Analysis

  • max time kernel
    129s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    02/06/2024, 21:45

General

  • Target
    8f8a468acb35106fafd7893f36428a8f_JaffaCakes118.apk
  • Size 4.2MB
  • Sample240602-1mcjaaga6v
  • SHA256 dbc82167bd33f85b5fb78303de64a56aeb8da555cbd202f6d179dc7d6822f497
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.dm2photo24
    1⤵
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5164

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ads5559358883020715631.jar

        • Path /data/data/com.dm2photo24/cache/ads5559358883020715631.jar
        • Size 2KB
        • SHA256 ee2de01a238f9e1834f9f9934dd1f5b267bdf9747965641d2fd636d740041f9b
        • MD5 SHA1 SHA512

        tapcontext

        • Path /data/data/com.dm2photo24/databases/tapcontext
        • Size 28KB
        • SHA256 b3ea0dd2b6831c581d22442a11898eff9f0965b2586ab7c92a20557bab693f2f
        • MD5 SHA1 SHA512 SSDEEP

        tapcontext

        • Path /data/data/com.dm2photo24/databases/tapcontext
        • Size 28KB
        • SHA256 a2392c518dcb8e1fcf487050bdf26b3011311dbd751bbb5aae25f980a75e4b92
        • MD5 SHA1 SHA512 SSDEEP

        tapcontext-journal

        • Path /data/data/com.dm2photo24/databases/tapcontext-journal
        • Size 16KB
        • SHA256 9ce0d4ad4ed1bf5cc9e7a42603f798a61321e385db86c56457a1e8a0c893eb16
        • MD5 SHA1 SHA512 SSDEEP

        tapcontext-journal

        • Path /data/data/com.dm2photo24/databases/tapcontext-journal
        • Size 512B
        • SHA256 b1b675f643b9db7107c50154c501a9831f17d74e527675001fd9766d90b093fc
        • MD5 SHA1 SHA512

        tapcontext-journal

        • Path /data/data/com.dm2photo24/databases/tapcontext-journal
        • Size 8KB
        • SHA256 9a36ddd55b03362345e1e443940f3652c8f98aa5641fc400730d8c9d9449d660
        • MD5 SHA1 SHA512 SSDEEP

        tapcontext-journal

        • Path /data/data/com.dm2photo24/databases/tapcontext-journal
        • Size 8KB
        • SHA256 b02c4bc6b1a13a8a171a66f0c71773a3363761fa01900aa3a9c6f4606a0bf9f4
        • MD5 SHA1 SHA512 SSDEEP

        eula.zip

        • Path /data/data/com.dm2photo24/files/eula.zip
        • Size 63KB
        • SHA256 e72d6614473f140732c907c5df5c041cad180d5015a2b86050abc3edc5644a5d
        • MD5 SHA1 SHA512 SSDEEP

        offline_eula_body.html

        • Path /data/data/com.dm2photo24/files/offline_eula_body.html
        • Size 22KB
        • SHA256 a40a4a11b0a2e8ae227e6d101cbd27a3f7736292795ba223f5d086753cd3eb60
        • MD5 SHA1 SHA512 SSDEEP

        offline_eula_footer.html

        • Path /data/data/com.dm2photo24/files/offline_eula_footer.html
        • Size 13KB
        • SHA256 1f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
        • MD5 SHA1 SHA512 SSDEEP

        ads5559358883020715631.jar

        • Path /data/user/0/com.dm2photo24/cache/ads5559358883020715631.jar
        • Size 4KB
        • SHA256 f3c142f78cadcb57d7da3d8e4dc5f8c7b05377417c639059910696c844afc1f9
        • MD5 SHA1 SHA512 SSDEEP

        .tapcontext

        • Path /storage/emulated/0/.tapcontext
        • Size 20B
        • SHA256 cd842a10ce6f9f092368b978704512b5ab81a576f2bd129c7123da9f676216b6
        • MD5 SHA1 SHA512