13259ef08d8b83d8087623bc4c713447129c24a850982736b18f87453010c22c

Analysis

max time kernel
138s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
03/06/2024, 09:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
914c9b58663d7ca9fa44f9d4c145048b_JaffaCakes118.apk
Size 2.5MB
Sample240603-lkla3sbe49
SHA256 13259ef08d8b83d8087623bc4c713447129c24a850982736b18f87453010c22c
MD5 914c9b58663d7ca9fa44f9d4c145048b
SHA1 054d96603cfabda4fbfe665bb774382df49474ce
SHA512 9f49195bae4a63c2f661c1ab3723aac4eb56c176aeeafe2e95bef01e52f9f2ccf834d5fdb30ac9ac61c2016ff1f0b72156709ee93348d1a876c75635e22ad995
SSDEEP 49152:tWhtZlnDnBfYhr40Y1MX5M/xinGZuGLTvFO4EEQ:tWDZlnbXNKJM5inGZlVxEJ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.wikilibs.fan_bingo_blitz_fan_app

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.wikilibs.fan_bingo_blitz_fan_app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.wikilibs.fan_bingo_blitz_fan_app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.wikilibs.fan_bingo_blitz_fan_app

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wikilibs.fan_bingo_blitz_fan_app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.wikilibs.fan_bingo_blitz_fan_app
1⤵
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4536

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

google_analytics.db

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db
Size 60KB
SHA256 0c4d2f0fc5633a41a8e27998fe62b121fc38e964552884d839416f97b28aebe9
MD5 aebc5436969e1ce30e8da52ac153e277
SHA1 7141f4198c0dae8046cb9b3101c09e605ee47727
SHA512 ea7ab1e1ef08f145e3f4a689c27fc850e24710a21fc07f0c9c70afbbfaba7f64bdaeb8bc50860c2b984b100643539a218a04849b65ee5dd54bab06169f74a77f
SSDEEP 96:JVWrbe9TZmwP48UMRTKk+KnIteXrmFwO2ZRoGubZAZ+:C+9Nmw/U2TKf+meOUjG
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 8KB
SHA256 620dd3ae988743e1c761207c48f27e1bd0b7c41894e6b31ed935a060f4a06c5b
MD5 c0dd2ee5a94598f92196dba869093daf
SHA1 0d20d91be14d68ba35a1d4af2d93c0138b62d840
SHA512 0890c72ea16a1f7536c20e9f37aaf674e611e7a1e45f35039f4e799563a50370dfd126caa14668da004419a70d9245e3e09f4e26892b84040395a363fc0bdd9e
SSDEEP 48:7MMWq9VM7hnYulkJb6b4PGbe9TZUjx+ROgaCO8UMRTKk+dQwWXnIxCObS0:7bWYVWrbe9TZmwP48UMRTKk+KnIte0
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 16KB
SHA256 994df5ce8a32b406173919ad0316ded9996c73158f67d75fe84a8a54cc3e99c3
MD5 9860181ea429dfe77ddad5c7eb09d2f6
SHA1 fcdbfa2e0cfa6ec704c15fb47b15553965b82f21
SHA512 3c3497b122f1c4e26cb7b7569dbfb1ac9edb3fd054cacef88cc26202f66dd44ee7dec5fd60081590b267e2f9595082e08334f755c9e08b28b5cc8ea79836e390
SSDEEP 96:7SwO2ZRTZAZ+T4VWrbe9TZmwP48UMRTKk+KnIteooVWrbe9TZmwP48UMRTKk+KnP:7HOUrpL+9Nmw/U2TKfZ7+9Nmw/U2TKfG
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 512B
SHA256 35f992004193a96a01267036726cec3443a105fca5447a516d3b75a7d2edc9c7
MD5 74d2a85f9c645194700ffcc3f4d7f11a
SHA1 8416d0df1dc1fb0ccb5be30d021346467a08756f
SHA512 477cef3392671749bc542f4b91949c333243c1b80ece83f2e715f3dff0e4483f8064066fafc9677c789294c59759fa1c239965203742d4e29d7a6db381d6cbd9
MD5 SHA1 SHA512

Submit Download

google_analytics.db-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 8KB
SHA256 f8329bb2de1cd79357ab457b79597489f62bd78aa9e866c96c8383c1511aaf31
MD5 b08831feb0741da0c26ef0119e5c3480
SHA1 94ed5b670659eb9d4b483bae8b89d4a5518b7dd5
SHA512 97fca4a6d1ce945ce87d02f12e1ec7e8ed4df61edd49a3e261f0701edcca57717d5f509e2ca8e66fba10b6213d0e74928e6b680bfef151f4eaddcd999815ddf1
SSDEEP 6:7+/l9ddlGn11pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKQ:7+tipqLiuWdYRmBEyPbb
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 8KB
SHA256 9ed692637b39dc8e8907f4990763b73e7469ec84add299471b72ee0048feb65c
MD5 1b4d914f2ce5e63710d6a7a3db0db6ec
SHA1 8b024e62ae01bce8e9ee3c226fd6fa3bf4272cf4
SHA512 b899484781f382d8bca88173d52e9847220ff352fd63c75cd2cfeed39956106555585bc92f74a7285310025a42c8e741f8a4c5d5e6f79735ac720a73b1f2fdee
SSDEEP 6:7+/l97wPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKgb5y//h:7+tZIqLJdeWRmBEyPbih
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics.db-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/google_analytics.db-journal
Size 8KB
SHA256 071417f92e52562d1d859a06dc22536a1861597d4e554e5d4524cb4b9c54ed9c
MD5 00c158b2cd5ab63c29965d5e9d0ffd0a
SHA1 1518ce06ba58b24fb5e5bbec8bab84168fb2cd48
SHA512 451c1c7c9406044c573ed8015bb1057b8a647abfca758e7e7f0c8d272c2c50ee393e7d79083563193b36dd703d7f3841b584ba2c5ad07e41857ed6cb05c1a51c
SSDEEP 48:7MtqNVM7hnYulkJb6b4PGbe9TZUjx+ROgaCO8UMRTKk+dQwWXnIxCObSz:7kIVWrbe9TZmwP48UMRTKk+KnItez
MD5 SHA1 SHA512 SSDEEP

