Analysis

  • max time kernel
    25s
  • max time network
    188s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    25/07/2024, 15:20

General

  • Target

    702382cc308df79357839ec1abdd9614_JaffaCakes118.apk

  • Size

    4.6MB

  • MD5

    702382cc308df79357839ec1abdd9614

  • SHA1

    9a79879c29e4c2fa33905fa83244768f764af278

  • SHA256

    48f6e4fc55dd54db1d543519734d81995d8d6150330c2c0c0bf84270fd8e6a68

  • SHA512

    e5a691b01fcd9ebb17024f6ab22b1877d5ba262f14b571ba882d383e9c984385234e575fee228b9b26e0c8b8ced20f11bdf465fc6bc29b2b4ffbbd201f8fcad2

  • SSDEEP

    98304:gb5B6zBxIoOVd2qbXydVI0JdngLY6WTsE+g48qV6rm64z:ePoOdbXmVIwd0WwEG4Tk

Malware Config

Signatures

Processes

  • com.smartapp.makhfi
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:4960

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.smartapp.makhfi/databases/__pushe_base_lib_db

          Filesize

          24KB

          MD5

          995163ae3fdbcd11c24caa86f021db91

          SHA1

          d889c4ba74d5ab8d3c44fa25bd5ee31cba738b95

          SHA256

          68a19843dd978465c4a86675093618bbecd50fea3c0088b1a38e5205d466b364

          SHA512

          06fd4aa94f7e2e59ab580020e5499fd00f76dd91ab7148392541d09dde73a8c20d80687a33db57c990fad67946e5096d99124d4b9b842d37566fa0c3790c15ef

        • /data/data/com.smartapp.makhfi/databases/__pushe_base_lib_db-journal

          Filesize

          8KB

          MD5

          7d4b2a028d6b41644e86be0cf2676ebf

          SHA1

          14f00055012aea08854a9b649640aba8dc78eaad

          SHA256

          a5d4b0cea2bf45d98c2e518f1202cb72f899192cc8a7b3fe5757de5b0c0a85e5

          SHA512

          bafed03759737eea2215888359a7d83d0725c7fe2c49fce32b1a550ebb7d5dad0bf6373122d2558715ae008a762c470e70775bd6efcf1e2fd54ad612c1706769

        • /data/data/com.smartapp.makhfi/databases/__pushe_base_lib_db-journal

          Filesize

          8KB

          MD5

          6568b6457f94d37cf987e05411897ce9

          SHA1

          502ab926b1e8b3d36837108a4ec03c44e3c3c1d7

          SHA256

          4351657f4213582593c96b8fe9059a8e578f5026eec734e2b79ec76c2fd6f747

          SHA512

          615c5949d559da81e69eba276c94fb040e6c8137f45ec13cd3a136dfe2783ec783c76d569d1c4481bc47f0c8261fd2a2f0b2fa9e47f9c423f0b6665b3ffbb26d

        • /data/data/com.smartapp.makhfi/databases/__pushe_base_lib_db-journal

          Filesize

          8KB

          MD5

          6169bbc5386b9447b65e1865c383317f

          SHA1

          8b0f7ec36209aca72c3eb0ef3ac19260cdaab2b7

          SHA256

          e3c197e2db8ea8c67960e2f037cee12cfbd44c1861dc7577afe433dad2a6ae32

          SHA512

          a60a6676f910cc63495a136e656487df2f5c04d5d6bfef1001d8eaef4207fff4b7528a83c18a1f479b39116e7a7d513dae74b46d9a4da4248cfff2804581ed2d

        • /data/data/com.smartapp.makhfi/databases/__pushe_base_lib_db-journal

          Filesize

          8KB

          MD5

          b8afaa7e4130a93eb6f205686a80ead9

          SHA1

          e6677bd3c93f8c584a314b4be21d3f19421ece5f

          SHA256

          95434506d91e60c21250d6bf109aae89ea3eae5fe543c9d89834b55c299b2ffb

          SHA512

          d91872cfa1177b5cba897614285443348e6eac466940622130c8b3c4b96be749af1469ebec2edba3d10f421f5ec45a01e39ed6ce73c9a208f231597002853eef

        • /data/data/com.smartapp.makhfi/databases/__pushe_base_lib_db-journal

          Filesize

          24KB

          MD5

          665b1ec629be177d29e29a072170e255

          SHA1

          1dc6c9648e40646c89d93cf26c6ff547b9bbfb1b

          SHA256

          752f61afa867e633cafe0a10724b58317ded618338f8c4d29040b22ef3bc6aaa

          SHA512

          45f3daeeed70a4a8a6611ae8afed318c32bd516ac41360aabcf777e2e3c53feb9d3689fd2ae2ea8ebfec96139bf529436c5da8e2d608ffbf27a52f7d250b889d

        • /data/data/com.smartapp.makhfi/databases/__pushe_base_lib_db-journal

          Filesize

          512B

          MD5

          b9850d72988ea71f8ed67bfd8ab267f7

          SHA1

          8d6d88f046e10258e8c2ca2435af263a7d42f740

          SHA256

          2c0dfcc7e70321664749940cd1de726fd7b77af03d90f4d1af17fc95b4a74a6a

          SHA512

          dcd29f76417d9271938fd3774bf0646c90309b13f2fd1ae35a17e8a472c6e636e1bb50a5d0f9f644968183fee0ce5be6b9f3fbe9b29fffdd8197f66a072f319e

        • /data/data/com.smartapp.makhfi/databases/cheshdb

          Filesize

          24KB

          MD5

          259a1e4e7ebc4b0d0341ffcf0c3bc2ea

          SHA1

          9b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c

          SHA256

          4f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1

          SHA512

          dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313

        • /data/data/com.smartapp.makhfi/databases/cheshdb

          Filesize

          20KB

          MD5

          eee72e08ace07eabf3518c6679d92a93

          SHA1

          18c1b70e03e111196da21182a51b990dff8f1c54

          SHA256

          45e9f37bc11c11ddabc02331b6c15da3ab650ef2cefd5c7d58c39d8350699b95

          SHA512

          ae15b38c0524ac2ca3a085196bad64001c4d682dc01e39261cc8951dca17cc2bc2d3a69d00e279a71b5df0cfea094e9755c288cdf754e467acc1e406ee61ee03

        • /data/data/com.smartapp.makhfi/databases/cheshdb

          Filesize

          20KB

          MD5

          0b8fdabc57d4ca2a0a2710b5be8c6864

          SHA1

          19d3fa82d5203da7e3b1c4e99b4fd0207c720ae2

          SHA256

          741e2aa6e637fba1375c1ca1f54f468669f6c2bb7ab8733c5e24e57cb55ebfa6

          SHA512

          42893958dcb322dde0d55811efb9a3533c2822bf0e4a1de56bb3a64a489f18b43d89ec2085fda2c064aa5cdc66dba80a03c9355d19687afa5dc1692eb083d2cc

        • /data/data/com.smartapp.makhfi/databases/cheshdb-journal

          Filesize

          512B

          MD5

          3965f886f40df28726c866a542530023

          SHA1

          c0cad42e53a6fb3a804542393e8234961363bbf2

          SHA256

          ef3479058764e95cb27324d3b62526ca84158bf43650e5a2cfa239190a9f5c3d

          SHA512

          d6912a6a70c2a14430280d663c61f2031274d1a9d9a2334f97c433f5be8458473177d045536377fc62c33fa22363f237e06635cd03b498007fe0fc9d4accb422

        • /data/data/com.smartapp.makhfi/databases/cheshdb-journal

          Filesize

          8KB

          MD5

          ebaccd88090af302e29e0010d9787b3c

          SHA1

          d4a2e20ed3d59c4c5ddb4307c8a6966aaaec8a19

          SHA256

          94f5a645a723916c3a4e6ff503ded8258ae8296c4130af97d20cfe6df1066771

          SHA512

          45508a86a70cd0b7974bf005e27078c553f938c6bef40ad6bdc76ff7cce58834fa54e6aec006db5f3508b3503c4dfe56e65033cd4280f7335af533742af4f924

        • /data/data/com.smartapp.makhfi/databases/cheshdb-journal

          Filesize

          8KB

          MD5

          890804507b033284d78e3c555fa24805

          SHA1

          2c4a30e88e74713a4c23fc28ece682190a74a5c2

          SHA256

          b404db9fe5bac48ce0ac045f6f49b544dafe3d219fdfaef97c177e680df8df0d

          SHA512

          ed6237ab868c789947ae615eb66e1c9858199e70a5a8079a7b47a16dcf4e5624441662fde45ee7a195c54eb9ffc4e4c9fb95abd378ec997b48a385fa81dfc49c

        • /data/data/com.smartapp.makhfi/databases/cheshdb-journal

          Filesize

          8KB

          MD5

          7b52ba3510963d2331e4bac2c8fb6fb1

          SHA1

          38631bf45c33694e32a94eb0db7c9fdc288d7202

          SHA256

          563cc467957e1021e71901a358ddf1ed163ec12897a2bef27ab7f1abe958e319

          SHA512

          4862befc05fda70c63ec26aa7f0112c9ca91a3fa76bfa059750f09a11f836df8013c7d76f43bb091b484b956e09f20bc2874d1961aa5722321ba6a698a30b7db

        • /data/data/com.smartapp.makhfi/databases/cheshdb-journal

          Filesize

          12KB

          MD5

          938360fcbeb49f21c475e84790619ea7

          SHA1

          f03354719f50a45bb76af5c21aaa63f7c86d8376

          SHA256

          99ed662940731f3519674c14741f5bba9252bc3115c1ff292496341320b4c368

          SHA512

          8e7139af7341eb3dafaee76c5be4628839dc9c56238f0e2738df5f16740b752133847d433b540146489d24f96cbb997332265f2abdcbcfcec6714aafa8c1014d

        • /data/data/com.smartapp.makhfi/databases/cheshdb-journal

          Filesize

          12KB

          MD5

          f22a877f885190e7fc3599ca24b63544

          SHA1

          73382860ff8493f715b2b4a14d236ae98da1619b

          SHA256

          c2b26b18a32eebcf19c660267ec0949815d953e23ba231c256867485896f25fe

          SHA512

          5f3ef19770b0ac3560d658117ff1e3a475510aca60b91caeeac4de97e56ca542eb041f57861867f40ce52d4306310ca5be15e7b713157065e8ae96c20dc7e52b

        • /data/data/com.smartapp.makhfi/databases/db_default_job_manager

          Filesize

          28KB

          MD5

          eda4e5f53129dca7344c7e3f3e6d9513

          SHA1

          ed01e856ac998b6c3de46ac8a2a155f09d6db185

          SHA256

          7c4bbb192102dd3dfc3d30cd5542d9a115cbc6c52369f1630eeb9e5ea81c8e5b

          SHA512

          cf733d69c95b4db67de951dbd2b4f3c9b31008dd0b7f8a1d42bb14820def6b34a5bfa178d1e8cee0dafdf64531751674e7f6398743e915ef469bb97662c063a1

        • /data/data/com.smartapp.makhfi/databases/db_default_job_manager-journal

          Filesize

          512B

          MD5

          9742a883f81f289f4cf11e14b6376354

          SHA1

          0b048a83bf8f857e3a0aae897cd08ee35e65622f

          SHA256

          a28938de5b4aaccebc5fa1657de0c9effbc473b6230f5a8f89c3ac24f3550665

          SHA512

          146becc0ebbd462b342ba2eb8f8a6676290307fbd817782c056c5c16a338d5e3f4aa10d9f7f4ec90fd3f255ab55a1a1f7a6af28750a33e16eefc4a70c7a53168

        • /data/data/com.smartapp.makhfi/databases/db_default_job_manager-journal

          Filesize

          8KB

          MD5

          416a99d71957c5907308e580e6d75b85

          SHA1

          0a35e01f377119d062c67a3584f38dc80c7da56e

          SHA256

          082fbd783757fdd8371b604392390b2b6a88cf0be2cc6f95a99f863f9e8f021e

          SHA512

          e7e0b79a2fe1680c4a540c8975d22693cbd25e7ebc910eb1eec0403082f33d84a013b9e6c8fe4c2003f2952ce26ccb6f0bf283c7e0fc7108e5e9ecd2022ee627

        • /data/data/com.smartapp.makhfi/databases/db_default_job_manager-journal

          Filesize

          8KB

          MD5

          3a68bb035c260bf14a27b7e1600e4404

          SHA1

          f0f8f183982df7d257715b6915b6002c74372de1

          SHA256

          5d2efb8b0d22c3bde931e2deff5f5fad84655b56125ba80e114fbb20fd4d9eed

          SHA512

          857e51770af94eb72541f486302e1cfcafa0b045dc7dbcd11fef3f474b174a6bbecd69718343cdf032915d05757c8efafa77f04621fd9a8bde7d3cc1df62c303

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db

          Filesize

          16KB

          MD5

          00e829076f54c72b50b63fd6de296a03

          SHA1

          fbeb1b8be863931f98a7c29224a03b89f9616ab2

          SHA256

          c479f839c0bc15e9a9749cb5a5a3eef4e09c0163160073477f72fa78b2e300df

          SHA512

          1c6b0bfe980050072927f8d407ca86353098d03502f7194f141d43c045a3f35103261811281f023262f4823a4fd70659d6802b76e126e991120dc14cdf74bbcc

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db

          Filesize

          16KB

          MD5

          b732b8c5c9fd37a4dc07b666e332a5b5

          SHA1

          3372183085db06bebfb3e45d362d9ed18dfc590f

          SHA256

          f8c6f921aa346dde90d70087754521d4bd0f24f8741b8a3b0c3bc5749f8cf6a0

          SHA512

          62ef73f52af279f2d911621bdfa75a239f2ddacd06367841d917d0490db2eeb35e18499a6cb5bd841199a691752c215060b50e1c9570df8e4110b83dae520754

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db

          Filesize

          16KB

          MD5

          fe993c9d58770ec7699093acd8d6c450

          SHA1

          d9b64230d2ba28c4f0b2b4e27839519babaf668d

          SHA256

          7a7303092a87790d970febd6891e2bb7753aeb9e73dac54758868093b9f04674

          SHA512

          0b70ec042a184a4279c33966725b661f563f7ee8c953f91d507c4439abbf6e907db7ee2ebdfd3fc2ec92d9093f715f3a3844ed100bd7b81af607d665980b06f2

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db

          Filesize

          16KB

          MD5

          633244777788730940cc917f2af28dd1

          SHA1

          3979c1c57f31584114c1b2ce1c7acc67c112e72e

          SHA256

          cf9f53667e3316cf52649cf58ec4f55a18d64445e76d5f9c1e01ec7210f1f94c

          SHA512

          13917dbffa3a6888d7eb3ee6cf289586ce6a55e8db5f1289c81eb953db5b0cd3e5839c6a5c9e4f86a38b186a9d1760c976be273a9d2ab13ca423d7add4a6ac80

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db

          Filesize

          16KB

          MD5

          c66b7cac41f8a192a4625891388ffd14

          SHA1

          e64dd8e39b0ffb2bffac196c3654085becb1f30a

          SHA256

          6b2076d34d65b179905ab03c9729d59b999b31bbda0daf8511499afb3befce9e

          SHA512

          a8b2b53051f02cf6c576408bc72b0e92ac8f58fe1aef87aa55d548004203ec317c2be946a4f73975fd1c83d233cda83e8e38f9ccf016a24fa01605abf5cf6af0

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db

          Filesize

          16KB

          MD5

          73bbfa711bae3c7110488b698a2ade44

          SHA1

          98d485201aa79d5c8c8ac4899793b392521995ae

          SHA256

          57e84df484168001b92e83c8282dde4b491a1b1c9ffdb025854617e7057902ab

          SHA512

          f33d03691ca8a4d8727bebeb0f57196e2cfde59df26b071e2e47e14ddc59e2edda4689f94165c4325faab4c206a0c8ac3cd6850d0ebb126bc2515a2b1b819cf9

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db-journal

          Filesize

          8KB

          MD5

          8ac86eac809ee85380cee50984b0ed23

          SHA1

          d35cbefb35bb8c453377d56d81115772823c1965

          SHA256

          5a8ac2bd41af805d4a8f66df8bc8ecc316a4f54bf28551d6eeb57b8524fd8849

          SHA512

          340d2d852513bf61ff8da04e097076c634c9802e373cff155756d419a14cf5869052ec855e971e0cb2ad0251e182e0c3699a9fefb0c104c08c64b5f40eb39800

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db-journal

          Filesize

          512B

          MD5

          8f249e1b0b3488376d184ac30124ffbc

          SHA1

          802d5c1dc7740a6a2489f15badb81176b6e6fbd8

          SHA256

          988fd2d4c9a2580708636cf62d696cde0bd9555865ffd789125031af814daf12

          SHA512

          ec6cdbeb44baba16c0fea8f838f8373f228382f11d3e62067cad2f48a1e8832a712f5ea51fb8fc34a34cddf07bab9a785f1ef90b585a5c15f3d7baddaaffbc16

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db-journal

          Filesize

          8KB

          MD5

          000ddff5b704817baaecc655db3f7aeb

          SHA1

          5312e060266cdd29ed4e520b130e0215d63042e2

          SHA256

          b0b0921f8db4e5f15c9c9a8aa2739d8402871c022305f195e4b9a206d7b65fe6

          SHA512

          b238a18905a585468ed8342e35d02be0d5176179e28bbe30d77bb3b6b440906388abcaac59cf6062b65d9d627780411bd859e07002378fb6428b8f02f8cca8cb

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db-journal

          Filesize

          8KB

          MD5

          168de3c6889e84434aa070686feb0478

          SHA1

          505fb32107366f649805cb460e5c317cbcc862f8

          SHA256

          8bf7dca685b46e1b7c8e9e7eac029186b7944889e7a7419732af40b2eebba0a3

          SHA512

          5b7e1b6616af0edfd2eb30e825449880299016326e6a815a604b2566d845037c96c982d1c02407c79b0d93759a00f09cca5859dbb9a8d19671adf2292fec27fb

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db-journal

          Filesize

          8KB

          MD5

          795bb7ed0db4e8e4da9aa6d4ae23ec2f

          SHA1

          50d639a12bdc103fa6dfcdff0a074c92d5e46cd4

          SHA256

          1a6175fef9a24ddadd81cb387b0866b5048bb23d1e5000b6af5093466d770cbd

          SHA512

          935a964b6aeeead0ee6aac733526791a4eec68c4a75d2015c15cc2431b31f82a0f74b085fbfa238a7a7d438876f4a229ce235603eb2b68c7cf3add732bffc996

        • /data/data/com.smartapp.makhfi/databases/evernote_jobs.db-journal

          Filesize

          8KB

          MD5

          072b12e722f40bd1079dacf915a56882

          SHA1

          2b61d164f19afaf03be8b5c5573a21ff83b849ec

          SHA256

          ad603ef2959f3cca9ca44b542b6479ae2be9ea7c600e911cee50e3582931869e

          SHA512

          29f82174b2aa9cdd697037d20fa99ff673e3d66cbfcec3fbae6005564b97fb063c0d1c7a92b4f427e391a76a690fbe8268afaafc79073181f12bd5a232d1453a

        • /data/data/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          485B

          MD5

          a51668cd7875eca586fc8044a0c5da3e

          SHA1

          f9039a0767f6527a45cf02070ccc6c728360ad22

          SHA256

          325b27c2bcae371fb28a9f240cd90c87497dca237323d05f3f9314a67ee038a7

          SHA512

          6263b82263f50ca5e297ccbb4896c33332fcebc02f2e36f7d2f1777a8f62043b19339dd9f6246894e9ca3ab429aa8c6973b656ccdee1e8aaa9bb2c9c8a80db98

        • /data/data/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          1007B

          MD5

          b4988800d31e33afdd28012c493af0d9

          SHA1

          5dc31d5f5b8be13b65e9dbe385e7c3d200ee5985

          SHA256

          f45d90fa5b4637d5d1606623ed16b55e9bd82eb4c3715bac19a3a23be414a325

          SHA512

          442fddb3fd648bd4bd8ad42884f0e8ff66fd8ae3dd9e9f1059f56ae05347019c9905f35dd3a6424efd932972c10abd75aaa788208cbe4c70102c8f8a4cb7b6b1

        • /data/data/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/data/com.smartapp.makhfi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_bd67eb04-def6-4027-bc50-fa6f6f854903_1721920835292.tap

          Filesize

          378B

          MD5

          f2e2b49207fe162797098819f23a3486

          SHA1

          f9f4aabd135d3fdd90464c0e7a1f105db1ad3aa7

          SHA256

          ca1974e0f6709d07cc61d626be4f5795b7693a19d40e5505c06b69d09f607828

          SHA512

          cab063fcdfe5feb15353060ace61081f4feedb0777926a1dba6dd2b2c57cf9394eea8cd4027160012b58e11aa0c57e91d96556d04b0504c5fc1f672e369fb6e2

        • /data/data/com.smartapp.makhfi/files/unsent_requests

          Filesize

          58B

          MD5

          0d210bfb2a0e1f1b4c082a6a0f79de07

          SHA1

          bb8ed9e364db79d1d9f2fcde3f15091893222faa

          SHA256

          988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

          SHA512

          536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1