2bee7630e1dbbffb1831928a2140e7b095ed08647b0b367a85b5134127a67e9c

Analysis

max time kernel
124s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
22-07-2024 16:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

63dd5f1f72bed8febf48c1351095bc92_JaffaCakes118.apk
Size

2.3MB
MD5

63dd5f1f72bed8febf48c1351095bc92
SHA1

05608082d004cdb9a1c636d0e3dc64240d2f5abe
SHA256

2bee7630e1dbbffb1831928a2140e7b095ed08647b0b367a85b5134127a67e9c
SHA512

bb58cc278d4b189cb358459a9822340526c93799fa35d8957f44b6f64753dfd00a5065521ed82e6390cfe28e4cc0012449a6c0b5e111bd5eda12f04676a0f6b2
SSDEEP

49152:A7x4j/jX2dQ1HEwVeK0EUmTX/Moa9KidQBey7PRVL8yM:A7x0/jX2dyVP0EUiX0oaoidNU3M

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.gijgjf.amtalee

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gijgjf.amtalee

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.gijgjf.amtalee

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.gijgjf.amtalee

com.gijgjf.amtalee
1⤵
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
PID:4608

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.gijgjf.amtalee/app_jc/b.jar

Filesize
8KB

MD5
53159d695a1526cdf17785054fb8a946

SHA1
e24f978f8aa284a72f54f33626b2461ae76e4916

SHA256
fb0ac299198975e3aff37b4887be77dcf53bfe77a4d1e0dd08c24f6602315051

SHA512
bc2ba38e181549ba624e340c0fd02780b66003a15ed7a7e2fde5c1626477223aec0345e27635cf5e448c8fc1c850a682c1fd793899609b73ec84c04ca4da345e

Download Submit
/data/user/0/com.gijgjf.amtalee/app_jc/c.jar

Filesize
40KB

MD5
2ef1b67b28ddae6d9f76d0205a5390ad

SHA1
fc18120e4c6054ea2cd83dfe63af27d3bb7726ce

SHA256
f5eef26042ff307ea38e7b5fbe87ce490798dfb4cb3216ee8da5b844180e8824

SHA512
f9315d0f2182288d34661828a72daf86643b3e4e71819c53ab568fa003bf4d74106825c8e8e3e08b10c6bfddb85148ee4622b5f79db9245e00dc631ae7536e75

Download Submit
/data/user/0/com.gijgjf.amtalee/databases/advideo.db

Filesize
16KB

MD5
9cc75eab5a5543bd286dfe6e31460c52

SHA1
74414af01c44c95a8ca290c3810cd40ec85957c8

SHA256
935fc37113a34f91759ee4aed48fef6f465ac9c78c57f894e9287c9d9474ad91

SHA512
380d6a15d9f3952e282f716f70e66d4a6c37afd171e62a26a26a2790e530b320a4f5941b67c2a3130cb9439624efa429d8b878e3fc692ce0200726d52a40f589

Download Submit
/data/user/0/com.gijgjf.amtalee/databases/advideo.db-journal

Filesize
512B

MD5
6ef0d518f9800cc7a0fcc0889a66cb90

SHA1
47acf5db3061d4e5d4216c93faec7b0621ca9a2d

SHA256
acd552fc486c1748a4c3b6903a0ebb78f94dc6a98c8119ef0c763bb25df97edf

SHA512
6879a2bb7c151ee7f8c31e589f02be81e112ce3af99c5307d60c3d05eccc77e3821ed0eea4a0806abb543f840ee513049a7ddcd49b1bd6bafca8dfa0fac3c762

Download Submit
/data/user/0/com.gijgjf.amtalee/databases/advideo.db-journal

Filesize
8KB

MD5
37fde09fd4ce8845b47d6eeab96107b7

SHA1
d41093e13b54cdbd3572dfbbeef20f973827de5b

SHA256
016eedefe01aafafe6e20bff165321c67e1106cce8b0cc5f2d18a56d840f6cd2

SHA512
0475bec545b413d67700516f451ad22f37fcd0ee99105786bb550d4be14f69a6b027f7648900c9d06a7185d8aa452727e5ff65fd9c2b0157adbae761888ddc1e

Download Submit
/data/user/0/com.gijgjf.amtalee/databases/advideo.db-journal

Filesize
8KB

MD5
0dd7c325e24ec7407c2fb68054afd245

SHA1
b0f7aa0b4e58c41967a81a57256c85a08f592ceb

SHA256
d829104d64bfaf4aa81ddfbb009c100f27bde4ec9b1fef612038e9de08e350db

SHA512
83371aedc4af3cd26af1b241a3be4a040bc66dd74c9f48f0231064bf56340a48eb36e473040a1e5be4f2873679fb6e53232a9ad63d48a70ef83c0788fedcc9dd

Download Submit
/data/user/0/com.gijgjf.amtalee/databases/downloads

Filesize
16KB

MD5
25e789992a726d032bd536e07398e23b

SHA1
a9dd8afe6763b8ebaf001c7336905164f97fa177

SHA256
adc84a900fab366754e4fc80d1479352d4500788906b0349726ea04db43eece7

SHA512
5935e670fb6f4b31d3e20963842fcfd833c9d54ba35d737322b9c4bd89b5c1363ba68b3a1972781a1677ad5de4f14a1643ba56f83f8aced1482af52c118cb7e3

Download Submit
/data/user/0/com.gijgjf.amtalee/databases/downloads-journal

Filesize
512B

MD5
762c84359c2ae7b8178880455ade726f

SHA1
2396d337afdf0a60d3df7b1c1f9c486baed60ae7

SHA256
2496f60e9f1ccaae6fa1c5160f9d4497d76ff09e34026b69dbc5988fd8783f03

SHA512
1f9e68432cb037f51421a5bea425352cabd78db9f236713868a65365ac5db4d13ac282947a3581086f5e9bea0812eb682415613988f1f3626c75d9f09631f2df

Download Submit
/data/user/0/com.gijgjf.amtalee/databases/downloads-journal

Filesize
8KB

MD5
3385135aa245aa0c1f9f855ac1fc8326

SHA1
96492f49261b55d36e5496ddd6602c88cdc38e96

SHA256
00f35c1c81472b5562a29dd08c981ce84529caee00ed8a224769aa4cb338e0f3

SHA512
c40212d4d13010afa95ca221193f38d8109a999ed4e20b45c1e0c3109c9375f3ff942b7182de7844d0f866b32ba20282477f4abaa5bdc359e4cd8a98c1dbd088

Download Submit
/data/user/0/com.gijgjf.amtalee/databases/downloads-journal

Filesize
8KB

MD5
1fb33ab25667f93c55443e89a82b12e6

SHA1
9729abf04977bb5c53fb5e7c1e9c91e7a9fc93b6

SHA256
4d569e4f2c4225b3611a85e75059e33b733d81aa159a5de5a4f9e1b57f017f8c

SHA512
8d67127635bc08845e30d00183edb62cfdbc2dcb6913128a4c0b923be2b9bf372cdb11b3d6feb6e69493ee37e0451c9cc1821711e22b26305c5429545ca88c8b

Download Submit
/data/user/0/com.gijgjf.amtalee/files/mobclick_agent_cached_com.gijgjf.amtalee

Filesize
89B

MD5
0787b58964bb2d0e98ab76d891bde0ce

SHA1
0704c1051e934ba34112983c27a7345232cfcf19

SHA256
3a0cd47c63bf580a93d371e1a2b8473d47025036fd0f830e493841206e4d6f5b

SHA512
1966d9ea5c8a776338c90dc563e1b085964706151a56935b1e583139c2d57a7a4c8eebe6916eca20cb51ed9df8c80d2168ce0efd36195784d99178a1987cea89

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads