Analysis

  • max time kernel
    7s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    18/06/2024, 10:46

General

  • Target
    bb8600094e4351f47e99b13655390911_JaffaCakes118.apk
  • Size 6.2MB
  • Sample240618-mt8cmszele
  • SHA256 465a7e3320df58a9a604f39f286b1eed4c7086bb8a47ed60ea8a139736265772
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.bskyb.fbscore
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4460

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.im.db

        • Path /data/user/0/com.bskyb.fbscore/databases/com.im.db
        • Size 20KB
        • SHA256 c01f6ccb167217afe0b8fb282bb78c8c8980a75f758bcd55edc5d2cf7658ac5b
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db

        • Path /data/user/0/com.bskyb.fbscore/databases/com.im.db
        • Size 28KB
        • SHA256 f55a71938a6d87d8318bf94207cbb04fdd3ac9fc9d9de70851cfbff946eacc76
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/user/0/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 512B
        • SHA256 c8807aa5eb7e46e2753da6ff8f64019676cee7dbcec17473c88fc5764f8f6f62
        • MD5 SHA1 SHA512

        com.im.db-journal

        • Path /data/user/0/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 8KB
        • SHA256 d416964d3940a1c85dee206af5ebdbbb11efca38dd32878faa7415b6eef0dba4
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/user/0/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 4KB
        • SHA256 0b65776df3f45e9a8d5fbedca258383683d01548caf54e3cab7ffa1970396cf6
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/user/0/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 8KB
        • SHA256 00a0918f53b0d1070912f1130eae0eb926256e61983ad9f1330ea5380a73c030
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/user/0/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 8KB
        • SHA256 fa3e8f4cdaac579cd50ed0711512d263525564730ba2aa37199ee06db997fa18
        • MD5 SHA1 SHA512 SSDEEP

        com.im.db-journal

        • Path /data/user/0/com.bskyb.fbscore/databases/com.im.db-journal
        • Size 8KB
        • SHA256 ebd2988b12c99c0e37ca660dcb089ccbcc34e17353d350bcdc6ff7deed544e04
        • MD5 SHA1 SHA512 SSDEEP

        667165960266-0001-116C-13977737A29FBeginSession.cls_temp

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FBeginSession.cls_temp
        • Size 77B
        • SHA256 e3acb2e2c656e0f44cc0682394e0767af392027ea9ba6145ffba9bea45a23c8a
        • MD5 SHA1 SHA512

        667165960266-0001-116C-13977737A29FSessionApp.cls_temp

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FSessionApp.cls_temp
        • Size 113B
        • SHA256 fe9f754ed737bc4f5314b851129f05a6a65df505925fb009cbf97718ceff875e
        • MD5 SHA1 SHA512

        667165960266-0001-116C-13977737A29FSessionCrash.cls_temp

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FSessionCrash.cls_temp
        • Size 24KB
        • SHA256 6241f3dee872d235ae82987cec30f92a91ec5e999f878612a1d8333e64e2f472
        • MD5 SHA1 SHA512 SSDEEP

        667165960266-0001-116C-13977737A29FSessionDevice.cls_temp

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FSessionDevice.cls_temp
        • Size 131B
        • SHA256 78563b6db7ca6b69a71403c19033c5fd13a2096bf935ad5a90749dd204fb5363
        • MD5 SHA1 SHA512

        667165960266-0001-116C-13977737A29FSessionOS.cls_temp

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FSessionOS.cls_temp
        • Size 15B
        • SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
        • MD5 SHA1 SHA512

        6671659B0324-0002-116C-13977737A29FBeginSession.cls_temp

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6671659B0324-0002-116C-13977737A29FBeginSession.cls_temp
        • Size 77B
        • SHA256 45793bce225057defe5a63b236d0471d0ab906a975fc05cea7044d5cc0a65bf2
        • MD5 SHA1 SHA512

        session_analytics.tap

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 475B
        • SHA256 f97791c4aa1d2dd339cabe8ca5fb5231823045cf9b4cd2c5f708a76f065113df
        • MD5 SHA1 SHA512

        session_analytics.tap

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 1KB
        • SHA256 baf41b02cb949d20a32f4e1d40074f760d2ed50a15a5cbd8ec0a24423372a839
        • MD5 SHA1 SHA512

        session_analytics.tap.tmp

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        sa_b468870f-2d78-4fdc-92ca-1eb2abd23ac5_1718707609279.tap

