03613b9d0aa93e203dfab11b6740e7092d5ddd320acb3f02423b2fe5f2cd6a91

Analysis

max time kernel
167s
max time network
168s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
15/06/2024, 07:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ad553de80b109e71d4cc1aa91fe28d79_JaffaCakes118.apk
Size

4.1MB
MD5

ad553de80b109e71d4cc1aa91fe28d79
SHA1

3bff1bcb130cb6c4dea9dbdea301ec6a4f19cc8d
SHA256

03613b9d0aa93e203dfab11b6740e7092d5ddd320acb3f02423b2fe5f2cd6a91
SHA512

aab24d7f16fc201a5a525cde920081071276399171be9680a5fce1d8d456d8fefe945030bbb23564d5b612ef6a16d498c0245005e4b99810d983518dbd4bf4e6
SSDEEP

98304:hgicW0fky4najIzeOr5rtoOG+gL9deU2/33yT:h7D0fky4naUzeOrJtoVVLt+Y

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.javgame.gamehall

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.javgame.gamehall

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
8	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.javgame.gamehall

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.javgame.gamehall

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.javgame.gamehall

com.javgame.gamehall
1⤵
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
PID:4168

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.javgame.gamehall/databases/com.javgame.gamehall.db

Filesize
88KB

MD5
4b26258bfccf5f45de8b374f0399b1c7

SHA1
15fb59c72002f85b927933bf70fdaa53299e7073

SHA256
d6ad78d5c70ea59a5a198feede14c4144a10679aef4f0bf53c969057ea0c7eff

SHA512
04ef7001530e021f69b90b6dfcd40c757dcb2e661162b3deb119842b25a98d1fb145c6cd360968e54dd2391a40f3759ecebae82247c8ac73ea187a184d8bae8b

Download Submit
/data/data/com.javgame.gamehall/databases/com.javgame.gamehall.db-journal

Filesize
512B

MD5
e4e419a21e8b3300bd86c0578740f26c

SHA1
d01da8bafe4a5e7be7e692a6156b12739a5ea9b7

SHA256
8619fd61d81a43315b8cdef53da84c94d1347cfd3feeccd48a80654ebb539cac

SHA512
1b5d6d9901ec7dc5e57f67a1e120197779ec6d5ac403494b06c2fe306959dffbeee7388deccaebe1cd70dc98be33e3c430d106197b4554775c3c6e3a57ce4afe

Download Submit
/data/data/com.javgame.gamehall/databases/com.javgame.gamehall.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.javgame.gamehall/databases/com.javgame.gamehall.db-wal

Filesize
100KB

MD5
e18055e2366e866801772b85fb2097c8

SHA1
fd4b57e571b12b6f745830217eb9ed1fc56d1670

SHA256
37422d3023e069a78e9860f7a0afdbbf515c596fc62b84e4d83d8d256f639329

SHA512
e2e9288803d84932d442492a5b3bdae90193262de4bed3b1a4fc7e54904f7c30d3711d9e05c62537a9d55f870bb5fbeca25203b453f8cf599a62aedd141d5364

Download Submit
/data/data/com.javgame.gamehall/files/__local_last_session.json

Filesize
106B

MD5
bb4e6bee8328b56c24759a91e0a7f99d

SHA1
073dd2aa3c5b1b23523db4c2f20e10eb551e84e3

SHA256
30dfc702507fe8e3993d55fa7c3784efe37cf7339c880641cca0d94137458178

SHA512
c0ca46f9c8f2b1e1562ecf7f7d7fcce71a79aee1df79ec9649266042b31dc6dfdb0f098eb834fd4c8b713a87f07c2794784534d218fa4bad7ec5fc21d8e33426

Download Submit
/data/data/com.javgame.gamehall/files/__local_stat_cache.json

Filesize
25B

MD5
2d805b13f2f28dc3ca9bbcc000f49bb5

SHA1
9eac165b4d81258fd3967cde5cc53b53b1dabcb1

SHA256
c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

SHA512
5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

Download Submit
/data/data/com.javgame.gamehall/files/mobclick_agent_cached_com.javgame.gamehall

Filesize
204B

MD5
81dfb852445d8f4cad83321ea9fcd530

SHA1
47add3553c857288ad99308575784c8ea68fcfad

SHA256
c119645c8a6cb0990970fd40831d2842a44c2ef7e7f874eb64bf74f32eea4479

SHA512
c3cd3e6a6ba3a27cb3760d2d9c44b02a2ba3de4964f62407d5587c80f1e04803714902c244f8a4d9f972c1b7af57907cd5a191bb5555f3d21af6d8677d6e87c1

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads