ec62c36075d787dbf66bfe317ca5c0931c1aceb1ee7bd55049502e1d7b25ab0a

Analysis

max time kernel
158s
max time network
174s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
10/06/2024, 14:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9af4e54ce41e5fa10abdbc3728bc7079_JaffaCakes118.apk
Size 4.6MB
Sample240610-rmwsgsyfjf
SHA256 ec62c36075d787dbf66bfe317ca5c0931c1aceb1ee7bd55049502e1d7b25ab0a
MD5 9af4e54ce41e5fa10abdbc3728bc7079
SHA1 aabe705a65673ee0e4b5c0d5b9dbe990e860c9be
SHA512 50429d9e260629bdcda4515a092cdd110eb191ee9f4a8ac4012547c23d0701d0cfaa5a0f2337428fb3272139881d0d50f22b8235bc13f58b2ccbbab4e5adc7d1
SSDEEP 98304:KFg224Ao+a6iAGYrJDd2zZlkdAutY08oYxlp6exUJQzoiN:2U3I6vGyN0zZqdltmoYvp6exK8oiN
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker collection discovery evasion impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mobi.livewallpaper.hsjm3:com.mobi.screensaver.ScreenSaverApplication

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.mobi.livewallpaper.hsjm3:com.mobi.screensaver.ScreenSaverApplication

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.mobi.livewallpaper.hsjm3:com.mobi.screensaver.ScreenSaverApplication

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mobi.livewallpaper.hsjm3:com.mobi.screensaver.ScreenSaverApplication

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mobi.livewallpaper.hsjm3:com.mobi.screensaver.ScreenSaverApplication

com.mobi.livewallpaper.hsjm3:com.mobi.screensaver.ScreenSaverApplication
1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4619

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

city.db

Path /data/user/0/com.mobi.livewallpaper.hsjm3/databases/city.db
Size 147KB
SHA256 43af888145a2711000f625255c1e786ccb2a75f4ab594cd16bae957c976ceb7c
MD5 cf9c3c48c77bed980260bf3d29d8f570
SHA1 bd68dd512738332f7661b75001af6b6c079a0fd3
SHA512 db7a61c82f17643a437ee2987bd4171143aa0776927d6159567b3023ecaa99aa6f79d688c87846f2ccae56884e984701589c14664793b7c0b015568825c0bb22
SSDEEP 3072:lNjFwM0vinPeY9hj+mdvU+rf0yAt1c/IJKR7G460mOjs:TFmvinPeAhCmtU+rMGR7Gars
MD5 SHA1 SHA512 SSDEEP

Submit Download

city.db

Path /data/user/0/com.mobi.livewallpaper.hsjm3/databases/city.db
Size 2KB
SHA256 f51116b49238355d5cde90ebcac8683800e28d99ab0b4c06e0a2f16c305694e8
MD5 bc471cc4fdf4924925595237d1c6e1db
SHA1 9281a6fe0a2d8c009634c8953a51a0fed9301a3b
SHA512 c49a36e26e64f9126a6df3e7e818fe9af99f726d8c771702a8de523813d67ec58fdf0e97950eae4a7b0e8c4c11ca52ee1ca21c5ed94d87338a14e8d79f751759
MD5 SHA1 SHA512

Submit Download

city.db-journal

Path /data/user/0/com.mobi.livewallpaper.hsjm3/databases/city.db-journal
Size 2KB
SHA256 b9488d0a837a8c081cd38916750f441d67045a607a20e58f06a4980bfbadb6c8
MD5 3730ba7e0e19d13473cc12fab44dffd1
SHA1 adec13584c9b89c8c7a07be19367e9b78575e662
SHA512 d4f79b2757d52e8def7c647a9a3d06e1fb8a8fd2a216456577874503217cb79249e84a5af2077883447897c4bb5baa4ddfabc7cb47f7ece1ced50ddd929c1a76
MD5 SHA1 SHA512

Submit Download

city.db-journal

Path /data/user/0/com.mobi.livewallpaper.hsjm3/databases/city.db-journal
Size 1KB
SHA256 4964ed8ce101e24e5927c39fda9aeb6b2d0777e0734edfc5db152a2f22d0bf26
MD5 64d7424053691f6931f8306736cb53b2
SHA1 aa3b2e69fa2608a686433fdf26fd292f52f7f11a
SHA512 e047c97207c8ff682bed9a698c77a81abdf012ca8360b22a5d8ed473fb30c36d80ca9424d2d07a98ba0e9f89fbceea2ba3f460aab95b7a64a3cf0df5a82a3678
MD5 SHA1 SHA512

Submit Download

TDtcagent.db

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/TDtcagent.db
Size 28KB
SHA256 dc41766aae57ccbf4fe918e87abb2d128c3ad89df718296655ccaf67d24d37e8
MD5 a8ffa1a3579b8cff9b9d6144521b472b
SHA1 d909b4155db70d53eeccbd2193b68d84e7f3dc8e
SHA512 8d57411d7e458f345a58159e44e6489c17b170f5c97ac66b2ae5c34f990c9e61434f7b0240eeb62fabc5a3413b66e88f9f47a98ebbadaba752e3ecc8489716b0
SSDEEP 48:TOxeYTDHY8qlBaUd/gpTSP/hrSyxyhUaWZd7:6tg8ql8Ud/gpWPJV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/TDtcagent.db
Size 28KB
SHA256 16c39b453d5816eccad587f3dff479c8d2b33c825fd318d369ebf47c76df8de7
MD5 d4aedaeba04602205d135d4e80495664
SHA1 f28d8788d570f1425e71c2cc28a557f60ea343d5
SHA512 f1c634cfac69ac5d1189010ca8e6058d7e888b0abea43a6b45efc081f27e3be06c66c6e9875289955cedd0b3dc0dba5a54718e8a00a77bf63b17ce4d0db344b8
SSDEEP 48:TuxeYTDHY8qlBaUd/gpTSP/h0OsMPweUhQNOxyhUaWZd7:atg8ql8Ud/gpWP9m
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/TDtcagent.db
Size 28KB
SHA256 3cb57564f7ca9076c511f707e2f26a383c321aca30bd8c20f3a992c630624609
MD5 62bc4bec09a3da9a90e42dd4a3b86be0
SHA1 958206a2fbcff67ab2599921cec14f5477c3c122
SHA512 7e3544bfc80826083e736144cce415cd19d22860699a58a905d0bd3e4aac52378add82979b45c918680427ffeac00b8d174577cf452698735ffffa20dca4400b
SSDEEP 48:T+xeYTDHY8qlBaUd/gpTSP/hVthA/sMPweUhQNOxyhUaWZd7:Ktg8ql8Ud/gpWPP/Am
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/TDtcagent.db
Size 28KB
SHA256 5ce2f7a86c8933ac6f32feba6d77b6d09193781681f9d7e1eb2bdac9df191880
MD5 abdace2217fd1a862466ff81729654ed
SHA1 fe55d04e936dd506d53d4e312ef7b95c48f5f6c4
SHA512 6eb067625d953222bea6a0b584263767b59833e46cab2d034c7f796b1beba4c30e6b75107a0b6d1cb25e51341155f9dc33e3942d8da623725279417b5fc47b3b
SSDEEP 48:TOxeYTDHY8qlBaUd/gpTSP/hKs6c6/sMPweUhQNOxyhUaWZd7:6tg8ql8Ud/gpWPQRm
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/TDtcagent.db-journal
Size 12KB
SHA256 9bcc1367f923f1ebf2695c1306ebc364accb3fbd184f09a3c07e9b8a118d6026
MD5 2b261ccb671cc002d458ecf5743f74cf
SHA1 87859910f590aea79e6e2094b62dfbc03167c364
SHA512 8bb47b24ac0fcdaf7e639549fb3f7217cdae1dfecf8bf087adc9d1589e0dfebcd71af3ce71eff7641fb1a22d14f06f8096dcbb33a9066860fb7f379b78714fdd
SSDEEP 48:7M844yhUaWZddMvq+xeYTDHY8qlBaUd/gpTSy:7PMvJtg8ql8Ud/gpWy
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/TDtcagent.db-journal
Size 12KB
SHA256 dd0008fc4f657fc4641066a54d087d7fa0bbadf4a4fe6d6da8e7a81799a416c8
MD5 efa3fc801bf94ce568671c6f3029ddb1
SHA1 8e57dac73c35fc17b5a5f847e5bf6396aca35c7c
SHA512 072e8c0ddf90c9f41be9821095f66de84728e50b81cf4c656a0ccb096cac3aec0cbd6e7b986263400e46be8d0ad6f3e405d14f672b65050ed730774c8b64134f
SSDEEP 48:7MzMeMPweUhQNOxyhUaWZdDqexeYTDHY8qlBaUd/gpTS9:7LYptg8ql8Ud/gpW9
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/TDtcagent.db-journal
Size 12KB
SHA256 fcf62322243ae860b835f27765c0a78f8aa42130c7550d6b0f4c520db33dfe6f
MD5 f69e59b168808247de54c8eadc11a89e
SHA1 f7c10cae28c6741c14d43ba91c7e9b66202b34be
SHA512 53f9e36f1e00e453548f7888e5a20cb4dd85275c89fe462dea1477e0525390f2fedf3e19d2a4f5b28e2d78994eba88feaa0ec7366ec7e81f3438678910a9bf88
SSDEEP 48:7M1OsMPweUhQNOxyhUaWZdbquxeYTDHY8qlBaUd/gpTSL:7xQ5tg8ql8Ud/gpWL
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/TDtcagent.db-journal
Size 12KB
SHA256 f3641904a279f23362a70391a78d3655c3448ef0113153f7a23f570221b2abd7
MD5 fad3323a4ddfc52b3259f67854474b06
SHA1 2ba43fb115e121fc1034e10aa81a81070f5d11b1
SHA512 dc80a9730ef7057ddf21d27abcf4413fe8aa935690e0ddc61fd037d613dc0ce76a25aa1799f41a72d46a244609566f41d7ca1b1e20015f924222a54fe4c14f90
SSDEEP 48:7M6hA/sMPweUhQNOxyhUaWZdTiq+xeYTDHY8qlBaUd/gpTS8:7vASiJtg8ql8Ud/gpW8
MD5 SHA1 SHA512 SSDEEP

