Overview

overview

10

Static

static

10

fb833cdb0b...18.apk

android-9-x86

10

fb833cdb0b...18.apk

android-10-x64

10

fb833cdb0b...18.apk

android-11-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    28/09/2024, 04:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    fb833cdb0bb1a7ffc9190ff366cf0cfa_JaffaCakes118.apk
  • Size 5.0MB
  • Sample240928-e7nw6azdkc
  • SHA256 6041b3e0b3b1b88b0c93f26a58a5d1f35b3552d4af92b500a07fbb7f32cb4f01
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
smsfactorydiscoveryevasionexecutionimpactinfostealerpersistencetrojan

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    trojaninfostealersmsfactory
  • Checks if the Android device is rooted. 1 TTPs 5 IoCs
    evasion
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.scottgames.fivenightsatfreddys.hack
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4613
  • com.scottgames.fivenightsatfreddys.hack:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4661

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/databases/OneSignal.db
        • Size 52KB
        • SHA256 802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 5e96b97e3d1d5ca30c21927d64e495c878875986fb3f5e74da6d0a06b3b70bcf
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 11ad987be73fda4cea6d4986bd578e258664237c8717928d8a2ce63738b5e03f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/databases/OneSignal.db-journal
        • Size 44KB
        • SHA256 3b02405c1c7fa2812933114cb32b4d11548c1e9da3b8e2d7a1bc2b9e72f15831
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Mint-lastsavedfile
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/files/Mint-lastsavedfile
        • Size 512B
        • SHA256 7c808888fc1937cadbd30575a63e06fd74d14554bfef591e3744659aa8bfec0b
        • MD5 SHA1 SHA512
        Submit Download

        MintSavedData-1-1727498120330.json
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/files/MintSavedData-1-1727498120330.json
        • Size 24KB
        • SHA256 e176e26a442051c5083bc6a78b02eab25fbd53f9d4531e9b5873134867223d58
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        credentials.dat
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/files/credentials.dat
        • Size 20KB
        • SHA256 a7cd0ccfd15bf858de479041c44d68f3eb344363ffe0b19e187ed69dc7a77e76
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb
        • Size 116KB
        • SHA256 f533950464a12491710f0128aa906fc647d78033a6efb9753e19952cba21f4b5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-journal
        • Size 12KB
        • SHA256 a824fcb4f112b5dbe317b5ffa8459aa68edab1a3b8f8a23f39b6c3cce03628e0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-shm
        • Size 48KB
        • SHA256 89d74d744254dac9bb1bf3e853b5d9880e00e82062801493635cb27c314a335c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 ffbaa3cf7ca85927035de772e39f5fb68b2fe84d37dc7b12f4cf9808ac96a866
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 92e100406c12667daeb308bd1988d4fc8380a7cb10347662c7887fe485e9ba18
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-wal
        • Size 301KB
        • SHA256 9f238cc75d2c3f4ca48f186c9e4323f548042accdbb9f3c4566cae8a11c4bb8b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/androidx.work.workdb-wal
        • Size 253KB
        • SHA256 dd5147f248bb7a7364b2fe3a0b1ff5f61c5249111fd2aa3c8b7c2d3d4b5ab4d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/com.google.InstanceId.properties
        • Size 12KB
        • SHA256 d8d032cc2227d52b96cc8b5afe1fecb3940ad3b3db8d2b863cc0782740bbc9cd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        credentials.dat
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/credentials.dat
        • Size 20KB
        • SHA256 c206358531f361dbb07c38889f017187531d8c9dac46287055aa695e56154963
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Size 512B
        • SHA256 2dd64eede5cd03c1e99404321e6c1410c070d99acd61a86a3877dcc91b8b046f
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Size 8KB
        • SHA256 ce5f6b827303cb0e49e77b8106ab12af3988ff0abc2aa2fe464b15c56a94e150
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack-journal
        • Size 8KB
        • SHA256 ff5b7554a783fe5e2e36aba147d562af911525b3ad532d7f061ac9e58f1e50fd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 478b3681753a6f894299b4a2908e4867b90d67afbf7818b306f9016fde47b8a5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 c700709350304899fb101d10f08ca201b2308490c2aff1fb164c3c1285cfba01
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 50b3d9b4813c16284357722d0c3bd37830b69b1a8b73a2bfa5adfb222c8aed4d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 311ae8e96fdcf71bc586615b59de5d5c57f7601c8d0f8d9b2b4738bc110a7d3e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/db_metrica_com.scottgames.fivenightsatfreddys.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 52058c87c20e9c3691d680461f37472125069c68c62e9cdf5c40cc662049e13f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 2f592308c8fc4967c8fff34b64ecda71f1f1c2871f662f0fd4e50aa6168169bd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 81017010041f51f846b9e27f592f151eb09330d869e1950c921fa6ee351a3710
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 5227c241fa74515bf09e5c3272576c9426eeb39fc4efc859a36ee7c62302bc0f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 0993fced7f578aea34ec0e59d19a3f96ca1765364cf73f06437494a430cb95a4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 1fb05b99a59b6ca71e2eb19cc50aee1eb045f9cf82e4ee634dce675ee6aa394f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 5e865c601f5986e6b7e231579d5dc75dcc2c2ddff3c90b69dfa90dc86a486ac3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 512B
        • SHA256 2f5e50dcb8e6027669fd39bb259cf06e7f1f35ed4201139f161d20b1d5627b1b
        • MD5 SHA1 SHA512
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 2b385ace044a7a5d87f5a533325452549d62d040ccfeaaea71465bcec92ee6f8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 ee6fa8ba8f44596459fbbf1e5f1b0aaf4d5cfd553953d1bc53d1dc5ea5a9bbd4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 83646c3900c8ba779d3e19340d073e614ca8cc4c66634be6ecc4ba011468877d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.scottgames.fivenightsatfreddys.hack/no_backup/metrica_client_data.db-journal
        • Size 20KB
        • SHA256 a43b89d459b31db14887f30378323d7174fd8898e8c9210de822ae4082e4e945
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download