Analysis
-
max time kernel
11s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240611.1-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system -
submitted
13-06-2024 22:52
Static task
static1
Behavioral task
behavioral1
Sample
a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
a6fb341e6ab06364e20d8ffbaa602f13_JaffaCakes118.apk
-
Size
1.6MB
-
MD5
a6fb341e6ab06364e20d8ffbaa602f13
-
SHA1
b780b8f8fbd4e0c6db69bceee77c2d51fde1039a
-
SHA256
2ab92d831b479ef36a3aa82aaf44234246f06f477ad5f51fc648d911b1395f76
-
SHA512
f4a6003fa96813f2a813491139d5e5d2bc8ded13003954478fb38da76b8b712102f776719d3c38684a2e24c14c9842964a277cc2ee6242e685a4831cb7f9a243
-
SSDEEP
24576:KtvGEIOtpiD46zcRgbwe79LhZt1BkqwQFI6LtVy/1VKwpRvh9Yu87Oda7V0TMhdc:wJ34LzcQ7DgqwZ+atV/6adsV0y8t
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
Processes:
com.icq.mobile.clientdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.icq.mobile.client -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.icq.mobile.clientdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.icq.mobile.client
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.icq.mobile.client/databases/cached_data.dbFilesize
96KB
MD5994e3827f015abeddd69ef12801cacd5
SHA1e4b371f48cf6db36f0e24b1f4cc2b8be10136588
SHA2563f3cc15ea1e5082fac5376384558fc4f748af0001b8a7929368c31e352cbe820
SHA512b91bb103f23da181e16ee0ca123da8b1c86e3e2c94435c3349c2ba4d1f65f45651a5306c42322efc8914fce4a54f4ee5b24be1d177220da81bb391f36d72d10a
-
/data/user/0/com.icq.mobile.client/databases/cached_data.db-journalFilesize
8KB
MD58a3d3b2258fbb9721ebcaa9fd71f4fe9
SHA10ec216436ec62a442de7815b17440a411bb6c282
SHA256b7c31d01c870fff3e5100bc7f5317f38734bb6bc57e461c704bced0706b50600
SHA51259f2bfbca9e3d5511ae94e0430a206777078df8d04a43f92d30ce75ca4e627b030190c1a161b5b4915c351c9ef1c8e62d6e11bbc0bd1f25599a5dcc100ee7b2d
-
/data/user/0/com.icq.mobile.client/databases/cached_data.db-journalFilesize
512B
MD545dfe22eca1e297d072762e1aca311f5
SHA1105e33ff57f3ebe8b9e85076c50f63382dba600c
SHA256f549531bc56ed5da0af88afe959703497ff81cdc03ec73c9fdf1691512da5ec2
SHA51279672b14066b18d437095ee571c92e80989f59b67edf64f30ab549a0458e04e3f458a032a913815bdeb76fbc8ed86ed7b55373bdb548ef46c83bdbec40bc2f33
-
/data/user/0/com.icq.mobile.client/databases/cached_data.db-journalFilesize
8KB
MD56b97b2090c3dd9e3096d60bae1009a49
SHA10ef103866d0ee6eac563edc4e28c31cb7b2fc13e
SHA256b11696fe2c30c048cac0fa5678843117d91de8516dfd9bff7d27397d55e813d3
SHA512fb442df411f1fdf6faf561ba9dd1569567696a636b63483c1cd0931279cc1b61ed60a5a3551edb08710a2f52a033dd7595f4bf4b213dd2d5324b380615824071
-
/data/user/0/com.icq.mobile.client/databases/google_analytics.dbFilesize
60KB
MD515c7d04a98438d5d897da9112dd67344
SHA18bb2caf30c79469955e1ad58ac5435963dcf1be3
SHA256584ba28140a031b0ffa0e3876d7bfae177479900a61f782953afa30a07f2fa1c
SHA512725829620f140bce0d0183a6ad2f9618602bea556c271ad423dfc7175de48aedc4b0abf44de517637755b114f0c9e9ce2d946971d88465021b015e42a1f5d87d
-
/data/user/0/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
12KB
MD5c2e20e86730769b40d2a2a3ee49c40f8
SHA13dbd67a005dc72bc9289cfadc279ff161d9e23d7
SHA256010912b7f9b6f5864b84ddda17c2ccd7c380a0c2e82945c0d93b969dfd39da50
SHA512fa3f76b2a81661892e6b45433c36c5f985a5014a358bca9a40a0d6eb7d69849f2abd668bcc7dc95e1d26770d37247cd793c7bf5d5b955d6cfbe0ac09cb84a029
-
/data/user/0/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
512B
MD5bc0c9e7e96859185a63536c30571fbc0
SHA1fd51b39879ac71529038906f0351dd9f2432f189
SHA2562d5b4ead092be21b36fc378bc9e1d37bc5a7b73120350d68436b65e71396f762
SHA5125af8d8d5f553947b08f0b04ecfd793387a4cda9d323b33bbdb4d6bc40fc930e8b722688c7c7a4cb5ff79fb3fc82d773732caf76baeeb5a9839f0c22b98bb7b73
-
/data/user/0/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
8KB
MD51bad6ceeeaf11161f0ae46ea0b70715e
SHA1e0d69c48fee5e54c1e1e20ad083c1f8ba728210f
SHA256624fb5f87d2b25e619dd1e13556ab6853b5cdc630fefc91d339948cb97260ce6
SHA5122796926a097c0939e15345d2c8ab24746a46592f5596866d132c1a77dffa35dabbe57caba29f2dd63031e9ee89de84d1ce5ad9d3e95aa2994ea5b7206bd28a77
-
/data/user/0/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
8KB
MD5fcaee8eee7888146faed09ac45f40f8f
SHA13d1bb85654e568ef2ced3f4594dc4c6ad35097cb
SHA256bfe92cb2fd3188357878384424b41e9b9c4f768b17c632748a313337dec6e81b
SHA512582fd8a72c55d805c38c37f0a6f029f70c2d2553c5f9680c9515efcc4e8139001d450ae5c7f6621edf0ab710a9d1c0259ee85d67da57a0218036645aefa88fe2
-
/data/user/0/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
8KB
MD59c5e5030c26d5548da3ef4106c0820cc
SHA1ed5136b7dc53b4efae7a80bc7583d3683a9b3400
SHA2562b5528ec676e295be37d1cf5fa47eb0b498b0db0ce1216e13af05a4962df200f
SHA51202ce041a9ffcb124186d12c6031c29fc4d4bf8534979951f0b13aa69296d43a9a1ab6fd62816412467d90f690f194548da7feef5c4ae9bb3a5cf16335e556b1d
-
/data/user/0/com.icq.mobile.client/databases/google_analytics.db-journalFilesize
20KB
MD50fc34c5de3e14b95afb728349c2eff3f
SHA1621567a847b4baa17eb11289bf7b88540d7700e0
SHA256e1dde7ab42722c7da77e563eff69a8c5a440cf4313d2869177482cc6ff94b2a4
SHA512c27d637e0b2dc230aec385314193fabc0f9e3f3348449a6adf97777b445ac1d9d76abc7c174c514e2c0c2f812ecce884b2b921d57ddb3442be493e508bb048f3