Overview

overview

6

Static

static

6

046e38e9e1...18.apk

android-9-x86

6

046e38e9e1...18.apk

android-10-x64

6

046e38e9e1...18.apk

android-11-x64

6

Analysis

  • max time kernel
    63s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    01/10/2024, 04:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    046e38e9e19ae927ea33e8b6494e3e13_JaffaCakes118.apk

  • Size

    5.7MB

  • MD5

    046e38e9e19ae927ea33e8b6494e3e13

  • SHA1

    a662f98c3214f329ed547cdd742be60193c7e464

  • SHA256

    b3837544e557b26f031e063f4fa5f54ebf4fbc807574453130afcfa96ff2a71a

  • SHA512

    a025ac8739ec89b672745945b3de745e23ba25dc2211d3d1e20015202dbfbc6869deddcf0faf3998d36d905cd1dfc0ddeb743b4faaa326aeee8565428f058459

  • SSDEEP

    49152:qazh0eheCDUnZign0f/VlwjB4Zpq8qoniptX:PxvN1lwwpqO4

Score
6/10
discovery

Malware Config

Signatures

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.winfield.apps.foodsafe
    1⤵
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Checks CPU information
    PID:4275

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.winfield.apps.foodsafe/files/datax
          Filesize

          5.0MB

          MD5

          97f5db86d7c5fae7185bed2783db4f37

          SHA1

          45409dd8c84cd545ae05ed8510ab398a8fc2f81b

          SHA256

          1ab8686bd80947166cc0dbf44f1353b45e1643454c0fd7611fef6de63b1a82cf

          SHA512

          3efce61601b1f5ded364c5a1a286120d3efb3345fcd48ad1724decc1967c77ea5e3c49e2425876781a49aa28277c1cadf58d746b66524241be94c4e72912cd33

          Download Submit

        • /data/data/com.winfield.apps.foodsafe/files/mobclick_agent_cached_com.winfield.apps.foodsafe
          Filesize

          205B

          MD5

          bf990f3d38a41687078312019ddc0a43

          SHA1

          34a7cb40881a97f192b259fc8f00ef4f6df9f6a2

          SHA256

          915779e650dd447309479c1aa97459392c5f966e562c88d4cbb2a975a7d9f89c

          SHA512

          e9fbd4e4931b5fcbee3eb8f1ccc9a8dad8f33006cab8218aad080f8c675acbd04dd79a00a5ae4a580faa17a519b212da69f6f0d0047d4369142b5bf340b4cd2d

          Download Submit