Analysis
-
max time kernel
111s -
max time network
151s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system -
submitted
06/09/2024, 08:33
Static task
static1
Behavioral task
behavioral1
Sample
cf1ecd3fd5e0ad7d18bf88e9d2b30fbb_JaffaCakes118.apk
Resource
android-x86-arm-20240910-en
General
-
Target
cf1ecd3fd5e0ad7d18bf88e9d2b30fbb_JaffaCakes118.apk
-
Size
15.5MB
-
MD5
cf1ecd3fd5e0ad7d18bf88e9d2b30fbb
-
SHA1
1582affe920798bb35434fb2844d326c55eecc06
-
SHA256
f5714d17295b781ab2c62bafe8901aa6e1fa96df32c849c82d394bc0a83c3292
-
SHA512
1e3b6954003b14bd0cf11726da87c13cb0957c58e15662be42427a36d127a46468fa7c1589bf2ed77baa81e95ca9e6807b816db23825346ee7028080e4825f6d
-
SSDEEP
393216:P67P+jhPB3jPULIeLQL9DezsPtVUhCBw+lcwKWdb:v5FLULPLe4GjcC11d1
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.NaughtySeal.EndlessCarChase -
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.product.model com.NaughtySeal.EndlessCarChase -
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.NaughtySeal.EndlessCarChase/cache/1582435991586.jar 4222 com.NaughtySeal.EndlessCarChase -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.NaughtySeal.EndlessCarChase -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 6 raw.githubusercontent.com 7 raw.githubusercontent.com -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.NaughtySeal.EndlessCarChase -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.NaughtySeal.EndlessCarChase -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.NaughtySeal.EndlessCarChase -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.NaughtySeal.EndlessCarChase -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.NaughtySeal.EndlessCarChase -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.NaughtySeal.EndlessCarChase
Processes
-
com.NaughtySeal.EndlessCarChase1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4222
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5e8e0527a01aefdb89afd2c508f131da1
SHA1f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
-
Filesize
89B
MD518276aaafab2b64013c27ce5b3889563
SHA1c952ec45d31df59de223eb08cffacb78fc744b82
SHA256e66e4002142b5f7446705c6778acb7d248e6bba5209f8599b2633138febdf060
SHA5124218f84cb63954aadf0a3dc094db29996525b6573686a7a3e0b78823de2ed41ca23322437c6f7aece77c8ab3c3a683bdb96d9b1288b2efb08cde1eeb8d319399
-
Filesize
32KB
MD543c4d9a8178963380aab60003e2f9548
SHA13d197aa7e348d131ec26bb53f2954f05c92a75b8
SHA256c04cefcd5392ae7183922de3b61f37ba1ad5e51b7d9fa0faead71b029c4c3e18
SHA512348a001a2c14c9fa7dbfff56ed19256c79e7f16b6b88865199cda6b3b1da8453502b5398b5ea73749e5061c6f1d26fd869eeae51e1bd98f45ff365ae6ba3b210
-
Filesize
32KB
MD5d604a3bf1f8d992cc320ea5b1f7609bd
SHA1247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA51267e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab
-
Filesize
512B
MD5f03aa6223646ee0e919fb4b557682bab
SHA1f6bc878fe4932eb25910b5df3a9e94fc617363ad
SHA256182d00066330eaf7dca994f053bf1227db1e4097d27def60ccd7be0741376712
