93e4b0e295b5a395a2802e9c8126d500ecfa08a243138db79c77fa4fed5945fe

Analysis

max time kernel
12s
max time network
151s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
12/06/2024, 09:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a02082a33a00fa5e9eb54511e24a08f6_JaffaCakes118.apk
Size 1.6MB
Sample240612-k1622sxane
SHA256 93e4b0e295b5a395a2802e9c8126d500ecfa08a243138db79c77fa4fed5945fe
MD5 a02082a33a00fa5e9eb54511e24a08f6
SHA1 4aafc0570aa311f78523632ddd31bc46c9d9ad72
SHA512 f4f7b973bd5bf2fc40dd85264efaafc3534cf4a0147582b9abf1d633f027b79ac289f776419f118d1979b0329cfb7bf5aeaa174b773d0a653d0953348005b89e
SSDEEP 24576:MMvs+UNX2AgyxOf21JsxSd0k0QlJvKUvBIeEwj1aDt4f0ekPowwQ+a:dv7UNPxxY212IdT0QlJvNCCf0ekQSR
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery impact

Malware Config

Signatures

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
7	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.haiodheohh.jioajdoew

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.haiodheohh.jioajdoew

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.haiodheohh.jioajdoew

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.haiodheohh.jioajdoew

com.haiodheohh.jioajdoew
1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:5124

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

cc.db

Path /data/data/com.haiodheohh.jioajdoew/databases/cc/cc.db
Size 36KB
SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
MD5 0908e924aa236931dc7166fef6e00862
SHA1 7782648d6d8f6e835bd47058d4852932c096a467
SHA512 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
SSDEEP 12:TL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQ:TLd7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.haiodheohh.jioajdoew/databases/cc/cc.db
Size 36KB
SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
MD5 67c12933d1e0e63d9801a6aa43092ce7
SHA1 b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA512 db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
SSDEEP 12:TLgRP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLt7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.haiodheohh.jioajdoew/databases/cc/cc.db-journal
Size 8KB
SHA256 71f067f4659ab3d9d98b18ad1392d90db9654867eea042d88c33f4dcafdccedd
MD5 f7a235b6fad3f6f90c9696bdbd6f3bba
SHA1 ad7e17fe6cedfafc9fbb065e2215725489521082
SHA512 c2e324f2ea9e7e9617740e567702d7b3d59f0f0085dc500b6c815363532e55c09937e31cbea5b09bfdb8193ce030bc306188752f273a836d819a36d14d213e8e
SSDEEP 12:7+txIkRqL+/E6P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBI:7+tqEqLpr7sL7yot3BVrHotGGSa
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.haiodheohh.jioajdoew/databases/cc/cc.db-journal
Size 12KB
SHA256 f538b531f1d0b235e0c11862f9caae87aee6f618bdc4e80cfe0138bc2d263aef
MD5 2bf65e59b16138f0cf48ca9ba6a0c83b
SHA1 e3c416abbde40a209aa67949b40e700a2bfc5df1
SHA512 b249298ede9297b953478a6c25044f0942ea938777011d38871bbcd5f3444742886a4340e78e7d176771d2feaff0d6840bbb70efe5cd9641e843e66daeabac5b
SSDEEP 12:7+t2mHwvqLWEOVP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5Rm9:7+t2nqLEe7sL7yot3BVrHotGGSx
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.haiodheohh.jioajdoew/databases/cc/cc.db-journal
Size 512B
SHA256 fc1c8c205ef7c70389300e09cc65abbe3fe76d36cf2b0d859e911b49f4a35985
MD5 ab42f1e31aedd9ef9cec159f93caa985
SHA1 4fb307d10d48420fe64d80adbebcced447058edd
SHA512 fdcebe6976fed4096053b3e90e88801188b7b96cfcd00b4ce8f78bdb011b117ecce5f175565f24e168464bead0f71aa69411448c0d90e40887711b8ca94f81eb
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/com.haiodheohh.jioajdoew/databases/cc/cc.db-journal
Size 8KB
SHA256 50f95246502875d63b518a830c111108f2a38e7bc97fb83a099abb64d1f2aa5b
MD5 de548e31646b69305a27821ee4e2501f
SHA1 d2524766d665f0491166a9d4c8b30445db504a4c
SHA512 deab5ea1f72cade05b1a0541ca5389d8560d4bc59a2650b2a73b5169a84db2d1e440f8f6aa1f42804aefbe2eb5c6dce15aff463a19879aaada7eeb7e7babb223
SSDEEP 6:7+/l9ugn1Wng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK7z:7+tkqLiuWdwRmBEyPbQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.haiodheohh.jioajdoew/databases/cc/cc.db-journal
Size 8KB
SHA256 3ad920fe77d746564a9183ac8456aaedac3a9a4fb3deda3181eb4b273148228d
MD5 ab1b6a13f18470e84e4956ff31530415
SHA1 f1e87b6c279d255f7d88049651d70873b7635785
SHA512 b55410f8224d752aa8766fad6a0679bb0f7754cda128b0184a5673244725efb433fa5519dff6d2765c32199394729a5e18a80f5b62b65481f5bb6a21db796964
SSDEEP 6:7+/l93gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKsHs//N:7+tZ4qLJdTRmBEyPbRsN
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.haiodheohh.jioajdoew/databases/cc/cc.db-journal
Size 8KB
SHA256 e920afb7b931ca26cdea17cf5fce73219a21cfbd013c6ef972b2b64df44354b5
MD5 b4b7ef6485d4b51724de6032364f99f8
SHA1 33e27611da8fa189b20b994f39d05182198498f1
SHA512 bf26760bf8cb18bf4e4aa78bd401d3d84c2f074a2e952d62b97d0282b2cea7b6d30d302da977c153b29b8dbf48302fd3d986f8181d782d1769faab3e3931b905
SSDEEP 12:7+tA+/lWDllnqL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5e:7+tAulWD/nqLd7sL7yot3BVrHotGGSF
MD5 SHA1 SHA512 SSDEEP

Submit Download

.imprint

Path /data/data/com.haiodheohh.jioajdoew/files/.imprint
Size 924B
SHA256 3d99f2a8d6424dd1a29a8cadb92d139b50fec4efbaf2c9eba690c5cd0cb74f60
MD5 dedb831ab85535c3eaed970befb0e740
SHA1 991554deb5cfb2355d39c1d7be4d9b552a3ecceb
SHA512 f3a4a60887ae351c6ade28c11eab213362b1e59426fd9fad6d1e6509ae42b53a95c4dff2a1be17323077f73eafee82af6f78a15ee3ec5380239d430492ebda4e
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/data/com.haiodheohh.jioajdoew/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 9510838cf86b92e3f4f6fcee6f2cf7439c5c978ba6e7b8cb292937e109008d52
MD5 9cc6c37daf8bc5785cd3808f7059ea0e
SHA1 ec4ac3dc26636b717dc15d5efc1f922d459bbc93
SHA512 c27f4861d9304f61285c040611729ccc50b8538515d61b45c8da1eaf6cf7f856db7463139c8ad202b068534d5b9be952f57648e2b1c39ada489311e7cdf46033
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/data/com.haiodheohh.jioajdoew/files/exid.dat
Size 54B
SHA256 372741e3b26d786a40bdfd440c66e9e76a6f7ca8c1764942a65599ff3a079f63
MD5 ea45be120280bfcef5e8d4af9f39d9d8
SHA1 67c6d290b3c54d439656e26d332e2ef1190d8cd4
SHA512 dcb1abddb4dd8c1076a53d3d52e34e900311345d840b46dcc48baf07ae8b5b12188b6e94f85e5926f4baea931f135b6a6f2bd3109149b960bb7963a26f852c03
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.haiodheohh.jioajdoew/files/umeng_it.cache
Size 179B
SHA256 5445b9638a5309f4978792f42366744a695e28451510a90d7725bad8cb5aa1ee
MD5 964f1cfe21c0497af9327df8831b3785
SHA1 3e92bee8617cb49002032c1cf077554dc1b5cce5
SHA512 640392cbea7561544924f020ccd4fd271792b49b46316c3a182273c32e7b00906ad414875b01d9880bc1357214cdc0227cbd80508f459980cc0261d6113ed6b2
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.haiodheohh.jioajdoew/files/umeng_it.cache
Size 352B
SHA256 fef3d77e1f30090b8f08aa5377dde0ac8e69c669a1ae236a2c8d14a5b1173356
MD5 98522240515c6025238760688affc02e
SHA1 1d55085f985c9272e761e8a74b840aa5a67f4527
SHA512 7c36f0cf2bcab44b46e61689d23c0b436abfc410de9951d9d45d79934776202dcf20a636ceb64925023909cdd07a4be30839a92f781c2f15a6b813546d5311de
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads