Analysis

  • max time kernel
    45s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    18-06-2024 09:15

General

  • Target

    baf7ab9e15c909bb7845be1c6286ae0f_JaffaCakes118.apk

  • Size

    3.9MB

  • MD5

    baf7ab9e15c909bb7845be1c6286ae0f

  • SHA1

    b1b536d4034e81a4f0294fa3428b46deeb24f13a

  • SHA256

    8f4d0b466aa44e0797fdf863eb7af1e637ecd788c93e6fd0eb4396565530d91f

  • SHA512

    2653211d77df81b3bcc0afcd5f9371ef9608cee78d2add8f3d60dea6ff363c8cecbeb71284228110756d301b9d94a6efdc8ef01df4aa9c05f1b18f76bc2dc9df

  • SSDEEP

    98304:wMl5XZ+zVi6yck8JLXETI84W4PzQq7Mb9P3Gy1MxHa8gbfxK:wMjZ+e38KTV4PzQqY1MxxgLxK

Score
7/10

Malware Config

Signatures

  • Reads the contacts stored on the device. 1 TTPs 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Reads device software version 1 TTPs 1 IoCs

    Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).

Processes

  • com.cc
    1⤵
    • Reads the contacts stored on the device.
    • Queries information about active data network
    • Reads device software version
    PID:4403

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/cc/setting/CallPictureSetting2.cc

    Filesize

    403B

    MD5

    86b336be6004420c4918484016d7682c

    SHA1

    20735fec3c9c4daa7741d75591462f67b3344172

    SHA256

    c31ce94ce1f79c7f019ea128995ffd29537428f29f2ab93408be796459cf1008

    SHA512

    1781816ec51ea90491df81b2c786157a85604dc59cfee657776467c4b3071f3f17ef3db57e8163ef7ff4f8633386270a211cb4de84eae15e0c08471752881196

  • /storage/emulated/0/cc/setting/CommonSetting.cc

    Filesize

    1KB

    MD5

    2076e08e44b3a60cbd7fe772c0704700

    SHA1

    280bce9fe2233f145173c6aa2924c0c269e6f4ff

    SHA256

    b66c7e30a6782d9cfd1d9c574dc8eee9b4b8248ce4ee409e5b9e534a0adb6e48

    SHA512

    3b5aa88251c528b9d2f0d585de953a4706f5ed7d591f3d69aaea2f5ee6f08cd7aa2e17af137273d1ac215c44da6bcf37a75cf42790f7ca5d92d709c9a96e4456

  • /storage/emulated/0/cc/setting/CommonSetting.cc

    Filesize

    1KB

    MD5

    0207a97373ffb490dcaf38e5852568e4

    SHA1

    d8b0d8ec055f5166556d02544cb4bf87400ddea0

    SHA256

    b0eb061c18ae3dd03bcf89545dcbebfe407cc799433328fcada446c33c9bbc2b

    SHA512

    8298377633bfdd8cf971109913e9f0f1a22cf1adacb8932731133ebc6fdf84388cd67e089b9c7308a30adbfb008d018161699e298847139913b7492f12472326

  • /storage/emulated/0/cc/setting/CommonSetting.cc

    Filesize

    1KB

    MD5

    2a44ee87eebf27c171b0561f595fc166

    SHA1

    5909fe48b0cb2a8a6e50393cc998f62ec4767947

    SHA256

    340c2add2997a1350761b47b0ed2e78fdcba9d194ae418322bf4f059f27c0fe6

    SHA512

    074596e636ebfa2ce3763a21aa449f82bf1b47ca4b986b6dc655fae8796a02051da4794e14d75e6799969fc28d5464032ecd542f9759a41e3eeb0dc81ce25b6e

  • /storage/emulated/0/cc/setting/CommonSetting.cc

    Filesize

    1KB

    MD5

    98949d66aedab11677d2ac7acf8844ea

    SHA1

    65c423cfae5f2b55f3e6f56177d76c0bacc8ef67

    SHA256

    7d6335d69a2aa5cb528a1b9561308d79b87af6d5735f3a12501226640f9323b6

    SHA512

    66d5982c3da2997bb956d2942965774257d6fd88cf82f2999c35c168a77d7e282c03bf24b9c339e96af9db2142ab85af3daa417e332c1ce35ddeac280a97910d

  • /storage/emulated/0/cc/setting/MobileSeg.dat.tmp

    Filesize

    827KB

    MD5

    a90b99ca65e550aba27ad24d3b18f69e

    SHA1

    a958eda542b9ed4beeffc3e55f32d18403cd9f71

    SHA256

    00dbeeb7ad7a9867839e7bad81efeb5a9860dda1764e51d5c6c35b0ca2404e4b

    SHA512

    7ca3f4e8cdaf4c7eecbb61e3a6f5927d35b674f56c83d496d170f37320e0812b15f9a5f3cc35d0818aaf7e0bc331b5ad010b6efa69577affd553228ce357ceee

  • /storage/emulated/0/cc/setting/PhoneSetting.cc

    Filesize

    664B

    MD5

    33293254492e47b33dba7b124afdbcb6

    SHA1

    8c60c28ec4c636fbaa8525ae0bb7a7db3068940a

    SHA256

    222fe7c86f9c2cd173ecf3b22e548ae04263db42c814f0fee19e15cd99f05f48

    SHA512

    25facbc96856b3c3feb719f49b4276d8d46778b55cbcc988f9d9b8b914e98dbe4d8b570e731881408d400654bb505b5103f5b3c2ad3ee58c9849e9587102db4a

  • /storage/emulated/0/cc/task/sendTaskEventGetSIReload.tsk

    Filesize

    1KB

    MD5

    82f6c11d2b7f45b6c01ab62f42037074

    SHA1

    ed813b7a66a06d2c59a620c128dded39305f985e

    SHA256

    7bc92563587a450770d3ed006a41221ba4205a7013a930b125626d7b28d60eb4

    SHA512

    d1061b258d2d74626fe45687dcda81c45a1e06572e0756e3a6c486014c989ef4fa2e01fde2bf657f3240f376f3ecd9c9d259da1bc9f09d0730b682798b76e53d

  • /storage/emulated/0/cc/task/sendTaskEventGetSIReload.tsk

    Filesize

    1KB

    MD5

    43f40b13ddf14f243e0eb951bf29e842

    SHA1

    193c03eb51e520960fefdad67315c47c337c4559

    SHA256

    30829853d58cbff96125bf83c276556e12a00cbb95ff192ce73e6902d8402918

    SHA512

    3289920007b204b65d689e8d8957e0c286af50417a0b966467b06a8ebe086686ecead366b279f0e197a8712e4ca67b5e3f0e4b0b644ff8d2129f22a7d1147a50

  • /storage/emulated/0/cc/task/sendTaskEventGetSIReload.tsk

    Filesize

    1KB

    MD5

    298cd2825ca537a2670c1bf78084f8b7

    SHA1

    599ea0c2216729de994ed7d708c7b08e3af984b1

    SHA256

    3d1ea9722f4b847eabcfc5997f90fb2a5fa33fdd6198f8925cf38d9d1d2fc9f7

    SHA512

    cb684e0fbfc748f0b1626925987e0f5feda79d16fa54dc9c543245138b06a2812b9d2d820b6b0cbec6e3311560634b1f34b4c1349a0e8c324b8511ec38d8963b