Analysis

  • max time kernel
    165s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    18-06-2024 12:35

General

  • Target

    bbf5a3042283fb27de1067e4519548de_JaffaCakes118.apk

  • Size

    151KB

  • MD5

    bbf5a3042283fb27de1067e4519548de

  • SHA1

    53e19c611fc2f0f22acbc5539d80e812bf34d5ef

  • SHA256

    b569285906d15b1929ab18d9fd6dd903893167f9b4992f4f14cb227cccb16f5f

  • SHA512

    18fee642ce59e389fff799398f106f9d94d12766573fde502da8ee3b6a6910df8fb1f240d1b22e065139a1b1f41498e65ca084fe868dbf33c21bd06a8ac004b2

  • SSDEEP

    3072:ycn2JtlOon0KPZg9l79Dtm3jQdb/mjS84AY9n:IXn1q3pxOjS8W9n

Malware Config

Signatures

Processes

  • com.tlightsky.photomaker
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Requests cell location
    • Queries information about active data network
    • Checks memory information
    PID:4489

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tlightsky.photomaker/databases/http_auth.db

    Filesize

    20KB

    MD5

    ed710a8968441282a5939621c2771927

    SHA1

    b6ac28b3e32ea66790c52d6934608b5e71f3d5b8

    SHA256

    6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2

    SHA512

    547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364

  • /data/user/0/com.tlightsky.photomaker/databases/http_auth.db-journal

    Filesize

    512B

    MD5

    27622748eb25d9001644304692af2657

    SHA1

    93485857d5bf61c92d6b4aac772845c0ebc443c9

    SHA256

    738133f54d16d7c4bf8687586447d8a3c5d0ce1de07d3773b1937834ef5079b8

    SHA512

    32b53ee87fdb8af51ac40444ea05c292a80cea997d1ace31f9eb14fd320e11f04ffebe46545620552f1b618d590206f258665081fa16f8eb3f926bc0ba13d81a

  • /data/user/0/com.tlightsky.photomaker/databases/http_auth.db-journal

    Filesize

    8KB

    MD5

    394fd077a7d86b3c37e3222c20ac2ecf

    SHA1

    0a3aceeb767a98a3002ec959384100d6a2812246

    SHA256

    3f1fb6f743f4eed05751abb37fa3b6fed564acd8bd814cb023b189f811c7181c

    SHA512

    b12ddcadab169de211bc9db06c4e91618b7670d7c763558c50084885adcf6dedd7c2f64d037720a99da9ec083b196fe88572da64c23041c524181910ae05b545

  • /data/user/0/com.tlightsky.photomaker/databases/http_auth.db-journal

    Filesize

    8KB

    MD5

    e0b9ef8624f2faf2ec9ca43218005a5c

    SHA1

    92257bcde9e871c6528e2edf259de12d6084a6b5

    SHA256

    0ce98507b94dc850316a4b76d94ca2ee517f2753d8b541be3abad0cabf321586

    SHA512

    4fa1fa4fcebddb9ade920eae2d1bb46e633c645899004a22538aad4e5eb773c42fbacdc7f932a7aa7b87cbff08d4ebdd8261dd2f87f45b04d5b1bddf38feb9ec