Analysis

  • max time kernel
    131s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    28/09/2024, 04:35

General

  • Target
    fb833cdb0bb1a7ffc9190ff366cf0cfa_JaffaCakes118.apk
  • Size 5.0MB
  • Sample240928-e7nw6azdkc
  • SHA256 6041b3e0b3b1b88b0c93f26a58a5d1f35b3552d4af92b500a07fbb7f32cb4f01
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.scottgames.fivenightsatfreddys.hack
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4981
  • com.scottgames.fivenightsatfreddys.hack:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5028

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/databases/OneSignal.db
        • Size 52KB
        • SHA256 c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
        • MD5 SHA1 SHA512 SSDEEP

        OneSignal.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 8b7a0a6e5b9b32c1dea7013f277548473b5db180e309347da63665ee078fdd35
        • MD5 SHA1 SHA512 SSDEEP

        OneSignal.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 75a3961eeed4e3faffc84fb7e384f87dd0f789237e56871f76bc285772a09ea7
        • MD5 SHA1 SHA512

        OneSignal.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 9a2b25b29e1baa25f0b0ce3787fdb6f2bc89f9c94f5d5a58510ee6341d088ad7
        • MD5 SHA1 SHA512 SSDEEP

        Mint-lastsavedfile

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/files/Mint-lastsavedfile
        • Size 512B
        • SHA256 6a6388edf2b5935363757af403dc4d32eb09565a4a27b4e23fe713f2841832c3
        • MD5 SHA1 SHA512

        Mint-lastsavedfile

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/files/Mint-lastsavedfile
        • Size 20KB
        • SHA256 112e60e5fdbbe4839b7623b4d6a606e74f5143e3f6568329a9b036512c02ba32
        • MD5 SHA1 SHA512 SSDEEP

        MintSavedData-1-1727498121202.json

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/files/MintSavedData-1-1727498121202.json
        • Size 56KB
        • SHA256 e99df04397c3863e0c18388d5084b0db7961e1d3ab052329f9d1a1864a6728fa
        • MD5 SHA1 SHA512 SSDEEP

        MintSavedData-1-1727498121202.json

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/files/MintSavedData-1-1727498121202.json
        • Size 12KB
        • SHA256 a4add7648216e536dcc874c85ba75ed7f83cb4c959811c9925d5e894878e20ee
        • MD5 SHA1 SHA512 SSDEEP

        crashCounter

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/files/crashCounter
        • Size 12KB
        • SHA256 02bf11bdab2e03be13182fbe95578d36d450df03c87f1b2bece9113557744d3f
        • MD5 SHA1 SHA512 SSDEEP

        lastCrashID

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/files/lastCrashID
        • Size 226B
        • SHA256 2695c02668e9a94604a9e4f027bae4047621ec8536560264894d731ce42c1f46
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb
        • Size 12KB
        • SHA256 7b082079f6af39ef4e12dd749935bbb30993149870e4195c21ebf42c306d48bc
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-journal
        • Size 12KB
        • SHA256 5b93336d7724057167c192aa3c95023d5c645ea722f5160971bc96134878b824
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-shm

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-shm
        • Size 84KB
        • SHA256 ddb1383d89a2f14d15b614c55dcdb3a71a357deaa6bd2a43f1d5586ef8cd7a77
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 daa66dbde707a5805e626d3a295d75ff2f0193d80725650e98dc50db35ac483b
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 d7aae2a51bb60d958ebac68078c32728ae640fc20260c61ddd2f157b7cd40058
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-wal
        • Size 181KB
        • SHA256 3e21e5a4261e59aefae809ccf736e0eb773deb8f2105eab27c8c2ebcd83df9c6
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-wal
        • Size 269KB
        • SHA256 e60de5c400aa0930dae5bbcc7a89105b9e3c4ec32f2b63245d3282722d4b6020
        • MD5 SHA1 SHA512 SSDEEP

        com.google.InstanceId.properties

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/com.google.InstanceId.properties
        • Size 116KB
        • SHA256 f48aed603455b701b21d10892ff1b0b86ab28ea14b09040c4f73abfa544f63b4
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.scottgames.fivenightsatfreddys.hack-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Size 8KB
        • SHA256 f4cd0b64278926e1b9b6cd5ae6e0ff27176f2950a9b4b83266a4d997b95e739d
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.scottgames.fivenightsatfreddys.hack-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Size 8KB
        • SHA256 672a9774600a3af50892ffa944b7beae7d66fa3b3e08b97953ca5a950f394b99
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.scottgames.fivenightsatfreddys.hack-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Size 12KB
        • SHA256 eb92a882d894fef03be59fdd7b3661fb796fa718cafc75ebbccbbbca8f36743f
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 6d49e13be4106a23c45c85449731ce6b008aff792d95f72a1f7cbae01d6fef52
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 bf90b978fd6c2f1490556ed26fd0087dced7c32f76240ebd213c42dbb0967861
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 6a18454c8f5f4b82fbf4363e431b2e4277fa1b44a271d79e214dde1eab0bdb5e
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 02ba9a1fb04b92e06a2407e1930bdd9267d85a70615f9f9a2faa876865bda0ab
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 98f16359efae7670d37bac056ddf9fccf01c302701a0cbf26aeb9e86a8b26bc1
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 6e3637da70ef83e0d50cedfcbdb1b8f34a343de80bdc48afd9734816ab2d69d2
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 7228fcebda966631434ad9551a39477eaa5ab8abafdad11e479dd11594c3befc
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 4564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 9d971936b5d095cac56721ddff5e05b4b0a1e8f7283970a3566d4104b3940133
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 73a82c121579e4383dc21e77071c2b1940b72fec66ae4d47f5e746bbf93db797
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 512B
        • SHA256 714dd370f3b15f6a56cfa95cac2724657b15ce04567876fff71ee6499147ee8e
        • MD5 SHA1 SHA512

        metrica_client_data.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 ac8b3c481dd416df98e42e43fe1c6ad92b1f374dbd8bce76280fef2e49a7d33c
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 f2e83a0b974fb6073f148cc3aa186ad537d8f2da16aa6ef14a623ddfdb3cb7a0
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 20KB
        • SHA256 1a931157cf6f4d56884b599367b1c345af3116549c37e92699bc6867d42dca02
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/data/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 44KB
        • SHA256 58a38f981a7d3530a4492a2fba474e63613eedd04e94ec1a0a03109effcdc9f8
        • MD5 SHA1 SHA512 SSDEEP