Analysis

  • max time kernel
    48s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    15/06/2024, 02:56

General

  • Target
    acaa5d82516d48ec1beb39d528624088_JaffaCakes118.apk
  • Size 1.9MB
  • Sample240615-dfdrfa1apj
  • SHA256 2d560439776a0a4b4a87085762213e2dab9e0b5c8182836c4054d954be957c6f
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.imangi.templerun.hack
    1⤵
    • Removes its main activity from the application launcher
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:5031

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        evernote_jobs.db

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 f177ffae9650eb4f407c2d9a510bb5a5abe1ece2fdfe24effc62478a1bfa5903
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 870b165d312c8d712d75fcf856e4dbf4a457d44c68fe46db400787b9cfdae00f
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 74b6332a344e6257fcb87df4073a5a8a52d712e3eb3e086780978e70edfd6935
        • MD5 SHA1 SHA512

        evernote_jobs.db-journal

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 bca1d48fde2a66d79a1b193bd22ab75ba233d45438d74d1015e297c7cfaad1aa
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 27f8d02517cd0984b5654102527c5ec28647cf091bd3fd30dab0b4904d119572
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/com.imangi.templerun.hack/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 65cd00b735584bd94bf152ea9c4b995f15faae8bae451df2daaf9e9a35b8e040
        • MD5 SHA1 SHA512 SSDEEP