Analysis

  • max time kernel
    11s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    03/06/2024, 21:53

General

  • Target
    92b9fe0e7a329d0cc3c61af0b2be6e39_JaffaCakes118.apk
  • Size 31.3MB
  • Sample240603-1rl9aaac8w
  • SHA256 cddd05a962c2ea5fff4e7a620e23395cc19b13f5dad41bfe83501ace08582035
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Requests dangerous framework permissions 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.PlayFreeGames2018.HappyGlassSmash.mg
    1⤵
    • Checks CPU information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5001

Network

        MITRE ATT&CK Enterprise v15

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        analytics.apk.tmp

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/app_analytics/analytics.apk.tmp
        • Size 545KB
        • SHA256 5a0062937d99f0b85e6fcfdb162ce6224ed0635cbb8cf6e3ac253d57fd8ef97c
        • MD5 SHA1 SHA512 SSDEEP

        mimo_asset.apk

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/app_mimo/mimo_asset.apk
        • Size 293KB
        • SHA256 37b5b7b4efec4ce91eec09409f0689bed89051864fdb67e29013fc563efefaa2
        • MD5 SHA1 SHA512 SSDEEP

        mimo_download.apk.tmp

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/app_mimo/mimo_download.apk.tmp
        • Size 400KB
        • SHA256 1b01837a2b9004309bff95248adc60d39ffdadc90e52ebf645b2c5ce76f28bc7
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/cc/cc.db
        • Size 36KB
        • SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 3eebfb371a799a8985a380b6431e9ca84467288f45a8fd69f0884785f2f43954
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/cc/cc.db-journal
        • Size 512B
        • SHA256 138e3c7f57e8f72075028158a1a4cb23f73e89078bd6d4df9801e80833dbda39
        • MD5 SHA1 SHA512

        cc.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 a65ea46999301be6376e44c0025cee7db9ef8ea4b3436e1867bd42242460a0b4
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 c1260fda75239bca5f8204557e1e649b1aa57b4d7cb60a4b9e67055ebae5a65b
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db
        • Size 16KB
        • SHA256 2f67ca6a2d814adabbd4bd019483be8a908534865a70d935df1ee31a43272dc1
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db
        • Size 16KB
        • SHA256 26435c3d2eb3e2946e17708fcfbb3fe99f33ada2a5ea1206c428df2d1463d2bb
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db
        • Size 16KB
        • SHA256 82a50118825a939e36bcea62b58a6d18bd085ab9b8dc0f316b4cf4a105b5ac36
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db
        • Size 32KB
        • SHA256 7493c56e863265279818994285e423fb2a8dd6bea800c29fd75fbe52beccdbd7
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db
        • Size 32KB
        • SHA256 a95a8ab1370a7f237b173758e523d17c4cb126c8f04acd4f050df80556dc4957
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db-journal
        • Size 16KB
        • SHA256 8ccf3c3dd5726a6079bce4a2d6e11347bf73bb2d52c06185c3316525fb980c76
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db-journal
        • Size 8KB
        • SHA256 1a4bfd1ccc26310afb3eae0e5d9668e560c7c34039c3a7f4ee10869b50c1b863
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db-journal
        • Size 12KB
        • SHA256 7a2c536735b2f3d0c631df3d85279caf78ca462fb7eefefed49f58691bc32462
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db-journal
        • Size 512B
        • SHA256 aa1c2c5edb04b6f1041dcb7df85f0325323f9d1bdeaa7f88b42fbe2de3ab97b0
        • MD5 SHA1 SHA512

        ua.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db-journal
        • Size 8KB
        • SHA256 58d187d9e979b7373e1d7a68feacf3feda1212f8a4d0cd07e27fe8c4d25f2556
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/databases/ua.db-journal
        • Size 8KB
        • SHA256 6c37c9650160b65794cc2cdd45790a14cda0ce1ccd0b2b5b21e4a647eeef4230
        • MD5 SHA1 SHA512 SSDEEP

        exchangeIdentity.json

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 15b4d95fbb5d0c6cf5b3acc495cdd813a5baa96a52b2aeedf40602980dacf790
        • MD5 SHA1 SHA512

        exid.dat

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/files/exid.dat
        • Size 98B
        • SHA256 75c35b09521927437645edbdab1acb027f56f2e71d14382fd01727b24bfd7e10
        • MD5 SHA1 SHA512

        umeng_it.cache

        • Path /data/data/com.PlayFreeGames2018.HappyGlassSmash.mg/files/umeng_it.cache
        • Size 350B
        • SHA256 5300457cc4d306da28a00611c4a91011202767a0905d87c55ac518483918bcae
        • MD5 SHA1 SHA512

        analytics.apk

        • Path /data/user/0/com.PlayFreeGames2018.HappyGlassSmash.mg/app_analytics/analytics.apk
        • Size 1.1MB
        • SHA256 ca10a9f91f5246c09ab701368126bf842e33e62c0559328b34fc91295c13d298
        • MD5 SHA1 SHA512 SSDEEP

        mimo_asset.apk

        • Path /data/user/0/com.PlayFreeGames2018.HappyGlassSmash.mg/app_mimo/mimo_asset.apk
        • Size 491KB
        • SHA256 7033faf2e195a2b8200f570f54db3bc7b25f790cd422766d9b1f34117b140e75
        • MD5 SHA1 SHA512 SSDEEP