Analysis

  • max time kernel
    68s
  • max time network
    148s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    02-06-2024 13:00

General

  • Target

    8e2971a8a4404ac5c274368ddb6c4fb5_JaffaCakes118.apk

  • Size

    31.5MB

  • MD5

    8e2971a8a4404ac5c274368ddb6c4fb5

  • SHA1

    6b42b05d9fc6860a6473a9d4eb2b816d41a7a9ef

  • SHA256

    d65b894979ab0b3f45ccf9026040e7f2aa65e06f9bd093c16068b1e934d00669

  • SHA512

    ffb30a50f574095380504aa2609b7b34890078069bd3b04b666e464ab88591f67c94c8692e284699b0fc19591024c8ed87979e74ee7b408d3f8325d39b23be02

  • SSDEEP

    786432:tF4A7EOVtcrtGd77dZVsssO8IqSwrW/fWccaKI5qhzMY3KhOQlorfeH:tdcrtsZ+ZS2GfWCKIAZZahOyoLW

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.mochibits.hexario.google
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4335

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mochibits.hexario.google/cache/1582435991586.jar

    Filesize

    9KB

    MD5

    e8e0527a01aefdb89afd2c508f131da1

    SHA1

    f1103e6b260c657ceb3d95f1b023af3fda8b133a

    SHA256

    f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

    SHA512

    fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

  • /data/user/0/com.mochibits.hexario.google/cache/1582435991586.jar

    Filesize

    20KB

    MD5

    fde2ee00cbd121cfab5290b078aa3ceb

    SHA1

    e2b77d5320e155e413d040a8c20020962065b2f8

    SHA256

    2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

    SHA512

    a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900000.9ced3b1b/e

    Filesize

    42B

    MD5

    303bb60819fd4ce889a635e8cf71e95c

    SHA1

    c2bcc53c4a6d36f97aa40f06e17192631904e2ca

    SHA256

    6fe935bcde9ee408129a15fbcd65af809ab8af3167c0796c8f047b6c9953f631

    SHA512

    3b257ab3279de9705d00dfd0868a3cbc3e99a20fc627b3ddc2c76c05cf84cdfc471495e9c19428c811b335be5517155e36dfb11fe64e55235d8200875288e55a

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900000.9ced3b1b/s

    Filesize

    270B

    MD5

    96b6c44aa15077970c87a06edfd57947

    SHA1

    a5190364a3b2ecf16f44f5fed10c8ec428b24205

    SHA256

    04718c6833e32f4eae9a50cdadf03160152c5ed8b4d6de2c9cc292f66d9953b2

    SHA512

    aa44c8dffd331c698418c1e3a52c8a7cadc890755625088bb5eaac81ad8254b60c2db81973c239f80bc47d958809ff5e487f0690f708e7dba245b526f40a70db

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900001.9ced3b1b/e

    Filesize

    84B

    MD5

    6a61cefa17e1690980069a908b822309

    SHA1

    2b04dc480b72e1f45a9fe4e3f46498da03c2082a

    SHA256

    6046ed92eaf056ad04f56ccccecd987e79cdea955b16242c5f621089540e63f8

    SHA512

    73ebc3529538070c136e96f8f1fdd588ccb26d2196b88ae4d4c122d2b98fafe85fc3cb2548098714ac5f875a031da0f7b00a4b800de5280143a95f7cc9d88c8b

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900002.9ced3b1b/e

    Filesize

    954B

    MD5

    4b444127ed1ee56bc86802fa73036f22

    SHA1

    d53ea2146563cf4178325063598b441d340fd01b

    SHA256

    b3c2ac4703525c2e07356b70c5da1ad6b7301ae1054f11984d2fb9820f919065

    SHA512

    a42979024611cbc9f642390971a02aad770318222e3d4d9f4e637d90fc4e6a1d4b35e2e3e9658965f662361660b39e6398df600a5a248a51248c38af7b4ec579

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900002.9ced3b1b/e

    Filesize

    1KB

    MD5

    5b36c03696054d8f146be3f697dd539f

    SHA1

    a7273a51b41f77212bee88ff5107348a70cd43be

    SHA256

    dd32830c34f9753f63ecca4b42b2139cf32528264e97fc1ec9cdeb400ddda7d0

    SHA512

    0035171b4c8ba4b21b71ae6bd61043dc5748715e1119a187a8269477713b27e53ade4581d481aecfdfd45de335bea1658d8192cc694bed732afec129a569dea9

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/config

    Filesize

    346B

    MD5

    be9c7776487d2e7acafe19ee6b8f21d6

    SHA1

    90810f66873caf39148ba339ce3beaa77e1298c1

    SHA256

    cb1fbaacc4744f268bfd751d7d4b3d8591acea8175dd4cffce28b96a3eb2886c

    SHA512

    b2eb531d818c211f83b35d98e479cd4ca4720e269b9a13a9e1684bd15e10dbba6ce524d8da1b4bbacd124f0a6daec0a6716b464b3cfd29be958b778f32d45d11

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/values

    Filesize

    152B

    MD5

    37b942de1b7ab8e6d9e5f044ac874237

    SHA1

    f0b617f277cb300f72bcfc864ed5fb5678cef6fa

    SHA256

    718ae253544e9af99d6d707a827e79764eb97fb0d97a2bfdd22f8037c4547eb1

    SHA512

    e6b362baf4aa8a49891be35f33c8b5d31c72105c65b7ef42cf60e7ed29edf8aa043dca7021299f2e5d6a46d872453063e204eb181a98b23bfc425524c3f7d42d

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/1381250003_28x28.png

    Filesize

    539B

    MD5

    759a106983ec92f34344dc5064efd29d

    SHA1

    2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b

    SHA256

    1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81

    SHA512

    516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/23fae7427f098bc2549cc2a2a0ee8063269261be_v23_phone.mp4

    Filesize

    1.3MB

    MD5

    40d2c3a4e8f8f8f0ab548b70ebf6823d

    SHA1

    35d5e7da78cbdee511c8d9aad7ca1c19f01b4686

    SHA256

    c408539640f9d779187356078f999ad2a3c9bb6f24f628f9c39f24c9155726b6

    SHA512

    87e9c26bb275fe1cce2099c2f71869d3eb8a15f61cfcd84cb2460b7562547c54244fb0bb601943bfd90109dd39268783fc9e9f964e7a39b2728d0cc3dc366a8c

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/262b0697f5b375d4ecb37867878b8cb8e65874cd_v23_phone.mp4

    Filesize

    1.3MB

    MD5

    e3fbf80537d29c32dffafe733f575af5

    SHA1

    ab14ee5652d7c36cf236c0ac78913d2f017e27b3

    SHA256

    b9d5b1bcfb51d2175f53ca3b564f09ff226ba489a15a849f7ccb0b05a509514f

    SHA512

    38597bc4181abb5c67aaedae1be3a86a3365fe99c31b1982985346ce84f10884fcc979f54c64479af78b9a3496671ac391f784f692c515959bdb13b0890a653c

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/2ae6d7a07059785396db87952734413bbda9e139_v23_phone.mp4

    Filesize

    1.3MB

    MD5

    32c0d459f90232743ee2f71f916f6b63

    SHA1

    f4395b834ec415f58607f65ec42c270a5bf4e22a

    SHA256

    f7d62b8582935d8cf937ca42635077cb83d0b40ff50f71630a766d2a282928c2

    SHA512

    e118e06521d45c2ca2b36ec86219785e1a17d32244d76822b4e06b328c94d5b2f745cddb18e5406824c01ac621875d5ee53c539185c1168f7fca9422571ba1c5

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/45ed4ad24ec3c0f70330a31dae8b735f24c53e3e_v23_phone.mp4

    Filesize

    1.3MB

    MD5

    0e9b6c237350a5cb71109d2a4cffb998

    SHA1

    e1045c77155903b17037bc8812fe353825281999

    SHA256

    4c9cb4b9aff5e4ac3da2edf02c78b78f24e5c49c1abdd0b86f61069eb035133d

    SHA512

    3f752c3b35f01ebad8bc37742bc1a879afc81d4f902002b3dc05ae3d04520659ea83638666b0b6685e1139ef52de67138c27dea5750b90c116a7a9869982c375

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/ob3600d7_6bbf677ae8bdea4ad8e6921c7b4519aa04aaeae2_raw11.gif

