Overview

overview

7

Static

static

6

a3bf9b1143...18.apk

android-9-x86

7

Analysis

  • max time kernel
    179s
  • max time network
    186s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13-06-2024 03:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a3bf9b11433b8e4adabf7d5322c57855_JaffaCakes118.apk

  • Size

    20.4MB

  • MD5

    a3bf9b11433b8e4adabf7d5322c57855

  • SHA1

    ba1517923710bca8562133dfb9254421bb054868

  • SHA256

    b786f1c380bdc558ec3ff5adbbbd2a6ade997d575afe1f8032c9ba828e97305b

  • SHA512

    3e1fad12742fcfa5ae8df666a8f25c1c8cadab8115639699838f13c956aab087f5820c404e1d37504b98985d3a4b2c5c1d07e1e369b4656637c4272623de879e

  • SSDEEP

    393216:Hr+uriRY/v5Z/VJvcxN9yrMPU0u8dTON8EaDOiuUs9UX1dRnJ9zP1BK/iy2:L+uri6j/VRcf9Rvu8dyN8hDluRqF7Pzz

Score
7/10
collectiondiscoveryevasionpersistence

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 TTPs 49 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Queries the mobile country code (MCC) 1 TTPs 48 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks CPU information 2 TTPs 49 IoCs
  • Checks memory information 2 TTPs 49 IoCs

Processes

  • org.chromium.caster_receiver_apk_FMMusic
    1⤵
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4253
    • chmod 755 /data/user/0/org.chromium.caster_receiver_apk_FMMusic/asset_res/my_app.html
      2⤵
        PID:4332
      • chmod 755 /data/user/0/org.chromium.caster_receiver_apk_FMMusic/asset_res/tab_blank_root.html
        2⤵
          PID:4312
      • org.chromium.caster_receiver_apk_FMMusic:castlinkerservice
        1⤵
          PID:4371
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4450
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4542
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4595
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4648
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4702
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4764
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4819
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4869
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4920
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:4988
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5042
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5093
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5143
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5194
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5246
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5296
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5348
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5404
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5454
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5506
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5556
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5608
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5657
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5708
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5759
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5808
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5862
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5913
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:5967
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6020
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6071
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6123
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6172
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6231
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6282
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6331
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6383
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6433
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6485
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6535
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6584
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6637
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6687
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6740
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6791
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6845
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6899
        • org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
          1⤵
          • Checks Android system properties for emulator presence.
          • Queries the mobile country code (MCC)
          • Checks CPU information
          • Checks memory information
          PID:6948

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/org.chromium.caster_receiver_apk_FMMusic/app_content_shell/icudtl.dat
          Filesize

          5.8MB

          MD5

          016b7c560b53fe4fcf41f4b2eca9f61f

          SHA1

          b7e60915aeb077c7e4ba54f87b4b8b8c4f335956

          SHA256

          86030aafd3e4128b37d50bfa63aecad20bcccacd8037925f9ada49a40620394c

          SHA512

          867b84f196609c212736904ed733ca9c24a0e9d1a4d3b5246955c053b743801b4e7f1d0b44aceaf2cc108b80c06b016399bb8b27b97e91e0eeca1ce95b56a609

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/app_content_shell/paks/content_shell.pak
          Filesize

          1.6MB

          MD5

          736b282401615ae39eb0f278759258f7

          SHA1

          730db06ab2a8409bb2ab2441848b7706bb120c47

          SHA256

          c487e0133b3a7e5772d5147365e41d2648a635c2ca2e66047661fc5222bf2874

          SHA512

          14ada472efbeaf0625e0a55f7e46b91aa2ce2a11cb86e235409f39532b2d68d904ddcc4d8c10b6e537d3e9ed9c3f43c981226f1aea752e7c5c5f34838533006f

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/blank.html
          Filesize

          301B

          MD5

          b8639ac0df7466d734bb2a29d9da93a6

          SHA1

          3000732c8cbc68a569a3925d0a6a2700e07f415e

          SHA256

          12333f0a11a4c58c8bff33b44d4585b6bb142caf1b898985a69e44be7c6a8371

          SHA512

          550e8011fa7357a56aa0c1a9734767434342dacf2658d6781c03ebc226a5a7f02e82a874fec811f4c9603a48f7740debab0f8d2421682fd2f3fb42b3196a8ef9

