Overview

overview

8

Static

static

6

ab3a63bfef...18.apk

android-9-x86

8

ab3a63bfef...18.apk

android-10-x64

8

ab3a63bfef...18.apk

android-11-x64

8

Analysis

  • max time kernel
    103s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    14/06/2024, 20:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ab3a63bfefc225c181656ea8ee256264_JaffaCakes118.apk
  • Size 6.5MB
  • Sample240614-ys4hvateqa
  • SHA256 0cd1d6042f0ef661f9cbd9238b699ff1bde5d249db169a26555543515f3d64c9
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
collectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Signatures

Processes

  • com.paprbit.dcoder
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5150

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.amplitude.api
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api
        • Size 28KB
        • SHA256 1ad81f3f95ba837b113aab8abe5ad0baad2ebfd637030a96a2369013da1df4c8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api
        • Size 28KB
        • SHA256 7ee6278075ed8cbf603e50f63e721ace9d3578838a65b2961a57ef95158bb546
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api
        • Size 28KB
        • SHA256 e7d320523735b945d8ab1b21cab0dbc0000bf7259691fd0f562849c2c3434173
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api
        • Size 36KB
        • SHA256 34957e2f69d79be12bbdcf46d0b8b529401d983eda1d1e14b643eef932c87cc3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api
        • Size 40KB
        • SHA256 ba8ab6772531ad9a6661ad1c92a65df25178c91b8bdea08d7032a9d1eceaca83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api
        • Size 28KB
        • SHA256 ab31f7ed6489545799e91950db3ff49cd77c6450b79415343a3d8dccc8498cfd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api-journal
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api-journal
        • Size 12KB
        • SHA256 8ce905b5be7b6a8de71a6d30a7ec20f39a2aadac4205d58391b47129db6cf749
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api-journal
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api-journal
        • Size 12KB
        • SHA256 eca90add1c299c693e72377bd27f87f56541a4e52bd5ec3038314d17c6b8a9f8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api-journal
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api-journal
        • Size 512B
        • SHA256 fddefe4ea403a0148f0ff47c3885c7ade0c03d67120e010759b7e459eba16311
        • MD5 SHA1 SHA512
        Submit Download

        com.amplitude.api-journal
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api-journal
        • Size 8KB
        • SHA256 c94feae6e250551dc1f2765769b0a1840f7ddc881fa7e89f3bcf4b331dce584d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api-journal
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api-journal
        • Size 8KB
        • SHA256 6bc16199de0fd4384192da82743a3144526778850592199bd10edee70b38bd12
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.amplitude.api-journal
        • Path /data/data/com.paprbit.dcoder/databases/com.amplitude.api-journal
        • Size 12KB
        • SHA256 c580904c89775c6a4ea894064d66ebf13826a707475a7ae82e4ceb79c046fd5f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db
        • Path /data/data/com.paprbit.dcoder/databases/google_analytics_v4.db
        • Size 28KB
        • SHA256 56b670606e6caf4a1900a7c929ec3b1c51f3c0a76d65f4b5f40eca5bfa99484f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_analytics_v4.db-journal
        • Size 512B
        • SHA256 e0d06f0e4deadaa52562061c97f765385d875eac37c7f8a14ce0f73f06b6fb4b
        • MD5 SHA1 SHA512
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 e956abc15a8ec924b5ed801f09306cc9d3012289db50213e5b7db9f16497d81d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_analytics_v4.db-journal
        • Size 4KB
        • SHA256 10ea257a2529bf096122fd0cccab3f75395852742cba771c50992386fcba2ade
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 4bb8250f2963d30be168c85f380dee36387c52a88fd36ad0b01b12330f92e138
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 6b7761a7b8da9c87eb8bd95b0b0698833b00f5452b64e53152a93d4c7ab61e39
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_analytics_v4.db-journal
        • Size 12KB
        • SHA256 df3f59d97b931fc0790f52a871bb9e45582ba74efa4e1a94dd9e26b8b18b51e6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 764151ad9ccdc1bbedc83b856855696148815b3cace82f56c36799005a71749c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e0e93ac13882d59f1d1a9da82dcc40384665479f020cab9464dd04621c9c2e29
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7dc53c16b1ea83af914344c8e6d55eaf2db32a5dc0496311166dc802694e4e28
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 77d5b29fb379621d782e159094e9aa43318be0fc007f1d6ec4cba6a43103cb46
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 fddbe3534eb5f9b7a077041be44234b3b2833cd2690dd9a005c8858302e9a3ba
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 29b970f8f45dc92faf281a26cf38bd6de04043119a466dfb08f539287938aa1f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 ac0c2455f53f3a4671cacaa2733d3094a3bb7c7af59175a5c4496b88b0c6d307
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0bd2ba6259060481928360ef4137b65a1e82e88a85468c1d61b5431aac3b364e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 cb92b7ac99554094f968ab4a5816342221caf2c927a0719ae300f9e2cf436110
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.paprbit.dcoder/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 170637252636005a3b4c00500fff8003b5157880a745034032ebca7b6d4683d7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        666CA2350185-0001-141E-34405B121D1ABeginSession.cls_temp
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CA2350185-0001-141E-34405B121D1ABeginSession.cls_temp
        • Size 77B
        • SHA256 273ec4f2c033b19b1cdabcc7d9819cfd0a22825fd983874687bc8e86b48ecb65
        • MD5 SHA1 SHA512
        Submit Download

        666CA2350185-0001-141E-34405B121D1ABeginSession.json
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CA2350185-0001-141E-34405B121D1ABeginSession.json
        • Size 132B
        • SHA256 75958dbcc9f531ed7d164dc8d934d929c8e8a7c3d4d46810299c51c5ec3aa99e
        • MD5 SHA1 SHA512
        Submit Download

        666CA2350185-0001-141E-34405B121D1ASessionApp.cls_temp
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CA2350185-0001-141E-34405B121D1ASessionApp.cls_temp
        • Size 113B
        • SHA256 16a602d02670553eca123210aabd914ad04c855baa0933682d9af74ff2732e22
        • MD5 SHA1 SHA512
        Submit Download

        666CA2350185-0001-141E-34405B121D1ASessionApp.json
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CA2350185-0001-141E-34405B121D1ASessionApp.json
        • Size 227B
        • SHA256 dd6f4f4fc5a933a55b2472f59bf6eccb87f256f4812e3252fb5044a58dcfbd11
        • MD5 SHA1 SHA512
        Submit Download

        666CA2350185-0001-141E-34405B121D1ASessionDevice.cls_temp
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CA2350185-0001-141E-34405B121D1ASessionDevice.cls_temp
        • Size 48B
        • SHA256 d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
        • MD5 SHA1 SHA512
        Submit Download

        666CA2350185-0001-141E-34405B121D1ASessionDevice.json
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CA2350185-0001-141E-34405B121D1ASessionDevice.json
        • Size 202B
        • SHA256 8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
        • MD5 SHA1 SHA512
        Submit Download

        666CA2350185-0001-141E-34405B121D1ASessionOS.cls_temp
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CA2350185-0001-141E-34405B121D1ASessionOS.cls_temp
        • Size 15B
        • SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
        • MD5 SHA1 SHA512
        Submit Download

        666CA2350185-0001-141E-34405B121D1ASessionOS.json
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CA2350185-0001-141E-34405B121D1ASessionOS.json
        • Size 55B
        • SHA256 3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 431B
        • SHA256 292d2b9474aa34bb8351a6966becc17c9afe36b8bcca51a0526866cbf2c671e6
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 1KB
        • SHA256 42ea71d7967c5fcd1b5db8e4f9cf6d850c128f3f423d5e44726b61d7d8b2d0b6
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap.tmp
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        sa_22ebd103-8c87-4b63-83ec-21a0cb5457da_1718395451581.tap
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_22ebd103-8c87-4b63-83ec-21a0cb5457da_1718395451581.tap
        • Size 348B
        • SHA256 9234cb6ea06d7a64ad125faa0272667ee1cfe9982dfc9ebb64c27577e201b44e
        • MD5 SHA1 SHA512
        Submit Download

        sa_912bae83-545b-4b3a-9083-43a38cc69d87_1718395459763.tap
        • Path /data/data/com.paprbit.dcoder/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_912bae83-545b-4b3a-9083-43a38cc69d87_1718395459763.tap
        • Size 417B
        • SHA256 6083df38efe7c75d0bbff670e2cf7d3c1eab2f3d7bf47cc1641952ea6be2a470
        • MD5 SHA1 SHA512
        Submit Download

        AppEventsLogger.persistedevents
        • Path /data/data/com.paprbit.dcoder/files/AppEventsLogger.persistedevents
        • Size 302B
        • SHA256 211e6c4e12fc3f05c379822299ab5427d728ba83544910ece7560b5e845391d6
        • MD5 SHA1 SHA512
        Submit Download

        gaClientId
        • Path /data/data/com.paprbit.dcoder/files/gaClientId
        • Size 36B
        • SHA256 924bb4f08be617a3eeaac7e9e42309008df8c412c1e5aa6dad00b01f53d1a492
        • MD5 SHA1 SHA512
        Submit Download

        persisted_config
        • Path /data/data/com.paprbit.dcoder/files/persisted_config
        • Size 214B
        • SHA256 1cc28b7fd3b68cbacacdf4e57823d81a6a6c48099a073aadc0895ca3ef937223
        • MD5 SHA1 SHA512
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.paprbit.dcoder/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 0535c9cf984b764130c05c9aa3d786cb3489b30f24aa0b54b3e7a1675c145f84
        • MD5 SHA1 SHA512
        Submit Download