Analysis

  • max time kernel
    23s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    04/06/2024, 19:51

General

  • Target
    960f321ea40284d2448f74fa084a4152_JaffaCakes118.apk
  • Size 1.8MB
  • Sample240604-yk2paaac55
  • SHA256 51a20d14b3b6eca1f88f974f4eb85ccbbd95e6e869434e244b600f9b7cbea4f0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.blueboat.justtwopics.hack
    1⤵
    • Removes its main activity from the application launcher
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4278

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        evernote_jobs.db

        • Path /data/data/com.blueboat.justtwopics.hack/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 55f8907e91226ef43a05583c7b4623b4e26994b62d20c8603975ccc1fa3b9409
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/data/com.blueboat.justtwopics.hack/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 1ba72c0cf447ae1cd60337de285d60476ee0c1ad656e94886bbe1240f4553259
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/com.blueboat.justtwopics.hack/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 fffe490129a9a077366b98686198a5dbdf3b9f7eb708ea82382845f6bf15ae2e
        • MD5 SHA1 SHA512

        evernote_jobs.db-shm

        • Path /data/data/com.blueboat.justtwopics.hack/databases/evernote_jobs.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-wal

        • Path /data/data/com.blueboat.justtwopics.hack/databases/evernote_jobs.db-wal
        • Size 28KB
        • SHA256 33b9ab5a97061ac9e6dcf9c43b960423f117dd6a39a99a868dcf3d3dfc7c6f3d
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-wal

        • Path /data/data/com.blueboat.justtwopics.hack/databases/evernote_jobs.db-wal
        • Size 4KB
        • SHA256 fe32da7e7c005ffc081a6041d682c15bec66b0ed8ad82a99ca3f3103b468e890
        • MD5 SHA1 SHA512 SSDEEP