SHA51204c9b044af199270f52424dc7dc61f163ec969f09131d6ec8841d2150a59ebb51a43b2cc40fa2463dc17cd9284854e25a391ecd25473213e14ce3a8e27a90f90
-
Filesize
56KB
MD594b56d23c095be809cfb02cca695fe8e
SHA14d565b52a4e992a9862add0938c0e7406bd4fee0
SHA256072c8f82696675932b8d12d85e1b38666fd14bcfc9899aad54415e5dafe225db
SHA5120a47f436f8a46f063067c66f694e1e3e8a368c1b960a4e6e4fa7b543c3d1386f6bc2dca1938ac01ecbd656edc12980066d8a57e73ae0b69313a1bb97167468ef
-
Filesize
8KB
MD5a2a468e132d305e57584f12131e4e4dd
SHA15bf33aa24cc171420c61c378daa9c6997cf890dd
SHA256fcfa98665b65e9c599d042210dbe0e5f5225d6a51752bf98375a490e0da6037f
SHA5120134656e67677d1363e4fb1001cf0cb0a4e83a36e2656c2fefc3794496163e3304bc155bcfc44462c43bddc36bf53dfd83b98a9cf54079b739aa025eaefe7f37
-
Filesize
36KB
MD5ce6135aa1b1fe4f2c2db2a546d2a5558
SHA179b59582154017aadab783dc266fcb158c252940
SHA2567b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA5122839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4
-
Filesize
36KB
MD55d7ea1a23af19b4340cc8d90f28297d5
SHA14cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA51233071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
-
Filesize
512B
MD53a3209fd653a5d21cb5c731e7aab56b7
SHA15801ddc161df5189240f9f041b23d731e51f82bd
SHA256d489947d7e23b0b3dd7f9214a4b0f4f9d700c5474704d3e4081893d387b36e3a
SHA512a23add9aa34ed447d90e7e36d4c80309772a0fb33e7edd43ea4f26841241e5aec532f805a636f5da2fa5f6d0d43cc6c5fd4175e6de025ac09dd0256eeeef3157
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
48KB
MD5da9083f7f9cf8771d824cf624fa00d63
SHA16eff410f20c58b82c30d5860e476dd9e4675549c
SHA2565b151fb44ca215712966bac27cdae8a96c6ac9c2cd633da07f1057cb5623e674
SHA5124cdd90e91d24091c379ec4cfb4006e9cf3be1dea6104d5b838bcb8604705bbbadfa8923aeb58b53948de5532d9c03138983efd4cf091603e590eb531dc33112c
-
Filesize
16KB
MD528dfe4663b24e27f98042ac34b6ef0f3
SHA1b0c52f7335a372be85676610d5fdd1c729efd20e
SHA2560d1fc1b7314accb200ff4545becc80c51456b60d0916b91b633e5c1fb753ea89
SHA51230f0a5c29f1044786f214981e6b910efad336b7c20bdab7362550c68ebc32754742358328f092dca824fc3965e40ae38605a0af27ff8c2ffebf9a14bc389fd58
-
Filesize
1KB
MD5d33f81ff293ee20af83b1397151bee74
SHA19013555e7691b943e61e41568d4fefbc2ce5886e
SHA2568e8ec2a15bb47bbf8725cabb7bb1de5c46ef940492bd3ecc77b5e16e28fd9b71
SHA512c25b5e9c6acdb5d1aec16f9d52e026bdb19b5bacdff6410908c570acc0967a5738c7fecf8d76e9050fb62e308afff9f11ebe89f783bceb61759b08fd0ba672b8
-
Filesize
162B
MD5849d04e7e6c9f3291b4569df5ebc997a
SHA16e73128a2e9f96f68eabb053248804682acdcdd5
SHA2564a0058a6ac9295a4412d97f8c24278522af3c06b3ed6679ccbb55fc78b49fc58
SHA5124ff1599208d9838a745049b2916bfd628fad70540d94ad19787a4921d8889d4d622d204a8a8d9d9e85ff9753150d5cb6b3b701ddfed32d5bf858173bc85c57b3
-
Filesize
59B
MD5c4967c2181412223d077a478d046e5aa
SHA1db40be53c7cdae0cf8040fcdb58dee3fc610f900
SHA256c5dbb30d5af89d2c64fb3425637e07835d407141449418912841e03e9e9f5d57
