Analysis
-
max time kernel
15s -
max time network
144s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system -
submitted
13-06-2024 22:52
Static task
static1
Behavioral task
behavioral1
Sample
a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk
-
Size
1.6MB
-
MD5
a6fb341e6ab06364e20d8ffbaa602f13
-
SHA1
b780b8f8fbd4e0c6db69bceee77c2d51fde1039a
-
SHA256
2ab92d831b479ef36a3aa82aaf44234246f06f477ad5f51fc648d911b1395f76
-
SHA512
f4a6003fa96813f2a813491139d5e5d2bc8ded13003954478fb38da76b8b712102f776719d3c38684a2e24c14c9842964a277cc2ee6242e685a4831cb7f9a243
-
SSDEEP
24576:KtvGEIOtpiD46zcRgbwe79LhZt1BkqwQFI6LtVy/1VKwpRvh9Yu87Oda7V0TMhdc:wJ34LzcQ7DgqwZ+atV/6adsV0y8t
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
Processes:
com.icq.mobile.clientdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.icq.mobile.client -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.icq.mobile.clientdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.icq.mobile.client -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.icq.mobile.client/databases/cached_data.dbFilesize
96KB
MD55ac519b319df317963bedd2873155f37
SHA1e69b4c6c5963be5c58f0704747c6e23e6da3b0c9
SHA2569d87f3140cd48fc0115077e379ef37ad5699a2118052ff6c5189e3abba260dd5
SHA512d5f06ce5803be4ea0a371d0b40954f150ba4941b7823b7533cb7e67ade1aed8c0ddbdf53a924596d9baede7dd88f844c69680a77cbfe1f2fa4d54906ca3a7e87
-
/data/data/com.icq.mobile.client/databases/cached_data.db-journalFilesize
8KB
MD5ea6ccf7c7b53438a989ea82097a02f3e
SHA1fb48312d51123323d8a6d31e74dbab03bed00d7d
SHA256b1178ebcc9f51c2102ea07eef8fa414ee2ea0de1895e29c804a2d208ea9c3efc
SHA512584996df1d16701d9abf51767960d6a14a7cf0c572489e04c9d83de412e58bfa0f558c8cb482d53987289a617e7131ca777caa8f4a06a95b920897502397cadd
-
/data/data/com.icq.mobile.client/databases/cached_data.db-journalFilesize
512B
MD55d264e239a5e8c53e0bf6c2318aee5f2
SHA15a213bc524339b8fe128da28e8e66abf3bcc3ad4
SHA25693e9ae5d0a73226103e9f86f63104517e6e2ccfb13bbfda59926aa8eede12372
SHA51253f8a722ecb31164ad60433368045de38cba8da72092b9b59a160819572dbbc06cec8573efa3794f6873d44f51d58d4237385b4b8564bf751447ba72b117350b
-
/data/data/com.icq.mobile.client/databases/cached_data.db-journalFilesize
8KB
MD5fd5e2300da7bddebee5a3d10b8965559
SHA11463114ffe0ea151f4e99e07748c3074b64e7860
SHA2566d8a50cbe38c005a729bde83cce4eb996af14eb48c17bc6c7bf24b6a6048a09f
SHA51266d74d5e91e9b505e72f772d8da55f12626630a956298e3fdabc77b6ea14477b3ecbb769570c957a9669a46451d23a1964e8ad983d2fb9e502ff18ebacfffb72
-
/data/data/com.icq.mobile.client/databases/google_analytics.dbFilesize
60KB
MD54b458e65a89c8c0ed1fca6ef27eb2618
SHA19e1f09f7f3698da648da967894cb74773bd1c258
SHA256f2f577a2bfeabc4340abb241215bb9065e16767f7bd3630ba1ca79cc08613abb
SHA512fe9514499fb2a7cf114f3f1d51eccb1c7b91dae7bf22e31b7906fa3214053fcfedc2cb05fef51f60da60091b0cf3b9084dae300474023e12089a0fe2c9376679
-
/data/data/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
16KB
MD5e10c2ca4c16dea25d7137ec873c921e8
SHA1413d4f3e7293b197975d59354379d9aa1e0fada3
SHA256d0083b73ec250cac4137e0af6907e8fab553806f75c9bdab3023fdd11d354804
SHA512543abf9600fcc596268729485803d5a591ac307e34b914e546ed48f613ec06492448adc9a0b0739eb9369c57819256ddcb3c6c6d5023b32e7f47608b1b4c5b8d
-
/data/data/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
512B
MD5baa14c856a91b7e9dc528f9c168055fe
SHA1ca1032e30d0a0594a0d105636a45e24cf8c7ce26
SHA256584bad658aa657fadf81dafe9965eb38633dbab940b0e7b1c596e90190fbec51
SHA5121185612a4e12f329562e92db06c288ea0d261e2e749d487f2a357c45472f5a44b2162f9fb47aec4affac6f897674f49f45b60406b894bf4763ee8714a9a5ab04
-
/data/data/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
8KB
MD536a27b3b9b44eac9283deceaf9ce813f
SHA11b7b57f3531107226a91603e89332fe05ecf2ad9
SHA2560a3bef85c1c38caff058e4d2e7b2dc1f55345be7d02c23bdda3933f3ff1fcdc3
SHA5124380ae583e95d2fe37d858b831b07ef9e504f33fee49c9578f437a5170dfec12843dab46b233eba363c54102ac60d8477f988f4de5659dd41c2c468a4ee08f7a
-
/data/data/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
8KB
MD58864eea330eed0c07d2464812435a325
SHA165448fb6ab2b26d26a651761669e900c11675d8d
SHA2567fc8481f1aa9618c77dcce335c77fcb74e8dcf752658afbbd6d0934047004cbd
SHA5124a6dfd9fa1165f98dc9a259ee224721c2ad305faf2d5c829108f1e02d35a308afb41d4451930c4ae504822e20888a1f202e8bca5608f7ecc88a0aa0e265e774b
-
/data/data/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
8KB
MD5403b41860eeebc269c44e5f7f2c93ec0
SHA112e381d4a4a5b6b4ad16a941b3c17c66989300e4
SHA2564f3a9a4fd4d6702d0eb9d94528b7516ba0e0d9d7715fdf25ba2a0752bb96fca3
SHA512a73af5738a7bcabbc03ca1e5892a539f74d17107ff7feae63529d005f6bebc7746a1e8bca6ced3069cd6b705bea92e3c1081eab9183f24a11db31785b80d9bb4
-
/data/data/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
20KB
MD567e590e90d8db7f8f88bf65c4f612472
SHA18fbf45d85ba910e0301abc3bf3c969a0e87a82bb
SHA256a2494b5fd9327e2951badb44c860c0ed08f059601d1f2a9d7c4409f888205241
SHA512834e40b51c6551726a15444fa46ca53d27b93f036782743e5bb7b2910babc527c844829ebaf0db75668d646f0cb3cdb3a9028feb1d7e48e8328e1cbb3a5b2e6f