Overview

overview

8

Static

static

6

7ef5704fbc...18.apk

android-9-x86

8

7ef5704fbc...18.apk

android-11-x64

8

Analysis

  • max time kernel
    177s
  • max time network
    187s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    29/05/2024, 00:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    7ef5704fbc1640a1fe14946d6b6130e0_JaffaCakes118.apk
  • Size 22.2MB
  • Sample240529-az2e3abb2z
  • SHA256 bc09ecd782922d68695630bc17285a7490cb079dd93f4d11c81fa7051266f4e3
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
bankercollectioncredential_accessdiscoveryevasionimpact

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 4 IoCs
    evasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Loads dropped Dex/Jar 1 TTPs 13 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

    collection
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
    discovery
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    evasion
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.watchlivetv.onlineradioapp
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4559

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        registry
        • Path /data/user/0/com.watchlivetv.onlineradioapp/app_ajw/registry
        • Size 15KB
        • SHA256 a14d87416a2bbf44c81a353e5a10f38e888f74b73d1b44fdb452b155e1e30fea
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        flurry.dex
        • Path /data/user/0/com.watchlivetv.onlineradioapp/app_working/flurry.dex
        • Size 830KB
        • SHA256 cda8c6fbd5b5f3df5f09f8fd418f8989c0cda8b81a93af9be2c6c87ac3a80d06
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ironsource.dex
        • Path /data/user/0/com.watchlivetv.onlineradioapp/app_working/ironsource.dex
        • Size 398KB
        • SHA256 53db196d113569cb658485d6e7345c26181bb5983dd7bfde1d43cdd45911ab2d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        startapp.dex
        • Path /data/user/0/com.watchlivetv.onlineradioapp/app_working/startapp.dex
        • Size 581KB
        • SHA256 fdd86ff140fb312007cd110066f9275c5847c457a09fa1abcb4c96a38ce2e854
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tapjoy.dex
        • Path /data/user/0/com.watchlivetv.onlineradioapp/app_working/tapjoy.dex
        • Size 640KB
        • SHA256 1be4d40a6eeec1bc338f262c194be4d222622daecfec04343c185241f5dad02a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        vungle.dex
        • Path /data/user/0/com.watchlivetv.onlineradioapp/app_working/vungle.dex
        • Size 1003KB
        • SHA256 8dba230797a148a97840851a27da78e85f6c6df724f0718b8a9a0b16ef291c4b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        yandex.dex
        • Path /data/user/0/com.watchlivetv.onlineradioapp/app_working/yandex.dex
        • Size 398KB
        • SHA256 824b97e70c827e85861edb730769d0380f3d600a299cdf2d85663ed020ef27c6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        1582435991586.jar
        • Path /data/user/0/com.watchlivetv.onlineradioapp/cache/1582435991586.jar
        • Size 9KB
        • SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        1582435991586.jar
        • Path /data/user/0/com.watchlivetv.onlineradioapp/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP
        Download

        OneSignal.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/OneSignal.db
        • Size 20KB
        • SHA256 f9c16ab2f60b32decae2c3acf8b6411c55dc1fe82860d977e62672539ab70918
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 7a8e2382d84ff7cc1cdba818985868fa07925e46feae13dff313d7f0aca5e45e
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 1ccb4a94a4a918168323c004ebc85fbed3eacf4233d46e5e8cb477526d413ae9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 9beba39a3c467bbcab1584f98a6a3f35c2839b2a9904c9b8ccda918b9519804f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 11b9557f886d4b38943bde59b1421e6f81f0a2ba29844b9b66822b83781d4a7b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9ddd6448554e05f109bcab74eb63c20ebd9612a1b88f701563419c914cee2298
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2e3a5b444a65d68ea4e1cf90df02bf62b5c0531165d56aaf1d088c99dc5d3414
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8219abc6866a8b5e0718c308a91c6629ca5d534b5daba02ee5eda393b3594ee2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9a34e8c48ebf7e9da77e58ecdf58fbe5283de873665c4079de400637d32c2773
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 082a074b561d264d7f28a267ce47af16b36a112b8dc74fd23ccab905afebe728
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 84f93de5a0707388e69be06ea7af9366eca635568acea307c0619d674c850078
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 efcc86b1ba0944d0f4e295098b7bdbf3848810cf6780d30763fe8ed96d943993
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 cd62d8058f6794b554bc461f6373959910512650dc0f04fb5ad4c66cb80b9337
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3b3393adffcaac2717586f8959ce63cb76f6cf1fd913e9cef578ab35220dc049
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ae2e8a63ef0e9a13194868c13a515587651c76c2f58018cf9bd95f719e5389cb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5e66a513267acafaeb5ca829000a4e077c8f04171a740ccd71e9b0d3baae70b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu.db
        • Size 12KB
        • SHA256 ebc4ad9f721e53e0becdbc352ac522ed7784963cbc7b969072a13ffa1bf04b42
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu.db
        • Size 128KB
        • SHA256 9d91848be950d27bed8c0a4d84adee829d63528d67d1df8ddb6777e4e9fc2776
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu.db-journal
        • Size 8KB
        • SHA256 96aa2abef8457698f0ca90876211d36b0efd20b1a233017a6051fb7e844873f2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu.db-journal
        • Size 25KB
        • SHA256 33f1a84ed2b2217e2e7a43b644fd89e32544a5253847dadfad8a527f8cbab6cb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu.db-journal
        • Size 8KB
        • SHA256 c6005e3ff08c912706ba46b71fffd3b6343666f0da7dd1f39f23c7bdbb4b19bd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu.db-journal
        • Size 512B
        • SHA256 26f468c88f1125eebc10ddd6ee2b87568d044a49d4df88caa5f44670d2201129
        • MD5 SHA1 SHA512
        Submit Download

