Analysis

  • max time kernel
    7s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    18/08/2024, 19:08

General

  • Target

    a7dcee88aff81642d47b28fee29b3319_JaffaCakes118.apk

  • Size

    8.7MB

  • MD5

    a7dcee88aff81642d47b28fee29b3319

  • SHA1

    78866dce78055cfc48640a93901939b71252f563

  • SHA256

    ca90aec53f14794b3b8867f6ef3180ed69c4f0cd25cb4b4dcd2ff0a252eec844

  • SHA512

    2cb1ac1f241652429747dc5dc15c639e3d1e3e68fb01ff8515b0ccccc214f734b87f43577bcb1e3c1e7b0d551bc85ab24b56a9dad2117f6b2e71f3bceb729a07

  • SSDEEP

    196608:nj7TQ2YTCXeDh8/u44SQpXVj0AHF0EynHFVO+zoTa6:j782MCX81pXuO0PHFVSe6

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.free.mood.listenbook
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4969

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.free.mood.listenbook/databases/db_d.db

    Filesize

    20KB

    MD5

    3172070e932ebe00a70b547397c8a4c1

    SHA1

    ac073d597ac1d7ac241aacf1acca295347a8fee9

    SHA256

    8fb91b0a18fbe1cae784864cead9d396bb3e8f3b01582f9b78dbde274309c8da

    SHA512

    a40f22a6e76582601dacea7dfe458aebe4eff1eeb6f7450405d2826a42da6d1f18ffe7424afbd384757bd77f355bb27d4bdf7aaa51e848d25002022f161e2f76

  • /data/data/com.free.mood.listenbook/databases/db_d.db-journal

    Filesize

    512B

    MD5

    936fb7320a78d7f3eca876cf2220d0f0

    SHA1

    739fd12c036251cd053374f7964684fe4bac223e

    SHA256

    b39f1398115ffe61dda4b544d8fb1e423162fb5b3dfdcda707df46c8552b9a68

    SHA512

    3a25412ff3180df5f04ff91440ab7ad8fcd7b69eb73a11d1c37a974f2b314139fb0632b67bfd894e58c96c31326795f870fbad87d7a7b7b1a35f3ea878c5f8d5

  • /data/data/com.free.mood.listenbook/databases/db_d.db-journal

    Filesize

    8KB

    MD5

    3f56e72ba759e34debfd3c6d0b6a9861

    SHA1

    6d069cada771dcc5fa305d960493d94e0bbee3c5

    SHA256

    c2871507b152f297d2f575d60c484ae58d76e26f3c55c8eef2a0226199d1444f

    SHA512

    f63b3682932df94a850724341deb88cf715891f24ca3615161612bdf5a492e46ef2fd107ea71f1e7fef5af8e74d384659531fd1493da4e9a8af89e76ea98dce1

  • /data/data/com.free.mood.listenbook/databases/db_d.db-journal

    Filesize

    8KB

    MD5

    4087983b273507927a19e9a8ff46c7b0

    SHA1

    0982813b8f7a192f8bf7fb954c9addba7831668b

    SHA256

    662eec3dc22a9569c82d9849094468b1aaeab33a2b4f36120d741f2582c74909

    SHA512

    8f0c42dacbbfcbbc9bc6f547af6ba12748c1dad12765b4bfccbe54d6da3bbaac72a6790997b5d63c9adbc7196adadb40d291e77feb1e770ab49bfcfd44301d2d

  • /data/data/com.free.mood.listenbook/files/17240081237180.jar

    Filesize

    60KB

    MD5

    717abf087b987dff8abed70613a224b0

    SHA1

    e2b55daf06a83f79d49b59c82c7238af63e46342

    SHA256

    f308399e84a522b74567ae5bcafd128255622a22171354d2587e2e82c6d3b435

    SHA512

    4cf21158d41538e8cb5625c9ed7ed5ab1c75b53704766363a1ab559e5f95adc6ba0b5d23385354a0e62d3b706452e84b8223bbc586b166ff8cc90adb574a5092

  • /data/data/com.free.mood.listenbook/files/17240081241439.jar

    Filesize

    91KB

    MD5

    7958e6386f47b0231858f0199ed2c80e

    SHA1

    8304a6f707d9d518f5026727c8633793f47f1b5d

    SHA256

    9e2a4891ec4ae2774c15875cbcb2e25069c7e8d82f098abe754e75def964930c

    SHA512

    55ae33a86bbf617262d9d1937124373655e0046462198a56f6663c606e59ab456c1a042029727a8ab66b8d7b3ad0bb6698a926e6de05846f8a2ecf93de25c282

  • /data/user/0/com.free.mood.listenbook/files/17240081237180.jar

    Filesize

    130KB

    MD5

    21b9de7504b2eb67b1dba78700ba6681

    SHA1

    9ecf5ce403b6eb9bed4ec89e808f900ef1d7db09

    SHA256

    04e3643b6a92eecec86d5f2528b7549e751d59a6d017e98e02640da0fb61d27e

    SHA512

    67d4b5222c15723b8f8483c482af2f04de2e6021f42f76938a5628d0cc36ec270eccfa1ff11b9dd6d924bede93b79fde052712d1b11f94d5ddf3de9b1e28bf03

  • /data/user/0/com.free.mood.listenbook/files/17240081241439.jar

    Filesize

    188KB

    MD5

    9a6b81058877f901b93a599eea1a6242

    SHA1

    fc1f077d453602467a8a74756a347c10b77d0cbd

    SHA256

    29c4a716369e93c98be7ee2e5cfe497598c6a30e5092a7c82425900128f81d45

    SHA512

    ad4216323316f07be6d02fdf3130b9dfb504cc1d7fec97638f8f2bfcdfa416537f6818f2b5857d1597472ce04c292c468f9fa59e3f846619ffe9ab4b56902de6