152998fa1c8098549a6bf3d6d07e6a4d278443cedfce0a32a08ae602f005c023

Analysis

max time kernel
149s
max time network
155s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
01/10/2024, 01:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

03f0a6bc785d1dbca9745563040ea853_JaffaCakes118.apk
Size

730KB
MD5

03f0a6bc785d1dbca9745563040ea853
SHA1

b01fb4865dfa5e8bf703d89e2bcb540e0f966873
SHA256

152998fa1c8098549a6bf3d6d07e6a4d278443cedfce0a32a08ae602f005c023
SHA512

c2c82408dc18b2436cd9c9d254ee8848088f9601e9c5a7ca4b7bf404d010344f2285a627939378d5d91c514eb1dd6a4bedee5ab88d7af1c5c27d8891b7493cdf
SSDEEP

12288:vd8/Z3GLYs0NSa0qTKnURMTnF+XmcQvrMScKl3tkkVBD6d2jen7Zy:VS3QuTKW0F+X6vVDtk+BD6Qjeno

Score

7^/10

discovery evasion impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.google.playads/app_tjc/joy.jar	4961	com.google.playads
/data/user/0/com.google.playads/app_tjc/joy.jar	5003	com.google.playads:daemon
/data/user/0/com.google.playads/files/pcom.google.playads.jar	4961	com.google.playads

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.google.playads

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.google.playads

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.google.playads

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.google.playads

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.google.playads

com.google.playads
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4961

com.google.playads:daemon
1⤵
- Loads dropped Dex/Jar
PID:5003

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.google.playads/app_tjc/djoy.jar

Filesize
86KB

MD5
a500f41ad56f4fe9b6eae4412769c5bb

SHA1
5d59d2384173790694a37db87659081d2ebd6328

SHA256
44328a6b78751f29244f3c4b0d3d5145e9776072919cb795a93b7248b663b0aa

SHA512
57d1615bb96af8616aa132adb8be99fe02a5b221c81df65e9f281ce26cb65a9c479c97ef475c73043b3ec9dc899cd4a1de9369610b966cc193ee74d0d20bd249

Download Submit
/data/data/com.google.playads/app_tjc/tjoy.jar

Filesize
86KB

MD5
d043032f183efffcf2b60d15b66295a2

SHA1
7271994d990972d69d074c71e48d421b892a6fd6

SHA256
9b4f4c9ea54efd2c8ef8fdff2a57de86e1f48543880391d23f2ab06966ca105e

SHA512
0e7fd1b1308b17f4b9ef0595609bdc685983055210c2e9dfe0919f2b1a5e1c57010546888c346bf16611d03500fa792e63e33a5c10b2901e41d14f432912a777

Download Submit
/data/data/com.google.playads/databases/GuideAds

Filesize
20KB

MD5
e64494796e59ec7f7a8e6739f8dfd492

SHA1
1464539450a62e1608159d8413f3bfc6fe330272

SHA256
210076c2152337fbeab4c39f6285e59ecfd475e1f5d5b342062c5add15fff75e

SHA512
031e8ccade8258510c99edab47ddd65abc5f4dbaba6cacc217e8e1b327069122518cb90e3169ad881eea531fc31293a2121be63a5d43ea09b7f5f2f9b2f423e2

Download Submit
/data/data/com.google.playads/databases/GuideAds-journal

Filesize
512B

MD5
ea12fba272f6050b591ed5fa942cb570

SHA1
90e780bdf2d62816d1b59733e89e06936998aa22

SHA256
c6dad10c98f231228755ef215bdb3c9689d336fc3b7f217f3ad6752cd6c4661f

SHA512
3c5af3eb75b81c99dce7e4666430ff36ee266365fba0f7803aa094cd0ff98089a789a6e9fae2913ba9eb8be76f40be27264f33302f428763816f7e08dc844328

Download Submit
/data/data/com.google.playads/databases/GuideAds-journal

Filesize
8KB

MD5
3c03e121b126aa9f3c3cbff1c128bc3a

SHA1
869e2499896f865ab40601eb8988852773705fe9

SHA256
7d15b1cb05517d1e9c9c63b29b12261b548440b3be52a42598b231bd82f9f129

SHA512
a426e3395d7354e5086aee92a8e659c1ddc1e7d06b0b6da3ec22e7775fea191b3a8721da5ab8efba5a1f30488a63983b9d506956ff63b1976d79f551d26af9c0

Download Submit
/data/data/com.google.playads/databases/GuideAds-journal

Filesize
8KB

MD5
827c65f9f93d2b5b5e880e9984dcb2aa

SHA1
cd45914a182160d54775197fb8af1466a4507990

SHA256
52a46af8c753863699275e8e60f8c37b9bc1bb42085d47fcb896fbd1bec8df83

SHA512
09a2455161657665a0a8881ffcff24884d7afd02e9e2c72a5dd92c6739459622648f820533ba4f89189853b7e681adc888cbdd55670a688191bdb9061d112d80

Download Submit
/data/data/com.google.playads/files/pcom.google.playads.jar

Filesize
204KB

MD5
9c73460a985b03ac5d6669472ceea58e

SHA1
5efb5bacc8cea6f2f52f081be4ff43a757a9d7b2

SHA256
a620f48992c67529027b43832856e5d934b7f8555aba1e55a665bc26d16bc184

SHA512
1a6900e47c957019b32962b862447d9b13cfb32858f6fe3ded5043c058f3161593959f95e2c8f324ec20a46524eede294358880174119fa79b47bc6dca16800e

Download Submit
/data/user/0/com.google.playads/app_tjc/joy.jar

Filesize
149KB

MD5
832b6b1480bb8147972ca7e52ae79fd0

SHA1
1a27bf6d5f231d1a6b00005a535b8e93a8067c79

SHA256
332a0645aa12e3d2d6283acac49d5b272b9381bff671c49b6ff17b8e6fd484b7

SHA512
d4c02b0dd3534f97c6665b84ad8471bb76e265e845275e5d19a438c6d5848be80bc3270fc819baa425411fe1e8b0dc42d82c03263fa4ddbb3a4a025adc2533ba

Download Submit
/data/user/0/com.google.playads/files/pcom.google.playads.jar

Filesize
474KB

MD5
31e73d6e7011caccf345690ca0d1d40b

SHA1
ce95d4700fac9f46f80d586500774ae5932d4289

SHA256
5b97921b6e4ceae3eccea328e78083a8ddfd36709983877be27dcd683835fb16

SHA512
6c80923369ae64de16743ffb9985d4aa8494f4c4663835be2432288993f34cddb638d9407cd5f7b43959c5efb0c4d55c99077b3a4f5ae709ac87f8dc8140bc3a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads