Analysis
-
max time kernel
123s -
max time network
148s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system -
submitted
15-06-2024 00:30
Static task
static1
Behavioral task
behavioral1
Sample
ac3ac9cc7970a5668c9516d38afe51a4_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
ac3ac9cc7970a5668c9516d38afe51a4_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
ac3ac9cc7970a5668c9516d38afe51a4_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
ac3ac9cc7970a5668c9516d38afe51a4_JaffaCakes118.apk
-
Size
6.7MB
-
MD5
ac3ac9cc7970a5668c9516d38afe51a4
-
SHA1
549206418966d7ab78d2bf9bfc1a471f06df24a9
-
SHA256
b5f3947e12df86e739ecbb2250c8c354701a75cebe29544640048ecc145f519c
-
SHA512
1b58f58b6faf2ea10f04ef7088b190bf65e37c4b0fccd1f1f211a7e9befdc1b4ed1773a67e4f9e145735cf4fe152fbafcfb881db285eec19043fc5ff539574fc
-
SSDEEP
98304:nzBhjR1VbnmbFZAqW8J//x/WXu0dmUIbfu6IA4beVJoH16PiSuN78FDj9wDX9NcM:nz/jRXqi81/5tebWJIAkEguu18dUT/2o
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
Processes:
flow ioc 2 alog.umeng.com -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.quizman.footballstar01description ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.quizman.footballstar01 -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.quizman.footballstar01description ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.quizman.footballstar01 -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.quizman.footballstar01description ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.quizman.footballstar01 -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.quizman.footballstar01description ioc process Framework service call android.app.IActivityManager.registerReceiver com.quizman.footballstar01 -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.quizman.footballstar011⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.quizman.footballstar01/files/eula.zipFilesize
63KB
MD51a6d49d2adb9303a161a950db2de3927
SHA13f9a3ff691d967a4bc3bdffe6327cfab0c416ef4
SHA2562eec668519c3ac15ba5e1c7bb8d83abb9bf935a32bde220e42a7047d66c824d2
SHA5126459e8004f34945396fcec424bc37e34c7f86483a63a74a9bca2e9c70791cb0fda0ccb23b72944167693c7c71b418db41acd08dc83f2bf55594a02c5725fa4cb
-
/data/data/com.quizman.footballstar01/files/mobclick_agent_cached_com.quizman.footballstar01Filesize
120B
MD5fa658fa509c001a009e71ed6a459a500
SHA11dc51051dc6f9d599c163155943f37b783f743c1
SHA2561a68c773e9603f28bd7813104b213e761f0d1419bc1a77b91f49ab01210020ce
SHA512da9016f4909fca57e139bc822849e7774fffb4a98e68afe540b6dddcea758e53ec69142f5d6bed7a1960dbec76434095542faa9386623b9231fde4721991815d
-
/data/data/com.quizman.footballstar01/files/mobclick_agent_cached_com.quizman.footballstar01Filesize
380B
MD598b2505d172005061834c31a1a452f77
SHA1ab65de3717bafaf84e6b19d831a4f800d9850fe7
SHA256eb8c7613a9442d3fbf5e707d474a4f3e53d48780aef045dad8e5dbfdc4ce0861
SHA5121c2f5f566fb2baa2b53025c4eb99c873da33114c7d77c36b489f53cc84fb9e7bc91c0c932f2cc6615849b7bfff7a5bc39bec36da2fb260d43f0d289bcabdb0e3
-
/data/data/com.quizman.footballstar01/files/offline_eula_body.htmlFilesize
18KB
MD57813643485a5318f68291e87315a6fca
SHA1207f1059f5ea34b0fc4011848fa4682608d26443
SHA256c0487218c63d176ff68c0c6bc91866222ad9ae6420ea6fdf06790ff01a1db918
SHA512e571984238e162b5d2c61973fa62645950f69b2a75a0c7b11d6854c9b89ab0164475c96515b7c48c8d60926c90f439e7c172d5df00b11413bd6584b0d0b3f19c
-
/data/data/com.quizman.footballstar01/files/offline_eula_footer.htmlFilesize
13KB
MD59818dabc2eb86d5f4f071e9d67334570
SHA1117e7978c9293d86ea5492b90a4999cc24225dbb
SHA2561f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
SHA51279937390d4b02688abb0e24cef356024c3dbd3cd59d85ea3300556af59f0648293ed24fb5db740a4329fdddccf43af3b7679135555397a3adedd3eeccf5423a0