Analysis
-
max time kernel
129s -
max time network
184s -
platform
android_x64 -
resource
android-x64-20240603-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system -
submitted
06/06/2024, 02:39
Static task
static1
Behavioral task
behavioral1
Sample
99d2c029c018e5bb8ca76a7c01692b92_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
99d2c029c018e5bb8ca76a7c01692b92_JaffaCakes118.apk
Resource
android-x64-20240603-en
General
-
Target
99d2c029c018e5bb8ca76a7c01692b92_JaffaCakes118.apk
-
Size
4.2MB
-
MD5
99d2c029c018e5bb8ca76a7c01692b92
-
SHA1
56c9f869255eb777609a6bd1e2032a4bba3619bc
-
SHA256
50506cf771853f33a540bc6dd947f494409f656d8e10363562b0b9fd2c01e791
-
SHA512
6ec1fd2cdd042a96f843bcc13ec3249951aa9cff37ae94199eb2db801f55047f90b3fcabe9ea5d8aa81de73fe95001a47cb4aad8d6856482d6709fbeb65bf2bb
-
SSDEEP
98304:giZF5lhzfGl8jLMg27EHQM8Q661jiYesOnkoTsdGBC9joh0X:zZF5f+l8fhS61WtkoT6Bh
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.netease.ic -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.netease.ic -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
flow ioc 22 alog.umeng.com -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.netease.ic -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.netease.ic -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.netease.ic -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.netease.ic -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.netease.ic -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.netease.ic
Processes
-
com.netease.ic1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5220
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
224B
MD5a24f1cc303c49b39a940b78a330a29be
SHA17e4701573989cb3a33a8508431d289368ca292a3
SHA25648b5a43cd4389edcccdcf4361b7e4d6700113c1da83c6f7453c3a7bacfd0b503
SHA5121614338fbb190dd9db56c970ebeea5f15ab43143bc0c7103631eb0b822f8323f3c5d1819ce488e7bc652e4a7bae1e0d53a78b9098f313f805be30c7b9d1ba16e
-
Filesize
224B
MD5fc9d5e702530d0deb077413af6946aec
SHA173710c915207e891c63cd24c36f20b119ea71a00
SHA256a18fdf94f14c4f2ce9ab8d2032f1fcb7c4a4e2b9d7b1c4f71cd3ce1934fe4a9f
SHA5126ca490c6235d186e142471141e97df192fc5603654d0704f1e0103056a2dd441af8808a80a58d9940d510a7d8845b3929004d127d543034d575e1b2d170ef14f
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
52KB
MD5c0affdfebc250f6e1ca4fe14a979041e
SHA12fc7425b8fb89a87ade9a76c6b47dfd7a3d1e5f2
SHA256f01cf2d37321bd4d0fbce700bb1ed5afe702a2e67ef502b5b714827ea322c4a7
SHA512656d8c30f59414032b052a3e5949c57fb6c9751e0ed5f9c7586a80e047f79c7e3f08915e7d71b5ba8f93519149741cb6722375d0b67c6792e37d06a60a8fa586
-
Filesize
8KB
MD52ff5c391bab40c6d5cff6f5bba2440ef
SHA1ac8f56b2f0af5e993d0b34a54a028858f19d7647
SHA2564a4f826d2f93ca4c48adc181b4f163a58f2fcf0b20e8abcbbe080581f54eb488
SHA5121aa26cbc2d69373e63cf315155027f205b6c1bb003e81b4ba046b2cd20c0303dd9611113235eba4bdcc23f394b434b28485df4d4a81b36871be5dd28fedd732b
-
Filesize
512B
MD54a8bc9ff585faa7f52efb655b1e48d83
SHA1efe42d75b5de08d4d9a3f139992bf06b3364d88c
SHA25603939c4d6225a249f1625b59bb1e179d150dd506784c6be5d234da6c89ec6208
