f2524c1bb0633e05c42af7b2468a6

SHA1
26cb4e7b4bf3f663f4c9a4f8561ad8e65ea63d96

SHA256
5310bdb30abfb7112f463abc2c8c6b3971f035778be22579c4cebe20f5bfe12f

SHA512
fc3abef2cde4083c1932f2295604528c97fbb777ec2a58209ec1dfec170c7f4f2ad9eed4bde79b7002d0eb76d0691de00909ce1b768d2c40edd9c738a8094196

Download Submit
/data/user/0/to.talk/databases/pwdb.sqlite-journal

Filesize
512B

MD5
85dda950584263842ad99b02caeba6ad

SHA1
a3bae3a0e5690b1783b6150ad6f80087c51722e2

SHA256
00f44ad32aaec60af859334447210b95baf45e8a4169e031c1dddfebd39e0cac

SHA512
c21be6b638a15fcf0820b7a841bf235a5825423bcfe54cf2c2c2406affe57b10c9da6e623ee75c066c03befa75447eae98a9d02b1a0b834f57dc8ed4383e494f

Download Submit
/data/user/0/to.talk/databases/pwdb.sqlite-journal

Filesize
8KB

MD5
48f0b1bb69116c107df6935c172987c5

SHA1
50b000463c818f88d6997310f50b88659999b82d

SHA256
645abaf85372b79ec856759cfe85851e2bb75c6090b3da14b3bfacf20f2c57ab

SHA512
dd0184f652a8bf9afc3aa526fcb6bcf89e108383f2ec86dcad0b408f09a8ecc48f9dc7063ac503aecf7fc8f1ef84eefb9ab02d2c0261a3b6475c796d0eb66d64

Download Submit
/data/user/0/to.talk/databases/pwdb.sqlite-journal

Filesize
8KB

MD5
a0472435f31a2c179687074c99e6f778

SHA1
103c018d00839685d1a03fa39e7abee6f36be328

SHA256
6464a1efc9f99bbbe09c992711c03ea40b58aedfcf77343e6ce147aecc5baeba

SHA512
99a8713ce4a6ef8e6f52d974821e87f43649f119fe0e14e83ea9340e955f29e690be0f8eb46b278bdf96a127bd21bc59e0379214c90fd21b517a3d2eba6d9354

Download Submit
/data/user/0/to.talk/databases/pwdb.sqlite-journal

Filesize
4KB

MD5
69ef5adfe9835fa1d1e587bf2301ab6a

SHA1
59a22ad6d6afd8cb92d57adf12a7ac36f865132a

SHA256
e0aed14ee14ed5db1c0c3f126c072ff4b9d1ea4a55f2fc9afb724fe7fc126385

SHA512
b87f1ed0b58b7d29d4868cc403d735cd6e68739b9876e8822366d7cada9ea27929a186e65adb01348a64d689780342bfa70fcf36941c5720ff68bfe477eb48c9

Download Submit
/data/user/0/to.talk/databases/pwdb.sqlite-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user/0/to.talk/files/Ping_1716796623744-6612

Filesize
53B

MD5
a594e25618ef0213a4f5b0d100bddb7e

SHA1
20a50cff601cc73b4825fa5630ac43aece277688

SHA256
d65cd1d86ee4ed8aa377fc858355430b56f80c3448dd6b639ed4584aaaf1b8dd

SHA512
2c368e7db0002fe5a6dea30ea79e3c755b0cfd0714c05383ef8e79fd4a8b049b2f5741c74d51d93cc57324611124b149e18e3fdaad19ca5be061b94a0e8f0993

Download Submit
/data/user/0/to.talk/files/crashCounter

Filesize
2B

MD5
b026324c6904b2a9cb4b88d6d61c81d1

SHA1
e5fa44f2b31c1fb553b6021e7360d07d5d91ff5e

SHA256
4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865

SHA512
3abb6677af34ac57c0ca5828fd94f9d886c26ce59a8ce60ecf6778079423dccff1d6f19cb655805d56098e6d38a1a710dee59523eed7511e5a9e4b8ccb3a4686

Download Submit
/data/user/0/to.talk/files/gaClientId

Filesize
36B

MD5
2fed05981b8c3a4d6bd5efe78481672c

SHA1
47e1b973916767b92ca9f7449d4fe4a1ed13e85d

SHA256
a469a7e59274b97bba6214f4dec2743d2aabc1c3e47367fcaee0e6c1ab276eb3

SHA512
1d4ceef0c8be85d2a67191e2932d3e8e8ba901d8f77dd452e5b3a819408ea01eaa7386253c2d9f3a89718936d64bb6dedb534acd6473c93619b3dda6b9a85278

Download Submit
/storage/emulated/0/.bugsense

Filesize
33B

MD5
bd0a009e56feb94f7f5da022faf42af9

SHA1
5709ce9381ab31db18933adced439c40a49406e7

SHA256
4da53e65d1402b129af1cebf9339d55bf1ed66bdc2972ee2c133ce769ce1b7d2

SHA512
678ca064ee461f655ceaeddb2b37c6ff41a30f6a00daa72ef8e2c6528c4f9ced71b5c51c2c0879256a73ff098e4a517193292a26863aabd499ed458e54eb143d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads