Analysis

  • max time kernel
    15s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    13-06-2024 22:52

General

  • Target

    a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk

  • Size

    1.6MB

  • MD5

    a6fb341e6ab06364e20d8ffbaa602f13

  • SHA1

    b780b8f8fbd4e0c6db69bceee77c2d51fde1039a

  • SHA256

    2ab92d831b479ef36a3aa82aaf44234246f06f477ad5f51fc648d911b1395f76

  • SHA512

    f4a6003fa96813f2a813491139d5e5d2bc8ded13003954478fb38da76b8b712102f776719d3c38684a2e24c14c9842964a277cc2ee6242e685a4831cb7f9a243

  • SSDEEP

    24576:KtvGEIOtpiD46zcRgbwe79LhZt1BkqwQFI6LtVy/1VKwpRvh9Yu87Oda7V0TMhdc:wJ34LzcQ7DgqwZ+atV/6adsV0y8t

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.icq.mobile.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:5163

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.icq.mobile.client/databases/cached_data.db
    Filesize

    96KB

    MD5

    5ac519b319df317963bedd2873155f37

    SHA1

    e69b4c6c5963be5c58f0704747c6e23e6da3b0c9

    SHA256

    9d87f3140cd48fc0115077e379ef37ad5699a2118052ff6c5189e3abba260dd5

    SHA512

    d5f06ce5803be4ea0a371d0b40954f150ba4941b7823b7533cb7e67ade1aed8c0ddbdf53a924596d9baede7dd88f844c69680a77cbfe1f2fa4d54906ca3a7e87

  • /data/data/com.icq.mobile.client/databases/cached_data.db-journal
    Filesize

    8KB

    MD5

    ea6ccf7c7b53438a989ea82097a02f3e

    SHA1

    fb48312d51123323d8a6d31e74dbab03bed00d7d

    SHA256

    b1178ebcc9f51c2102ea07eef8fa414ee2ea0de1895e29c804a2d208ea9c3efc

    SHA512

    584996df1d16701d9abf51767960d6a14a7cf0c572489e04c9d83de412e58bfa0f558c8cb482d53987289a617e7131ca777caa8f4a06a95b920897502397cadd

  • /data/data/com.icq.mobile.client/databases/cached_data.db-journal
    Filesize

    512B

    MD5

    5d264e239a5e8c53e0bf6c2318aee5f2

    SHA1

    5a213bc524339b8fe128da28e8e66abf3bcc3ad4

    SHA256

    93e9ae5d0a73226103e9f86f63104517e6e2ccfb13bbfda59926aa8eede12372

    SHA512

    53f8a722ecb31164ad60433368045de38cba8da72092b9b59a160819572dbbc06cec8573efa3794f6873d44f51d58d4237385b4b8564bf751447ba72b117350b

  • /data/data/com.icq.mobile.client/databases/cached_data.db-journal
    Filesize

    8KB

    MD5

    fd5e2300da7bddebee5a3d10b8965559

    SHA1

    1463114ffe0ea151f4e99e07748c3074b64e7860

    SHA256

    6d8a50cbe38c005a729bde83cce4eb996af14eb48c17bc6c7bf24b6a6048a09f

    SHA512

    66d74d5e91e9b505e72f772d8da55f12626630a956298e3fdabc77b6ea14477b3ecbb769570c957a9669a46451d23a1964e8ad983d2fb9e502ff18ebacfffb72

  • /data/data/com.icq.mobile.client/databases/google_analytics.db
    Filesize

    60KB

    MD5

    4b458e65a89c8c0ed1fca6ef27eb2618

    SHA1

    9e1f09f7f3698da648da967894cb74773bd1c258

    SHA256

    f2f577a2bfeabc4340abb241215bb9065e16767f7bd3630ba1ca79cc08613abb

    SHA512

    fe9514499fb2a7cf114f3f1d51eccb1c7b91dae7bf22e31b7906fa3214053fcfedc2cb05fef51f60da60091b0cf3b9084dae300474023e12089a0fe2c9376679

