Analysis
-
max time kernel
13s -
max time network
141s -
platform
android_x64 -
resource
android-x64-arm64-20240611-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611-enlocale:en-usos:android-11-x64system -
submitted
11-06-2024 18:14
Static task
static1
Behavioral task
behavioral1
Sample
9f1b1be54ffe42b092949f769c403568_JaffaCakes118.apk
Resource
android-x86-arm-20240611-en
Behavioral task
behavioral2
Sample
9f1b1be54ffe42b092949f769c403568_JaffaCakes118.apk
Resource
android-x64-20240611-en
Behavioral task
behavioral3
Sample
9f1b1be54ffe42b092949f769c403568_JaffaCakes118.apk
Resource
android-x64-arm64-20240611-en
General
-
Target
9f1b1be54ffe42b092949f769c403568_JaffaCakes118.apk
-
Size
4.3MB
-
MD5
9f1b1be54ffe42b092949f769c403568
-
SHA1
03e57070b1fb5c5766316f8e8165d647a8fbc056
-
SHA256
4f090d929e3747308cc3e74ae9e006f4957bfe7a9ba35c4026eef99d741d7a22
-
SHA512
894a06a331c0acd65a9dcd31072e1b427d1799225300e1359104dfdde6f809fe65ea953843876fca93bf912f7d157e713f61bbcdb47e267d3dec1c47c69dbaa7
-
SSDEEP
98304:YF0tIlGQNxXXwwi6rwJgetFjgV/2TDzvDaq5FgK:YYQNxXXnnTetFjbDzvFFf
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.basaco.taxionline.jaamejam.passenger -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.basaco.taxionline.jaamejam.passenger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD52d67a47b53407f5287cb5307e6c324f1
SHA1b529d51aa99e393eb1ade667f29f7ef9388b0a75
SHA256e366b2b5b02f806d25ab49e43aa52e74f3e9913d09be42375af4a56f1f915b53
SHA512e43506a5ce1c7554e85126694527c2e479bbd28fdf2888758bc066784792907b18cecc1ed72963812d3a84a6c1982d6659aed2289562258c49798cdc1a79b418
-
Filesize
16KB
MD5f481668c493326f04c986c1cfab248ff
SHA1f5c9c802971bb1b900e3319b2a329448ae4722dd
SHA2568219abc6866a8b5e0718c308a91c6629ca5d534b5daba02ee5eda393b3594ee2
SHA5127cea8dfd923f4b0d993d859e4e525001e7b3364f3d1d4aed32228c7aa6ed8436066fc6ea3f350dcc2cc0ab4311d89ed0d81e1275d7f36f00d6c0c6456ee2207d
-
Filesize
16KB
MD50b75e5d22918453ce0b4b44d152661f6
SHA124f5183a00c8005a51a20f64490c5e5b8226c2af
SHA256a4e84e8bc8a27b0db6a62b7016c99af6055932cc622ac27588b377b9477a85b4
SHA51228080d985e674b376b49307d381874671d86c191f2851ff79f563ba9c236df1546a664dd516aa5e59b133bac39e7f07e1adc9c0a2f6f6751169d55722155b42f
-
Filesize
16KB
MD53065f3a01915c30c28fa52c2d507038d
SHA14fef775ea92213549f70095e07cd7616c7bdd21d
SHA256ead893e7f7090b9a0c138cfaae334893901ca55ee0242a2ab102220e95822547
SHA51219a3fbe48d708296b7ae4d8940604b3f30cd3a17d93bd4d3ea6650e0e6981efec876adfc0b9346550d9bc4949425d61c25709f45883536e19c178ca6e8dbfdb4
-
Filesize
16KB
MD519e5aefd9ef36eb47faafedccd4bb5f0
SHA1e38bac7e52ce04e38afeaf8488418399335df0ee
SHA2563fcdd6f8823387926ed8b3aebbc850dc88da476c9f70c94208b5afd863e911a3
SHA51275f04ec8434a6eed17e487f0a0fa61e54974ce6724e959bf6b0638f37e45e8574ba973c04660bdf7c6bbeac3907aab18b6934c65476022accc5c58045c88504e
-
Filesize
16KB
MD5d58a21dd780cee548cbdef81d20d793b
SHA1fb37e340ad370858604de5cafb0d7885aa9d691f
SHA2569ddd6448554e05f109bcab74eb63c20ebd9612a1b88f701563419c914cee2298
SHA5128fcdbca20211f084c65214eea093bd8e5ffa24577193c030468f27064df1b035312fb79b36e344b3592ff845ab3f343b080e5fbec27e46f553fc368ba4091baa
-
/data/user/0/ir.basaco.taxionline.jaamejam.passenger/databases/google_app_measurement_local.db-journal
Filesize512B
MD5dda9181a07b7ac31bea70410969463b6
SHA15c1f58886f8ea789d6ba8874fd31ccd30368f9cc
SHA256edda5c68142ef32a64a4d12d46a635d609c1883e64e114b2f6a9af52eb2022af
SHA5128eea40dc62acdd76538211f4889e06385f6285bafae3fd3572a7a91b8d5cb6be7b7356a1f8fdcf745ff41c64e75180b2ecb06c66567c2c8ace685975364f6db6
-
/data/user/0/ir.basaco.taxionline.jaamejam.passenger/databases/google_app_measurement_local.db-journal
Filesize8KB
MD5096fe4bb1c7a36710919f0a4ebfcdb6f
SHA19b0932fdcdaeecec4b5131f9309e4ea6ebb477a0
SHA25651b2f5dfb5d0ff34f6539ee625b037ebf39a0e0b5970917f76485b7dab0545ef
SHA512757b330ceb8a6c1f6ed0234ccd4f92aa4be1f089a5ddf0564cccd89ff505d38de2d243b261126c2799986f5dd20cbbff59863e18beeceb51aaa6ddc66b5ac8a4
-
/data/user/0/ir.basaco.taxionline.jaamejam.passenger/databases/google_app_measurement_local.db-journal
Filesize4KB
MD531b77f546c08447be0d391b022a64890
SHA1ed018a84f1c9662d90d0f489399cdba5036fc8c8
SHA256af4a59d9985562661d5af30385b2eb8e597ebe7d4d9e9454c1ea5dade8bb73f9
SHA512dbac17c9c8ca60b48f1ee80a60ed44d56a6bccc4677ab51bcbffecc977e0f7338a21907fe1ce848033817850f6fb297c6c54af203263ba90a180283308d30c6f
-
/data/user/0/ir.basaco.taxionline.jaamejam.passenger/databases/google_app_measurement_local.db-journal
Filesize8KB
MD576d4c90818ff10cc9290d699107e163e
SHA11e699373a22271654bd65860628613dde79359c0
SHA25644dd973a65b2791a30738afeeb458b64198dc17066249d256da9be7485e0e689
SHA51255d7b4177051de6eb443b1a4ea37c627123e1fc72c49a29f96620263a6a5853b7b9fb8e2d294704324d4ad082182a366830271fd52c56782b3901f3a200a0055
-
/data/user/0/ir.basaco.taxionline.jaamejam.passenger/databases/google_app_measurement_local.db-journal
Filesize8KB
MD5dac7888e19f3a05bdac6d6d3117b8171
SHA13e7fac0d8879013d67529fc0b09affca65a9cf2a
SHA256a68f3bf8cb8e72f77bc8fa88bed01708a0926de31b12eeaaca26ec7d7c7e8ad2
SHA5122e649eadb172a2a32651ca916a407fea2135f7b3dd7adcddb6575e56a4ca81970515814d76bbd9c99e1054de0cae0c27f98e63287c2b8f181073d8e6b63aa88c
-
/data/user/0/ir.basaco.taxionline.jaamejam.passenger/databases/google_app_measurement_local.db-journal
Filesize8KB
MD59239b69cdcafa54b547fa7e4d7c49aaa
SHA1464e672f081983e34d281041f507233b30ee9282
SHA256eb1fe1273eb02aab0fde2aa63d53e04bd7323e3ff3c8754d7e53c2da7ec816e7
SHA512bb93da1c8c7571fc350bf3eb01bd65723096f39669d1318c7e5cbd66bfffc0d98cdc2d5455c97a3c26b7541eb05ced1cd964fb91c2446455cb4ea47e88fc320a