Analysis
-
max time kernel
126s -
max time network
180s -
platform
android_x64 -
resource
android-x64-arm64-20240603-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system -
submitted
06-06-2024 02:39
Static task
static1
Behavioral task
behavioral1
Sample
99d2c029c018e5bb8ca76a7c01692b92_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
99d2c029c018e5bb8ca76a7c01692b92_JaffaCakes118.apk
Resource
android-x64-20240603-en
General
-
Target
99d2c029c018e5bb8ca76a7c01692b92_JaffaCakes118.apk
-
Size
4.2MB
-
MD5
99d2c029c018e5bb8ca76a7c01692b92
-
SHA1
56c9f869255eb777609a6bd1e2032a4bba3619bc
-
SHA256
50506cf771853f33a540bc6dd947f494409f656d8e10363562b0b9fd2c01e791
-
SHA512
6ec1fd2cdd042a96f843bcc13ec3249951aa9cff37ae94199eb2db801f55047f90b3fcabe9ea5d8aa81de73fe95001a47cb4aad8d6856482d6709fbeb65bf2bb
-
SSDEEP
98304:giZF5lhzfGl8jLMg27EHQM8Q661jiYesOnkoTsdGBC9joh0X:zZF5f+l8fhS61WtkoT6Bh
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.netease.ic -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.netease.ic -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
flow ioc 24 alog.umeng.com -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.netease.ic -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.netease.ic -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.netease.ic -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.netease.ic -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.netease.ic
Processes
-
com.netease.ic1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4544
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
MD54cfe777c9f6e7859f5efe2197401d8e5
SHA1bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a
SHA256c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
SHA5126be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de
-
Filesize
36KB
MD586752a4be6564d8370f2f0e403995003
SHA129f7d50675f6e59f3b808eb6dcc8619384412115
SHA25650484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
SHA51279c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec
-
Filesize
512B
MD56a3e31b3686323bf2e73a2f0de04b4e6
SHA194a4721cee31e86b4df170eecf478b5e9b93472c
SHA2567c196453a2f818d23533bf468f938fbfdddc508821a66a2c30e8c43c7dd0d558
SHA51227ff85aef47ade6f760130ec3f4959d473edeb26755fb564e13120b1c1225c58ca4b5aa7a8523111b6e4e50119090d10a4ac534be171333d2960e9fb27eead85
-
Filesize
8KB
MD57700ddddebf68b9bde5ed1b087f30f61
SHA19bf01f268aa685b63cfd2cffbf62c9ee86d519aa
SHA256093502287dcdf9c56d2b3086514693ae31bca13af19f80ada409561f975b15a7
SHA51287915ffe2c60e315424676f83e526808a4ac359e048c7f820ac9ee8ccf9becc073d374bbff4230d26527a735f690bd4c110b7c6829c68c64f504e382d7354476
-
Filesize
8KB
MD5944fe872aadfd559204bc44f6cfe13d3
SHA1080a77250d6cc3147dc944d3e35867d9bb0a5922
SHA2560b8961bb7235309ffa011ccf29f70c28bb99e3066195d0403a01c2d04e7b8ebb
SHA5128b829d83d36b72b6111cc030269c91d158681cbb6aa3992e4bd73e4a6c18514bd28ca5fc1bc831f1d58887c193dead250be77b24f640f5ad1bbf42ea05ceb5e8
-
Filesize
8KB
MD58cf627fa33646e1f11b7fed0b401eec1
SHA11393d4266e65e98e0d0f0af56c05d54a0b886173
SHA2566aba83b53faf1fc4f81066dd543920b580ba49be5b94949a32b8c8c28c06952f
SHA51228ff6e86188747132623bb6d8fbb76f25861cb51df8f867e22424f9e38906177f1c942fa137cc0f51844cf52d9bebc78c73c205e56c0834b8eefdd492543973c
-
Filesize
8KB
MD544cc2b82f39c94fed8d278f81a44bd83
SHA12c7f363ecda2c2d400fc38830c50f0b407c05d74
SHA256aedb7318421b9fa1500f053a639e4e73de24db6fcab94d57781a9d87ae613381
SHA512dc1e06f72d106be8d84c4a6ef70d6db934ccf0983ead9c05f96a48dd3651ad77b9de6d58e051b11fb347d5872ce97f68120bebd217a222da0b8f353ad88013c9
-
Filesize
12KB
MD59a4e3b8adcf857cf6c75bfb55177f8ce
SHA11f7e595fa9928bcf005d9a5d6d9978ef7486ef3d
SHA2568671240a7173aba5fb4f5e8c595f75945f53517d27fd766de04d0af35ad4301c
SHA5120fe271f5f8dc62073b888d80022b5baee0616246b5289159ded079f21d0eea6554969b9982c0dc9e1566dd43c6b5add063e02a6184f2e4ef03f34d90187cf738
-
Filesize
32KB
MD59ead698f5dd4e6515a1d13e86fc049dc
SHA192346c01904c1c2c1f6d2a01ec8148c27def2d99
SHA256ec0214918bef4f6b0a920844bdc3c66056a5d2b669a90cbac3b0a31d975a3daa
SHA51225fe8ba8a6f77c964ca361ee326312d802d77baccf87bbcac2b88da081ba1c6ecd92bb88b95023b5fa6dbadfd512ed42625445d0744ddb059ea6b5115b37b993
-
Filesize
32KB
MD54cac7d31fb94d5c9581893537f64c5ed
SHA196bef3288546196ac3058b5eeddbe9da1d999fe5
SHA256d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5
SHA5120ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747
-
Filesize
16KB
MD501ba2ce29dc181a278cac02d77102107
SHA1d2308004953e43d503b407f4a7d2913b1cfab480
SHA25644e632bd42513fa9a827123bb089c18d747c91d9ca47b300272972146ff06efd
SHA512ecd4a1900714818bf8c9218453717c0dc31554c56b47cbe919da9cbcba9928e70caf8b39b47216048112287d3c9f6e88c1d25c385035aade3e5d465817f81081
-
Filesize
512B
MD579b40a445f57610c54699be0d8107bde
SHA17ea38f44bb0b6f86c957b78ab78946ac20fd5d40
SHA25641e2d310e9f55de559c1f839322a3cd01a77f82fdb3345fff83eaea7292c08e8
SHA5126beb1b21d59c68c36d04f5d1758bf144e1309e33fd0b172d02ab906477cbdc8327cf0a9c28aab8ee98933a0c75c30c2bebb0a3f2e177ac5f47acc86253c334ba
-
Filesize
8KB
MD506decca3f3fc8b8799d89c349c46e949
SHA125f3a1b8641340b3184a56c394007c5648203d5a
SHA256e06c96de40347a998bc9586f9f3a9d7eb54fa10fdae707cb69a69f3eea96d569
SHA512fb0a9d0ab964c609ffce1fc55d8b28e9af2f3aca4ca4f3b4bc819db9a11f67db733aa1fa2db03f497e792e619cd60a612b50a80895fd9635dcf0689f6188e8b2
-
Filesize
8KB
MD566ecf390ad43580cf8b782a0ca1de496
SHA1b910bf0bfd41d26c37144d86965dc0ed16443beb
SHA2564ea3f10af525a99c59b4cdb07f67c69fd394b17f9ec4c84202869c2d6f59ea3c
SHA512534d755ae1fd4c5dd45d37fb7fe0d3d1911587159b30a08e58a220d438e373ccb104ed56a67fa31405df29e15cf94be8e97c88e43516bb463b9df01a26522e9e
-
Filesize
16KB
MD5dc64857612c228f5eb8f6ca4b5d894f0
SHA1ac09ca54e3fa890a69383f355cfb1f1348c9cd48
SHA256fbb6da60958331103bf4dabd9287b16538ef64855e607604af4aa2e5ff926f5a
SHA512a57b9f83ef110bd67546ee45ada8ef0607cb9d7ced913d35d73d81fb6702223840786c025953b2a126f3d7559e2648fbf250f792e3fcba80b010155c4a208d79
-
Filesize
12KB
MD55b5a051843481049d5bd60eac7b59405
SHA1c531788985fda7f431571ded7d85d76c834fe180
SHA25672737675c0c3343104b6512b6d4326a3624719a31ead8ee0ef04ec2e2503f0af
SHA5121596096b78ac38671402a1a5662060557ed914755004c2e12732badba89ad72c4936c8674a43aa98a1775ee1c1c9baa8ea636fc61e45b3ece68df885e7374433
-
Filesize
8KB
MD5617c2a369230c6d84b8e7a31f87eea66
SHA1cbc936c1c7a80a9780c79adb056f276e90e2bb14
SHA256a04afca7a6125e08491a7bbf741911c36d1c2f37420710efa43211df34516cc3
SHA51229cb244697104e55a11a95e443e6f6dd5f92b82de25a97b9fab8d0a0035f9648ff814523e94a0c1b611cd74f70f792ea7a13c9026f075c9656c7a5cfb7708e3c
-
Filesize
224B
MD56468d445fb3d674005164028ed6a41e9
SHA1182de36fe7011a74597b11632858aa45c7d38ca7
SHA2560d6002284270274bef018aadff252901b55c6348f3abc0fc57ec013b1b86328a
SHA512f8cbe125bf19148bfba31c7fc6935f3edc8b209d9d8d86194b3a50a38892cf433bdc15858e11f3d2bd16f16bec05a87b1030e16f7b17e916657024d788bbd96d
-
Filesize
224B
MD54d791b08bb0637a6a966969f7080e17a
SHA1be0a087b66ac2010aec7f83e8618b6b41d449044
SHA25631635c9ba5ff1d77cbb0df3f678b9fb4f625200649beb0efffe1c847d8a72e86
SHA5126b363c1ed911619ec57bf6611a550ceba1c356d5c14261312e098a368e6ef9446dee679e3f4ab53345b811a43e816851684ad357a7c39066f64909b67e87da28
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
52KB
MD5013d184948d089fe609b7a3f6f6223c0
SHA1b78612403f64dd3b1c44cee151bdfb5d0111428b
SHA2564e933855518c7f68ef4cc75d34dfb266e2e33feb56cfeb508cd89af78a1dbc1f
SHA51272aab99d88cb391f95101a32e07642f24b4cec42a3924e4f72647fcfbe49f1dd4cd01bb6c702c8150168ebfd4f117954760c54c432303a4621612b7ff93c2fab
-
Filesize
8KB
MD50ba9b70696bec641eafcca685d5521a2
SHA10dc5d2b7c5283b0693f59f06b38bfd2d7ba49202
SHA25648b73462f02f4d70b164721a34fdb9fd18ffee0231ebc19d8d460c5ca09d10c2
SHA512db80f4f149106d11278b3639f3893e46eaec9cc4195c98535ea9681eb87b8edab6e4cfcb4b6978946bcc560ffde12e92a2d5f704d36ac7d0f4d545e2d1cb5db7
-
Filesize
512B
MD51bbd66d92d2c25e5030f66204be0cb90
SHA15a3480f53188e2350273b42ea6d44b64a7266a09
SHA25654c308a8a2ba080069924a0734604635dc5d1bb3c56dc8640dfff30ac7faa71c
SHA512f98878cf9b220327daf4786110301e5a8eaef4b224dc69f6825e09ea7d21c0b9c0796eb30a62ce6f19f6ceeb8d7d5accc077fba9583578ededadff1100f68db1
-
Filesize
8KB
MD5efc3421caf3b58e238fc8001fa65af9f
SHA10fbafc5dd1b097520db148496a2ded226e5456e8
SHA256d5bc965f527ed3c7a5aeff3ddc5d1d554ed54c51a66dee7032557f4558aef222
SHA5127cb56840cf32c0770d0734fcd55e967bc6c0f1b220d95f0f46da8e715ef829cab7ebe31dcd8ef853c80a569330e40fb22437a3588d8b0d6dfabbc15a008ebd0e
-
Filesize
8KB
MD51ed284910a73c07609542b19449f7fff
SHA1137104f8135460c1a2320bff8307369c5d348535
SHA256bc3b85cd0de46fc6ce796307036409c6b571cc1c57b314629ced099452ca9b34
SHA51277e815378b58cce57e35d066cb652230ace7987022e6c7e14f623aa9fa4b893e4bad2de2b9b519821ec80bf762c35283791945f20e7f18a0f9efb58c8c5e41d2
-
Filesize
12KB
MD5d042338168c0e658aecd6cea5861c23a
SHA1e202a119ffd4581af6c491bf089cb41c75d2ca68
SHA25600c3f59d3f70f278916cef2c2567e3be53a99e3517bc5398146d3a85dc482229
SHA5120abbfb87a856f6247e2fbcd9a50a37eb92c235c438fc2ef5b0326043fd39bfa6ad1aac12d8eaffded22712b3e94cef6c6a904d6753eb738cfcaaeda35f4392ca
-
Filesize
8KB
MD5dbce135487da0c17d2fbc5d4dcf6cf55
