9a4409031523b93c97f46f91e2764bdcb714bc637fbbf8b7d9fe6cda214ae770

Analysis

max time kernel
37s
max time network
183s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
12-06-2024 13:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a0df7ae495ce9ac6e84699c02aaea9a3_JaffaCakes118.apk
Size

6.5MB
MD5

a0df7ae495ce9ac6e84699c02aaea9a3
SHA1

ef5e58b2010a4cbd87ea0de529c5e5f84a53025c
SHA256

9a4409031523b93c97f46f91e2764bdcb714bc637fbbf8b7d9fe6cda214ae770
SHA512

76e5599e26d0e918a169ce59497df26c2beb51ac5d209fb5ca440d6a98b8fe6d02a863d5dd22b1ebf2e38c19e1ea492b30ae6c3b6db75082c4438458f3be32a5
SSDEEP

98304:lOEDdtJxOk690v93gfIj8BpZd3hcqE/erIRza6df+M9OLaSzmWjqCH6vCCgi29ja:lxTOk6U3gQjabxc9LzaUr9Ou6JqCGCxa

Score

8^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

T1426

Processes:

com.bkidshd.movie

ioc process

/system/app/Superuser.apk com.bkidshd.movie
/system/xbin/su com.bkidshd.movie
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.bkidshd.movie

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.bkidshd.movie
Acquires the wake lock 1 IoCs

Processes:

com.bkidshd.movie

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.bkidshd.movie
Queries information about active data network 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.bkidshd.movie

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.bkidshd.movie
Checks the presence of a debugger
evasion
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.bkidshd.movie

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.bkidshd.movie
Checks CPU information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.bkidshd.movie

description ioc process

File opened for read /proc/cpuinfo com.bkidshd.movie
Checks memory information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.bkidshd.movie

description ioc process

File opened for read /proc/meminfo com.bkidshd.movie

ioc	process
/system/app/Superuser.apk	com.bkidshd.movie
/system/xbin/su	com.bkidshd.movie

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.bkidshd.movie

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.bkidshd.movie

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bkidshd.movie

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.bkidshd.movie

description	ioc	process
File opened for read	/proc/cpuinfo	com.bkidshd.movie

description	ioc	process
File opened for read	/proc/meminfo	com.bkidshd.movie

com.bkidshd.movie
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4417

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.bkidshd.movie/databases/dbbobby.db
Filesize
248KB

MD5
77073ab0521106f629650fca9825e17a

SHA1
46c5fcc22e4bf56b103f69d92f3d4ad041dee20c

SHA256
808f328e5d23295d2e0db303405a9553023cdb5206d2eba3c36fd34df354c832

SHA512
3cecf190f0ccdeed55d3085adf0c5f34b92d79a432a3f1806b5ae3c055e4e60d069aa6f2d5dd2b85a11a0056231004199df2f667e7220c17abbb09ec58a99dd3

Download Submit
/data/user/0/com.bkidshd.movie/databases/dbbobby.db-journal
Filesize
512B

MD5
8f8dc8c0cd4fdc5c0ad049632c8b8969

SHA1
447a62b03bb992e0903d9d62c5ac7244715d2581

SHA256
98b64706141b13565c862b52d21ecfc751d61a146cea57ce3f85b7eceb828e19

SHA512
e43c9aa6899b6ed7b17be6fdbf0a6c83f2b876bad612892f3ffddc89accc9965d0a8bcddaced76347d11d6cb2c7fffbb72c23999003c1451bcfebdee3b8862e2

Download Submit
/data/user/0/com.bkidshd.movie/databases/dbbobby.db-journal
Filesize
8KB

MD5
06f6fc898b494495ef9c2775f75ae0ab

SHA1
abd02caf826a3a370902de10926a5b22c37faf11

SHA256
df0a688f5dd008525ce0ae12f690c9604ca633573bcd3f32c8c44b604bfce2ae

SHA512
8d96f5851d5738bea3469501701af2769aa438733b3cab988fcf2c9842ba0aeda24989224741a71b391e07d55834181caa87cda1dd9cabf82266ffcf3602f961

Download Submit
/data/user/0/com.bkidshd.movie/databases/dbbobby.db-journal
Filesize
8KB

MD5
c664d9f6585d86f1f86451f14cb3dfbc

SHA1
89ec5403046bcc9ed22738f662cd73030ca25747

SHA256
f300c61cfb422d24765ce312f281af1facbbcc50e934afeb48ee347db99dd4f6

SHA512
05b7932a225e13217b6215d6a850a600ca40a0cd68f52beafa851057ad4ec18b1d29fdb61d2471937e39bf6d7ed20919606a3c3128c0acbfbbdda240785a6509

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_analytics_v4.db
Filesize
28KB

MD5
1fc778d013c3b85acfe5a6b6dbfd998e

SHA1
b3e9914f9937d30b0b595a9d8f982bc0014706a2

SHA256
0cd6de6d39d28980f67860591bfc9f287266d4eb54c1064e7348ff2389387343

SHA512
dc92c4e96e82b5885409cafe6ada2ac026e48adc896f0642fbfd4dcea38f8ecfed64a03c842aea3be7264850a399d07ff50ca67aafdcf91010d4c3b451416c93

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_analytics_v4.db-journal
Filesize
12KB

MD5
672adca83e7f9ca417acb1f265b53836

SHA1
8de699c6c481a2d79b83787a14660ac4d5d49696

SHA256
7911f8b65a82e70b0c0e8987b6cdd22bf88ef27175c7c17e00e1fcd1254e42fc

SHA512
817ea34adf08ae7e5134611aa9aae553291c14a49a158aa26337d7c45442a18db400d30d590930fbdb33c1638c64944c2255c1a39329f74ed7ad4cfc60e6688d

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_analytics_v4.db-journal
Filesize
512B

MD5
e455997c36c1a293c11dfc5d102463b0

SHA1
1301885e97a64c0567d23824561350f84a5bd61c

SHA256
ea19ae856be3943efb97ff391f573bee82bd2d2b360635a8bc353aadf66b2442

SHA512
3d4d3d4181cbd46f59069f07123ac51297fb7f6d0fe05dc5c810c52819a52aa4c671bd00e7aa21c860bd4266c1a45b1c44d05409f598cf117a0ed3f24b78b52f

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
85864d93d5305b8eadc69c16bbb63b7e

SHA1
df1891279dba2166943ba789b2de1fc9f3bec483

SHA256
03dd16c935a8275e3bc4dff3fb2776b8effcdfec47c9986f06e7279d0fb445a9

SHA512
b4f40dac6be14f686aa4cb487d3088cd8a6c8dafd8a3994adff3452f6a5b0856e12bdf3fb870c3b13955d6c765dc3d4e53b76a16b5bee5bc30b45e251169318b

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_analytics_v4.db-journal
Filesize
4KB

MD5
048b97e8c7f7cdcbd3299aeeb2aa1d64

SHA1
80c07ed970aa9d72eeff831dd29c72ab74973728

SHA256
b5ff766e1b07be32cba17e12a2d743cee5df3ac4c451e9d771e94571b5c49ad6

SHA512
49a5af2b7f8b4ee6c9976ee0fce8a9320f55feb5c6fa16fccc1dabc43f5d4869249d5a52bfaed204fc6add60668767bcd4042cec42309dcd6bcbc35ef8c54f0c

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
d193bcc13be75f0bb586ebb09cad747f

SHA1
418b6441fb6ea9f5c02ca62cac395dd7742ac2db

SHA256
0bf211cc0e5d6852068ef2fcbf1cdace6c8e2e826bc5f784f8c0f12a9c8ddd68

SHA512
3bf989c5da997e13656fc70582df3393b4e15e6798e65a076e3447141f25dfa35d345cc212731583a466cec4ec6067a95d51af50fdb5ed72427900cd84b4ac29

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
8ace3c75f9bfeeaf9088b07a93d99353

SHA1
a93827efcf99a6a9a9b59850e00e09131fcbeed6

SHA256
67aee1c0240f785335e4ab0db6adc9b364b0969527ff85b31038bb52bb22272e

SHA512
21ab6d58199d8a5a6020bee3d5cf10a286571b3b498fe126f62afba1d63ef2923a13c012a4e4352541fe65d4e404d3ee9d0e07c0be3156ec71167744d62a6556

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_app_measurement_local.db
Filesize
16KB

MD5
0028c48122e2af7f7e65ee43c7f6902a

SHA1
b56bed76075a8e93f272b59bc7ddf8349caf2f3c

SHA256
b4f49ecebd5c43f02dac1cf00e42a0d0d59dda48b298605cf22c9e4675fc9e64

SHA512
d8010d1c744c24098015be97e0ed0736d0c0d13743de3eff60721af6cca06258063a3f6b38592131beef17918f9fe662aa0c30c65961610adba4b079fdfd1478

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_app_measurement_local.db
Filesize
16KB

MD5
1e95abeaffe32a6f0c9800a033e2f0e5

SHA1
6d7110a999cfe0cf8cd7b27372668d620e7c012f

SHA256
36db564020fb3bd2346d078ff2eaee051ba27d0df44c5405f2d17cb8558d7f10

SHA512
1b2ec87ce5a67d140aa70fb13605f859b5282390c34a3df62104e72b77316168f7dede303496ae188c66b5cfa7449c60650584408b6b1e51570384639f35fcd3

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_app_measurement_local.db-journal
Filesize
512B

MD5
0736c2a8d05fcb11ab76949e991ef517

SHA1
92942793eae84e7d87ea9581bc19ee4a22e80c5b

SHA256
312e4559a88abb0f9087ebe942e32f0416157d74a20e4b38fc103fb5284bd7d6

SHA512
a7632aedd7a80a0003c1762d8135bbdffa1b4ccc989deff399777e907afb76dbf7b1c1bcdd7c91ae8bf35805629aff36d5b3f398a3c32ca7a198c3a158fab3bc

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
46e1d84165b907f4718657cf9bbb2ed7

SHA1
f2f780c62737c76e9248cd4a827314f1414af6e0

SHA256
335fe6fdf8659bfbf97ee71fb7a90616a32f00e0c77736d3169ccb71c1519e65

SHA512
f41652600b7a6289a336cdaa8a2443a75fc8d80e3a97cb7d88511952fdff796980ae2250cf8bed59c7504ed77a71e2ff6171bab6aeda5c4f7ce98a546145dbbc

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_app_measurement_local.db-journal
Filesize
4KB

MD5
64c8fdb8ea0a20053860043f60fd147c

SHA1
1bfd76ca8b15620047f1f509d77a4886c740b565

SHA256
885c04b9f4a43f6f70450424692c0f940fc17f2ccfebc73b5846c56ec0c2c243

SHA512
82d607bb73404b5704cbe6290c7dad8decbefdfadcf2b44132a70e0c4668e1120bfeb274e2c1f256fab2827b416544e55be5f3e639ed453b9f45b82b5a6cb51b

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
12adf219d97f548aae30c9bbb2a9d99a

SHA1
4af56909bde2930deb2a87b65252b5913b328042

SHA256
7e9b2ac5b7f15b004c9384ce5bfd401c139d0f1462230713628bd4b81078bf2b

SHA512
8cd5a4d1fe202f5efdac094b066e49df1583f2f3562234fd579d140707b7c02727e2257c3851967e19f4a69e28f291b115e8dc6fae93e76eb9b69624f81c3d63

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
cbb0f03467716b67cd09b2da40c477b7

SHA1
7a96db980744475412c27ecc8cda02a9833ab3b4

SHA256
fbc9854018fa6416dbb976c1a4fd5f12cf2b999891c7e4fcb1e5507731d3ef6b

SHA512
70794d9f4fb1f7a51e1177a36ed67864623777dc78dce55a035ce29bb0c268eff29dae1ab80d8ad67a69356134bb0bbbcbb9a2628dad95b188c0a19ed21d4abf

Download Submit
/data/user/0/com.bkidshd.movie/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
1a7b55ce751c33659cf71fd5e7cfaeae

SHA1
3cd76b5d97ada1c71ba53b2b561280e7b5a0efe5

SHA256
27f0fc6275c3ed819d941daebde41b666f75f3c223b6077951e6caacdeeef8cb

SHA512
7eb8a32e090e4cf8138c693d5d81acc8184427ab41262bf52939f16ddfe841eb1d310f1753e4acf7aa19cee9384638b1fc49618dd7b58d8f19a801b714affec8

Download Submit
/data/user/0/com.bkidshd.movie/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669A69301A5-0001-1141-4F833C4C0D60BeginSession.cls_temp
Filesize
79B

