ff348488b584407066a0dad9b7aa41cb3e1e71834e4824eaa646d6df569303b0

Analysis

max time kernel
149s
max time network
136s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
02/10/2024, 01:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

08336a29c7a497c4d7c741f7d0fee1ab_JaffaCakes118.apk
Size

991KB
MD5

08336a29c7a497c4d7c741f7d0fee1ab
SHA1

a0f09fe0ce281a8b54893542b867a47f30e751b0
SHA256

ff348488b584407066a0dad9b7aa41cb3e1e71834e4824eaa646d6df569303b0
SHA512

97aea3ac0239f887d951327835063bad0bd20fa1f0e4a05770ef8822aa0f49d9c1b397f2b687f3302c33f8c6da11f1af55830dfb12022c012ea10ff25d9ff2b0
SSDEEP

24576:86N+ukNThEXeBcaZTAVO9dth0KjuiJEfTAcSqVDby7MJ7KfuSh/X2bGyx:V7wGG8SZjNkUcSqkisuq+rx

Score

7^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.babyjc.seeme

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.babyjc.seeme

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.babyjc.seeme

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.babyjc.seeme

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.babyjc.seeme

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.babyjc.seeme

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.babyjc.seeme

com.babyjc.seeme
1⤵
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4259

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.babyjc.seeme/files/Data.Index

Filesize
68B

MD5
77731055735c8fbc576baac5575d5608

SHA1
08cf6c02898b1f0f0cebfe40d249e210ae214d87

SHA256
7ceabbf9109e450c61fbb5902a6e66468d9d6176f29d7d64925f8ad9675b5584

SHA512
b0ed869b5acf581d6f24f659491d6991bc1e0b4aaa7788ed9a436c4abb79fc0a1cffbcadbc4f4f94c305082f5ae30fa207b5e9dc965c2eb9b120045f12e00c70

Download Submit
/data/data/com.babyjc.seeme/files/Data.Index

Filesize
41KB

MD5
d0b3fdfa1f952d6e6cf4e08a0eee7086

SHA1
74eb7c2040bef7f18220ed1a13471f9518daede6

SHA256
9f9450065da898b605346aa4e5e83125e2d986a35dd8e7fe45993bfa47021b1d

SHA512
fa3985a8e05da008733f1c542c9b6e93161243a20b2be86c43def910b80f8d4a20a034f189cadb44f421139f058e00c8de76aedb1f3c908a07ba4f5898209b7f

Download Submit
/data/data/com.babyjc.seeme/files/Data.Index

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/data/com.babyjc.seeme/files/Grid.ca

Filesize
2KB

MD5
bec9e8e26939309c95de826e60e4ff57

SHA1
a2fb5f07eb2b07cb24b99bab34296958f06a2e37

SHA256
7f843610bffe92d37df261310d03ac82b62578c2fe23980bca1b5c0f66277499

SHA512
9aec4832b567a49aa195df5c09a8f9e00b03ad45cfd9930e42251d89a06f98e1c54e82e50d531524feea0fd1f9ce3cb43ad67b507414194e5eba5b74eab282ad

Download Submit
/data/data/com.babyjc.seeme/files/Satllite.ca

Filesize
2KB

MD5
371cee872d6d5f11abf89e12a7a18142

SHA1
f664c29ee4a90e348dd2f4a9354f4c7fd90e70af

SHA256
39f49c722c2c899aa7638e191bf23e48b2cd7d045a646ee394c8100addea412b

SHA512
75b68c9b121b98541a2d1da56d196ec672c1c73ecb85594f55efa792651fc34718e5f5d92c919e52f45529af2828bf26f2bca37e53a691167c196ee86bf795bf

Download Submit
/data/data/com.babyjc.seeme/files/abf3531c1a6d5f50849b3b4d000098bf

Filesize
16KB

MD5
77ed0b4e11ab1de85e99a654750e17f5

SHA1
3b926a62333fc90771e1069a5624f2c552e27e54

SHA256
0e2922ca6593a8f733373472435a2754fc1cf6368e1f91b392e8968fdedd61c8

SHA512
1ba48541f11ffb15c5c564a56d9a0f988b66c04ce2ee9404dbc6fcc607456f6dcb4be4c5aa64f3055465b366bf302d1009cdf8d07af4f5ac3fd85cf2ff2ffecb

Download Submit
/data/data/com.babyjc.seeme/files/abf3531c1a6d5f50849b3b4d000098bf-journal

Filesize
512B

MD5
75018750cd9996ec4225c5808ca1e418

SHA1
ef5c74b5467f4d566e71b838d35eb79f4db2c50f

SHA256
c9097a11209c0ae3f4da6492155d32e7f69a09e0f0028a137136efbdc39ec0cb

SHA512
6731d86b34d5a0040e91fcf1ba56617880d0148e759593021c2306ac51d7ac34c9e2e8e8b88276089bc89101af107de3eeb432ae69c2874343f3c05f47bca883

Download Submit
/data/data/com.babyjc.seeme/files/abf3531c1a6d5f50849b3b4d000098bf-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.babyjc.seeme/files/abf3531c1a6d5f50849b3b4d000098bf-wal

Filesize
28KB

MD5
cc3a54d6cfd10cde238b0ca64f198697

SHA1
e5801aea6007df0378043a76d278b5847597c2cb

SHA256
aace117af966a727f0a3e52a3e7bbef374ac89d6443f8fbc614d16a8d78d21b6

SHA512
e4ce2ebf1ace24094d960e961813adeefe3cdf8b879ce110c8969c399f8c8dbbb40e9e538141ff910527ee255ae3eca399699e7d15bbdd8bfc9aa61a2d5ebd41

Download Submit
/storage/emulated/0/youmicache/CCA9582BC81E888EA674F157E5540CF8/abf3531c1a6d5f50849b3b4d000098bf-journal

Filesize
512B

MD5
ac509124bb135d1229e08783b3439ae2

SHA1
b778a2816db5bc85311cc0ec0566c4522361499d

SHA256
ad6003c4bf004b10f90e1cb811defe72fed6c954c83827a8c47e997d5569a573

SHA512
de5fc0754d33cd63f261a1cc23b8b9ad5690fbdbf2d6c49711b7ca89ae9d8c3064747285f833c8693067aba27f0e7f7369642e41e3e40dc0f703df3db1900471

Download Submit
/storage/emulated/0/youmicache/CCA9582BC81E888EA674F157E5540CF8/abf3531c1a6d5f50849b3b4d000098bf-wal

Filesize
28KB

MD5
4a15478864a6e8dacca02d968af9c1d4

SHA1
fa80104045eef91471768a4e88fd531d2304abe5

SHA256
d1823436cd44ae0b15e394f1601cac4e27c568b229aadffcca6a6323a01c25ed

SHA512
b7c99e888b7e788fa4f20acfc3e73d7ad1d38f9029174c5e5aecbbf9092e3d72675b7bfe00b38ae1aff8712d4564448c627eafb161d5cbd9bfcbb6b44690d0fc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads