Analysis
-
max time kernel
138s -
max time network
145s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
28-09-2024 17:02
General
-
Target
fcc0b7e7bfedb49f4786cb2c391dcd8a_JaffaCakes118.apk
-
Size
4.7MB
-
MD5
fcc0b7e7bfedb49f4786cb2c391dcd8a
-
SHA1
1c9b8b0ea9ada6adb70288a8e88d991e63a47558
-
SHA256
b31705f05cb2b0687aabc3f6f989ab02ae04756eaa0204559b5f8333a70883de
-
SHA512
a49fd5a97661b753b7ab34e66b065a113f8b272f999110cfe955dbd2f00741c67707a754d6b91d91074077a3216812ea88a58ff57a0105b67915e3302f7074fa
-
SSDEEP
98304:Z6faoaWfTBiSRCA/S3MuxN1cLYjS+EdgkIZMVEHoHEfOySK:ZOaEgSRb/SHxD9EdgJiWokfOu
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
Processes
-
com.even.kiss1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
1System Checks
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD559f4084b3087e129b7d84a76452538b6
SHA1b7671b2f559ac6e06d605448d638326a86e25ebc
SHA2560ff2db04f989ad7dcd68f099748ad36128aeb2c9507a4b0fdbcd69e1fb9b5a4b
SHA512c624762f32677b860cb4e4e4ed7b4df56137ce091d4fe3827b0fef36967b92e880a13c3f114334810ba4aaa0a080739d0e636d53533db030758654d5ba4b3a9b
-
Filesize
512B
MD5da768a895830e3251a7ed406185c11e2
SHA112920e4d9a300bc400d036bdb275dbfc1700cbb5
SHA256a9fd2a36873d73566d7a9bbd853ae4b7edb1121d91cb644f77f8592c80d5cfbb
SHA5121aec8c81c19f8553538ad4b22e46b67502d74fbbcdf3c1955493bdf164d3560cfbd521682a60dccd1262a855461115c57f13f5c3c4fdb4684ab0130b6046a97a
-
Filesize
40KB
MD5d98d4e53e01fcb2c724e35012c1af50e
SHA150b20e108a648a1e8afc5108952cda450cf32a6c
SHA2567e30f359d179adb4d15bfeb766b85ee1f0caa3240bfd065ee868d0d548b0248f
SHA512fae98da5be6a510bb9248b7fd7c47d4c81dbfcb3f3a3568176347d7fe02f725a7e484860e0ceb226acd22836c21503a5e63a6c14d4a5cda4df1151b592cf3e6a
-
Filesize
20KB
MD5a05a13f49997d72119ef5e52ca154e0e
SHA16e823cc048574ba941e477419df5827a1efa29bd
SHA25676b9ec47ee21e17ad7641c3a1472db08706d022cad28d8097adcf9be42628d35
SHA51227ce83036f10dc03aedbc86e42edcc4401a67bf4f227bd22fbc5ee60b4f48cc0abadeb1bc18bb6cd68d6970be65630d37e669cc90c3e3a1da48b14a61e559846
-
Filesize
512B
MD5c2e729c6e9b66c99df1cf4b01aafcc39
SHA137469de438b1ef5b40f336c9a56611b972dd675a
SHA256a387d1f823944a8dc2e86ab6f32a579aac8e1ea24bc37aa46d44ce09a5687de6
SHA51219819f80286c9f8442a0d17233dbda8df72a73b16846a5c77a194b271e0488000e809e938c773375124190105dbb72b48ff1b86c79638aad13d136b7d5d6b379
-
Filesize
40KB
MD5ec45d2ee18e4f898400ea594e43b425f
SHA1a4779faa438fe22f4ac31adbc761ab11406ed0f7
SHA256165358bf2dd2c752d34e147f3a4922c75e29e45bebee5eacb0d582497bd47078
SHA51209461573e608d5e446df77972fb70ad1e32657e66b8517d6c7fcc3525e252aa51d35de7b822977ae81ca5d9117fcd61935086cd0010e164026afd81a2e17db3d
-
Filesize
24KB
MD54bfa314d6b151570c9f90e87ffa41ac4
SHA1170294d4982e69ae6c72cd405fdc1f96b155ce4c
SHA2564a8f9b899d6fc77a3a948f17cfd86a1a58171569578a7bbe4430267fcf7bf2b8
SHA512ff2df162eb60b3c2aa32ed3d58092e192b3f6bea4c14705d226a2e5a5d3ac93dc428e26d0f28d2b75509b1b34f6439ba79ada49523b4d8a4866f79b518376e7b
-
Filesize
24KB
MD57d7a01b69cc7f2ab96c4cf165ef6d2a2
SHA16618aade86ad661409a8f73fa95461ae9b52dbcd
SHA2568094c18d30007a9e8fba4cdc5c977ece9753c1e799f5e4cbc14660d32354631a
SHA512ac16f01e7797295aab1eb985fc9e0d9e638e5ef68ddfb8fec36b2e32ed47f6598585a0a38d0a2dbdd16f1a343e8d37441303247007612cc6a098085cec6d1732
-
Filesize
512B
MD5a859b8148baa24108d9b623eef42f7f4
SHA16ab00ee5f273d21094c38b008f96707edfa9b381
SHA256b8134f4742b5ed0b68d12a5feb017221ff0b60c6a605c7565163c6754409d8f2
SHA512684eded2df837372bbe3a1596b34fb5f6aabd872f6e1084d731d5abd0c7a586b56b6f7db0c1fbb997a975a40d1fb5dc0549d89193dfb4ad5194ff9818b4caf91
-
Filesize
36KB
MD523cf84313f5f492b52cd18e7a1b5e5f0
SHA1a258b234fb2ca9340288976bb07f668482563373
SHA256c01d974ab223ddd3ba7169dff0ed122f7de2b41f8629c01517fbd228abac7914
SHA512568b0662ea4636fe158fd10c883bb55b54c6cce38ef0d29ef880888a2b74d19bb05556cf868b5eab1f735c15b75c8c737cd0b78d40992e20be664972a74b959d
-
Filesize
12KB
MD58ec410e24889cdbe8bf91340b2a254ab
SHA1b046af59c3c01ff1221a5a40d4e92868eebfde18
SHA256dfc3a56cf964b5a5a1bcce83d1f318bca526f333f8bc085e020e145cca3fd7c2
SHA5124a5d69dbfb20d8724587af57abb71a8add040aa3b252a3e049e18c379304d4247036924831a13ab4c1e4e60be258a4555cdd6eeed741c4808dac83fff66457fd
-
Filesize
24KB
MD5032abd6bc70ad7c9484f10a7daf57bc7
SHA112e3c03375192814883d5fd1671e2b0c64b0ae43
SHA2569cc41eaf3228c605583528005cadbf69eb145da3943e09e3732677423dcbe976
SHA512aa28b2d8e87dd6364e15b1c99c52758f937585c126cda7db38cd2b4e5fb3c3e5775a92cd1d5ae68b03a6c59e7473766d670f03e3ee30e8ee53c2bba1b73f243f
-
Filesize
512B
MD5697315a4aab9d9e50ddef24f0fa46e87
SHA1b2d08622d5420e5f51f7e8e19557d6880b600e33
SHA256e4fbb105e90df36d1c3715ea2be0f1c492c3fc2fa9619c9bdc4ec9ec54b3fd1f
SHA512d05eea7fdf16e84493915f660b892cdf92911e3c4d00b6888dafe20c20cd0735ca50256e51161c67763a1416b4513039bf61f01d740006401c6746bf84797f12
-
Filesize
36KB
MD56428cdb2c1b0ea6c56e7f38cfc656349
SHA156af2090af180aadf8dd53ea44f7e91fa135e64e
SHA256f3ab8b6fbf57f9372787ac1f356837c861c48b798454c3292ed141ed6b24ac2d
SHA512ba81b975a5249d6cd14e53aa11a6bc7b5bd9e3616619b16069f863aafa8bcfc8a01bd654ed1b2aa6afd55373378b187df8c1ebd07528845f96116b2f0759410d
-
Filesize
512B
MD5d36e84becff63845e9eb702f926d373e
SHA13ddec448c3e20e292d5e61a0812de057014e4ab4
SHA256ed0d7a4e140b2213609ea9be5ebc6cda6a2b6108b22f8bbcffb954392f396912
SHA512eaf029be742f869328978c4d80cc5961ca047f61c116fecd689248a578e3c47302c37e1340dfcfd41ded2b9030f9a871f9ccf6678c4a539508ef63afa53f2906
-
Filesize
36KB
MD56ebe7c16c467e5ccf487540a74a12f2c
SHA1cdaf9bf4d968633f9145ec40b3364d8b319e111a
SHA2561651437efea12ebda95ba83bdd3f1d99a33a6859336ddac6431ab4617f805ffc
SHA512b2a8a0a69fe5b1e39ad349d007d5e0abd0fa4e0e9e2a79a0fdf55c1e637d568ee1f424e388789b425ce7305713921014dd7efc6013a16ed5a647234be17afe0c
-
Filesize
24KB
MD59c37108c041a67252d4fb5059436eb9f
SHA1f65bdd652f9b2a098993d2aca0be2578e8eed20a
SHA256f4a3fc85419d0e98a0312af88fdeadf75bd9969460820043559d6ee45e7ace55
SHA512d7b92b0b4900439a28552339cf7e80e2937887c7de796e10df0bec393d136bdcdeae47991133a5c144547ac2ffe484b9c99e60280246858f6ae9b8529c5d8548
-
Filesize
512B
MD523557fecb905c68afe4759d5485dc900
SHA1aaac97e133473b9114fb8ae08f91c622faeaebf4
SHA2565765aeb34d5654559061831fde2b261d420a2520425c3dfe0e170b35d0f90d67
SHA51292366f9f0f22acfe936c8e185f4710973affb10d2feec6626268d2fd2742e1f20ac27caa5caa8dec2452a9e325c4b12c0efa024e47abd75a7c959de0983a8abd
-
Filesize
36KB
MD5a97163aea462594333466be7d6682c04
SHA1026d18bf610bde4180841a5d904b8dd25224f909
SHA256b356e8179b226bf3c030635408235c7fa41e4d510b915c59350f35267b1e342c
SHA512e4ea37859a424d3bcc8f05eb74da5d00543ebfc70039cc3dc58ba459e2962488ae465c3ea998fb2cef806324970e8f310bc8a1be622488a457a2fd1da288929e
-
Filesize
24KB
MD56c217ed0bac8d2f91b30b79d439f229a
SHA19ba63c2aff1bb2c70250a9dec1f4893d2ecf827d
SHA256344d6a8d8632f380bc914af9dc9f0296429a0e9fc273e68e57870032bded5720
SHA512fa9386f1a267171f8c80095633baa7aaad145986608f9bdf15c6708b2b50ed19359f98f9b9ff395ad26e361a85cc9e26495b23ccbc1befcdb03aacaf167d58f6
-
Filesize
512B
MD52f4b910dea89d3ba5c13c740415a9cbd
SHA1d39f62666e4043f44ae4327c4e9c9be407097f48
SHA256ca31ab2f5ea795e3a9c01b94af2e9a1303af3e8789a52b1dfc15b9e5587bf316
SHA512f4eedccf22193d4a6c6d788fb86936e69fed77fef9e9e6c70b4d11b66e19f72a928547c38692e7993753a774f88735b246bcd6c80874a9e98dc768e85d758f66
-
Filesize
36KB
MD59478342408a231341a4468e2cbecbf2e
SHA1fa94c661ea5376ebfc5db2fdb82d117a42b17439
SHA256550b4fa8b877bef8396b996e5b15c51a894e420551bd76e720dcd029ba309c94
SHA512840cdee79c8349d89e557270c17b60300cbc8e2430246c089deea47d56a0b391a0b89abf460d124d0053ed6c2b0a0e8e5eedd8f94388dcddd488f745b4946ef1
-
Filesize
24KB
MD5844a8e27e41cff4e20b3fe8a0e9f843d
SHA1a2152f253b4ca68ab21285484d644d72044aa09b
SHA25639da9f57edf2770ee5a179af83f648f06e2d60c65ddbf8e4e6fd5baaec5adf43