SHA512173b5169b6544620767aeb55a7f636c3d583c578697b2c798d59667eaa4894fa9aa31de88a4a75eefafbfd5625d1d428c3dcb29beee29c6affafa9c75f754d53
-
Filesize
350B
MD58ecc8766c14a40f08b19d2ec0fc927a0
SHA1d962dbb061b9861eb3b1b29e45f6454068156bd6
SHA2567e0570ec1be2a080bc55ae24712e1bf2bfa9a5b73e2d0fcc4eb460e92df4925c
SHA512ef4b9b7487ae7ec072df84ce3f9ed1c0892038c763fdd5d9bff2506bdcc3a7311020d1a15b2d0c87acbba71f9f966e5d5bed49a2106c50c4e91f4d67b61c7786
-
Filesize
20KB
MD5fde2ee00cbd121cfab5290b078aa3ceb
SHA1e2b77d5320e155e413d040a8c20020962065b2f8
SHA2562897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize41B
MD516d3e6eac0e79222a9b368edac765b34
SHA148d5e621fcdd84108f5750d6905180b622715b11
SHA2563a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7
SHA512d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize407B
MD598c269eb879c95ef6652bd626f8add4d
SHA13b2f0c3fa99e531e7a622e3b37511faef362e9d8
SHA2563c0c53f1b9e47b1bb1d36422bb79b843cae212d2fc8b408abcf505c4e0141091
SHA5123b36b6d3006fd9dd2de865f1e258ffa2192ad4a66e34952f76768330ccc839f56e9a5313ffb7f20634af9b57c7fe7fcc4a3fc25ad9cea078e936418bed303599
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize602B
MD55603307c61d0cb800af7df0ad4ae5eb2
SHA1d07ac16e388e1a54c11b7a77bb6f8aa8f68817d8
SHA25654571174ffd0b52189ca897a0a4f9b6462a51c599272162a67c2ea00ea097c10
SHA51286fbdd18f5c70529cf7227f5880522966c6b82b6c234b44554141cb23bdca83ffd59a34e7a59c642cb7d058b46ddf4613687e5d9ebebe9993651f943665d99b7
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/cache/UnityAdsCache/UnityAdsStorage-public-data.json
Filesize2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/cache/UnityAdsCache/UnityAdsStorage-public-data.json
Filesize111B
MD530193953705673f0b1127db2bb2c400a
SHA16f573db1b653189831509c612831755f7c00b59e
SHA2561fbffb465e44c511cd77e2c5d24f7c36dc86950cce0a8e0846cc6a09554ad798
SHA512749aeede3df2824d2e6e0b8fc07a55129076ba19ba24b32411f93dace56c83d67a333875b9e7bdb5096f6958348fa097bf037e01b419ff61c3eab4e4d0eb5270
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/cache/UnityAdsCache/UnityAdsStorage-public-data.json
Filesize215B
MD58930b0acc063a8175fe4aa6fe94d21cd
SHA11a2b0dee98eaefaeb72275b3b4e28efb0c64a98d
SHA25683cced5ebe944f622394f59d738119dc81ce5874881e242944a58be3baccdd1c
SHA512300bfc7af01af360da20c31bffc59372d96d470a3af4739a8fa9fc1f24b371ae389069c3b5430cf0ef635b5d5a7482ee2d4ea337f41a3ad637d9cda541ef2f4a
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/cache/UnityAdsCache/UnityAdsTest.txt
Filesize4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/cache/UnityAdsCache/UnityAdsWebApp.html
Filesize1.7MB
MD5dd444c15a24c6b4fd8b2f858382dcc26
SHA1b6d1a073a407891982e26ded7cd0cc3009ec42e2
SHA25621f0c00e6005e6a3368b41031238aa4f94b6d7e68f9a75b0deff1662f10043a2
SHA5123e53dc21b054e1df854d799bfd6f52c9cdb6327c56113af312ca7237658676d98b4e83217b754c37ffe0301bed62eae2033a6380cc6900d349c730eec0c7f9cd
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/files/Unity/9e88f71a-afa9-498c-a0b5-65b6637dee95/Analytics/ArchivedEvents/172596306400000.63ac8dbc/e
