c24ad8e67355cc7992a8b1854f38a16712846af7ac3099794609d7f731ffd944

Analysis

max time kernel
24s
max time network
147s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
15-06-2024 04:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

acecd706ac72ddea24f10225af620272_JaffaCakes118.apk
Size

1.9MB
MD5

acecd706ac72ddea24f10225af620272
SHA1

1d547345821aa3072fbc6b827ed49a09fe757f73
SHA256

c24ad8e67355cc7992a8b1854f38a16712846af7ac3099794609d7f731ffd944
SHA512

6e7a3bb26cc090a0bd4c4fb76eb03de93a22f561bccd6975e14968ae4dcccd84977ce3796b526bf60a625cf6e650d720ec22180e7ea90f6be908c08ca27e2490
SSDEEP

49152:YuNPUmV/S6XnP1QQGCx+tmM51Y0QguUTi73ZGH3:jNPUK/TP1QQGCx0Y1o

Score

8^/10

collection credential_access discovery evasion execution impact persistence stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

T1628.001

Processes:

com.topfreegames.bikeracefreeworld.hack

pid process

5010 com.topfreegames.bikeracefreeworld.hack
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.topfreegames.bikeracefreeworld.hack

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.topfreegames.bikeracefreeworld.hack

pid	process
5010	com.topfreegames.bikeracefreeworld.hack

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.topfreegames.bikeracefreeworld.hack

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

T1422

Processes:

com.topfreegames.bikeracefreeworld.hack

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.topfreegames.bikeracefreeworld.hack

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.topfreegames.bikeracefreeworld.hack

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.topfreegames.bikeracefreeworld.hack
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

T1603

Processes:

com.topfreegames.bikeracefreeworld.hack

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.topfreegames.bikeracefreeworld.hack
Checks CPU information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.topfreegames.bikeracefreeworld.hack

description ioc process

File opened for read /proc/cpuinfo com.topfreegames.bikeracefreeworld.hack
Checks memory information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.topfreegames.bikeracefreeworld.hack

description ioc process

File opened for read /proc/meminfo com.topfreegames.bikeracefreeworld.hack

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.topfreegames.bikeracefreeworld.hack

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.topfreegames.bikeracefreeworld.hack

description	ioc	process
File opened for read	/proc/cpuinfo	com.topfreegames.bikeracefreeworld.hack

description	ioc	process
File opened for read	/proc/meminfo	com.topfreegames.bikeracefreeworld.hack

com.topfreegames.bikeracefreeworld.hack
1⤵
- Removes its main activity from the application launcher
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5010

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db
Filesize
16KB

MD5
12627a2ec645c4a4bc50dba5903afd59

SHA1
504005c938517e61bcf68b65a055c2faba635c2e

SHA256
f177ffae9650eb4f407c2d9a510bb5a5abe1ece2fdfe24effc62478a1bfa5903

SHA512
7ff69589296e02383a217373399e75d8a82fa17146e4273f4c0eb630f096dd9f394a3324d60858b02f7e5cf177c82c6d966f5cbedb68ae6a98df7cc851b79cfd

Download Submit
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db
Filesize
16KB

MD5
1d8865c76157c28c5db09ef0e166539f

SHA1
bbff0262c3ff8779820802ea8501aa49fce3693d

SHA256
bc2b0f66b51e2385f0e0f8632337c83d751fd4e20caae1de21c33930c50ed275

SHA512
64024a6b250a24806d54e6878520027500cc07c7ff6808c623272193b9e0768fd04a543880837788fbf071b5c3f058349bb758813fd99117cd1eeeb44398e2f9

Download Submit
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-journal
Filesize
512B

MD5
931126e9df24ad3951bc1de9519ebf8e

SHA1
d30c5aac17ea532b163fafefb8a0404c8601eb3f

SHA256
8266214188bca8a7fa8430e4857519ee8339b38e33b6e132ee868a36391a2537

SHA512
9874ce8b8e646191f37f8759e98321ac4dfb915c4d3f412491fd3d50cb5c921b8d1df6514dc2e2c57cd6ca6f616a30260126ffea9c933aa93f61556bc29047e4

Download Submit
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-journal
Filesize
8KB

MD5
89da61c958ac631b1c4b282e6011f7c1

SHA1
82aada41bfddd7c47edcc4024e76502920fb2243

SHA256
9ca141b36f5632a4e49139b9a317de5f2ca4dc6c9d43be4eeb2fcfa4145345af

SHA512
62df9d1de6628184812e74d45d16bf10e7ee3c226d0aa31ece80494a2c2c4e12c1d8f43f035feebf399b0f9ef43de16107f6ec53955cb393c662742e9ca17389

Download Submit
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-journal
Filesize
8KB

MD5
160856b36a355c1d029ab0cce3080fd2

SHA1
c51d84bc02f6616e6561db800df08e79197590dc

SHA256
5cb1d6923e5d414d9de0f0c3261dd449fbf1a497b25405f3af840fdbdb289f9e

SHA512
c88b804c48dc29fb687551125d57ef1c53db7e6fd11a07a43aea8be50b2fd085c7dabb7061ecd8520883ea8902b727bd88003fabe2f336be1258e87085f4b1f0

Download Submit
/data/data/com.topfreegames.bikeracefreeworld.hack/databases/evernote_jobs.db-journal
Filesize
8KB

MD5
e7cd1c256da77cd9d7e6cf04e8958ce9

SHA1
7c386c13c6366064f3feb682303df82ae4ac5ec1

SHA256
beee24cb612cdef1fc579a25b32dcff7776c675979afe828a8e7d002e3cf47b5

SHA512
28cd1cd5e83a595cbc3506a3108ee7a55b8a1bc7a0732501852c36d1408798d971b2371c29f281ed7356e7051659feedd6f208e1af403cbcdf2ad29bb117a3a9

Download Submit