Overview

overview

8

Static

static

6

a43f132511...18.apk

android-9-x86

8

a43f132511...18.apk

android-10-x64

8

a43f132511...18.apk

android-11-x64

8

Analysis

  • max time kernel
    21s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13/06/2024, 06:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a43f1325118952cdad0c9e4631a07887_JaffaCakes118.apk
  • Size 3.7MB
  • Sample240613-hfcatssapp
  • SHA256 3531233fa2140f873db6ed2c822a2fd39a48522eca5c319eccaaf3e8e132dc9a
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.appsuite.hasib.photocompressorandresizer
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:4326

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1f7e330e4ffd7387c57b411be7aebec85218e1cd937763f6c40e3c9b6c1a053d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 00e7c7370a5dbb26d00549f3f334fe3b98bc2bfc48e4334121f5506181296673
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 72dd8bb10a59b63fa0ff722f10109fb7335fbdf12fcc62b2075750989b3d3e81
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 142fcbc9420f1278b70d5bbd749cebbc98ff3cad98bd6f2f0fb8e53b26e5c621
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 be31078f0b0ceb5336b7298c8a8c930a5957abbd9254f59afdc0a6bdbbdb8bf9
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-shm
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 8de0cbf4a95dd8c4d8b82433f044a2807bd6968016f817fd792e525cc6c2e0e6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 e667bd7257cce8e73c2ab9332dbeded2751aa06162a99142511de1cd7993f360
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 641eb5e83e5a399c9d6845af39f69976f384106ec707910326a5c7c97a6bed48
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 8e8720dc14c28bcf75aaf6b2f03b74856d691eb93a176ff322550e6b3e78527a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 56a2f99d04500814f4c6dfa52e7f99ee5a7bda176ac322b19a55b42aebc67e0b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 bf07a229647c7cda1edd2dad6ebb4a4b9f2b572867a5738174ce7fb128122a1b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        666A945E02FB-0001-10E6-0990BA20122FBeginSession.cls_temp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A945E02FB-0001-10E6-0990BA20122FBeginSession.cls_temp
        • Size 77B
        • SHA256 70e8121a983284e54aa0a31556d18cd75a12a311c8ce2c5a22bc7c52d46b840e
        • MD5 SHA1 SHA512
        Submit Download

        666A945E02FB-0001-10E6-0990BA20122FBeginSession.json
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A945E02FB-0001-10E6-0990BA20122FBeginSession.json
        • Size 132B
        • SHA256 744715582b4bbbf6dccb9dc11f9e5f263a67421be1b33d7dbbb0332780192ccd
        • MD5 SHA1 SHA512
        Submit Download

        666A945E02FB-0001-10E6-0990BA20122FSessionApp.cls_temp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A945E02FB-0001-10E6-0990BA20122FSessionApp.cls_temp
        • Size 138B
        • SHA256 0ae7678c48e5dd0aebafb63aa9288cc5f9e62ae6ecb9b89463340af76a0b77ce
        • MD5 SHA1 SHA512
        Submit Download

        666A945E02FB-0001-10E6-0990BA20122FSessionApp.json
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A945E02FB-0001-10E6-0990BA20122FSessionApp.json
        • Size 251B
        • SHA256 4a80c5cf7389d8b91369cf8f4ef8b19e8016ccf300ee5c141a988a722442b0a3
        • MD5 SHA1 SHA512
        Submit Download

        666A945E02FB-0001-10E6-0990BA20122FSessionDevice.cls_temp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A945E02FB-0001-10E6-0990BA20122FSessionDevice.cls_temp
        • Size 48B
        • SHA256 0d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9
        • MD5 SHA1 SHA512
        Submit Download

        666A945E02FB-0001-10E6-0990BA20122FSessionDevice.json
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A945E02FB-0001-10E6-0990BA20122FSessionDevice.json
        • Size 202B
        • SHA256 1dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2
        • MD5 SHA1 SHA512
        Submit Download

        666A945E02FB-0001-10E6-0990BA20122FSessionOS.cls_temp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A945E02FB-0001-10E6-0990BA20122FSessionOS.cls_temp
        • Size 14B
        • SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
        • MD5 SHA1 SHA512
        Submit Download

        666A945E02FB-0001-10E6-0990BA20122FSessionOS.json
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A945E02FB-0001-10E6-0990BA20122FSessionOS.json
        • Size 54B
        • SHA256 968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 423B
        • SHA256 40c8bcd1139bf3eb5a07320ff50f4f19c54779157f82337eba7da67b115d8d62
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 909B
        • SHA256 07f80f3945fee8dcca288d1637315afff86f78fdf3af325b94c753c468243dcf
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap.tmp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        sa_a93cbbae-84ad-4971-9967-63570d337144_1718260833767.tap
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_a93cbbae-84ad-4971-9967-63570d337144_1718260833767.tap
        • Size 340B
        • SHA256 601b5d563364076d314c10c3e6031ac3c7f1056da669b90d18c52f5c83ec232c
        • MD5 SHA1 SHA512
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 0e647689d09da82d54510f805b1ec7fef799dab86b73e3d0c79c5cf042130f40
        • MD5 SHA1 SHA512
        Submit Download

        Anonymous-DexFile@0xcea5c000-0xcec606c0
        • Path Anonymous-DexFile@0xcea5c000-0xcec606c0
        • Size 2.0MB
        • SHA256 0693560a230897cba50d7aad69bd641b717f71e55f8f59d05671a0fdaa83a257
        • MD5 SHA1 SHA512 SSDEEP
        Download