        • Path /data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_b468870f-2d78-4fdc-92ca-1eb2abd23ac5_1718707609279.tap
        • Size 375B
        • SHA256 b2c55753c74e6d39fe56ced687aa96840efc18eebb08630f93106fa11af88a3f
        • MD5 SHA1 SHA512

        ua_analytics.db

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db
        • Size 20KB
        • SHA256 fc4d8bed112698902489fd53e17f6aacbb08882fe827e8386ec79b80bf7e6916
        • MD5 SHA1 SHA512 SSDEEP

        ua_analytics.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal
        • Size 512B
        • SHA256 d3f94acf1dd3be100b5012300b5824ceded03fba7cbf04c32c6db544fdd2a7ca
        • MD5 SHA1 SHA512

        ua_analytics.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal
        • Size 8KB
        • SHA256 22f9decddb816a7b4616374dc9729db8723ed246f20faf7533d67bc1611a2772
        • MD5 SHA1 SHA512 SSDEEP

        ua_analytics.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal
        • Size 8KB
        • SHA256 acbf11ec4aa9e58b0694ec06ef65f151aa315224cd72b11ab38f15faadea98d8
        • MD5 SHA1 SHA512 SSDEEP

        ua_analytics.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal
        • Size 12KB
        • SHA256 3267160d6398f6c0434f6add50225d76d926ffa16111ab4a097ca31ac94ac332
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db
        • Size 20KB
        • SHA256 0613c1057238c79251c87da8248793374ea92d94ba1b9149f472ec32fbe47497
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 12KB
        • SHA256 f2d3e3b17da3ce826c09b4557f8b06d3380a3f6ee7c7677af6d57b916cea7468
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 12KB
        • SHA256 d95663251dfd7ee81cd8c5505973cc0d639b978b2dcb49cec8978e0e7c002d41
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 512B
        • SHA256 dff43e8f173964020959416113c3f27ac70eef30ac6ecdc85f907d2eeed06f51
        • MD5 SHA1 SHA512

        ua_preferences.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 8KB
        • SHA256 d341c2f89ee782232059e9243bda7697f130791c6c1bd86574bf70c06fae933c
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 8KB
        • SHA256 3fec8d5ca9ef5ccc06097eae6da83e916ddcc1a626121ee75e82f9cbb8e13011
        • MD5 SHA1 SHA512 SSDEEP

        ua_preferences.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal
        • Size 12KB
        • SHA256 73e4f59ef856b731631cf5f7ae3e8ec9117a0dd8800de1524b0e498a251122b4
        • MD5 SHA1 SHA512 SSDEEP

        ua_richpush.db

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db
        • Size 24KB
        • SHA256 1e4d6c791a2582c72af50d75f60ede656580322f5c83e99436687d088f70fcd7
        • MD5 SHA1 SHA512 SSDEEP

        ua_richpush.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal
        • Size 8KB
        • SHA256 634ad9a2c2a03de6eff9699c3e57a9834cf56a9479356a2669cb345ccacb93bf
        • MD5 SHA1 SHA512 SSDEEP

        ua_richpush.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal
        • Size 512B
        • SHA256 ca1628c5546a654566075365bd3b6fd355809a43ee6fe9f2c21214d576c02807
        • MD5 SHA1 SHA512

        ua_richpush.db-journal

        • Path /data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal
        • Size 8KB
        • SHA256 70eb6163050ced18d0b9e1e803d978c5f64fe37352582ddb07ae7f8f864dbf70
        • MD5 SHA1 SHA512 SSDEEP