Analysis
- max time kernel
133s - max time network
133s - platform
android_x86 - resource
android-x86-arm-20240514-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system - submitted
03/06/2024, 09:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
914c9b58663d7ca9fa44f9d4c145048b_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
914c9b58663d7ca9fa44f9d4c145048b_JaffaCakes118.apk
Resource
android-x64-20240514-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
914c9b58663d7ca9fa44f9d4c145048b_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
6 signatures
150 seconds
General
- Target 914c9b58663d7ca9fa44f9d4c145048b_JaffaCakes118.apk
- Size 2.5MB
- Sample240603-lkla3sbe49
- SHA256 13259ef08d8b83d8087623bc4c713447129c24a850982736b18f87453010c22c
- MD5 914c9b58663d7ca9fa44f9d4c145048b
- SHA1 054d96603cfabda4fbfe665bb774382df49474ce
- SHA512 9f49195bae4a63c2f661c1ab3723aac4eb56c176aeeafe2e95bef01e52f9f2ccf834d5fdb30ac9ac61c2016ff1f0b72156709ee93348d1a876c75635e22ad995
- SSDEEP 49152:tWhtZlnDnBfYhr40Y1MX5M/xinGZuGLTvFO4EEQ:tWDZlnbXNKJM5inGZlVxEJ
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.wikilibs.fan_bingo_blitz_fan_app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.wikilibs.fan_bingo_blitz_fan_app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.wikilibs.fan_bingo_blitz_fan_app - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.wikilibs.fan_bingo_blitz_fan_app - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.wikilibs.fan_bingo_blitz_fan_app - Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
- Size 512B
- SHA256 719eaa4c95f579ea5aebe52fc0db6bb5d7a678d758a0d4a9e0db93091153c17d
- MD5 c05769d9821a1ffcc1246431637a0100
- SHA1 efd95b57f74907705ef430cfa735b68d77195018
- SHA512 480287e88d23c354810fac4cd91c939f4641127b1ea9ba1065ca470d7b14e5c0e30afcf01ae209686051f1e9ae09264c5327dc7436714d22ef028b554f8c511d
- MD5 SHA1 SHA512
- Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-wal
- Size 152KB
- SHA256 41a5be9cd65fa87d8c1b880afd44ee81e280d147501a798fa93f36b4f5703947
- MD5 a361ced84f60d1de1d4e273a078586cb
- SHA1 1a0b3d850cd79d8860252531b766dd6360f5a0a4
- SHA512 7f8b056b1a06e6377b4585763f35e415ae5b3eb8fc20a16616af8e13d36867b5f6f04d2d1fe5cdaec5c5162521c16c4b729f1eb280107a9d881e0b39187058af
- SSDEEP 384:xXINmwQLIAo4g7q4J7q4Ym7q4em7FfRu7G:xYNcIAz74fRu7G
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2-journal
- Size 512B
- SHA256 ceb376c1723a4f35011d95b8478e6ecd8d9a73d563dce6940dde396b40bf3b40
- MD5 9579ccfea48e171960fc35dac9269871
- SHA1 af0c398f5fc38a406d2b6845fdcdc09d80461fd8
- SHA512 e6a45a6bbefc1e337212258ad19a8149eda0e5cf90f973a69519d1630f47d8db66a3c588ec1bb2848a1bc488a5c747023688cc51d813c8b258d8617f009b12fe
- MD5 SHA1 SHA512
- Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2-wal
- Size 40KB
- SHA256 20c3f38de75560b8c87f6ca5bdfc4ccbd5a87940d3e451ab14282300a9a82303
- MD5 8f1b097e1692fb51da5420f7fe009886
- SHA1 f28a3154b3cbb7f7326141591f099f31e97c1e4c
- SHA512 ff1a904b7d21cd33c07fa169eb7682660f6616594915d6a758fbd19394725430e62ec56351a1dcd87b556ecb2e1db25c514bcee3479d681732a1a367f9a9a4a2
- SSDEEP 24:KKbyzyGSP/PawRBQtwT3XnG8w+zNuGSP/A7BY:pyzNSP/TvMU3XnGJ+hBSP/At
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/files/.flurryagent.3dd3c1a7
- Size 1KB
- SHA256 2a2edea6c325f73147af0e412a4c5ddf12d9b3e0dd9154acbb4fcd5973307620
- MD5 be5d3bab248727c79b018b4fbb21a2e6
- SHA1 7fd970b07d402918f32e247ec7020fd5b7c2d0a1
- SHA512 0dc82c091f5df87aec756176d1af3994548d7d2b85521377cd6e8d6fa87557603160e655436ad0890d02c67d4b85b414bb0bc2e11310a2db69091144118b043b
- MD5 SHA1 SHA512
- Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/files/.flurryagent.3dd3c1a7
- Size 678B
- SHA256 dcaf0f03bda09bd8594449ca549ed7f1bb5d11008ff23aa671a9d80a8493e8d7
- MD5 45d72d96243dc8e6de0f4b0196c71334
- SHA1 cbd44230643e355b9ef4a5ced24a31a7830975b3
- SHA512 91e135a1aa1d8392dfba980ba39463f8dcb726a9d238f3772be10549d37c28f64977ab5f483e008a3c71606af407131363f55c97da42dd5db180d36b574f6eaf
- MD5 SHA1 SHA512