    Filesize

    940KB

    MD5

    6a8c041b996501a34233c516e9b4c283

    SHA1

    6bbf677ae8bdea4ad8e6921c7b4519aa04aaeae2

    SHA256

    cf1347b37ef9cf52d5ec7a7f328c3a70179d5737ea6bf80998642684190f7427

    SHA512

    44ecfa745046e46622287a5674c918262e1654d2b4890ad4997242f60c8d8b39a678e1cc75ece03a112975ad198c7377cec721462a4c6bd44fe67d416d2c9ea7

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/oca2768d_27dace86f9e19a88e664543820f418700bb9157a_v21_phone.jpg

    Filesize

    111KB

    MD5

    e6fa80a397a6b358672b18e683772ac6

    SHA1

    1b2383224f3c655dd026baff32e5c643e995b246

    SHA256

    2d62ab2f5806635fb34480dc063618a92f46e5edcade6f5ec7d972dcef9386ab

    SHA512

    e6ad06084232bfa70d077878145c6d341e3fb07beccfac497c466bbeade36c57a4330fe589d5b4fb430078d6876b7d04e7074cb8c7a9166f532a7ab01b016532

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/ocee368b_f3328f0f5f94c6dbcfbe324231284f0a86058db1_v21_phone.jpg

    Filesize

    128KB

    MD5

    a04573d5e4a9f51acb9fd12b2a599188

    SHA1

    e3feb4e536e9864ec6f71919b5cbe29d429baa1f

    SHA256

    c69800fccf0b7e875424ef89cb9f1611a8295304c98026bdbb2315f218048f6e

    SHA512

    40d0179b7c731dacfc89a886263b9f66b627c8dac72b84b02447ab3f8ed80380ca4755fd735401a2044fa5d9715811b03cb3c61c74cdab321a85ed8dea7e693c

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/od0788cd_32ee7c1585c0b28eb40c4828fd01159d95a470c0_v21_phone.jpg

    Filesize

    185KB

    MD5

    dba082e4be4c36c49893fd4c8152497f

    SHA1

    95a8cb8cc2577434d753dceaa591a534ea017732

    SHA256

    fdab37386bf56ee418ff78e46f9e6d890928691d4c9e4e5dfa96b3726a0e161a

    SHA512

    ecc1ea903dd68eead500c06b86dd149a96cb2b2c6241c29fa7be35eadc8c8c1b716e1ff6a1229b40b94659249c8deb3ca921c8087bf03c5c20373a1a2aef8897

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/sound_off.png

    Filesize

    6KB

    MD5

    d9a4fb40256f67255242c0f41a0d3de3

    SHA1

    1c99e725cebba2c3f5808d5e00c73af58f0790bb

    SHA256

    a7e16ed6d339c6a85870e5c18952f839d61dbd93d47dbbb49e7f7f9124cd0d2b

    SHA512

    a09d5d878cbf2f58ce256814b9d19d9122858609035b2c15e19e2da8171e36d0ffff4b33420d4d27233200b430307f1fa42459889b52f66e4282af8a84edb8fa

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/sound_on.png

    Filesize

    5KB

    MD5

    74485ec832d65f19b05f5027220df53b

    SHA1

    49116a6b85bec84512241c9dc6e511ce10bdb7b9

    SHA256

    7a89be15d3a268c6820f385ac6d4585bf04b45e2fdff37948b2a73afa34c1268

    SHA512

    9acf56fe90a687ae653ab5014aacaeb7ad6f76982271df5f63e536a358f3f53b63f7e865fd8180bee96980cbfd4ba9b07b81977f86c9b9d0b41ca1dac0556657

  • /storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/zepto-1.1.3.min.js

    Filesize

    24KB

    MD5

    54c9c5d40126e729d3eb1db81420c3d2

    SHA1

    cbee54076e1f1dce5f418d62e13cd12500a6ff2f

    SHA256

    9cfb903afa8a5c82d8f8f96369229337a2be8c1c980dd908168b7555f69a2e31

    SHA512

    ed72c4274d3d029e7334907f40d368feb3060c062823a182cdb84158b6936c8d7bf6bf8fedcec889c67a3641a658a79da6be5e11d7bea653bbdd6f5ca51cfa68