SHA51203d7594f37e9980ba40acdc96e847701010ebc4fab598c46997c157abcba67e6b2b772864f99f3e33dc27275120d6ede4313cba1e4b14db54b4d85729814ceb4
-
Filesize
24KB
MD5e748c6b4a5d7d901ba9e5dbf35ec70f8
SHA1d7939d1a19ae4ff5c700defc17400268b8eea13f
SHA256b1507d98fc6d64ca3667ae6d3312dedabfd3d29784b0dfb835c0a002bfaf084b
SHA512dca0f06d443e899a2d6b1b92d78f83c85130f31d47ab6d5d00871cddfce84905981aaea5969af87b04cd4f378610c1ff4506cbe7721515fcb20e59b4e00cf7b2
-
Filesize
20KB
MD5a4cf289a84b3a1906bc826e8c754e7c4
SHA17085b412716a2b8458852e600adcd8da8b6dc5b9
SHA2563f1657e627f136fe04587c59abd49d73f1b6960ca16bf3110a8202d7b40b8fa6
SHA51247d40ccd52bb80665ae08dc8fe8826ccd43217f45abcf08ba60df22dc643c615543f7d761999556470e3e9bdc1b3089f3c5c6336e2e0d1b76cde0f7a586c8476
-
Filesize
512B
MD5804add8c77a54467bb69fe778b10a102
SHA12ebdf894271b888de741e5261d14b49a59778f4a
SHA25672872a84fc8ce090138c2faa44e878900dac2b744962779bc853efe42ba04fcf
SHA512e3738e5711c9b0a9e33c4aad5b791cd9bf4df2e48e7d0db9454a5b74b323a6753e4fdf0e8c9dfcc4549a25cbf868e310cbdf4b9e4ebfc261fee25c9ba04c155c
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
48KB
MD5abd89f3df20a735a24194081d6978d32
SHA1d718dfe91de8be5af6d7c189df12674b9d7d350f
SHA256f0453d87fbd13dada874b3d983477a3b00d3add8ca0812465087a9ec138c799b
SHA5120408b086ee7aa810743060b1d355bd74e9b02834327627d6f041c1e748367346f3ebd3e3d1e7f7b47a8e83e90fc6705702fa881d36b39976c419ff944c9e3faf
-
Filesize
12KB
MD552f64b1cf830750463e77b9c3b1571ac
SHA1320175fb1dea69400fc235f32475c509e46f3220
SHA256e6b207124af67f58b11155c3b7b167e1526183b9725c8b78efb3fbea35aefb49
SHA51205722a52f434115c22e86beacbc55abec2cb1ef904997b4e8faf27b1f4a91e62aa61fab575134b83ff6db0b82c5e8a55e9deb35ed15f3009f160fe99a70435f0
-
Filesize
8KB
MD549a1de04437a3622941bd8cf4b7bdd5a
SHA13714cb416f667bec4cc027301e3b439994dc196b
SHA256dfe55c4d1c749d8c32af5edec9e36802aca8ed9bb8606e2d0c3ea70f62d2ca0e
SHA5121c0fe9beed13f6e735dfc4a0093236bbd76d2418cb4119f126f0b2c43f5b082cd4486efab8a31583356cd91dfe5589b2945afe607b3ba24b7dedab0474cfad36
-
Filesize
24KB
MD53f46387c5a9161a06c35918e4715e9e4
SHA1f03b4527b29495a3f50be85d6afba301e9e3f1c1
SHA256687a930724a6054924254f945ae475e34ae87ebdc2054881c34317cd91d46ca9
SHA512614fa11f57f1ddc2750185eb908a580f1ae1ea53d4f4ff6881610942a36554b918138af7103859821d90cef12ea68bcab1ca0e4548cc5a78ee7a3c658b37f3ef
-
Filesize
512B
MD52c017647efaf959a7400b34288b12afe
SHA1db1b89d8c4e655e7e20bdc6dcec7a67aecd6e5d3
SHA25680b7cfc45013eb4ed86ab3c6e338563c5315c658437bcf630ef2e7e7529bdce0
SHA5126027420215ff632c9ce36b78e92f80798540620b006751d0633624444e30b733bc135d4cad1e5fbf31a5a7b0c34985276b38305eac3a62e14cdde420173c61a2
-
Filesize
36KB
MD5d1e26bdb9c77552e0d131efd402151c5
SHA1462832fa2fb639250984747da9a8eabda1cf6f74
SHA256163a39e7552413a5269796dbfd523849aeb96dc2c9352e08150387b9c1ff78ff
SHA512b56119c728a30da5616a1d56b0c6239938cdbcc66c5f19e9daea2d2a1b0d9dbf10305fdcea190d54253dd46be9112ab532225113bb1a1dcfb863198937264e9f
-
Filesize
24KB
MD559413190ea19211285b5c0fed44c19c8
SHA1ee67b7590047c3c17309f6e6eed48556aabe4c92
SHA2563511c95f09883c65de19c3be645faa921aa3baa92d21b5c284133da349158e2d
SHA5126a65fc51ea3e163ed1da558c2f4e911857ab4d3b15bc27135a4639e8fed9022fd6d89b4dd39a39b3bcc69060d7565f68ef23bcde4e622a2dd823e9fd217d314e
-
Filesize
512B
MD57c825c7ab96d99eb6b4732b488794bb1
SHA10ad66509b43ce42586bf5946dacfe9d15b24df50
SHA256f2bb48a8ee6bddda96e0e9efbfdeb2653a14068229896e7bd591ee69161b5707
SHA5128ba0a835de491551e481cb1a307228c0ad5e36e87082c10a15c949aa739a531ae8c86ebaeb36ed03073be21452c919ce0a55e35ab9bb774b527ed9b3ac2cf889
-
Filesize
36KB
MD547366e453ea866be8227690fc786ed3e
SHA1a047bfc0473b853ee6573d66693b3b0530029607
SHA25652efa79235e0adc270e218c407f384d293591775a4ac68c3bf316388ebca68eb
SHA5121f9749a00e98356c992117b50d8cc13cfa9799a44bf9483bcd1b3e9f849a2a3c1df914101da17cc699da51645adcd3fba1f8b440568a1da9e37af9e33c80b82e
-
Filesize
159B
MD5bcc6a1d774dc43aa5d64a5d5a7988c1f
SHA101e91892e128c0009a7f6124f32596dbdee08294
SHA25634d255826652dad8114bbadce1ce36df27a2fe46336b466117a67b20f0cca715
SHA512c88305988bbd6ca3161adeaece4951352e732d10a163dda029b791c57f7da58839dcbc1c5a7bd8d4b140b9eba553ca4de138e7b06f28e569b2553953617914a4
-
Filesize
26B
MD53c33e392d0bcb15294b1ad95f8c63ebb
SHA1c421f448ddb928f9dc78f160cfb642b12cca03dd
SHA256ec795dcf5ce8a6cbccc2078f0a90725cc74b4aaabca0a9535e99d752235d0e81
SHA5121790a4d4303d805dfa8a6a3a5eaace03abe0cee255fc62b603c283901e46fedb36bc3fe466fb34f0cb181d4221043133a061e498b8c433513f315791e51d121e
-
Filesize
22B
MD5b59f7f521008e55e9592aafa4ce3ae36
SHA13696a3e25428639f58fdca352138b57cd796589d
SHA25600dae9faab5a999144141684ab00fe0d34136bf967b8be2573ef1027e6f3bc72
SHA512aaf6505afd366e58af9e9e9811e67f7784e7d1258e962d81b9e83bd8e8b507bd840644364f34bfd2a21537efc71c8d00e460810ef73ffe6c258e7f83498e5bb4
-
Filesize
26B
MD595058d3fa3076e4fdbc058e18d566e0d
SHA1f6082f93a9c0ce4565c1228e61099d1b3b4f1c6b
SHA256a079ab1b81730bd46de6049424ff404e37db84d47c48c5dae619911c9647f299
SHA5122bee197091f0e83989094b48f1fbcda3d9af8f9f5bdeb2716f3d659f99e97167e3863d1cd2e4b5e1537b866860ba016f4d7f9005e03e3f2d0c1dc3b2a0b264bf