8ddadc2b580c1dbf067f6c9e3b552b28c6e57f0dfbde7271f6d2cddb9ff7392e

Analysis

max time kernel
46s
max time network
155s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
12/09/2024, 19:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dcf3bf5c5e81409b1e3cf0133f86a48b_JaffaCakes118.apk
Size

4.6MB
MD5

dcf3bf5c5e81409b1e3cf0133f86a48b
SHA1

58ff7312ec777c46fa3181b7763e21f061f39c66
SHA256

8ddadc2b580c1dbf067f6c9e3b552b28c6e57f0dfbde7271f6d2cddb9ff7392e
SHA512

18a9412b7e8107cca8a5dfe387f97f23bbb04b316ef04c3ae3da9565da20012c04a74ad768d5c06b22a8cc5cbab700c921b02047a320be6204a1ec6f3a418f83
SSDEEP

98304:Pdt+QLp5HX2Outv46XOIz25JaT78Sp911KKEtg0rAS9CzhsovTKQuOjXOf1Rxwa1:135HGOureB5YfR9Mtg0rAS9udLKLGXO9

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ch.nth.android.contentabo_l01_sim_univ

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	ch.nth.android.contentabo_l01_sim_univ

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	ch.nth.android.contentabo_l01_sim_univ

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

ch.nth.android.contentabo_l01_sim_univ
1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
PID:4965

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/ch.nth.android.contentabo_l01_sim_univ/cache/config_cache/-13547921261423697312

Filesize
9KB

MD5
2394a084e267a2b9117414dda8fe7bce

SHA1
6fa004a59a7ddf993c9a71ed9804656082a5784e

SHA256
4401514205958eef4711823e28da46176b319663321b7598cb941c57696d685c

SHA512
d07d81cb760da7995d5d7f4a3cca591f68721bc3b85ea0ddd9fda95f227d8b14cc83f3dc85420688056b298d04ebdc901d83783bc8a1288afb43e0837ecd14a1

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/37d6e7caeb3e1ac1ca35f9055c97fcf5.0.tmp

Filesize
588B

MD5
e6148deab3a4a7954eafc37481e3a7bd

SHA1
be58150035e770eb23e5bddb0e27b35dadc610fc

SHA256
9d13e41ef6243db72c9ddab43ce4f12113dbb658aef242a14e093cdaac98a501

SHA512
b9295d46ca23fab735604c836bd07a291d89ee898126775c5e6048fe200f48f877ebb1c668e080180578e73c423122fb7c8646e6fbe63bbb957fe91e16cd14e7

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/37d6e7caeb3e1ac1ca35f9055c97fcf5.1.tmp

Filesize
46KB

MD5
5825c3b054d56bc8d64154391635209a

SHA1
3e815dfb24848a93d29941cd96042a5e6c955f9e

SHA256
cbb4c0ff3d49f7fdee5ef05bde75c30484c5108680ec97f7f5e7b08c715cf95d

SHA512
8f6d3dbc21cf7b117c8f5a45a8a6e70383035d7fe82b5e4fab6fbd285750594cf8049456ad09afc529dc81aa919631c12cbcaa326dcac75ed9356b79a6ec318f

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/f511074925405726ae3b324666291ddd.0.tmp

Filesize
602B

MD5
bcb75d57677ba78c65e8d3322457477b

SHA1
0d6d2318fa53dfeff29deb237296dba7213a0b46

SHA256
17e6ecd34be5eb2733b82703704d51eb9250975ba0484cf46ba9e317df296698

SHA512
24a556da3e8c677b8c99c6f6e3822e7dc606bf8f94396bb6a9ccd140ce5917b0d1e8114bfb0bc466eaa5f1ea020b08da953e64cc2b09462ca7bb873fa00fda86

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/f511074925405726ae3b324666291ddd.1.tmp

Filesize
142KB

MD5
e9ea8ecf340761cf803f3c26a3a030db

SHA1
e96c0bf3b45a44226cde9847cf5eeb83034c8e9f

SHA256
ce7a485080c4c131eba6026edf5dcf83de426585ba213880a7c956da9ba2613a

SHA512
07acb871f72071a98d0d6622e033233babef2b695d4e7f1dc650871d42283467962e66176de00c301a7e4fe8708868495620a549cc42dff3f751a8aa22ffe29d

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journal

Filesize
124B

MD5
cdd89dd10c98ff4b0cb8b5b5bcd8f839

SHA1
1ba6ae43d914e9ba81955bf15967a3ee7b2cd4f0

SHA256
9a98e3b50c583a2c57c8b4e020c7bc48745c6312326ff4e76cc40564c1f5d7c6

SHA512
50f866f27776823c6cc6b3cebbff91418bd4323f757b2d451cac3c13a2492591f81f82c2cc0403ed1c671b2541735428ebe50cbe67355c6639831cd9cd396e67

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journal

Filesize
213B

MD5
fafef450a58e1f804ddd594764a7a569

SHA1
0574955ea7d19f17b1c5f2a2a3eab4578f4a7ded

SHA256
2a3b3ebab2bb485be124df1014d22bd9c17a38ab776044c599431f950a3600af

SHA512
4ed7443bd5d4eb17962484fc52c07c0cee40c4a9f9709a092733b07fa63ecc013c0d4041a9cc3262cea645cc6852dce399c7eb6eeb0a77d0753278f041385b76

