Overview

overview

8

Static

static

6

8983ada140...18.apk

android-9-x86

8

8983ada140...18.apk

android-10-x64

8

8983ada140...18.apk

android-11-x64

8

Analysis

  • max time kernel
    179s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    01/06/2024, 05:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    8983ada140ff2064a5368f37280438a8_JaffaCakes118.apk
  • Size 5.9MB
  • Sample240601-geya8scd97
  • SHA256 02bb61463e6488ff0e0d796802bbf4e6ff7a3af5e131331dcb8bbe75a07c6c6b
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
    evasion
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4596
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4654

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ZPkFS.log
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
        • Size 12KB
        • SHA256 f25684cc2a07f5a3f2d0439189828e9916a9d3d53c9564fe55fbcdee1e7a3eca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        credentials.dat
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
        • Size 234B
        • SHA256 c374a18fd20ca7e5692b749674036ec861e49cfaf66c987a9c9fd1f10b7e9556
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087
        • Size 36KB
        • SHA256 cb407c3661cdf6bed0f715c54761f92986adde7edb77447d606f823898f5b5eb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 512B
        • SHA256 0d072f0d0baf3d1af95e6ff61924b0f5fa2813b33f505388936b6f709a12c874
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 8KB
        • SHA256 79b58fbc5b1fcfb50c1e4077f0238bb0398eda093e1a182712e4ec9ce674c7d4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 8KB
        • SHA256 b40bc8c60db80851a1a1719ba6dd56c253ca027adaa1a927015040df5b36850a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 12KB
        • SHA256 2e9e974dee6ce4383aca8e54d5079d32fc6c957793f44ebdd692f63a86dd2b99
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 12KB
        • SHA256 6aa7ab3c9dae940ac61ce983db32564332a5e7255cf196a63a9033d6ac6a6543
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 12KB
        • SHA256 6603cebf25d47252534e74f126de971769b3f6b007c5a6655200990e49b02d6d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 5bb2cb280304d53f629ffee1d6e9fe1e5c170efd7fceed874116f4c13d0a39be
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 20KB
        • SHA256 24693f576c2bf707112c4e4e8187abe4daa26690de86bead343956dffd8281bd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 20KB
        • SHA256 89274ae81ed50b73e181e56e01bfb51d12430d4805863d37a8cc00d2406e1d84
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 20KB
        • SHA256 a444ce8d9e4ea83b36ded3e3181883e406b7ed70a3b3d558afa15f294894a39b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 eba6d43aacb17144c1d094eb78c587adf8597d92f23aa63ca8386c69263c0b4d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 f3896e13db5ab86ee2183059a572c90fba8ba9e4021cc7724fbb9ee56d7c8c74
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 753386d5fbab143df57980dca28764b105f8cc6cea22e8ab03017831930c8030
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 3b20f3956596a4baaed4dc45e8d2c73d91a1c74ce133b41074f6f074aa7a2791
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 b178c5e7a3394383ea529c498a575040fb27a5abcc400a6612215a55d3ae0e65
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 ae3a8004601a854bac3c595da6c5fa28f3383e4c9f08625c952bc4e032d39304
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 4e7f4965136354f737fee36630bfb25ca110bb0e1959806cff738a51cb655707
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 2cbdc3f26293c5531f9e54bb10600e9537e0958f3a712b61b401617c957db7e2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 66e122f45f0a918033ac5a770e90fa6f639f100dade10276f1d7c0f044150216
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 c9489272ce08a7c8ca928df81784add37f8cd66c1263443c50e1dd42581ef80e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 ab7e4bd55733ef114156a11c7f85facb12b272887d070e201863f505212cb48b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download