Analysis
-
max time kernel
24s -
max time network
141s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
15-06-2024 04:47
Static task
static1
Behavioral task
behavioral1
Sample
acecd706ac72ddea24f10225af620272_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
acecd706ac72ddea24f10225af620272_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
acecd706ac72ddea24f10225af620272_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
acecd706ac72ddea24f10225af620272_JaffaCakes118.apk
-
Size
1.9MB
-
MD5
acecd706ac72ddea24f10225af620272
-
SHA1
1d547345821aa3072fbc6b827ed49a09fe757f73
-
SHA256
c24ad8e67355cc7992a8b1854f38a16712846af7ac3099794609d7f731ffd944
-
SHA512
6e7a3bb26cc090a0bd4c4fb76eb03de93a22f561bccd6975e14968ae4dcccd84977ce3796b526bf60a625cf6e650d720ec22180e7ea90f6be908c08ca27e2490
-
SSDEEP
49152:YuNPUmV/S6XnP1QQGCx+tmM51Y0QguUTi73ZGH3:jNPUK/TP1QQGCx0Y1o
Malware Config
Signatures
-
Processes:
com.topfreegames.bikeracefreeworld.hackpid process 4206 com.topfreegames.bikeracefreeworld.hack -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.topfreegames.bikeracefreeworld.hackdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.topfreegames.bikeracefreeworld.hack -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.topfreegames.bikeracefreeworld.hackdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.topfreegames.bikeracefreeworld.hack -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes:
com.topfreegames.bikeracefreeworld.hackdescription ioc process Framework service call android.app.job.IJobScheduler.schedule com.topfreegames.bikeracefreeworld.hack -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.topfreegames.bikeracefreeworld.hack1⤵
- Removes its main activity from the application launcher
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.dbFilesize
16KB
MD55d85664f8e614fcaef42be2e6f649027
SHA109c6288922102f6114a823f4992415fd3373d61e
SHA25655f8907e91226ef43a05583c7b4623b4e26994b62d20c8603975ccc1fa3b9409
SHA5123d6006a3e82d00fe9bc443e940acc5df12ec84114fcbcf8fbc8099c085cb1229b21a217b7445129b50558bfef5100894686d7359eb80b7ef087b65c7be3bc6e9
-
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.dbFilesize
16KB
MD5eb426ad404bec715304973685ea00bf2
SHA17ab54c1df75e7b59c59d19c3a043c311c6a39807
SHA25611882c3f828b04585d689a661bb5875fb94e90726d5d56c26206de0f9e285adc
SHA512c6c50f7bf4205f730276fc0f3cf9945a800dd2c2ad6cbd3db90456d34bd7c34831c955020bea833099bccb933ca5662b7601a015f1060d9adfbb85b36e007e6b
-
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-journalFilesize
512B
MD5a14a161cc37215509559aa8c7c25fba3
SHA1879e2302e9f87b60ece6967aab96f8629c49a23c
SHA2563b8a8a878103ff5f9b24348be7a9e355eedbe37d4995d054e425df52d6f9e8ef
SHA51200ada29cd41c8d3b314effbe207b3cfe3d6ee092dd95f3ac81722cad05b59c2fa81dfdb8de3d0bd8e2213df6f8da53fbab8fd9a6f6c9b6ecf36aded28b32bb1c
-
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-walFilesize
28KB
MD5911bfe06203cea094061a627fad6d7f3
SHA14253e25ae2423ac2d8b16e5bbd04bc386694095f
SHA2564b718778b28152fc014f2a3aa05d9001a341c743d3b41adb5a8d2ffa04b3c783
SHA51234eb40a66815816ee71781486ccffcee74ae0ae5c81dcad59d29bea9ee577051edcd607022f61415ea52ad1826368c8d89275e028382d303c39f43fc6e0e75e5
-
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-walFilesize
4KB
MD53f73c4027bed8c01700b01ce19c8c822
SHA18ec26b7a77bdc4c3c2b4a1d0cce6c906657f7228
SHA256a0bab46d7c0caff1be547bc3cb0eb15a25cdcd3b73a24f5134083d964411525d
SHA51262b49d730e1b61cbbb917ccfdeb207ca668c8f3b1716a9ad2218078ee62e192a0542e3d0ce303986039671831f8c027fd82bd2bc082b3a2f00683386e7e41c54