Submit Download

1718029166289.dat

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/alilocation/1718029166289.dat
Size 392B
SHA256 18cdc20703ae8dd49db214db30491ca9752b4bb6f11b4bc1deb22d1490bdbdaa
MD5 145093eb2f777a4786d893969a1db79d
SHA1 bef07f3b2a8e644a920e8eeec486b5af74d74173
SHA512 07c7030f795a08b117000d3af50be2abfe0c9632d8482ea95d3c2e9c940559de81b2b39e0ef18f48134bba797a5b8b80d42cee7413de0ffd8788a54b0b7e70a7
MD5 SHA1 SHA512

Submit Download

.1718029167

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/alilocdata/.1718029167
Size 389B
SHA256 6c3191d2bf5c4110a6eb3fa70ff391ed06133789bfde30ffa430599b7896fcb6
MD5 e7f348deb7a89efbfdea694a45ced679
SHA1 5ce097dc1a97c424e073a0ef31fc58ce19437433
SHA512 eb699c3f24119c7f36e93a8fb4d7241e6c12c2c05e159fdadabf4d77dbb3aa35cb840d52af2441aa3c5b50b8795dbb2924c376840ecf2d488a50842111712629
MD5 SHA1 SHA512

Submit Download

.1718029168

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/alilocdata/.1718029168
Size 389B
SHA256 52fa28968812809af6538b94b284f7dc407c03f740a01a2d99a47ffd7dcf8de8
MD5 aba61fa06859d0ca744ccccef1e21ad7
SHA1 036385495ba9de23dd3d0969ead0eb441a26deed
SHA512 6b16bcc223a2d1b472e4e485f43a47682d255e4b612e56d6fb9e5149a6b98c7c535fa145fea94631924d6df83a789219980ba08378053185810e4f73f82db460
MD5 SHA1 SHA512

Submit Download

.1718029170

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/alilocdata/.1718029170
Size 389B
SHA256 52eccf7263e5ee61be815d4eff583d13b1da28614ac04b74c9d6cce5f799f5d6
MD5 3af44a950bf7f1125748313f76787c4e
SHA1 2ccae355d04bf4ff3df585e03b924588c951ee03
SHA512 9cd54aeca9708b05b29feec854dae42f9e71ac116737bf401c86206b22c060e60a1c8d9ac061d6b19db4299db664192b26676ed9884cd6b8634c048534b698f9
MD5 SHA1 SHA512

Submit Download

.1718029174

Path /data/user/0/com.mobi.livewallpaper.hsjm3/files/alilocdata/.1718029174
Size 389B
SHA256 77da8298cd9033025e748b7a471c9b8057b0be82eb7916e777fe10b3f3ece899
MD5 63b54aae664a025ae7f9ea76faae48d0
SHA1 10db317941dfff75774f4ec9558e3e16b2f4ab7d
SHA512 ef77151a41c5e761c635a63b20206d47825746348abd832363834bef4847a5283c8a3007750e30cbb280a98eb6445082179747d1e5ab50c3b6ce10d5fcc9bfc5
MD5 SHA1 SHA512

Submit Download

41c5ed931e6273c5de93beaad0a04274

Path /storage/emulated/0/love_phone/.entrydata/1026/41c5ed931e6273c5de93beaad0a04274
Size 39B
SHA256 d3ed65a827ed30e42d8fc302c15ed9adcad747e005d6d3499c1059970ddde9c7
MD5 57208ee3b5e58cc06e394d7df2d08a52
SHA1 026f3e42458d23236958830ba9e0c0ef406d4377
SHA512 410b5804efac0e98e8e5d9cd8cf65c9f883dfb76573e0e88f4160c2f303f046e27e63d78051a4a9b3bec88c8f1b694ddb8096a7506af6ae38678e746d0940885
MD5 SHA1 SHA512

Submit Download

1e81d2bce15b8b7a2f713d5c7e9bc0e8

Path /storage/emulated/0/love_phone/.entrydata/1072/1e81d2bce15b8b7a2f713d5c7e9bc0e8
Size 39B
SHA256 6789224237c61617fb267af270a2dfbac3344579bb654de1b8d287efad834aa2
MD5 0da1ba5015682ffedb62b7a23b09ba12
SHA1 71f149c9fbe03fae1b8c5d2c561313ec3160c994
SHA512 9e23e8da6c6e50bf771d37c3853896b75663669b30841feba1bc6f3240784b343ecdfdb539d4af7f220bcd9d02ff4d3963c62ce85955e5263b7d82caa74843b0
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads