Analysis

  • max time kernel
    2s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611-enlocale:en-usos:android-9-x86system
  • submitted
    11-06-2024 16:38

General

  • Target

    9ed620e2c9c7eff79a4cd0682e66c000_JaffaCakes118.apk

  • Size

    6.8MB

  • MD5

    9ed620e2c9c7eff79a4cd0682e66c000

  • SHA1

    9664d1083dd5bc5e7d22e2811f61e4357c7a3a91

  • SHA256

    a81233ada65412d9800f95c21b2ffaadb8d51781c8dea9e63c7a4d8413003985

  • SHA512

    309040ad454c0e7040580c6643e51fb5b761a6dd0976a2b9e65a3e3176a4d993f9e34ab64c7499f100ee42ea686c5d44cac9cd38f268f032a8c1b3e221e49070

  • SSDEEP

    98304:RTJxbcOsJbue0+/gknVmbOMZHzi8gsBwOYdts+D2M0/7t1y:RdxbPsgkdx8g3FDHIt1y

Score
8/10

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs

Processes

  • com.android.vending.billing.InAppBillingService.COIN
    1⤵
    • Checks if the Android device is rooted.
    PID:4275

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.android.vending.billing.InAppBillingService.COIN/databases/PackagesDB
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.android.vending.billing.InAppBillingService.COIN/databases/PackagesDB-journal
    Filesize

    512B

    MD5

    6d0ece1c630a092219990ca0cee6514b

    SHA1

    e1aa18d49ef2d38759fca35e7827bdced3b8ee10

    SHA256

    b7c109267ff1c35f63112be33651c98ad60f386e05c98e3b5837963b8a86c1e6

    SHA512

    4657fefc8c3758d18eacabae946a1705d3d943666862077e739637f5d52890c79901023f80fd0d60340174bb1e8697b4e9352ebc3b9f85974068264bdd32d581

  • /data/data/com.android.vending.billing.InAppBillingService.COIN/databases/PackagesDB-wal
    Filesize

    32KB

    MD5

    dd7a22fa03d36f2c49e7e4d7b84ff233

    SHA1

    85e23242876a9597498c9efbe665eaa85caf3e26

    SHA256

    8b49ae0b9f776ee03961f7ad3f34c3f558cd5e45ffc3a1d15329913111bea6b0

    SHA512

    8ff3e67598c5d7cf0990cbfd331858321abe05ae43a5391b97ee7a7b4d56d50fa29681fdaa26ccdd5f5247c6c5fc47fa0c96c69077734e96ffeb44d0521e68c0

  • /storage/emulated/0/Android/data/com.android.vending.billing.InAppBillingService.COIN/files/LuckyPatcher/AdsBlockList.txt
    Filesize

    1KB

    MD5

    50dcd85ef074fb8121f155bc19b3c7f6

    SHA1

    c45c2b45cf49fabbeb7d3f12328e57d531a75f37

    SHA256

    02d3782e856f4d3bbacc764cfcd1fd4b9d50492b5ef93f24e8811a6a494df48d

    SHA512

    118c0f05b6342b52c0671cc1ba52f6df977a39835cd03f5e6d2a015a572a11c3f7eebd23a9c0a209497631296d07250416c28b9b21f91448d2970efc010a4dee

  • /storage/emulated/0/Android/data/com.android.vending.billing.InAppBillingService.COIN/files/LuckyPatcher/AdsBlockList_user_edit.txt
    Filesize

    29B

    MD5

    302f7b6d9a4ffeccdda9ef94184c8326

    SHA1

    d4038ca0629f57b7e5c4056e74a395e5598aa16a

    SHA256

    5b36134b695f0a9a32f570b08cc3ef74e0687a0d2aa228853bc0346f77bffebe

    SHA512

    299fda4936acf6479e22f9166d545976d5d99ba6fe7a5b7298cb336cf730eb7790524e4569fe64bc03c598c7e4117f163ddffc2e2889439f709c4d80ff665039