SHA51258de9393f673a8774f026671a86727b64f7bd9b5625639acb998f43852c46aa1255b5e6f0e5794e2785a4be834135a555bb3ff819ca897549b532da5a79a600c
-
Filesize
8KB
MD54c98e3f2a074420cc3ad56cbd44ddaa8
SHA1cfe1a9763f5b658c8981c91287c2e142fac3afd0
SHA2568fe6b0429a535a10335d85879e53c6cef15aacb8faf6b2c379bb8144d96b80a9
SHA512609fd63422c8ba995c9973314d43d97aa3ddeb4ed46429c6f9840ed3a96b844f6e7405b9d720aa7050c8a99765005e5a2f11bf8a711a7917a13e2b1f39358bdc
-
Filesize
8KB
MD510c24303dded875965ed04e736516a9f
SHA160b2fa1f39b6e0a302c820721bb1ad0a50ee407f
SHA2565ff708d6e257c7375f8c692309aea0f872366e02864e4dd8e2cced910691e67d
SHA51261d57e2b9e826c8bb7384e0d0b49bf8490d06535e23779cf3a169857597505d7c8418009c492625898674c122450c500e3f8db236f00d8e2390cd19bc35a0dab
-
Filesize
12KB
MD5a5f13f6bc6d75a685257af697ed9fb8b
SHA19fefb3591e4fe5c2f99cd3144da0591e4c1f9711
SHA25644497dfbcf02600156793b66a27579be95276f46d791181ba59743d062b9e543
SHA512d6453eb34c408d048c0fbe366b94542aa5c610fabd9af2485e862cfae62b348cacead9c30b4ae0826944a779f0e9f1f128fb694a6534607a5f4b0b935740fa9e
-
Filesize
8KB
MD5a21da4497ad49073874a7f25105d2625
SHA1f2052739f2d34f6d3393bd6eb5dbaa207903c4b9
SHA256cbedd441fbf5ef712e7a2e4107816e422d46f42df95df9086068a49a86685d02
SHA5128734b26eaef8ea1e89de1c39fd471564ebf6df023225b9409ada00588270efedcaa4ce8dbef33ba96484a3e1a6b4662c28cae6b5292eb520413b3c7bf9ae62d5
-
Filesize
36KB
MD50908e924aa236931dc7166fef6e00862
SHA17782648d6d8f6e835bd47058d4852932c096a467
SHA25638f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
SHA5123c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
-
Filesize
36KB
MD567c12933d1e0e63d9801a6aa43092ce7
SHA1b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA256abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
SHA512db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
-
Filesize
512B
MD5bd5ebb8870f15da0c70b2cd429d6f2b2
SHA1972f3094e92e5da747a419edfbe009bb5acc5ebe
SHA25677dfe2c038e084da2d17920960cf975f25fbab5334a5c419cdb79c5509194a6d
SHA51266415e9d60adb1bc1c3175a0f892f55beab7fa70114cc085075a018577c2038dc9fdf524efa1187dbd3fb55d3744976440c6d822c132c6078f9da7c23ed6e9c7
-
Filesize
8KB
MD522794a4700c9d25506e8e21802e4d11b
SHA1915e19f9abba9cdec63add69de34ab5509d1af38
SHA25600ee9c4372dae808070b03ca577086b1b2fdf8bae40c7ed15a8356bc48e802f7
SHA5128f44acdfb9435239d668cb492ace8d8ab06194fba78d5e345c154133daf45096f03f8ce345a7d2ae2df08c50d61840014fbd9d6e68e644dd8a3baa122c3b2f93
-
Filesize
8KB
MD58acb9fd18fd7ab5e3800d531940fb2ef
SHA101a241835f29be256cc453e3b372009f48413cc8
SHA256b2fbf41dc03bc99db3fb5d54f5e608ec023de43a902badb8116891d0b4ee38c9
SHA512b28eb03f8808333a5e6ceae31ebbfe1531e40b6739123f9e392f517441f2c361019b8fe30d7a3be2b576c0280151938f683c8b10b3d566ebb9817427cd3049dc
-
Filesize
8KB
MD554f02c96555628dd2ae0ad53fe066e65
SHA1bef63501b21c788de64bc5d820c8087547c64e64
SHA25607ef03d3459c53716c977ad6defb25429a522544a97aedfadee2554ae8e94214
SHA5124ee17ffc3dfe1b9b7246ea12f0f33f2edab8c3f01c94fc23445b4483c9e99d29316c4cb64bca7b421a01df00b5c694bee89e8c0f35ab2f9802c8b6f06052f4dd
-
Filesize
8KB
MD5209a2cfa08ed09c971b421d59dfb86fe
SHA12a231a7d9739625d2126d27a1758bd1fdfb4909f
SHA256abd00d4d4564f938cc47060310776a6d7d91035b670e6de712270aae415bc96f
SHA512047a319dd496f70e62f51145ab863eeec942cb8dd700d904f5ba9fed507ada0df0488b7061f73b70ed2a885fb5a7f34b214b4546cf87dea84b42a212feaf2578
-
Filesize
12KB
MD5821b74fc55ac10e7344815b14bab46e6
SHA179f311be4d4ef66f029812747c65a8727f9ae379
SHA256f6a34407429a498b71ea5271b48d8c9a41c28d1970329bb4fe4db48d43ef6f0c
SHA5128aa221f451cbec42bf2038404b81ee3c689ebc60145a031f3dd673ba2e67e6e4061c6660abefe8bd170fe716907104890ad1ac838f60cb91d98c3a3de23a1a67
-
Filesize
32KB
MD58643476a608fa8133f678d43527aa8fd
SHA14ac41ac15951160161b2ee2c252fba1f784f4253
SHA256a5480790c4a570651e76977506dd05dca5b6aaa51f407845df64891f95d23d84
SHA512d69f7dcdc712cf97e5d190826e534cb55f8b527681fc7c6063a64950859f8acc1e6b1258bfb1c8662af99de0a0d6edb2f0f2e050391ad270f339dc21d35ec15f
-
Filesize
32KB
MD538564ad4c73e5619bc2264b0c44997a5
SHA1e55f6fe1b20347ad4cd58d77af0b0feb149f63d0
SHA2561820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8
SHA51230d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d
-
Filesize
16KB
MD5212af7b762eedf10380b906328a11193
SHA16ac74dff3f850c67eeff8e33abea665e5d54f039
SHA2560d6b9c399bae2beb9f27a704ea59ce4fac031a41de2e59498101866326d61cbb
SHA51261258f38f7164fea60cd8f4213ed79cc96b152c958aac628f145cdd2adf845fb356c605671fbc575fa448dee43166372c1dca190ccd24e95b7218ddcf6be7350
-
Filesize
512B
MD53074fe4e61be5a92d427f325d1cb74c5
SHA12161572f3e0d5912a45f09e4835317d8597db84e
SHA256e7082147f4270849e3f2564a45da9e1fadf0920471e0de69825e14ed471b8c3c
SHA512ca5a1609fbcd95f5f2fc839ce1d4db4ef1ed68356202a0373528593fe1c33223d4132bfddc8a3dee68d7b0746e1c09c023452b2bce8e949f9f6c4e307fd2cc29
-
Filesize
8KB
MD5ea015f6f9420e947af35e94604c6bb1b
SHA1598848adb2dc1abc6612a33e27743a19f4b12588
SHA256a91daed9654b009d1b2d1b5c389ee339c06039183aebd793f65afbbee4f0bd19
SHA512950d1f3f1cbd464da9a4ce609bab8dd0c426277fc7980dbcb7e08ba1b1f65796a25a496fc08074047e9376d1fe949182010da1e4820e15912cae3a6d7f4b0ff1
-
Filesize
8KB
MD5df108bb8e7eb727948038e1b6b3b4b01
SHA15d4c09095105977ecce74ac469e3211d9aafed07
SHA2561996db587e61cd898fe6c1ddc280d0c0dbd58c0401c6b03de9b3215de01a41ca
SHA512d97d0a7084aa25891837b61a6db2114d478e7077e264ed9bbe9dacf4ea7a4aa30dd35e504dea4473e2d55d622f8548a8c9b16e06eeb8c35ffc295f820043e06c
-
Filesize
16KB
MD58076f6b320d7a78b2b03a197f685b378
SHA1f984b7a84e67bb7f9a759617f06df0f357d49639
SHA256664032c8473517e2a4e830c72379cfbbbff0d81f7eceaddf341b7f0b720cafad
SHA512ac3f711f64f9becbcc3878c270113b8ea8d78ffc64e8d3d1f72d878d5731fead9d31437541e3d659bbcc05e161ec67b59327a29cae1256c62c3de99cef94463c
-
Filesize
12KB
MD55d6706c68fc980bac751d1f6e88232ae
SHA1a035cb30cfb9ed23c2a3f42b20a7518ab1557b93
SHA256db3e239157011b8f35a8e7d9f0ed1b789850133c304a38a7c1c6366fdcdac7e3
SHA5125f4d40fd682ad2211814ef43c222655de0422c361eac9cb14e1e9069508ab8f0bb120fb881ad9775be4e930c8e3b642ed1cd98a841750ffc56641d3a7d280c94
-
Filesize
8KB
MD5e2abe6809ccc2708e96eb27a98f8b68d
SHA14bcba3043d11e067028602822167d4c9bf6521f1
SHA256c0bf87e3943be2180a1283d3c8f46cbcb83262e168a75941d9be8a400c3482f8
SHA512fbf13b4d7825bc088d2293c5c1682706bd3c124fbfa5a8fbd9f9780ccb141a01bc9563e91a20ca5e63ffb5bc1169449babb6a9e96bb76c6266b4216c037b5d2e
-
Filesize
938B
MD58207ad80f63e35e035bc0bc8544a2466
SHA1e3bab4e7c2994e81bd3fa58bb67e3849dff50cbc
SHA256623fff635768f8f9d3a1eb549ed7996c0d48e0afe1a19f018f7a3f503375bf16
SHA51238f417fb6977d1f49ea96f54bd44f7f1ad75278183fa4faf28df9c6d7d18cc344c7c3469c41082bb57ddba81bc7b942b1d3e1917eff53c740f3bfd991e0a2096
-
Filesize
162B
MD5825b3fb1fc63ec4eff767ae7b076ca65
SHA107c8b3ef274a1baf0844d3d281ca920a85f67a5f
SHA256962c5eb2eccadd23aa69b38d363e5b1b8b2244e0ca20dd9c93068b71b1b7e35f
SHA512a0859b990fad00b874960d984f3520e0c87c396c0ad9d2517c326b3d6a08e74edf435f093ce5a97d4193333fb6d152c091271c15df76e49a7a2c8867b7229e3a
-
Filesize
61B
MD541bbc0164d1b3c2e2b523e15c5113558
SHA19f3a78ba3d1d60319c31c670fdd876c43970b485
SHA256eac351a9e2a5d08e17294ba4e4961fd38cb264a773efa95753a5dd2bcbb47313
SHA512830ba9e35bfb5f9622c5ba7800a0d101586aef2a90e2e8ea36a8098dbfcf60d97b6c861cc6449e831cb7eff461a63ca905e6dae96b02ddb1255e27675e6db59e
-
Filesize
433B
MD5cbc1ea2eb480defe5393283eca08285f
SHA147cbd5682ae837f74ccc61f5a6f67f5e296f0fcf
SHA256818a7969ba62626e5f2dc160c0b59988b1679cf59e8ec69781c756accf4ca203
SHA512282874e8a93455a4a824ff7ee957afe3625cefc638f9ca6222152d6b9b4237e9a772bf01962b9ebcc593ba2ffe408fa593309ad74499badd56f1c4fe16497167
-
Filesize
220B
MD545ba9252862d2706a6bccd0073048929
SHA14289bb0f5f7490398bc9909211f91a89db215738
SHA25617e5658e716eca1664daba77b371dadc0a58ef7c465d4c4de993dbdbc6efa558
SHA5120339a405a60e88b2e812aaa7fc59a461e674c9c68becec3d3e75049d00ffed2706f44926a9979dad718f24e131d14432a05317fe903dcf48750104f1467a1662
-
Filesize
111B
MD5135c96429f1cda07299fb2879c6a2e7b
SHA1e32d9f27bd4abf0b1c6a8d697fdfa1827c63a111
SHA256776310903decab129ca9027931d23c46514b1ca3dfc7ac61d58ae31e9901551c
SHA512943e12f7e99411136daa130ebd376342d9087b5f25690a14ddc7204d4cb75d6cd0e276f4c822bb32d46725393c647c00769a78200587acf90094c4815560e472
-
Filesize
213B
MD5e3edf3ab9af730a3071798d3477370e5
SHA1c116393d6a3dab4b59d6fc7d5ae40b0ff59c5248
SHA2563b0284d3cfff1d6f3ce9fe080e9810eec30a2e26882f5653bdd7ea1d631f27d0
SHA5129be6bc9e1cf3d007617501851ac85b2d0ddd1bcf096c0ec6142bea100b9349e542e456f3a55b54c7d10d26c88016e9177991732670dcbb181f80d249af0d34a6
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD5d561d447315b28e246eefb77bfb32a38
SHA11c445a68d19018ca55c5240f18b701fd30e89b50
SHA256f50f66cff8f232423472fc46a83c3d7be6bfe47833715117450fd0f4fe7c9b92
SHA51210e79ea2337536aa68efdec63ce0d17e1d72b23120e9ef57bfe7aff4a0b96f5869aeb41fe0b871194c9c22fbcb5d8973021f6dc04c4051e4a80a0aebd3e6ab46
-
Filesize
167B
MD5911431f4d9cfabcaa1397c5f1c346765
SHA178baaf7ffe88dfe4b9c1384d83d9f8e76aee25e6
SHA25674e73a0d3cec90b789f9426b2b3f9a3426c99425b12a7f1c5e8a4989a623d623
SHA512ba92613e764ee1176dc7db262e781b29ce9edaebab54c09554c458ab53e2ebd33c7b99092e4507c306d1dcdff1424921e463028acedbb3f81a39d25e31f247da