Overview

overview

8

Static

static

6

b2f955d055...18.apk

android-9-x86

8

b2f955d055...18.apk

android-10-x64

8

b2f955d055...18.apk

android-11-x64

8

Analysis

  • max time kernel
    179s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    16/06/2024, 10:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    b2f955d055177fd63a4b0414c5a44da9_JaffaCakes118.apk
  • Size 5.9MB
  • Sample240616-maa8sstblk
  • SHA256 5139bf4007d436978af65cc37bbc293146cfb223d0e0d18b2b9be5a1e2098944
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
    evasion
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4563
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4638

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ZPkFS.log
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
        • Size 12KB
        • SHA256 2fdc21cf86652ce28c80cc566380c47db9a01ba21c941933617b051d1c6eb80b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        credentials.dat
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
        • Size 233B
        • SHA256 290d139dc5fc0674da408f7be038e5937dd4d845de91098d4aa98a2713a66274
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 20KB
        • SHA256 5262a813ced482dfa1422bb6d1b42e5cd5a2cb619c096d857307baad14ca932f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 20KB
        • SHA256 4f9e1f351a98373c91da8dc8d39a2c97cc810a72a3f3d731996e49bcb9e5fb9f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 8KB
        • SHA256 3657ad3df5a1eff9b61295c113e7f7b0f0180b4ab842356e97915bb996e524d4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 12KB
        • SHA256 777c5ef426d48c5ba3a92b95b410c58657cf53a7bbcbba98fa07d3b0a3650740
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 12KB
        • SHA256 05aaa7261b69d7cf943ae8656eea15d03dcc678b3227f9085ad6d270dae9d6e1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
        • Size 12KB
        • SHA256 e64b20e475b2976957e54b9158bdaf4e98a4360a01d5d299de73560994930955
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 a35dd173845225b1dabc4b07af445e48c3baa6ac6ec97f9ccae6b05b5dc23205
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 1ee69a7db3254934f82de898a473a449a8300c2bcd60e4e90e0e4fec5f1b3b3b
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 4cb4f64b641262b15125adb911760a06ccb6699b5d3001fa02a1820d68acfded
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 a3e1b13cc3286c271469d90739162e018b9169700590aac4ea45ff2e4b8edd00
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 4585d609e3a5f3bfd7867e6cee0b4a9acc62bf4070231ef4dd27e722828ab87c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 6adf744c55e697d918c491a1926b6162ed1b16932a5cbf253853a7509dc23362
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 82ec5c537644e895a917722bc2750c6567cf145e56c261b918b04ca968ac366d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 36KB
        • SHA256 4e0a1124f37d479cdc51031facb9849cbd31744eb5bdd4aa3794457c41459fd9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 346e70148b20a817a71f7e29b12a4e5931658d7f55acd703b01d7e5ef3217c13
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 87b4d14db94b26f87a45eadf8a585bbb2e8e6fb1aba11a93e35cfec1f1c39575
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 7405cb9e24888a26d4c759f81b94e8102683ef367041dfff5530bf4b2ceefb68
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 6f0047b32381d819204f8f8cb812f9fd98b2781323c0f5f295dce22c26086446
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 954d0da3b7ebb0460d7e3fd3928e34e5279bf16dad33d00ce3f0c475c4365b1f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 c6b5e306120b67126958c31df6430a6658d09dce395669b0124762a456e946b2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 fd7a90f69a22f2d505d94dd3a56fa8f4c270283346c68aa1a68cb433b7f856c6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 8b98e0d4cb2e1dba854f40c22ade6524ee498d124ac1fd001ee4b208ec69663b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db
        • Path /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 b901622a0ee2c3023f88ba88badde1d3f58f85103aa12da4f70f73b9a9578876
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download