Overview

overview

8

Static

static

6

95490942b1...18.apk

android-9-x86

8

95490942b1...18.apk

android-10-x64

8

95490942b1...18.apk

android-11-x64

8

Analysis

  • max time kernel
    179s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240603-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
  • submitted
    04/06/2024, 15:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    95490942b1eac0c3fdaeddaa12f87847_JaffaCakes118.apk
  • Size 5.9MB
  • Sample240604-seckbabe63
  • SHA256 744d06ef1fcf8025aebf5590ad99d106ce1cca13e504ee82407d37f6b8622288
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
    evasion
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4488
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4560

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ZPkFS.log
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
        • Size 90B
        • SHA256 74abaa892ed5837823601ba73773959e82405c706a94d73bf5045f52f871d691
        • MD5 SHA1 SHA512
        Submit Download

        credentials.dat
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
        • Size 234B
        • SHA256 fdaab0bb00bd03ae06d52c12fa6363b43153569e75b5b92bc586cb5265362c32
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087
        • Size 36KB
        • SHA256 d7ef0555021358f9360fcd3a1e2026d4f70b1602fce91dbb057c1ae1da32c97f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 20KB
        • SHA256 8a72cbd79dd6f30af0144c301077d5947d4f97367c91fa86ff22f9f8d1920e46
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 20KB
        • SHA256 7ab205a452e1ef4bf4136b42aeedab5a27ebfc983b9dda7f4c76776f1803f00c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 8KB
        • SHA256 761e4d62b4c5bdf7fe1c167594eb1380869c4860d4819321a3748d3409d96ebf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 12KB
        • SHA256 035d3a3b6b8fd4dadf676ce44adb1fd95496fe8c6fa36e7eb3101c1deb6f9f8d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 8KB
        • SHA256 71d46e9d866bee56145f7750222d8eeeadbd00f1fd3bd20fea9a45aeb8f9cd73
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 12KB
        • SHA256 2d1212ccd9a9ca20bc29cba3d5789cb045e43da6ac88ff2621d8fac6e8e65aa4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 3a3e3c482fcc0bc6f3be87adf9219d7be0bc929b8297c377145ee3dd0233055e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 478abdfd13d9615b35579060a8bc9aa31a299effa55bc00bd915da0c2b49e394
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 ffcd9b8c69dad44d8eaabca8d964f919ef5f06af233a0061d341912a6bedc17e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 e68ad898f13118e49e91d033bbef3f809d5fe827c4ac1f70dd8c3c2a20e3cd33
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 c4b910fed1def53b0a3a22d854e043c8d5d03ef3a5e59f01baa5ce084741eecd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 a10b19a9efe4ccbaf8e5310e0dca4033331c68a6d8ec3a9372878a72630a85af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 a23a6771937acba0ee869980742a0eff485d7eb68c2af750c4f4e67c95683b21
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 168982d1fc28361b0a4438fdb040fda0af95c6517189034b29827a6d26088f62
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 db5961e00062dd4ae21c4ef39c2ee3bd68c9f28c17707445e59d8a63f3a3929c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 4ffb74a85e499f2dfbce6374cd7f345e6d84b8719cac8b07679a4367edff5389
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 7bffdcfdf9e0638e5779ecf34184b40fe7a4cbb122920830859ff8cb6832ebab
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 43ecd30e16b28a5bff9ec8dee174883ab56f270dc4a6a9240f06cb52aa59eadf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 6c73be58c409b51a464770f0a861af4782e6af411a56cafec1c528ee32a5a9de
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 dc347ce0bd59832cecc4e68ba4ccd75199ce0bc830632e0cf0b5f4ae43fc6e3f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 f40488984073524746452e31212db6ae7d4aba4d77552dca942519600aeab18c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 6b4620b782b9410afb4f2f09b3363629460d4b65db217bf8e17596d010f51c08
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 609f94f2fe0da3e97150796b751662de0fb462403ad7862fd943aa9be420505c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download