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/my_app.html
          Filesize

          2KB

          MD5

          531c9a595128f278cc3086d45874ed8e

          SHA1

          e433f4b48d3a504b13dd15482cf2fb90e7da1dd8

          SHA256

          4bf0d449bb3c6f6da2e20f889174dfb77fe8936a21d0e7a98945b394bed0ee18

          SHA512

          b34117c07b2b841b4a3b2a58b05a883417d5fab6959de17025d2c59052442306c52ae51199ac6e972f76acf8a95a503a3bedf6f28a4d96b66a52293e5d9f0c4a

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/tab_blank_root.html
          Filesize

          171B

          MD5

          2603e3a7eba8b03af315c590c0ebeb76

          SHA1

          1843c16eaa2dac0570d41c0e3d306151289eef68

          SHA256

          501b8e6adc184ee1a1ccd7904e60566abf509cbcb1d17580fcd062d28b6b1e50

          SHA512

          1858d96de812f90e9a8d9d38ad397916e1fc606138708aac765bec26d3ded3d950852f1ee0ea5075140da6f646c4206178d58f066ef782ab15b7e8465579e152

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db
          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-journal
          Filesize

          512B

          MD5

          ac9e6012e129edb80a1a067f446a8110

          SHA1

          865e8bf1328bac693b81699d6c8780e94bcdcf9a

          SHA256

          b13367417a5265b6e678ab834677589b8cb8985b9f8565e833687202a1dde6ab

          SHA512

          b9ef9f388637ea25318b99e5f27bcd36d5a97b313f2203543488053c52d450339537368c99e3ee45a1400566d10d4a4fd1e12fa528723a9db9d7336642dfa654

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-shm
          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-wal
          Filesize

          32KB

          MD5

          6eba84fbbde490710090bd2609d8b8c9

          SHA1

          8f498098b6cca3fdd33c3e23b2448b343f70c907

          SHA256

          3199366061dc81e97059b7d7e50db01e0a0ebc8682ec9e84cfcf7aa729460194

          SHA512

          1a698866dde5fac2de598a5c1bd14a06fef0e9f9a846dbf33718178169af9b897541ad9712e32e04b83703fe63d7543e6d7cbd98340eb7dbb7b0a83691c225c1

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/dex/qcast_sdk_core_client.dex
          Filesize

          408KB

          MD5

          ab147b81633250fa32ca5cf540c0ac9e

          SHA1

          62baa3c371e27525bb58c118a09ba513701e0577

          SHA256

          aa20805be4dc4d479fab4e4fc0d19361af1decf5c552a66e3bc73d7f189d4719

          SHA512

          7c4a42a3f0cec037aad4c0968e8efe020cd16f20e62ea9a1e08320e9590c088b66f835cc87d49a21be2f65585acebd8937954334e0fb7a9414410961b9071651

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/files/.um/um_cache_1718251029050.env
          Filesize

          619B

          MD5

          2d5cd144f0451e153dec3df7342b88fe

          SHA1

          3613c2158d6d36ab0a656b3d3610c6df042aee21

          SHA256

          13ed0e8c86b81d3dea8159205916662c4c9a9e96cb62c46df6f44be0e092b1aa

          SHA512

          cb49d646663427d3c6bdff71ee48e0e903d27d6d97556a8f741e31b922d7cd32ca15a08e09597a0d4020da004229131a6d4f0c0aa43b511f68398388af04cbc7

          Download Submit
        • /data/data/org.chromium.caster_receiver_apk_FMMusic/files/umeng_it.cache
          Filesize

          310B

          MD5

          23e26d893f9dc26a50c39c6a73dd050c

          SHA1

          08264a979aad5b3b68879c70f79c55e62a0b4fae

          SHA256

          1d0e6780efe827fbd638b8de5abf97eda466d7b2f095678529871e23cdb640c5

          SHA512

          eb4fcbc4713e2c257c2063793b7fb79370559ec582471cd9112a1c783b6f8157d06ba263e3244b12d848127362a50faefc178d148874d26e4adc1d7acfd0ae4a

          Download Submit