Overview

overview

8

Static

static

6

a43f132511...18.apk

android-9-x86

8

a43f132511...18.apk

android-10-x64

8

a43f132511...18.apk

android-11-x64

8

Analysis

  • max time kernel
    22s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    13/06/2024, 06:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a43f1325118952cdad0c9e4631a07887_JaffaCakes118.apk
  • Size 3.7MB
  • Sample240613-hfcatssapp
  • SHA256 3531233fa2140f873db6ed2c822a2fd39a48522eca5c319eccaaf3e8e132dc9a
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.appsuite.hasib.photocompressorandresizer
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:5035

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 cfef74c194b21614736bbfc0906b4be7a613b8cb0f0c39bf3ad75345ea33af76
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dfbd8b0e05fbef520a3358187eb0c32e362841c42cf77f598dbadf7e42e250bd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 652eb156214571b5cc579b9e5743933f9221a67f13cbcdaf388e593b490fc8d7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 09343d57096deeb7e32ce03649ec6979f4615721abd67ef697170e5cd1fadf1a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 1bfa4fe2063a77aea06280ef289e6cce871a4698924143efe28a44107fd15995
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c2da2b1a7348222d9ad498a90cff9c511446aa968d1df3aaf46195a56f48cd6b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 0be52e97ac4d80b8a2703aaee5ae049c1d899b973f4ed09c5c20a4809243eda0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 72481629858ca5931cbdd734682c49139479b3134086de63b53a549903ddcb70
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b849c032f404e86f00eaa6eaa438d98d77fd0b2c862ea9777ad45cb6d5d81abc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a9d3c2dc68909196ed9203e55d69847edc83550359607082500f0f5807013c01
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        666A94610274-0001-13AB-239D4B48D4EDBeginSession.cls_temp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A94610274-0001-13AB-239D4B48D4EDBeginSession.cls_temp
        • Size 77B
        • SHA256 1fe6467eba086fd2b8c3d937a6ec7c0cffe29fbbf40a072894f664a9a3003bed
        • MD5 SHA1 SHA512
        Submit Download

        666A94610274-0001-13AB-239D4B48D4EDBeginSession.json
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A94610274-0001-13AB-239D4B48D4EDBeginSession.json
        • Size 132B
        • SHA256 0a7bc01238cad0b516543c2b8f76f37d3e080e0c44ff95a81810b6bd227283f7
        • MD5 SHA1 SHA512
        Submit Download

        666A94610274-0001-13AB-239D4B48D4EDSessionApp.cls_temp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A94610274-0001-13AB-239D4B48D4EDSessionApp.cls_temp
        • Size 138B
        • SHA256 aec706d3b5fb1c9e3d82178a8867fe39ef3e7e8ac65c3c580d0333528f404acb
        • MD5 SHA1 SHA512
        Submit Download

        666A94610274-0001-13AB-239D4B48D4EDSessionApp.json
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A94610274-0001-13AB-239D4B48D4EDSessionApp.json
        • Size 251B
        • SHA256 d17c6abc62ca8e1b358537bada0f066093a666488c84368aceda5d3d763f47c9
        • MD5 SHA1 SHA512
        Submit Download

        666A94610274-0001-13AB-239D4B48D4EDSessionDevice.cls_temp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A94610274-0001-13AB-239D4B48D4EDSessionDevice.cls_temp
        • Size 48B
        • SHA256 d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
        • MD5 SHA1 SHA512
        Submit Download

        666A94610274-0001-13AB-239D4B48D4EDSessionDevice.json
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A94610274-0001-13AB-239D4B48D4EDSessionDevice.json
        • Size 202B
        • SHA256 8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
        • MD5 SHA1 SHA512
        Submit Download

        666A94610274-0001-13AB-239D4B48D4EDSessionOS.cls_temp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A94610274-0001-13AB-239D4B48D4EDSessionOS.cls_temp
        • Size 15B
        • SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
        • MD5 SHA1 SHA512
        Submit Download

        666A94610274-0001-13AB-239D4B48D4EDSessionOS.json
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666A94610274-0001-13AB-239D4B48D4EDSessionOS.json
        • Size 55B
        • SHA256 3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 911B
        • SHA256 0ca746fbbd47d61096b7504c1df75adc1ad6a2082e51fdc3e5fbc8aec481014f
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 424B
        • SHA256 f941c360129d66b3874e9c5ca497e9c5d343b3d46caf827aea5504de6df635f9
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap.tmp
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        sa_59a80f5e-5821-4adc-b19f-6586dc2c9582_1718260836836.tap
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_59a80f5e-5821-4adc-b19f-6586dc2c9582_1718260836836.tap
        • Size 342B
        • SHA256 0eff025026652bd7d61abe42e8eac4ce7819dbdd1ba4d0a4e3fea7ca7e42825c
        • MD5 SHA1 SHA512
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 53bfb34ef6e9f70bb05df29e47199a6eac017cffc3c32921cdca398c486c7b85
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.appsuite.hasib.photocompressorandresizer/oat/x86_64/[email protected]
        • Size 185B
        • SHA256 25ebced785325d37394ed643d2a23e97218d38598e7678a334cb200a6321a902
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/user/0/com.appsuite.hasib.photocompressorandresizer/[email protected]
        • Size 2.0MB
        • SHA256 0693560a230897cba50d7aad69bd641b717f71e55f8f59d05671a0fdaa83a257
        • MD5 SHA1 SHA512 SSDEEP
        Download