Analysis

  • max time kernel
    125s
  • max time network
    186s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    14/06/2024, 05:49

General

  • Target
    a8362a776bb9db93224d6712b9f81ecf_JaffaCakes118.apk
  • Size 30.8MB
  • Sample240614-gh63jsxcne
  • SHA256 49cd21b7daf72b56fe64bf6cefe71a132c5fb004b9af25c30f0c107256e445b3
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.ifreetalk.ftalk
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:5091

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1002

        • Path /data/data/com.ifreetalk.ftalk/app_crashrecord/1002
        • Size 232B
        • SHA256 bdfa9713eba8b33db2daf7979626507a331ca410c0221a1924ec6dad4975da34
        • MD5 SHA1 SHA512

        1004

        • Path /data/data/com.ifreetalk.ftalk/app_crashrecord/1004
        • Size 232B
        • SHA256 b54c90a0451f0107504207ad9819ab1a85ecf2f5bc868977f85eb4cfd1063b9b
        • MD5 SHA1 SHA512

        1004

        • Path /data/data/com.ifreetalk.ftalk/app_crashrecord/1004
        • Size 58B
        • SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
        • MD5 SHA1 SHA512

        bugly_db_

        • Path /data/data/com.ifreetalk.ftalk/databases/bugly_db_
        • Size 52KB
        • SHA256 507ad392b2e896307194b0c30764c4282fa529a0c6201f8df35a4e299dda67bf
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.ifreetalk.ftalk/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 f1695943afd2c382d7424328bca82f6ccf49872b971e068c5a8076e8994b7dd9
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.ifreetalk.ftalk/databases/bugly_db_-journal
        • Size 512B
        • SHA256 340f0a3b33465e943f8ecec92ebc226f1eb732b5ed09230126466739e4ffeb94
        • MD5 SHA1 SHA512

        bugly_db_-journal

        • Path /data/data/com.ifreetalk.ftalk/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 d1daf9a91360bd1a17f920711d37c32ce333d66af1dfdd5a461351b6d5b03b0e
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.ifreetalk.ftalk/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 54d01f5dc22377bfe0f103803e1eccf507ac307afdd481efc0c48f4d29a2a825
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.ifreetalk.ftalk/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 a10af2da44979736a71b27e4292879ab8a0ad102feacf2bb9444e7e03a7bbc14
        • MD5 SHA1 SHA512 SSDEEP

        tbslog.txt

        • Path /storage/emulated/0/Android/data/com.ifreetalk.ftalk/files/tbslog/tbslog.txt
        • Size 4KB
        • SHA256 52cafccb7704ecd7dfc5d34430f86a75cd26473121fe97eeebdf135c006f0194
        • MD5 SHA1 SHA512 SSDEEP