Analysis

  • max time kernel
    7s
  • max time network
    188s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    18/06/2024, 10:46

General

  • Target
    bb8600094e4351f47e99b13655390911_JaffaCakes118.apk
  • Size 6.2MB
  • Sample240618-mt8cmszele
  • SHA256 465a7e3320df58a9a604f39f286b1eed4c7086bb8a47ed60ea8a139736265772
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.bskyb.fbscore
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5193

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.im.db

        • Path /data/data/com.bskyb.fbscore/databases/com.im.db
        • Size 20KB
        • SHA256 38ac27905e804f4db7a03ff4b9eb1ccea066df0289e7f2fe455e66a1ae08f0d8
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db

        • Path /data/data/com.bskyb.fbscore/databases/com.im.db
        • Size 28KB
        • SHA256 a00329b3ff8961dcb5e96928069324613007fae65ca7e8bad2383f1d0490e9d6
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/data/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 512B
        • SHA256 a350a0b55778d0815ee3aa1d6ace6f2f1a725735f5865aec2b084d2ae194bc9b
        • MD5 SHA1 SHA512

        com.im.db-journal

        • Path /data/data/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 8KB
        • SHA256 428f3be00d4687578b51b6f31af171f8c0c91a3da5ff11f72495322da6e9cd0f
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/data/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 4KB
        • SHA256 71c4a0f023574a2b8e9834f4c78e4edca04a75fd70c549c001027c4b45309f6a
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/data/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 8KB
        • SHA256 45f7016afcb8284bf33aff883bbd5896db389898a7e39a6d454c1f793c040a8a
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/data/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 8KB
        • SHA256 33985b61815f1395c3bd2941961bb83648dd8fa6c8a9900ab16a5c25ecc34efe
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/data/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 8KB
        • SHA256 73034bde8b669ccfff7b45316c1a75754a147ce56f3475df41b15f490bab676d
        • MD5 SHA1 SHA512 SSDEEP

        66716593023D-0001-1449-0BADEBAE29B6BeginSession.cls_temp

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6BeginSession.cls_temp
        • Size 77B
        • SHA256 2546eadf87dbdecc65653d115bbd1a815efe7e8eefee469d79bfc42a4821b06e
        • MD5 SHA1 SHA512

        66716593023D-0001-1449-0BADEBAE29B6SessionApp.cls_temp

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6SessionApp.cls_temp
        • Size 113B
        • SHA256 d92089bdcabad37e5065a10e392d8be242a07ebc26cf15339d2747be0a172152
        • MD5 SHA1 SHA512

        66716593023D-0001-1449-0BADEBAE29B6SessionCrash.cls_temp

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6SessionCrash.cls_temp
        • Size 25KB
        • SHA256 97663cf6bc9058f9b5f7696fe49e2a16696eb6dedb5b25c5edafe1e2f1861f66
        • MD5 SHA1 SHA512 SSDEEP

        66716593023D-0001-1449-0BADEBAE29B6SessionDevice.cls_temp

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6SessionDevice.cls_temp
        • Size 131B
        • SHA256 a9ec4ffd42febcebf486c66036f5cdd96ddc70e1a14094f861ac59d00d71bf9d
        • MD5 SHA1 SHA512

        66716593023D-0001-1449-0BADEBAE29B6SessionOS.cls_temp

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6SessionOS.cls_temp
        • Size 15B
        • SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
        • MD5 SHA1 SHA512

        66716598006F-0002-1449-0BADEBAE29B6BeginSession.cls_temp

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716598006F-0002-1449-0BADEBAE29B6BeginSession.cls_temp
        • Size 77B
        • SHA256 18a40aea085c5417ca99f9c6e68816c39e6eb50485f369a750c9d8818d4abe99
        • MD5 SHA1 SHA512

        session_analytics.tap

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 475B
        • SHA256 e1c3ab30d1a98e159f47509ab64b4adcc1ff699994dd02f1244a08a75d5c943e
        • MD5 SHA1 SHA512

        session_analytics.tap

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 1KB
        • SHA256 efc2bbfb4b8c8f15a7a5ad64f4e5faf5105764e790709d614deed8ea6a2a4c10
        • MD5 SHA1 SHA512

        session_analytics.tap.tmp

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        sa_5c893900-da88-4713-bfae-5b357aa40fea_1718707605852.tap

        • Path /data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_5c893900-da88-4713-bfae-5b357aa40fea_1718707605852.tap
        • Size 374B
        • SHA256 a841456ef24691d5983ab59c84f404764cab880fae3ad2275f0e7462fe9ff8c5
        • MD5 SHA1 SHA512

        ua_analytics.db

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db
        • Size 20KB
        • SHA256 43031296313da7805ac71ffee633a1d0eb9c961865375a5d11e5dbf331feccfe
        • MD5 SHA1 SHA512 SSDEEP

        ua_analytics.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal
        • Size 512B
        • SHA256 ca51409b82d73ea9cb7b769413c635faf1da9abe802253ae0a00922d1675dd5b
        • MD5 SHA1 SHA512

        ua_analytics.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal
        • Size 8KB
        • SHA256 4fc000959e576b2006b438d498759c5033683272a071f923674bbef271d18d13
        • MD5 SHA1 SHA512 SSDEEP

        ua_analytics.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal
        • Size 8KB
        • SHA256 d390bdedeb21e8fbbbb1463f99c0a53dd749f3c3ef8986fe4482681f46aa5601
        • MD5 SHA1 SHA512 SSDEEP

        ua_analytics.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal
        • Size 12KB
        • SHA256 0cc653539c0d67328ea9d9f1632ddd4b2d929b7f7915e9941c30a12285b745ae
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db
        • Size 20KB
        • SHA256 43f53a2f421e58750646dcdb91f584ab6d7f26b65614761a1de527789d2a4229
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 12KB
        • SHA256 b8d3470c5d8d51422c3d26c4b502563fb4abd696381167e9ca2e0fb1b56c1c63
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 12KB
        • SHA256 9bd89e51e54649e439173032b230d6e5b257d954295ef4177bd69d228637fbf8
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 512B
        • SHA256 980b5d7e2aa27436249c34c2636c4ae03a7ccf8a00676a8775f2d9a98d13b108
        • MD5 SHA1 SHA512

        ua_preferences.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 8KB
        • SHA256 ecbf35b8a1babbbd5df06f7f54cea07ef08f0ce338707d8827347beff1b77d3a
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 8KB
        • SHA256 538fa6b95de0f625aaf5a54b07c63ccad6974e1f6b325fe5b122d76f50ff11f4
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 12KB
        • SHA256 260855c8f69c919f15831d148370060427b5970ac4931937d1eaf7ab965501d7
        • MD5 SHA1 SHA512 SSDEEP

        ua_richpush.db

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db
        • Size 24KB
        • SHA256 0ff3f05f72c1976dff4b65e4ced9315f4d2427ee4ae89f02c0239da550cc706e
        • MD5 SHA1 SHA512 SSDEEP

        ua_richpush.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal
        • Size 512B
        • SHA256 9b92eb5a0b98431ace8b4a1b9b9fa399eaece5b8072487994ecd5bc366c64595
        • MD5 SHA1 SHA512

        ua_richpush.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal
        • Size 8KB
        • SHA256 d8014f3d10e2c6c0b27a1afc73fe8b3d09bd958c0ad644ef85b7491da790ba57
        • MD5 SHA1 SHA512 SSDEEP

        ua_richpush.db-journal

        • Path /data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal
        • Size 8KB
        • SHA256 941fb0f3798dcbc03772fa6454887051c5b3ae32e0890dcc20e5c9546fd07fb5
        • MD5 SHA1 SHA512 SSDEEP