Analysis
-
max time kernel
107s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
19-09-2024 12:44
Static task
static1
Behavioral task
behavioral1
Sample
eb5c2afa3039fdbd7d70be81dd9718d8_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
eb5c2afa3039fdbd7d70be81dd9718d8_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
eb5c2afa3039fdbd7d70be81dd9718d8_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
eb5c2afa3039fdbd7d70be81dd9718d8_JaffaCakes118.apk
-
Size
1.5MB
-
MD5
eb5c2afa3039fdbd7d70be81dd9718d8
-
SHA1
e3684ff809e0b7ef3984220b48306c39f87b41b9
-
SHA256
627f244c75a3d2c30d9dc9c8d698599774d213ba3aa37ae95f63f5669825dbb8
-
SHA512
43551b8b2050a25387ce22a9be09b4489d2fbf1d31807a667d1c2014eb5d62dc1add1d86a14c5f7b21a7ed02d525d23206be4f705648d4e5de25375166a6d9e9
-
SSDEEP
49152:41g1MgKmW0O0UYcBHMZ9QwizQf4xGanpq6f8RR28:6ZZmWP0UYcBHMD+z04I6EH
Malware Config
Signatures
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccountsAsUser com.bc.battery.saver -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.bc.battery.saver -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.bc.battery.saver
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.bc.battery.saver/app_Parse/CommandCache/CachedCommand_000001920a4fd836_00000000_2559374833920548326
Filesize323B
MD506048d0cfd49fc5991a677af20a7b506
SHA16450565719e93cc36c34ae37fc718d778ec134ec
SHA256ed4a5163780b1c9f33dabae0db80ab69bf7a86c2bd9dffd684c8c9ea8114117e
SHA512e8e2518719f27b6d1ae9ab68050c9a869e7f94f6828c581a98d46f0db9b2183ce4c66be2a056e1e0febdcae6abbee1c9ac48479cdc468ae33cca7181b4e761d6
-
Filesize
17B
MD59b42aab1d2522e937abf53dd3a9e74f1
SHA1cfeebf2c70fde3ed33ddfbb7b482b543a8cc6a55
SHA2563150a415ac4b4b49679268b99f43132f9e46be879659d0bc493e4a3e93bd2da4
SHA5120d41a49e803826d135e33c8cd3773d9f21031f62aaaff6ffcf809c73cad899cc1a03ed7c419d5b308d4ac6d27d679f1d081c899afc5c756ee83125b3993b3e64
-
Filesize
40B
MD5833f476143643b09551c6ce54005280f
SHA14e8e20b59e4019c74f42bd1e0b0a13853c7d0141
SHA25602d5363ea3d55b4c182a8f26654b45e272ee4fd5ee9e7f52d3996bd8aee84365
SHA5123aba2792615c35862f26657d19023a473165a54d8197ab51e4d44aac49fca70c63dbcb5d6fda2e728e900406bd132116c4e69d6eabbe048ed6b9c7d071eb7b89
-
Filesize
36B
MD58dc731139c6f011567fb310bc19bf644
SHA10ff5e67b0ed911ce36eb88fdbaeeeba356ddaefe
SHA256d0f30badca943985f9afe1d98c46c10b56c9ae40edbc7f44307b6486d0e3730c
SHA51259f4e19e3e9ae998695d332053fc66e20c6eb430d0465d8536c8a204a4792ebb27293091dcea4fcf873ab96f0ea167ac2e2902d37181f725b9fb352c67fce58e
-
Filesize
50B
MD58daf7023966ed4e7ea9bc6e30c20f8c3
SHA1080c901515b122955212869a04ff67b50e01e323
SHA2565ed99fdd587200736bbe63ec60538b7c3b039aa89194cc6472b44811518ef6a1
SHA5125492c1a8f52aa6917d0c3af3d3a6d48b80569bb5b1ab8e24516efb72af5b1ad7a010bc585ab77031bfab76b4a2ccd8349fc79b13f8f6bce64a7b3b485b96dcb0
-
Filesize
449B
MD5efb4ae152545320a82d8529cc7823aad
SHA1ca3145c5fcfaf05a7d169b7f75f5d46964a58ef4
SHA2568e78ae53a4f76e21f6c1e5f11ec06ca2dba066f00d9b1d0b53885d6e0ae9818b
SHA51272532e0c0baf6869fd0c1f316bf35c433bc37492b520fd23dd355b0e38354ee703e4b2e7d68c56dce83a074b7c958c616fccfe985d8a8ca934c1cde0d0404fc9