  • /data/data/com.icq.mobile.client/databases/google_analytics.db-journal
    Filesize

    16KB

    MD5

    e10c2ca4c16dea25d7137ec873c921e8

    SHA1

    413d4f3e7293b197975d59354379d9aa1e0fada3

    SHA256

    d0083b73ec250cac4137e0af6907e8fab553806f75c9bdab3023fdd11d354804

    SHA512

    543abf9600fcc596268729485803d5a591ac307e34b914e546ed48f613ec06492448adc9a0b0739eb9369c57819256ddcb3c6c6d5023b32e7f47608b1b4c5b8d

  • /data/data/com.icq.mobile.client/databases/google_analytics.db-journal
    Filesize

    512B

    MD5

    baa14c856a91b7e9dc528f9c168055fe

    SHA1

    ca1032e30d0a0594a0d105636a45e24cf8c7ce26

    SHA256

    584bad658aa657fadf81dafe9965eb38633dbab940b0e7b1c596e90190fbec51

    SHA512

    1185612a4e12f329562e92db06c288ea0d261e2e749d487f2a357c45472f5a44b2162f9fb47aec4affac6f897674f49f45b60406b894bf4763ee8714a9a5ab04

  • /data/data/com.icq.mobile.client/databases/google_analytics.db-journal
    Filesize

    8KB

    MD5

    36a27b3b9b44eac9283deceaf9ce813f

    SHA1

    1b7b57f3531107226a91603e89332fe05ecf2ad9

    SHA256

    0a3bef85c1c38caff058e4d2e7b2dc1f55345be7d02c23bdda3933f3ff1fcdc3

    SHA512

    4380ae583e95d2fe37d858b831b07ef9e504f33fee49c9578f437a5170dfec12843dab46b233eba363c54102ac60d8477f988f4de5659dd41c2c468a4ee08f7a

  • /data/data/com.icq.mobile.client/databases/google_analytics.db-journal
    Filesize

    8KB

    MD5

    8864eea330eed0c07d2464812435a325

    SHA1

    65448fb6ab2b26d26a651761669e900c11675d8d

    SHA256

    7fc8481f1aa9618c77dcce335c77fcb74e8dcf752658afbbd6d0934047004cbd

    SHA512

    4a6dfd9fa1165f98dc9a259ee224721c2ad305faf2d5c829108f1e02d35a308afb41d4451930c4ae504822e20888a1f202e8bca5608f7ecc88a0aa0e265e774b

  • /data/data/com.icq.mobile.client/databases/google_analytics.db-journal
    Filesize

    8KB

    MD5

    403b41860eeebc269c44e5f7f2c93ec0

    SHA1

    12e381d4a4a5b6b4ad16a941b3c17c66989300e4

    SHA256

    4f3a9a4fd4d6702d0eb9d94528b7516ba0e0d9d7715fdf25ba2a0752bb96fca3

    SHA512

    a73af5738a7bcabbc03ca1e5892a539f74d17107ff7feae63529d005f6bebc7746a1e8bca6ced3069cd6b705bea92e3c1081eab9183f24a11db31785b80d9bb4

  • /data/data/com.icq.mobile.client/databases/google_analytics.db-journal
    Filesize

    20KB

    MD5

    67e590e90d8db7f8f88bf65c4f612472

    SHA1

    8fbf45d85ba910e0301abc3bf3c969a0e87a82bb

    SHA256

    a2494b5fd9327e2951badb44c860c0ed08f059601d1f2a9d7c4409f888205241

    SHA512

    834e40b51c6551726a15444fa46ca53d27b93f036782743e5bb7b2910babc527c844829ebaf0db75668d646f0cb3cdb3a9028feb1d7e48e8328e1cbb3a5b2e6f