MD5
aeefff8695324300a8161267f679f2a7

SHA1
ba3fd287575ca06ba3e1683eaa7e330ec116911d

SHA256
8463c83292cdba1f0305c023ba31985149778de0e451e16517013dff1df04b60

SHA512
a6ae75391cdeb6a3b4ba5cc432d9666169e14d342073ab47114c1acf24bde518c74441b52becd23e4b47d643627bf77030d3e7a7aa2128741825a4f96e385aa5

Download Submit
/data/user/0/com.bkidshd.movie/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669A69301A5-0001-1141-4F833C4C0D60SessionApp.cls_temp
Filesize
111B

MD5
d7d9d1fb722cf5a28a012b9eed40e403

SHA1
bc9894b409e60d425c70fcadbcb5a03ff6ad1b73

SHA256
d35351c51e85afaa98912294782bda801695d8f176ec3818f5f6a243154e07c5

SHA512
915cdf2226e7a39c6f1d40193ce441a5ab77ebb3a8069e2fd3557e219f37c7486b6739614e9cdbc8a6414fcec8174d27971ac224b4374e907fdac28f43f9aad2

Download Submit
/data/user/0/com.bkidshd.movie/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669A69301A5-0001-1141-4F833C4C0D60SessionDevice.cls_temp
Filesize
131B

MD5
40215daf9350ba8300bf6275f0c5ff36

SHA1
6d6e50556e0ad52c3a00e75b3e35b0c812967523

SHA256
a707e6ec5c6c5c77ed2a8c1dddbd18209fedcb98d55bb48b9cdca8194705a8b8

SHA512
07466acf4539c3de763a253241b62af0e0a36728323cc9c7ba4dde99356bff1842c9fd5793e7bebd9ecb30946e56d599339d6706ba39eb352b2151899830cb01

Download Submit
/data/user/0/com.bkidshd.movie/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669A69301A5-0001-1141-4F833C4C0D60SessionOS.cls_temp
Filesize
15B

MD5
b3d9541cc92a9153d14e5160f8d8c008

SHA1
2e1ac80eb381dd82a03795b682f92020348c0113

SHA256
1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

SHA512
78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

Download Submit
/data/user/0/com.bkidshd.movie/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
515B

MD5
b00768155bc97109c3cc20ef5fa7c076

SHA1
e2877283df61751a954307563bae8a0c4f034095

SHA256
28ff1155a622f8b3464bd3f3018b701d062a3e7e59902b68cb4bf1d0f7a7baa4

SHA512
52b290ab54debbb58a35acf8251866aff7a42afc7042fb38594e90e1dbc090704b9c28287731e2c87cab5ba147c4de468d631c3938a59abfde64b593520be466

Download Submit
/data/user/0/com.bkidshd.movie/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
1KB

MD5
ba36fd66a4d629c3d552fc3e357bf421

SHA1
196d01a73aa1dc9875a2572e29807a32ed7752a3

SHA256
7720035dc78dae159ef5b2f77c48315f0f078b342402d90f865995980a55cae6

SHA512
6325d27bab045c4a3ef29f836f7f845320e05a1a00f56b61456dfe89c042661aa861b747aa136f0c06ee60c7b2bdf6fdc1d307016614b8bef4da8e58031e422b

Download Submit
/data/user/0/com.bkidshd.movie/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/user/0/com.bkidshd.movie/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_f69872d2-3a67-4f19-9434-d418fe8ef01a_1718199962509.tap
Filesize
398B

MD5
e432108d71eea4575071096ece227982

SHA1
331a7b58ac0502b31d6cfcd7cc6de713589937b3

SHA256
f0b49f2e763ad5d70f4c2d6990db45397d6946d4625a3e22bb1615f2945b4ed2

SHA512
d4b9b5259bef9cf05ce89ac9e2d605aa722a70bdbc44f2f23af3dfebe84ec5944c8dc820c99d432409b6129e343d829074c202d2690292d0bb0a4dd14674e0fc

Download Submit
/data/user/0/com.bkidshd.movie/files/gaClientId
Filesize
36B

MD5
3cebc938c3337690251744f911043abb

SHA1
fff020054bcb71d68c246e1fcd67be914553ec8e

SHA256
6deaa401de621ac4a1454c57bb1a7bbd826f689e5259ca5fd01a7b2e7255f186

SHA512
028859dfc6567c893c25aa02e22db0336ff29c2e28c948279b67ec564112038e5e659a1919ffbf94fa7b955a438f4ca9a1252e98e6bc418dc704454a168138f9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads