Overview

overview

6

Static

static

6

046e38e9e1...18.apk

android-9-x86

6

046e38e9e1...18.apk

android-10-x64

6

046e38e9e1...18.apk

android-11-x64

6

Analysis

  • max time kernel
    64s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    01/10/2024, 04:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    046e38e9e19ae927ea33e8b6494e3e13_JaffaCakes118.apk

  • Size

    5.7MB

  • MD5

    046e38e9e19ae927ea33e8b6494e3e13

  • SHA1

    a662f98c3214f329ed547cdd742be60193c7e464

  • SHA256

    b3837544e557b26f031e063f4fa5f54ebf4fbc807574453130afcfa96ff2a71a

  • SHA512

    a025ac8739ec89b672745945b3de745e23ba25dc2211d3d1e20015202dbfbc6869deddcf0faf3998d36d905cd1dfc0ddeb743b4faaa326aeee8565428f058459

  • SSDEEP

    49152:qazh0eheCDUnZign0f/VlwjB4Zpq8qoniptX:PxvN1lwwpqO4

Score
6/10
discovery

Malware Config

Signatures

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.winfield.apps.foodsafe
    1⤵
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Checks CPU information
    PID:4483

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.winfield.apps.foodsafe/files/datax
          Filesize

          5.0MB

          MD5

          97f5db86d7c5fae7185bed2783db4f37

          SHA1

          45409dd8c84cd545ae05ed8510ab398a8fc2f81b

          SHA256

          1ab8686bd80947166cc0dbf44f1353b45e1643454c0fd7611fef6de63b1a82cf

          SHA512

          3efce61601b1f5ded364c5a1a286120d3efb3345fcd48ad1724decc1967c77ea5e3c49e2425876781a49aa28277c1cadf58d746b66524241be94c4e72912cd33

          Download Submit

        • /data/user/0/com.winfield.apps.foodsafe/files/mobclick_agent_cached_com.winfield.apps.foodsafe
          Filesize

          121B

          MD5

          d2815594e9cdeeaa953be0c251c44036

          SHA1

          eea68e3751ee5903cdd96a719170627ea2b41b28

          SHA256

          8319d1c256ec7f85230ea12db7cf03bf28a38a981a0bcbe82067243a04711259

          SHA512

          80ad13b6a6592b1c82856c6c292d2398c9ddcc0ffa6e4c965050fdb85e6d09709d883b24a310eee661b49c1e1e2331c52ce78a3d929ec65578613f51b07c8924

          Download Submit