Analysis

  • max time kernel
    23s
  • max time network
    165s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    15/06/2024, 02:56

General

  • Target
    acaa5d82516d48ec1beb39d528624088_JaffaCakes118.apk
  • Size 1.9MB
  • Sample240615-dfdrfa1apj
  • SHA256 2d560439776a0a4b4a87085762213e2dab9e0b5c8182836c4054d954be957c6f
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.imangi.templerun.hack
    1⤵
    • Removes its main activity from the application launcher
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4288

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        evernote_jobs.db

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 55f8907e91226ef43a05583c7b4623b4e26994b62d20c8603975ccc1fa3b9409
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 5b7957b09953eab2f8d03b597bc62afec31d2097f93344792ada2bbed4227542
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 beec6f1076fb256a4f0d9bb589cbaf5e1877da5f63d8963fe713998d4d2efbe6
        • MD5 SHA1 SHA512

        evernote_jobs.db-shm

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-wal

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db-wal
        • Size 28KB
        • SHA256 2d90535d130996cc4389038e63d3e4633473ee790f81d00bf8766f0d403960c8
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-wal

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db-wal
        • Size 4KB
        • SHA256 30701647a8aeb8ecb0bcb61d7c6a5f6f07357e7511b6d77fb7a77dbce9a43acd
        • MD5 SHA1 SHA512 SSDEEP