Filesize63B
MD5fb2052341d620990c67173eb42f0bf4a
SHA1a87650386fc83403f0d1948475822674c1fd71be
SHA2564344fd3260422c4c901323be2b3783c97fc508965ac14de9bd77dce8e539011e
SHA512aa04de14c832283e375a791ceaeaffc6559a9e748c10ebe5be30ddb58baf00bc451d5f321c702bde4bad38b88635659ee3877057de3fb410eafcdad2dcf0e70a
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/files/Unity/9e88f71a-afa9-498c-a0b5-65b6637dee95/Analytics/ArchivedEvents/172596306400000.63ac8dbc/g
Filesize1B
MD5c81e728d9d4c2f636f067f89cc14862c
SHA1da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA256d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
SHA51240b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/files/Unity/9e88f71a-afa9-498c-a0b5-65b6637dee95/Analytics/ArchivedEvents/172596306400000.63ac8dbc/s
Filesize337B
MD577ac02b730a22bde9884053a82c1c83b
SHA1f9937bddb2f6d533ed57625791f888b97c32f6db
SHA256a99111aef119f8f57e011ba9bbd6efb961fa905cf87458081cdad6e82f9d2203
SHA512d778b830cf78d24cac5d0827b904e282ca4600a9d54b8767de8a7d724c8c8fc131bc421de6031aabda6a4349afcfeb9297224f014c3cab899cf530bafef58c4b
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/files/Unity/9e88f71a-afa9-498c-a0b5-65b6637dee95/Analytics/ArchivedEvents/172596306400001.63ac8dbc/e
Filesize104B
MD55821fb8f9df55277653f4b23742df265
SHA1333b0263b11fbfb9170d646fc1ee532c00699d3f
SHA25610e6bcb87d98eaff04f3a8aaf42d6883294b0292a3689969cb8731782c34cb8c
SHA512e27d7870093e1de8e8ad79194364d94b02c3ed165c241180ffacb63e8060be274b6a779b11926992649300a7e42927281cf7c36eb3ae9d9da463f29298bfaf1a
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/files/Unity/9e88f71a-afa9-498c-a0b5-65b6637dee95/Analytics/ArchivedEvents/172596306400002.63ac8dbc/e
Filesize986B
MD5419ddb19e6b18f5fbfad5ece490138d8
SHA1185a59e9f514b74b37f002d1312052bcc0fed238
SHA2564fda9b032de4eaf04ea66610b2cb8ba0b16c5ce46f47c6dcc733dc6386da580e
SHA51204e78246a64b65292e0e6bb9a2520f38442372f3d9728ef96992a4a1f08622b938afc5f8627e39f1598f547b0135aef3527f5f388da192e901fce8ea5c01ec43
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/files/Unity/9e88f71a-afa9-498c-a0b5-65b6637dee95/Analytics/ArchivedEvents/172596306400002.63ac8dbc/e
Filesize1KB
MD57876e8d0cdba423b7fe3275f3781b313
SHA10840fcac4b0e5e2ec4781f624d0db045df8166e1
SHA2569f2e5562641b0c1729f8498739b633bb145e15f6e7f7bc17fb85286e8da699b6
SHA512abc96a8b73d98ff5f7a8ee71638c3be3a548fae577de9ed90291f6ee83eaf0c50aff4c741d15c8a01adfb6b25f8b1f4f1cf4927c60ecd7b33bfb3bdbb0a389dd
-
/storage/emulated/0/Android/data/com.NaughtySeal.EndlessCarChase/files/Unity/9e88f71a-afa9-498c-a0b5-65b6637dee95/Analytics/values
Filesize150B
MD5ee556a47a389576298bc2b02706a5344
SHA1e8ffb90bbbdd844a6b24175435bf76a26ae18699
SHA256ca480c5ce0520aff99f01dcd32d98b31458d257011e2dbf1b3a9fb17a292fd0e
SHA512d74abe3ba656293ea4aade72421e646ab86ab78be09ce3213b45fc9f6b51440e5f029100afc358f39de4bf94f7d975f421c936462845f254371d796ce6384b63