25f760b684b4e1723d3c0624a96221113d188a61f7d0d2da0cc1e5aeeb7cabb8

Analysis

max time kernel
149s
max time network
189s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
13/06/2024, 16:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a666dcda17d718f89b1276a56c784be0_JaffaCakes118.apk
Size 24.9MB
Sample240613-th2t2szbrj
SHA256 25f760b684b4e1723d3c0624a96221113d188a61f7d0d2da0cc1e5aeeb7cabb8
MD5 a666dcda17d718f89b1276a56c784be0
SHA1 8a3dfb21fce8841a1c0f79ce8c6014a31ab75878
SHA512 d153cc2e7496cd42add66dfb419c2af70b5fe7e551d44ff1bf509d6ec428c52eaefa316ce5fdf098ffda5c075c5c8b80a8d9ee58dd430f3d778a4c43b35fc957
SSDEEP 786432:9OQ2LUvxIiSV3hx1Cnh++C/XK7KQXaUi6J9Nf:9O/AqiiL1CK+KQKU9
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.gamebatte.konbiJJ

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.gamebatte.konbiJJ

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
13	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gamebatte.konbiJJ

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.gamebatte.konbiJJ

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.gamebatte.konbiJJ

com.gamebatte.konbiJJ
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
PID:4472

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

vungle

Path /data/user/0/com.gamebatte.konbiJJ/databases/vungle
Size 68KB
SHA256 156895d08da84f78763c4b5fddde30b76833915562f32cf934b527e53f26e988
MD5 3ef9fe21e4f9f9c7328b241980b6ba71
SHA1 c0c1e3465c4c8bf63c7b991223b5d863fb49e060
SHA512 fd9caa488188828028500481fb711a5bc674a63181a0a2c5a7528e7486f9ea2b7519dd328408ee43821d0c2adf9ef46c94f79c996f0230f2fd5f0c0b07d0956e
SSDEEP 48:TezdP3FfpGnMIgLVHmbbo6uSf+y49B1wSh1dIOPVS:y1VQMIgpHm4Su1wy1DP8
MD5 SHA1 SHA512 SSDEEP

Submit Download

vungle-journal

Path /data/user/0/com.gamebatte.konbiJJ/databases/vungle-journal
Size 512B
SHA256 b6b3f2327bf2524364e1addf1eba738ca4b658fadf2f1382691fbf758279cee7
MD5 51ebf2bf77f75f5a19f90b7b1a98a05e
SHA1 1105a48dfb7104a7de015535acd66f7f32c97930
SHA512 74fdabf74b773d3fea2ec31837cd4e59dd43e6fd16cbcc27b4c65cc4d0019a62a08778ef2ad6c374b002655630acf89703fd045e4f52586b07a3fadf5720a353
MD5 SHA1 SHA512

Submit Download

vungle-journal

Path /data/user/0/com.gamebatte.konbiJJ/databases/vungle-journal
Size 8KB
SHA256 6d8524bc77543149018abad5ca4a50d273879285daedee0c0d3182004fa08b6a
MD5 850f54c0a1eada5af403f8b81bb5de87
SHA1 ed8d63d15b4883e535a919f0d570ea701994bb04
SHA512 79761af15517e16f5fd29a7c9a8bd4e099fca6d3c06cb1754f98b149ca12996ab6c74532650c5c2a392ae2ff8c266bb60accb21caaeb2fb9c96a020e31ca43c2
SSDEEP 6:7+/l9pGwn1wXg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKyA:7+t6XqLiuWdYRmBEyPbDA
MD5 SHA1 SHA512 SSDEEP

Submit Download

vungle-journal

Path /data/user/0/com.gamebatte.konbiJJ/databases/vungle-journal
Size 8KB
SHA256 0d9620bdbb42b0d0dd0302221438791d7cb7a6cf996ba24e2fa9792d1c32d3d7
MD5 5b0c4667c9076968fde8a4241af84e92
SHA1 5049d8279a628ec5b293249ef14d62efe62db5d3
SHA512 3a1fe72c10d753f7cc6229c44a337115a71fb534f56a31429824b5eeb59db1f58d229a0e6b8372c899b5e5776a199e5087a7ade3643dff3ad6877fd47c0b65c6
SSDEEP 6:7+/l9SPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK9OM/7:7+tUqLJdeWRmBEyPbTs7
MD5 SHA1 SHA512 SSDEEP

Submit Download

gaClientId

Path /data/user/0/com.gamebatte.konbiJJ/files/gaClientId
Size 36B
SHA256 867e670273e92a51fa62667ad36f45f1aca31bbc1bd43070359fd44ae3d99ef1
MD5 50deb0ebe93f4bf4f797ef9371fc4ebd
SHA1 c8e8e278a321351520f5f0d40b8a895c22787585
SHA512 b3faf4a05759941e1aae0ea8862d176c651b807ea0f4fef1147540a10d5c6398ad165cb2ea8d65c21e5cb8c16988503313d1324c8fd52a62cd8c0accfcdb7c3d
MD5 SHA1 SHA512

Submit Download

gaClientIdData

Path /data/user/0/com.gamebatte.konbiJJ/files/gaClientIdData
Size 32B
SHA256 b750c7b9f8d2d0b7347530be9f73b3bf6dbb25fde7afa1c93f567b7557e0f317
MD5 0ae2f4d1aeef9d83507affff75685f7e
SHA1 a2a8bd3678a5dbbd3a1a163c464b1b3a4de3374a
SHA512 4342a411bf7fa25698ab0558ee89103ec31094026de14e894217ecf369721f54c2a063b1396e917ca30e1ac0193e09ef9021bc4a559eaa9fbbe846877305778c
MD5 SHA1 SHA512

Submit Download

e1718294680392

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/1718294680392/e1718294680392
Size 479B
SHA256 daf18a9db3dc9f6e7cda5d59376d694fd13d70a385e73b103439cd6a4b2cd9cd
MD5 e148539055259634da2a55a6c8548849
SHA1 fb04fcbef81ff9fb9a235da7375b8c5e0e733384
SHA512 584d5a932a1b6832ef6e0227f4f60f09105819313ee825503e710b2e987993646593920e27e759b2331b001b715afa3a7a65dc65385eb83827599a31ec50f34b
MD5 SHA1 SHA512

Submit Download

e1718294680392 (deleted)

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/1718294680392/e1718294680392 (deleted)
Size 44B
SHA256 fdf202709ab7945d950d7d27d9d19fc41aaae1876cf1d17fd76a025e234d5a10
MD5 5bb22980ee0b5a7c1652b5fabecbf405
SHA1 e97779b09dac25279eb7940bc51c9b538bd43065
SHA512 b254ef3a800a9be46d48d0977ea28b514cc62185ed4c3e3645b722f780e124da4d7d8cd1a3906a91bb80d048665b9f4b487d325bcf168714052335431bcbca5e
MD5 SHA1 SHA512

Submit Download

s1718294680392 (deleted)

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/1718294680392/s1718294680392 (deleted)
Size 170B
SHA256 93ec44fd000b1becf1d5165bb4f38549702a2228fcbff5cb498476c21e83df10
MD5 29ca2f14a94b520550c2af16d09bdca2
SHA1 af4810b316304c583f7fe2d679e47f60c116467f
SHA512 e91845dd39f084aa0bbbdf0411621b51ba52ff239ec4cbc36f5578a23d1d238bd9923f10667f3fe7e67a916fb07c48c6e2f756dc349bc92042653eb4a8112e74
MD5 SHA1 SHA512

Submit Download

config (deleted)

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/config (deleted)
Size 293B
SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
MD5 8673a8ac0b06a9d056d08d62f857ba4b
SHA1 a351bea1932270bafbe468584058fef20dcfc31e
SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f
MD5 SHA1 SHA512

Submit Download

values

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/values
Size 286B
SHA256 3aa11adb0954b09bbbf1b5e0a74e78e1d5c4e4a4742301962b8d14d4ee69dd50
MD5 d86aa4602afa7704573b0f5312a0f760
SHA1 cd6bbe978a09c313a97be002c81036db9c64a80d
SHA512 01bbfea52c32ce23bc4d3745f7d7a78c2d64e1974da1b49ccfc9beb9d3aad21633901a9137851f875d41c9687bbf5f094bee907c7906c51a7b7e8a203d89d62e
MD5 SHA1 SHA512

Submit Download

values

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/values
Size 79B
SHA256 420d3721a69785f4486ec399bbbc6eb8a0e8f8b434406b1dd9720803b06822d3
MD5 9e940d12578ec068638f9a24aa2840cf
SHA1 9a7821957cc389a7f9999bfb9f640773d92c962f
SHA512 90ef8039f5f191bff38134474b9bb49735d90260b9f1186cbd8bdd822e7bc0811c9c30e671ead2b5cea9b5adfbc341714a9fa06d3b9bc187407e3b0bb4e04e40
MD5 SHA1 SHA512

Submit Download

values

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/values
Size 111B
SHA256 a69063163322a5a342497d7a716a7d647a137cf46a0655fa517bb757df3aefef
MD5 c385bd4e9d42dfa1bcc22a39bafc8e01
SHA1 cb3eadc0e08595f060359994aae790e46fa00724
SHA512 b6bcd820bf408fd188b1ef8d1054a3b843085708e4cf29a916c586229b0258e2abf9ef978887f8978ee5e19215e530447d89ca330bd7074821167eaf9dabf11d
MD5 SHA1 SHA512

Submit Download

values

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/values
Size 251B
SHA256 5da0d9507b159f5173b536811eca02954fd2c30184396ec6544de78bce8dc0e8
MD5 a77c4d33c0fc2f428e071733477f129e
SHA1 cae489ff09616bf4e02fcaab1f4a357eca786c8e
SHA512 819c4049250671812880228a30cb59d962bf7e9468e8a8f4959ef5753177366ae63fb52e3f15344ba7bc90acd6d2669033dab175bea0b42847498ac2c13e64bd
MD5 SHA1 SHA512

Submit Download

values (deleted)

Path /storage/emulated/0/Android/data/com.gamebatte.konbiJJ/files/Unity/7283480349943999168/Cloud/Analytics/values (deleted)
Size 46B
SHA256 d349cf1132c448bf6fb4c35d96bcdb2b34428949a0f4a2ebdd7a3af481cbcfc7
MD5 36a9e2934e5e647905f3232417ed8c54
SHA1 a709da82e7681dda34e27bdd9ca2a9844544d00d
SHA512 a613652640e149759c11c3d8539b1f5b09f9087e6736837bcbee46093c23034c01a7aa8d0eb2ec2b922e42122369d5cf8c660227ffbf07b16c3056a08ec50033
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads