Analysis
-
max time kernel
123s -
max time network
145s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
09-10-2024 09:15
General
-
Target
2e8962107dc800c8b1b3fc70c7ab1e9f_JaffaCakes118.apk
-
Size
3.6MB
-
MD5
2e8962107dc800c8b1b3fc70c7ab1e9f
-
SHA1
8e0749831437c4f934612052a8d2077dadf8fb49
-
SHA256
ad2dbaebfd8d7b3f3e49ffe5bc851643d50f4fcc2b3f729e270e11517d081e3e
-
SHA512
4f1fc09c2020cfb332a76e6d2e8324f3c8ce065ba78c1e0e86231033c1187ad53f50e77e143fd9e1abe507f70a305dc54c680e841feb06b7eb4de6b51af56579
-
SSDEEP
98304:/Wy4r66wbDmVqxIBJWG5H0VZoYNv9nbb+4p1ietoGv/HGwFrG:uyb+rz2VZoevdbhp1htPv/HGwF6
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads the contacts stored on the device. 1 TTPs 1 IoCs
-
Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
-
Reads the content of outgoing SMS messages. 1 TTPs 2 IoCs
-
Reads the content of the call log. 1 TTPs 1 IoCs
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
mobi.infolife.eraser1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Reads the contacts stored on the device.
- Reads the content of SMS inbox messages.
- Reads the content of outgoing SMS messages.
- Reads the content of the call log.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD55b23f6d3f9e73de5aa3ca22b76aab396
SHA11dfddacdf9a53218d1e86097d4faebdd04df5a90
SHA256f122fcb333f8fe718664c688fcf842f29ce701211d9b8e297370460e5a2ddd63
SHA512095237d4347d9fd6ed91d1c109eb4feb05e468f613d62d8d45ca107c10c2d2fed622f818b1d8dfeba71ccd3c1e65df096ef1ed14dfb2df792028d649ac0c78db
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD55a4763757590ef5ebeb85d09813ca82e
SHA1be9505a9c32b904c1a04c0a49fc672f2fa6f01b6
SHA256b6818071e9db921951d409b0a270c11ad8664b5e6d596030c97a7d28843e2906
SHA51201ea3d52920af490b4d4e8badbef3746b73bec7b8130acef7d9d73362f5f60f8ca0d23d9559e3b904945dade77098c4c35d3ad7c592dfaa73cbe9ca31ebc44dc
-
Filesize
730B
MD550bb9f063d70910f53428c0f5883c5c0
SHA180da04b2d2771bed3f97505f10523d2c4f9da88f
SHA25691a9694fbd38d667cdcfafb7c08624b280c72eb91e6f16b566c9b4846eb86911
SHA512f9ed6aa064efb86d12197f57de361914e7cc95d109c1c45e51aa78d4329356139bef05e743aad53ce07bbd12671870d0f9c04af575f2945db1af7008f2c3b7dc
-
Filesize
162B
MD568f0fe042bf4b595e13343a1a4b8b1e0
SHA1cfb1b934234c08b179afcac189298813cd40ad0f
SHA25617a2abd11c93bf2adce6801a98da5d7f9930bd0d92e52ead123f237bfa3421eb
SHA51238aa9487c7051228042b85efafc161509ca0e0eb2df93f11d514c134c31f2c675ebf51ecf7a42516f67fb16067ac7dc68e5f643a269b671da941f9a1d3d0ee25
-
Filesize
36B
MD5355373014cfae304e09c58586fc04c7a
SHA1b204087b9ffef80bc749be8503b388f1e1153401
SHA2560c5305718caa686c1f6885222b75389336b6047cb7e373f999a119169a785a45
SHA51216b667c37a71cf3c0c15e2317bb47b7e9a7cf57a42df8a4d14578b4b11582622104b62649adb9923fc7c2ad1df47f90fe330bac846aa4bcd8d284f7e2a75d3a9
-
Filesize
32B
MD539c4588fccb9de90a9e5346f45988853
SHA18f4784ddc1bb00cb4e7e3ce196a06b3bc9440ad4
SHA2569f86a3e73e08938b6af072c3127b0c5ae55d01646f5432f505cdafb8c4fa357b
SHA5122455b9a356ae2b5f3f61c8780d214804f691d00daf45ca09813439445decc0a40138e25d08780e347eaf5b4a0d40a62cf4eac00508188fe436b4db6ac0f8eb26
-
Filesize
350B
MD55239a2c57439e010527c98287b28e310
SHA1098c1c7115299906aa183d829c9a251432dd74eb
SHA256f4d678b4e64e6a7ca1acb0b8e69d7fc3743c056ddb9b8f363914315cb4cf6f3f
SHA512a8fa3733c770c58b57194544a4951d2dcaf2c46995d3b211a8145be3de6dff3151ecc5e45bc7228b374664ac0ec56d067c432f91c45068618e6b1e1bf2773b52