Analysis

  • max time kernel
    128s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    14/06/2024, 09:37

General

  • Target
    a9000c449a9cfc91122147759d0964e8_JaffaCakes118.apk
  • Size 9.9MB
  • Sample240614-llm63aydml
  • SHA256 85493521fa2e6fdb0bccfe0ae5ebd19bd8e215713f777e669261578933978f2e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.smapp.habit
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5050

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1004

        • Path /data/data/com.smapp.habit/app_crashrecord/1004
        • Size 222B
        • SHA256 c96133c45b21d104042729a8e284905c739d83f2c4cd277f56ef1197ed747393
        • MD5 SHA1 SHA512

        1004

        • Path /data/data/com.smapp.habit/app_crashrecord/1004
        • Size 58B
        • SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
        • MD5 SHA1 SHA512

        ThrowalbeLog.db

        • Path /data/data/com.smapp.habit/databases/ThrowalbeLog.db
        • Size 20KB
        • SHA256 256fb4171fad95478a5a6615ef2bf8cdbb9948eb7f60ee6c909cf5480436128b
        • MD5 SHA1 SHA512 SSDEEP

        ThrowalbeLog.db-journal

        • Path /data/data/com.smapp.habit/databases/ThrowalbeLog.db-journal
        • Size 512B
        • SHA256 fcb30572d24435ca567bc91b20be7ead0de2d85d17f988ffdd65c8c7f5a0dc40
        • MD5 SHA1 SHA512

        ThrowalbeLog.db-journal

        • Path /data/data/com.smapp.habit/databases/ThrowalbeLog.db-journal
        • Size 8KB
        • SHA256 e362a271e060c0f11d37c03b7b55af35cb10c4a098fe811688767ae4dc9482f1
        • MD5 SHA1 SHA512 SSDEEP

        ThrowalbeLog.db-journal

        • Path /data/data/com.smapp.habit/databases/ThrowalbeLog.db-journal
        • Size 8KB
        • SHA256 01769dbe4033e3ce86fd98ec7a7d6ccbbc7c172ded1a98471ad6074483929298
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_

        • Path /data/data/com.smapp.habit/databases/bugly_db_
        • Size 52KB
        • SHA256 44fc589bb9f2cc1bf4750c9fdd5843b21f0e5550edcfd903562590939915f1d0
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.smapp.habit/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 29b8f40478b06b13b2597fcf1a408005645c19749528a545e2976a5ac6086578
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.smapp.habit/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 0a7e54172f323f3506d7b96015f7c8c401d155f19eaaaafd6c1df1e7a3fd0432
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.smapp.habit/databases/bugly_db_-journal
        • Size 512B
        • SHA256 5390ab1125e83dd103838e41e9a932d444744e8cc7087bfb1c99be5533c79b75
        • MD5 SHA1 SHA512

        bugly_db_-journal

        • Path /data/data/com.smapp.habit/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 aa46b6734ba7e8ec596d593c40561050b18a3d789f8dd29e1fc467b8a7bf26c7
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.smapp.habit/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 1b1c50482efd730e9bb6730be078ad210acd4b974bdb7abe3dc656c1135ecc9d
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.smapp.habit/databases/cc/cc.db
        • Size 36KB
        • SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.smapp.habit/databases/cc/cc.db
        • Size 36KB
        • SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.smapp.habit/databases/cc/cc.db-journal
        • Size 512B
        • SHA256 f8ed2e9307a7f1ca52c3880c9ef695dcc4bbc6ddea910179dcdbabec996a12a0
        • MD5 SHA1 SHA512

        cc.db-journal

        • Path /data/data/com.smapp.habit/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 f73952ea6f3cf20c9ec1eed6896faeb4aadf1a2956e2d683971349d95d0d9541
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.smapp.habit/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 90a220eb7ba38ea24b9a2e4332bfedab0d79d629b0ebbdf758180bb0faf59a48
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.smapp.habit/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 6030d94ce0bd0019302dbfd3d1faa58f64217d83697451455d1c5457cefaec71
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.smapp.habit/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 ff6af4ea5d0bf667374587fd9090b209d1708bcc158b90330f89536b2fecf23d
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.smapp.habit/databases/cc/cc.db-journal
        • Size 12KB
        • SHA256 32f50b6bc05b469e05b7993d9384b8d63f24c40e5a534c0d52201a07258e7327
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.smapp.habit/databases/ua.db
        • Size 32KB
        • SHA256 dcbe186a9202ead289667476df61dca890062ef4d91a9fde2e53d24244d60c38
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.smapp.habit/databases/ua.db
        • Size 32KB
        • SHA256 1820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.smapp.habit/databases/ua.db-journal
        • Size 512B
        • SHA256 6542494be321812ca086fa4636e6ab92bdbbea21a78ae51f1d2b7ff7250b8c09
        • MD5 SHA1 SHA512

        ua.db-journal

        • Path /data/data/com.smapp.habit/databases/ua.db-journal
        • Size 8KB
        • SHA256 2f2e63506f92c334aaae0a744a90ee7f7541f10842ae6dfed7b0719c0448346f
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.smapp.habit/databases/ua.db-journal
        • Size 8KB
        • SHA256 6de31ad49a47cb62787ef0a7b424dcde932d222cc4c29d5344a7fdea72df60bd
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.smapp.habit/databases/ua.db-journal
        • Size 12KB
        • SHA256 6cb9ef9e2ec429d46a5bb42d5d2ba8b61609e1021b317ce5ba243a5b52deb732
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.smapp.habit/databases/ua.db-journal
        • Size 12KB
        • SHA256 a185e993040e6528d7198c917cd616fd2ad059cfe2ecb7c1f923fb82ffe52ab7
        • MD5 SHA1 SHA512 SSDEEP

        um_cache_1718357984123.env

        • Path /data/data/com.smapp.habit/files/.um/um_cache_1718357984123.env
        • Size 1KB
        • SHA256 8e72814a03dac30d692433cbfc49313a4b03ec51a9aae38627f86ae494e0a086
        • MD5 SHA1 SHA512

        exchangeIdentity.json

        • Path /data/data/com.smapp.habit/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 06f2cfbe7e31fa19271b13705c51d715b177eb059bf783faebcd5313b60babf0
        • MD5 SHA1 SHA512

        exid.dat

        • Path /data/data/com.smapp.habit/files/exid.dat
        • Size 56B
        • SHA256 4ac5e5bb56a900abb5932831680140e9b016f8a8171c80175e8ed646645e3bb3
        • MD5 SHA1 SHA512

        umeng_it.cache

        • Path /data/data/com.smapp.habit/files/umeng_it.cache
        • Size 350B
        • SHA256 5d6bc0e7b580135f085335f9b71c9cf7831e6c945d7e01e4b26c5a9f3dd31ecc
        • MD5 SHA1 SHA512