SHA19f4a9b1deb85c22374f74109955e4a25f82ae9b4
SHA256c6a4d327464199d90b13ac6507899c8dad0e1bc137ed34fdb204074fd6be039e
SHA512e971094308ad2eeb995e4c0b5a6b48a71052b98f0646ea2d365f7b9b3bd0ac683bf2568d98b30b2980fade59c7efbc1bd254e6cc138bad59851c379122f5302f
-
Filesize
938B
MD5daf500e0e8c07041e11476b9f259d738
SHA1cdb2f9f316bb9789def3372c89854c33a784a375
SHA256abc2c180333dbe62a6db801a5d65e31c0fa1a0795a874ff3eb6fd8c5bf143e83
SHA512db75659c31076b9d02ca5a51cd66c8d49ca7368f93c8fce870540e5486147107de3be1bfa5b81e03415fe93ff0d8b6a2bca7cae52414c13044f801b0d8e9e8b7
-
Filesize
162B
MD5b5e6836e8d65c8cc28cf6dfda06259c0
SHA118d70067cba8ed09e6a5eb2565b56ffde7d28a7d
SHA2560e089e9662f12cffe3b6f7e350899ef6ca9cf9133d2008effd3075b18d2be187
SHA51225678045359995edc8b9191cc7d7b4b215a50985dda8f98d9d231e3abd1c98c914e1bf6f59cd4537bc1898cb1cbcbcfd1448782bd89ae6eb4e0f38a0077cc001
-
Filesize
61B
MD541bbc0164d1b3c2e2b523e15c5113558
SHA19f3a78ba3d1d60319c31c670fdd876c43970b485
SHA256eac351a9e2a5d08e17294ba4e4961fd38cb264a773efa95753a5dd2bcbb47313
SHA512830ba9e35bfb5f9622c5ba7800a0d101586aef2a90e2e8ea36a8098dbfcf60d97b6c861cc6449e831cb7eff461a63ca905e6dae96b02ddb1255e27675e6db59e
-
Filesize
433B
MD5712a91e4f6251d8978f4ffd4bda4c430
SHA1f38b8dd658e1de2a798f526798121d410f7f6cd5
SHA256bd285ee7c6d288c21d5535f03da922a88170f4584c05adbef2ad558c021cf1ac
SHA5126ac89e438a4ec6ef0b400a42dab1132365fd175d805e288feebb5ad8f2732cc4ae673571ea2c761691e98f5b8f38f8ea8ac4d02b699840be92d294934426aedb
-
Filesize
220B
MD5ee78dd04b6c8eec552ab5908abc15953
SHA124b3514080181aac8217bc4cff979104ab267a00
SHA256fd83c5c92f04c50622de173b704373b3136e324f4ac03524ffc6fa37093f6f9a
SHA512aee9f9fc8ce6554450a5e104d3b090cbff7c2e806a615f1f8d5e90658a4b19c3496f9d163e2418d67d1ac93f5976b03ef44bc6b62ec0c5836d7b8fa69388762a
-
Filesize
111B
MD5e752fba7e2823c261817f29a3430b6d5
SHA1cbd43e57b13dc9578afe9c53bac992088fdb603f
SHA2567686749e577895872f5c28463cf6ab71e479ca5a65ca4d5afb17805d7bc3e274
SHA512240054d7997f0ae824385e3941217753fb40afd250db899c833947cbf34b73e02502abf68f8db191c017d409bf16d877662809d7332ec9c7b7bfce9c4cda2493
-
Filesize
213B
MD5d91f967b35c7585eb0c77666e29097e1
SHA125ac3a50cb44f64b487a8f7da3518a9b5b6297e5
SHA256bf55a9dd3862b2fdb674e2e44c6171320280c1773370065131f837146d573b1c
SHA512b0c9cefdbcee827ea91eef793739cf0f882b69bacc95eea68ecc41ac91f1997d3c488de9cbec7390e40ce5d421377a1494a36cfe98b06395cab9c71492372343
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD58364daf9e8b2b994abf6cd8b9adcaafd
SHA1d6ba16c7228300093299101fad6a0404b06aeca5
SHA25691a3b688bb202ac8a70badde92a86c8b83ad48163e379fee19a5ae2cbea9d406
SHA51236da2e55fd3db6b3abbd11a207190a3abcdd3c4304d6daeebff5b38fe671718ed377d122b8329cd0fc7aa44718ebeb9e4de9b5f2473ec06d57903a795135a12a
-
Filesize
167B
MD5b139ae4d8e8298d0dd7cca4b69544306
SHA11804a28c4a0817a26002191f1adca4bc63c01b52
SHA2568241e1c3f492d9731f69f8359591f50ac18d513a87242875950c059d41e1c16d
SHA5124ea5607724ce6b69b77fe1af3f05327b436a44a54a613ea09c267c2f3f63961fb2745643d548482c5b00d518c4564f8451f14a82251151d3453ac3c264912d21