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/cache/fetcher_cache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite

Filesize
64KB

MD5
cede8071a7e8d582facced35a7dbd807

SHA1
e71451afd7b89c343e52bd9ac81785eb6662d477

SHA256
ba0082d8bed854ca9dc9710b061a65eac70aed22ab8b2462fe01906a23036137

SHA512
41d9d5a27ae5aac635bf1b7621a19b64274aec0d3de47b0576b78ede9473098cf81981a363ede210bca5998e74d65ed734a76d854c80cddc178f5c3e669d811b

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal

Filesize
512B

MD5
4aafbc75308e1630348b43974bfe428c

SHA1
42fb7eb89bbf04dd59b43aced0e7c6ed198513bb

SHA256
ac45733b446f6abaf6ae05b926553b180e24219a660f1ca4926b9420af5485b7

SHA512
21f4de7bc3fd8079cc86a30b3502daaa40ac25a4953da36665485ec9208fc41d9ca1063a3c62c73e7d8670d258034315f31a91e07f6e18638df9047eccbf2532

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal

Filesize
8KB

MD5
1ef4cc6b88f5117f63945b1b0a43967b

SHA1
c94221de9b6bc4510ba22e57a232bfab33c00e7b

SHA256
fc554380aa5bcf942031402f19817741a3c7186471a015e3ed5ca103872d97fc

SHA512
4a90034e63dbc497c821563c572456f300db2192c8494527e0c46618dbdd1e693a5ab8bb5ad7bff5832b24f7e9f4e3ae2d48f54f18abdab669b1f357f60adae0

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal

Filesize
8KB

MD5
f8b18d1d7c962ede569a1faa7d1898dc

SHA1
dc90e0ba322cb2faf85cc7950526a881c2dc7c94

SHA256
7e40c5f7e4bd6f81db5e8e33a6154a052f8aae3af1b26362f5a962253c4a1c5a

SHA512
7688bc189077e65597a527fa56a22d73fde77b623e6e9baa93fada0b78d5e4f711d05cf2df37fe5e33256df1939262baa57baf3ee2c4d272f56cc6373429a2e2

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal

Filesize
20KB

MD5
bf0e39f350b189ee6265a16ff374fe43

SHA1
ad6a41fdf0b8469050179fb87dfc41c66dce1a0f

SHA256
9d7023486d7cbedaf9c63dce8ebcc860080bffee5aa1366058e9f0f8163a9a70

SHA512
566f83d2bd75b952ebfbc6415bd311f592c24b2ced286605ace747ce09c3f1dede23b25de0e1788d24fccae3df11bd59ca0bc12ebd36e7ce167d2f0b63cb5ded

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/databases/com.nth.analytics.android.588bd26ad81762917ee667cd121eb5ef0d1b21e6f17ac06b7844afea7d060d57.sqlite-journal

Filesize
32KB

MD5
d0464c5ba29e52453ee8beb096d912cc

SHA1
cef4451c59cf5cfa513866ed2e85e5ca69d53add

SHA256
5250bd5d7c1c7fd35d783188aca2ef15af30f837a4749159901e808f29fefc78

SHA512
22f8d38b4d9cd040c6fc98d3e58c553354b8bf9d41801d338b3ecee7d1b46caae8e4dafacf358c48970f5401671249fdbe161351de296f340b2a6f2745c4d6d9

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/files/app

Filesize
45KB

MD5
c81b4e9118e67bc23377d5ef99f48224

SHA1
024277a4f1a76a92b5b8c5ee14eae75cc227adbf

SHA256
8d6cf61c54bf1f13da672926d535633631ecc04e290cbf870ab03e4d7349e1d2

SHA512
2b2b213ea352bd0b003f13ce280a5a6c3d1d7e6775701687ac183fc481a2cb25cf41c38a75d5215130e3142dfe11909664788bde7fb68be4dab8260a95d481a2

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/files/langs

Filesize
3KB

MD5
0f6393edd01d876c42f66d0609f6f6ff

SHA1
d242b9b79ae49807822502160682de3fefebfe16

SHA256
dbbc3a96de5104373814f8cba9f829b186b18fa41d0510f0b79be67e3dff781e

SHA512
e47dc06e9be077fc112368f2b1ca1b6576c68b69a465db25ea4ae2f2712436917069029f286debb79750470063d374cde4ecfecc23a01306bb7796b485f9ed94

Download Submit
/data/data/ch.nth.android.contentabo_l01_sim_univ/files/translations.json

Filesize
196KB

MD5
d39064b8dc4e2449651ac09a89b5b3d2

SHA1
b7d00cdd2b16f730ca843ea43194d7957bb0e2d9

SHA256
b635667ff7955e49fa53c78997162c0558fc8f0c8d41ceb22a71dbaf4cc7b4f0

SHA512
a4f28a4f578435d5ee78e399863abe8204431fa72dbc5a44afd3a71915b1852253e71ee47005e967c7bfb17b4f70e50098675737187d96061c8746c05a2f9cd5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads