13259ef08d8b83d8087623bc4c713447129c24a850982736b18f87453010c22c

Analysis

max time kernel
137s
max time network
142s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
03/06/2024, 09:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
914c9b58663d7ca9fa44f9d4c145048b_JaffaCakes118.apk
Size 2.5MB
Sample240603-lkla3sbe49
SHA256 13259ef08d8b83d8087623bc4c713447129c24a850982736b18f87453010c22c
MD5 914c9b58663d7ca9fa44f9d4c145048b
SHA1 054d96603cfabda4fbfe665bb774382df49474ce
SHA512 9f49195bae4a63c2f661c1ab3723aac4eb56c176aeeafe2e95bef01e52f9f2ccf834d5fdb30ac9ac61c2016ff1f0b72156709ee93348d1a876c75635e22ad995
SSDEEP 49152:tWhtZlnDnBfYhr40Y1MX5M/xinGZuGLTvFO4EEQ:tWDZlnbXNKJM5inGZlVxEJ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.wikilibs.fan_bingo_blitz_fan_app

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.wikilibs.fan_bingo_blitz_fan_app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.wikilibs.fan_bingo_blitz_fan_app

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.wikilibs.fan_bingo_blitz_fan_app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.wikilibs.fan_bingo_blitz_fan_app

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wikilibs.fan_bingo_blitz_fan_app

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.wikilibs.fan_bingo_blitz_fan_app
1⤵
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:5230

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

google_analytics.db

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db
Size 60KB
SHA256 c5afe1a71dd5bafeb6004d4f07a068d2f3db9e6072dda10345c684ce6ebea5ff
MD5 c74712a5cdb460c0b0829216d72e2104
SHA1 acf4e5ab90b55721f0831e64327cdda42990d772
SHA512 b3e2a7486c320315d960d6c0112ba03e307cb544b49449534a2717e339019c3944b9791b9ee63886f4cdc81425943b41d0927801d1a861eb3c5a48665a867e96
SSDEEP 96:RVWrbe9TZmwP48UMRTKk+KnItewvmPEZR+hgulKzo:K+9Nmw/U2TKfLmqL
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 8KB
SHA256 d7500eb89fdc2715229d49a67764f888d643fc2e035fe94999e7ee9f2450742b
MD5 c7875f29c8a4c59472f89b2a592b20e8
SHA1 d384bf50e3cef56a330e7d73a38e733ce266efac
SHA512 6fd5838a686722acc0c8454bc590810c9a71f6a7ece39fbc4bef3e108df790236ded5ef77291d23fcec06129a15bffa0737387bdefb7e31244636a978c3c513e
SSDEEP 48:7McYqsOVM7hnYulkJb6b4PGbe9TZUjx+ROgaCO8UMRTKk+dQwWXnIxCObSe:77YtOVWrbe9TZmwP48UMRTKk+KnItee
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 16KB
SHA256 75f34921fccee8a18c8f0120b9f8be7444f9c3f1a68d3a364f098c5b74e55ec8
MD5 3b95bb863a86bdc253878451caca02f0
SHA1 c9011885b45b39eba0a46ef2b24e1482dafbb6bb
SHA512 22cd718e71010652feca053116d68522f3230cee93ef892a6d3e9eb3e126fc340d5463f6a937de8afcde2fc1ef8c26b6c77362cc939f7dfc2de98f470b53cbcf
SSDEEP 96:7kEZRMKzo/AVWrbe9TZmwP48UMRTKk+KnIteeQVWrbe9TZmwP48UMRTKk+KnIten:7Zmz+9Nmw/U2TKfbD+9Nmw/U2TKfw
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 512B
SHA256 bfa0e8b9591aab454a14de14eefc40add8edff781acb0e29db9391749ff8e503
MD5 df5d381022943104141d07822086ca55
SHA1 8c1927cad4f8c6bfeaea8fab201e4fb814e07b1b
SHA512 c47e8c88a51c22f7c93a2550aeb459b1bf96c39e8477e2f54b47b85ce47ec7e61998e7f3517e00dc0ce3fa7173dafe570281d86ad118f1755e3442cfdfdbfac1
MD5 SHA1 SHA512

Submit Download

google_analytics.db-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 8KB
SHA256 ee6ccdbfd49541130e8a20893b4c9526c64a682be3eb530e607dce4dcf69c7f2
MD5 42a3a70ffd04ecfa2670ef0b4a88a98d
SHA1 5b17bcc44cf895e5b990123e08262873ef81fa91
SHA512 d7d042d33723e4d21bdf287db5587d18754fdd9320eb85bba3aaee9aeabe677e0a502f7f0064d2bb4b7e13d5ab830c24068065cb6f58904a818047d4bf778554
SSDEEP 6:7+/l9vgn1f/ng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKZi:7+t56/nqLiuWdwRmBEyPbD
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 8KB
SHA256 4fddb5cd935d6805fd90a4cfad760f2b19f44eea556717b77b47a266594c7db9
MD5 7b5b335becd66b2f459d514b800b8514
SHA1 842f048964897dbe96782fdea540010cdfaa93d9
SHA512 9b81ed6d3c5598e5a87cff039a8f3ac0c537f71ebe348d53c7c492c1826bfe3be6e01aebac2c200dae49792ea7f900772182f2385363d206014c5b4fc759f87b
SSDEEP 6:7+/l9xSPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKqj9U/t:7+t6qLJdTRmBEyPbbj90t
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 8KB
SHA256 a6bce322087ed027831b45b19a943423da255f57f08428e02bf095f5c137d9ed
MD5 4a9aa6dd585a0565da53ca0863755bc1
SHA1 2886fb0ebf2ae3037add20adb2ed4b69c7177efe
SHA512 abaf5b52d063ac72ef1f83f35d9425d84b69ca57ec02e2b6535abbe48c49b47677df5d9f1b215f099571b7203d14ced030d955711b8c81415b2a24f21b04c17d
SSDEEP 48:7MVqlVM7hnYulkJb6b4PGbe9TZUjx+ROgaCO8UMRTKk+dQwWXnIxCObSc:7UwVWrbe9TZmwP48UMRTKk+KnItec
MD5 SHA1 SHA512 SSDEEP

Submit Download

wiki2

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2
Size 28KB
SHA256 869336078afb6798799a33cb549367979afe63be33e54e0f04d80b3e7392c687
MD5 29883e722ea12f2afd850e1ddaf8d34a
SHA1 0d35027e2df4b17d8d3b5ac14277b0509888901a
SHA512 26a1608121628b265d62055fbe437f4c8e36df9be692fd89cfac3396f3411743f3b5d9c8fe38df5459d368408685687bd331619419a9343728d8fe6294e3fcff
SSDEEP 12:TLZ7Qyz7G880u6YKDRpHNVRmBEyPbGtOwI:TLRXnG8w+zNuGSiI
MD5 SHA1 SHA512 SSDEEP

Submit Download

wiki2-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2-journal
Size 512B
SHA256 a471c0ba39bf6e71b8fa2039774a6d60172929b84f757759f1acba3c656cc05c
MD5 1ce578e14f1981655deded043881b5be
SHA1 3dcfef563ca890c37b740f1645a53edff3a2f4e7
SHA512 1f1c9f4aaeea4ad143d34363788a516845dcdc98c9ec9e6a2b3650d303a3fd7193b45358bb1289f387e33ce9d2c4965f7b63ac57fc32f568421e7ad3c712b7db
MD5 SHA1 SHA512

Submit Download

wiki2-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2-journal
Size 8KB
SHA256 eab62a006d374fb1bc030e223adcb703d4e0636bc858a09defeafba463972b06
MD5 970bcdc029000dc3e4ad640746dc8cf4
SHA1 12a761286159a0ef08ec727fb9aca2bc61c22112
SHA512 4793faa0f47b85754015e459ef9f7794427322b1e15a0a43eb6503cb4fdd26010f6ee3e1962688a689e66dbf69dc23f13d523792b5b445b84c01cf6568353c22
SSDEEP 6:7+/l9y28Hn1SWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKts:7+t028PqLiuWdwRmBEyPb1
MD5 SHA1 SHA512 SSDEEP

Submit Download

wiki2-journal

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2-journal
Size 8KB
SHA256 1a79324d9479e4533c573b4171dc8d56dd713f5d82b8a6b35d22e807a2a1ecc6
MD5 fcc6ca4ff0b9f4c1a6f36e79affb656d
SHA1 e2e2891f5d0fb0b0aae47e72bc071d29ab096873
SHA512 99958e19b6869133fd278252c6fa0fd56d27413de42befa0b403f09263456a3d68c7dede885bbcbbcbbb31b5bd096d13eda64fea2093f57c5b6b275cb3bc1cd9
SSDEEP 6:7+/l9ftPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKq5/m:7+t9JqLJdTRmBEyPbDhm
MD5 SHA1 SHA512 SSDEEP

Submit Download

.flurryagent.3dd3c1a7

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/files/.flurryagent.3dd3c1a7
Size 672B
SHA256 ebd9ffcb5fa6da041a5c559a158dcfe36e6250e16d5e211097030aa652249d62
MD5 3ff893c2c4f582f6e44cbcfc9e5cad70
SHA1 cb3038b449d9fefb05239573835e885efb2e1d7f
SHA512 c16241063e807910bd1558dee4b78e39015db0e4caf24a7b4932863ba8d42f46b71ec160d9727a9f6cf2ea11c1bf20bb1fe5bcea30fea83db250ba14b612fc58
MD5 SHA1 SHA512

Submit Download

.flurryagent.3dd3c1a7

Path /data/data/com.wikilibs.fan_bingo_blitz_fan_app/files/.flurryagent.3dd3c1a7
Size 1KB
SHA256 801b5a399c33d74ce4d2927e0925d1241a8c29b8779ac4992ccd541580093037
MD5 532e633c381c27f57f9c2d994b38b966
SHA1 d55287c22a34a5df02134d15af0bd5d9e3e7132f
SHA512 bcbda06a575acb48a70af8f021d58be9ac7bc1bc73f3180b1c4b9b0716d83392135624ece7a27e963374745bcc01a78f04a26c8908aa14aad22d6328dcd7fd8d
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads