Analysis

  • max time kernel
    24s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    15-06-2024 04:47

General

  • Target

    acecd706ac72ddea24f10225af620272_JaffaCakes118.apk

  • Size

    1.9MB

  • MD5

    acecd706ac72ddea24f10225af620272

  • SHA1

    1d547345821aa3072fbc6b827ed49a09fe757f73

  • SHA256

    c24ad8e67355cc7992a8b1854f38a16712846af7ac3099794609d7f731ffd944

  • SHA512

    6e7a3bb26cc090a0bd4c4fb76eb03de93a22f561bccd6975e14968ae4dcccd84977ce3796b526bf60a625cf6e650d720ec22180e7ea90f6be908c08ca27e2490

  • SSDEEP

    49152:YuNPUmV/S6XnP1QQGCx+tmM51Y0QguUTi73ZGH3:jNPUK/TP1QQGCx0Y1o

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.topfreegames.bikeracefreeworld.hack
    1⤵
    • Removes its main activity from the application launcher
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4206

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db
    Filesize

    16KB

    MD5

    5d85664f8e614fcaef42be2e6f649027

    SHA1

    09c6288922102f6114a823f4992415fd3373d61e

    SHA256

    55f8907e91226ef43a05583c7b4623b4e26994b62d20c8603975ccc1fa3b9409

    SHA512

    3d6006a3e82d00fe9bc443e940acc5df12ec84114fcbcf8fbc8099c085cb1229b21a217b7445129b50558bfef5100894686d7359eb80b7ef087b65c7be3bc6e9

  • /data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db
    Filesize

    16KB

    MD5

    eb426ad404bec715304973685ea00bf2

    SHA1

    7ab54c1df75e7b59c59d19c3a043c311c6a39807

    SHA256

    11882c3f828b04585d689a661bb5875fb94e90726d5d56c26206de0f9e285adc

    SHA512

    c6c50f7bf4205f730276fc0f3cf9945a800dd2c2ad6cbd3db90456d34bd7c34831c955020bea833099bccb933ca5662b7601a015f1060d9adfbb85b36e007e6b

  • /data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-journal
    Filesize

    512B

    MD5

    a14a161cc37215509559aa8c7c25fba3

    SHA1

    879e2302e9f87b60ece6967aab96f8629c49a23c

    SHA256

    3b8a8a878103ff5f9b24348be7a9e355eedbe37d4995d054e425df52d6f9e8ef

    SHA512

    00ada29cd41c8d3b314effbe207b3cfe3d6ee092dd95f3ac81722cad05b59c2fa81dfdb8de3d0bd8e2213df6f8da53fbab8fd9a6f6c9b6ecf36aded28b32bb1c

  • /data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-wal
    Filesize

    28KB

    MD5

    911bfe06203cea094061a627fad6d7f3

    SHA1

    4253e25ae2423ac2d8b16e5bbd04bc386694095f

    SHA256

    4b718778b28152fc014f2a3aa05d9001a341c743d3b41adb5a8d2ffa04b3c783

    SHA512

    34eb40a66815816ee71781486ccffcee74ae0ae5c81dcad59d29bea9ee577051edcd607022f61415ea52ad1826368c8d89275e028382d303c39f43fc6e0e75e5

  • /data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-wal
    Filesize

    4KB

    MD5

    3f73c4027bed8c01700b01ce19c8c822

    SHA1

    8ec26b7a77bdc4c3c2b4a1d0cce6c906657f7228

    SHA256

    a0bab46d7c0caff1be547bc3cb0eb15a25cdcd3b73a24f5134083d964411525d

    SHA512

    62b49d730e1b61cbbb917ccfdeb207ca668c8f3b1716a9ad2218078ee62e192a0542e3d0ce303986039671831f8c027fd82bd2bc082b3a2f00683386e7e41c54