        zalunu.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu.db-journal
        • Size 8KB
        • SHA256 41169e739671ee81d06efc39e3a664f0a4dcf650e0e684141c068353841823b7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu.db-mjF630C09FB
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu.db-mjF630C09FB
        • Size 151B
        • SHA256 72163d0b9c47b7a2a5e4607939773ea9702ad9ff210c073468487ea266010c59
        • MD5 SHA1 SHA512
        Submit Download

        zalunu_static.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu_static.db
        • Size 158KB
        • SHA256 abaf810427a24dcbd4a4767ae940e94f4b752978592a6232e27a1ba76500c6cf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu_static.db
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu_static.db
        • Size 25KB
        • SHA256 75601dc8278044d09e368a80a4e0bc53395bb0de0729c54ff265decf2eb6f9e7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zalunu_static.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu_static.db-journal
        • Size 3KB
        • SHA256 6c1d1fafd9b38085c90721fa7b0cb61bdad610c977ebb02668c2a3c0d32115b8
        • MD5 SHA1 SHA512
        Submit Download

        zalunu_static.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu_static.db-journal
        • Size 2KB
        • SHA256 a11551634701f727798a7d7548f4e21fccdf4a29c661e0b8a524769ff34888dc
        • MD5 SHA1 SHA512
        Submit Download

        zalunu_static.db-journal
        • Path /data/user/0/com.watchlivetv.onlineradioapp/databases/zalunu_static.db-journal
        • Size 1KB
        • SHA256 b09d8672d9c95c031813740bdb855376108658410a1b993497b329f94814e522
        • MD5 SHA1 SHA512
        Submit Download

        6656796603D9-0001-11CF-08F692B97A0CBeginSession.cls_temp
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6656796603D9-0001-11CF-08F692B97A0CBeginSession.cls_temp
        • Size 79B
        • SHA256 f948638abfb7fdc9e3abf2d461de35aa9b55f90bd779a8948fd296d9bf0c088c
        • MD5 SHA1 SHA512
        Submit Download

        6656796603D9-0001-11CF-08F692B97A0CSessionApp.cls_temp
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6656796603D9-0001-11CF-08F692B97A0CSessionApp.cls_temp
        • Size 126B
        • SHA256 ef5734e33b0a50d46c72e6f16f051768f1c6630abf07d5669f5a9a56195af0f9
        • MD5 SHA1 SHA512
        Submit Download

        6656796603D9-0001-11CF-08F692B97A0CSessionDevice.cls_temp
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6656796603D9-0001-11CF-08F692B97A0CSessionDevice.cls_temp
        • Size 131B
        • SHA256 dfacf119ac3e5db80999b46c9d109b29f1dc49e4e443504b085c4eacfda131de
        • MD5 SHA1 SHA512
        Submit Download

        6656796603D9-0001-11CF-08F692B97A0CSessionOS.cls_temp
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6656796603D9-0001-11CF-08F692B97A0CSessionOS.cls_temp
        • Size 15B
        • SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 530B
        • SHA256 d411c09c898fb1f0e1530dc25bd235fe472702bbe0454d6342dc0bec2d05ef11
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 3KB
        • SHA256 3f43da121743259ca3107978f0140212ccef45926b02dec62eec75ebccc8ccd1
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap.tmp
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        sa_879d5ae3-2ea2-4792-af7c-a91c997a4728_1716943208684.tap
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_879d5ae3-2ea2-4792-af7c-a91c997a4728_1716943208684.tap
        • Size 408B
        • SHA256 77d4d96ce739ed8118cbdef4527475a14314f37e8728d65f7899d5591e0949e1
        • MD5 SHA1 SHA512
        Submit Download

        AppEventsLogger.persistedevents
        • Path /data/user/0/com.watchlivetv.onlineradioapp/files/AppEventsLogger.persistedevents
        • Size 403B
        • SHA256 e60c251b781639de2d9a39a2dd54743416d3004f9130ea7c266ed900f8477130
        • MD5 SHA1 SHA512
        Submit Download

        .appodeal
        • Path /storage/emulated/0/.appodeal
        • Size 5B
        • SHA256 469abedf5797bb56f1afa35a227eba1d8f7b3e22c99426e527da4b0d839dde15
        • MD5 SHA1 SHA512
        Submit Download