Submit Download

wiki2

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2
Size 28KB
SHA256 cabfed030a00986c39cfa228ea2e69133b4be7ac982b88e70791317a67e14d11
MD5 d67ebdf8be67c29a002f8dbde2cc40f4
SHA1 4f0e309349c322005f2846467b1e4f06c2fbd7df
SHA512 4574d1f7b43cb68cccb7fd5d0b2dca0cf0fa3ddff27d413477bed37eea5a2fbfd516581e631e0980a2001228587ad05770a0a353508a21a74e1878b6236073d7
SSDEEP 12:TLZTQyz7G880u6YKDRpHNVRmBEyPbGtOwI:TLZXnG8w+zNuGSiI
MD5 SHA1 SHA512 SSDEEP

Submit Download

wiki2-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2-journal
Size 512B
SHA256 a8dfb14d0039887d5bb8f4f9f3c7fd22119aa10db71b7e6994afedafbb83d4d1
MD5 5a25a877753301f3cec50bc8dc0ff828
SHA1 0b66b37cd4ce4a14a0bc03cf333e8f8db170e2d8
SHA512 1455d2f3eaa436b83af66d63d7aec6e0cda9d4a06d39d9499a6a7ba527bb6aee920a83f7d61388bf6446b48f595157117d8c45d2e550c9e6f136b0bfdf94890b
MD5 SHA1 SHA512

Submit Download

wiki2-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2-journal
Size 8KB
SHA256 a57175878d3a26e065c6dcaaf7007d2b614d26ff6c69a70373736b6767d2c8e9
MD5 c4c637714b63bb558fd4a691238e38c2
SHA1 96eee0c5da2525baec31f3a997ff8c65e459c8aa
SHA512 8f5f6fb73eb873dab8d8984f501f24f0cce1de089dbe8504f102f8c9e6dbf5c549df8889feba9bed5f273b3b24585694f7a58a8aaa8eacbaef4ed8ba7652185a
SSDEEP 6:7+/l9flGn1Fpg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKTI:7+tAqLiuWdYRmBEyPb6I
MD5 SHA1 SHA512 SSDEEP

Submit Download

wiki2-journal

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/databases/wiki2-journal
Size 8KB
SHA256 6c2a292bc9d9457975cd3e4c624de9dd29170a56b963f1419c14278afb042c71
MD5 8b4a50f161208f2a2db8d7b332abab78
SHA1 d689bdc4d33d3baae13addb24adbb1532a7fdda3
SHA512 f1b24119a624f275c91f3dcf8bdcc8baa8b093b544466c48a6acc3407f34da56343a7d886d77a63ece57cb3c499f108510990dc5fd03f1b0cf34b2f1c5f1c87a
SSDEEP 6:7+/l9vevOPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK0yM/Q:7+tNeviqLJdeWRmBEyPbfQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

.flurryagent.3dd3c1a7

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/files/.flurryagent.3dd3c1a7
Size 672B
SHA256 594704a6655df31c61d6e834a2dce65be6540f3490070677dac92f370f1cd853
MD5 3b46b8680e9adb5a0d8e42f0c9d45063
SHA1 b052bafd290b0a1cc4503bad4781723dc45c63f1
SHA512 63f0d6f8e23fc5c697e470d976bc4529dc7412e2ea34e9367abc3cf2cfa68461c7482ca47a48f13fbd401acd80e0ca4215b2b03ea865a8c845c354165e2ac199
MD5 SHA1 SHA512

Submit Download

.flurryagent.3dd3c1a7

Path /data/user/0/com.wikilibs.fan_bingo_blitz_fan_app/files/.flurryagent.3dd3c1a7
Size 1KB
SHA256 89ce8106883e072fc6a498e70fdefe0e2c58110d9f7a96b296593f580f8b940a
MD5 1f2f0bc19e1083f383137b1b760b481c
SHA1 2d6d5434b5103a8234f31fe36708aeb1814e233c
SHA512 3b35127dbcc0d807fa0a04df89b37df27ba9afe6374cc2075343cf9e9350b5057d10a559b4c481c8f96fa0ef0686640490d7a15b9658360c9659a900fba2a8d2
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads