Analysis
-
max time kernel
11s -
max time network
130s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
13/10/2024, 09:22
Static task
static1
Behavioral task
behavioral1
Sample
3f0c22e40e6614185ae340abfe178fb2_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
3f0c22e40e6614185ae340abfe178fb2_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
3f0c22e40e6614185ae340abfe178fb2_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
3f0c22e40e6614185ae340abfe178fb2_JaffaCakes118.apk
-
Size
4.7MB
-
MD5
3f0c22e40e6614185ae340abfe178fb2
-
SHA1
3605b1ecba8bdaed91948b4b305cb199f5dca46c
-
SHA256
bd609699e9a32430de0a22843e863b2ea5a25a60de77a7302202e0a0e23e6e03
-
SHA512
f1b8120787f822b154ed26e25864c6d92d438da42794af1468cf93b73f81ac2c20527be6f7fef06a1de126ef015cda1d11470c4a043b909ce543137917e13bd7
-
SSDEEP
98304:6rU5q43hpEz2OuVrzooPFba9ZiTLaESpLeWq9fBKST6bPDg2KUxT5LYdcR+mMJeD:oEpESOuVHo90XaJyXDEPD8Ud5LYdcRH/
Malware Config
Signatures
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ch.nth.android.contentabo_l01_ech_univ -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo ch.nth.android.contentabo_l01_ech_univ -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone ch.nth.android.contentabo_l01_ech_univ -
Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/cache/fetcher_cache/37d6e7caeb3e1ac1ca35f9055c97fcf5.0.tmp
Filesize588B
MD55b44a04b0dd76be3c9431584660df827
SHA1a496f4350b42ccd141e610411d1917e076f7a5ae
SHA2569248a347dc52f48bab0b4653f6bd729a26072b08507e2caee97f4bf3c6326e24
SHA51229b975e1a9752522c14d11eb98a76722774ebf905d19baefce7ffbf3f5b03abd55aab9960e3c418b5a37bca2ecf94d75923f9c200f366d413ad19b1d08aa9fd2
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/cache/fetcher_cache/37d6e7caeb3e1ac1ca35f9055c97fcf5.1.tmp
Filesize46KB
MD55825c3b054d56bc8d64154391635209a
SHA13e815dfb24848a93d29941cd96042a5e6c955f9e
SHA256cbb4c0ff3d49f7fdee5ef05bde75c30484c5108680ec97f7f5e7b08c715cf95d
SHA5128f6d3dbc21cf7b117c8f5a45a8a6e70383035d7fe82b5e4fab6fbd285750594cf8049456ad09afc529dc81aa919631c12cbcaa326dcac75ed9356b79a6ec318f
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/cache/fetcher_cache/f5c791b5a5b9caa4465269ffed38a947.0.tmp
Filesize602B
MD5b48c1d61872f4671ce3a0acca7ebda7b
SHA186b5d417205eadd28c2cdf363b809d0d4fcd99f7
SHA2569eb75a5487dc23c49d4462b25fbfa2cc5237ebc5d7b7b0b9f5712327a38efda3
SHA5122904e9ae9eb42acba9df5f63dc7683236f0efdbb580cc8fa0c9c472538d8396506b7fffbef5a79f125956dcfaa09e5afee5b2f2ba6e81d70ef418b49a8085eb4
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/cache/fetcher_cache/f5c791b5a5b9caa4465269ffed38a947.1.tmp
Filesize138KB
MD571eb2d023773d89aebce665a2be78fad
SHA1e5e2189ce83aab1fe1fb562bd8ccd56cb5102b56
SHA2564647bb1a412e8b5c2fe1f5e6054b0dfb01d8e2b9a3dc32e43807ec5df270be27
SHA512ad6db7dfbddaf6bbaf4de28ed0a2ff31ec78b33ba0a43a69fda4c848075cbca8aefe63f2a6195da3a4c21349fd132a65cde4a0c42aa1534ab1f2b59f93c8dbd1
-
Filesize
124B
MD5cdd89dd10c98ff4b0cb8b5b5bcd8f839
SHA11ba6ae43d914e9ba81955bf15967a3ee7b2cd4f0
SHA2569a98e3b50c583a2c57c8b4e020c7bc48745c6312326ff4e76cc40564c1f5d7c6
SHA51250f866f27776823c6cc6b3cebbff91418bd4323f757b2d451cac3c13a2492591f81f82c2cc0403ed1c671b2541735428ebe50cbe67355c6639831cd9cd396e67
-
Filesize
213B
MD57b1ad3776c874be7a2b69ee432af6671
SHA1a71291e434ad844e8ac5628a085b93fbf37d62e1
SHA2564839aa732b6a265055c1114bb4d7babe57ff7d39aba39242513644e9da546b65
SHA51236d2851954dec82ff1f76f2cb44a112afe11ea5261c264902fd54d2eca18af24b3a0d7e9893cd7aff1d1c78b373beaa74856fe8a6e50543207ef0ddc7b60c2e9
-
Filesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/databases/com.nth.analytics.android.676043593aadcebe807e5c888792237d1748670f10d787f4f9c60619ff4bc98a.sqlite
Filesize64KB
MD53aebda342963cca7bffa0b832fbd0f39
SHA1f496c3f99b4034f6efa3b7369775319c9fb7d414
SHA256170b40398c326b8dadd953e038d170f8539542cad012ca7a19fa91322b8c2643
SHA512d25bc0164100d069f7b5611964f668b93b6b424e10b18fe81d3002a3badea4f6981558f654d2d7c41ab0c98f3fb8867ab6ea969e4c02d28c8ba7de4efe6020a7
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/databases/com.nth.analytics.android.676043593aadcebe807e5c888792237d1748670f10d787f4f9c60619ff4bc98a.sqlite-journal
Filesize512B
MD53cee1366e848cb9359b2a9ba26f95c40
SHA11371e7e011d447772621cd30f844d82ed8bb8ff4
SHA2569337db4da65d6b7b75ca4d3201da608be3c2e19c29ae9807bb095aa1b3f6b599
SHA512b3871c542e1c9944d8f4d593bbe9c99ab3048582a32edc3d5a1f978dd755440cb688ea340afcfe5ea329e14b6d66684ad12042a81d83bf217d64e0f5833c1170
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/databases/com.nth.analytics.android.676043593aadcebe807e5c888792237d1748670f10d787f4f9c60619ff4bc98a.sqlite-journal
Filesize8KB
MD5859259c5dea7c659622baaabbb6b75c8
SHA1e9f6549c5532d9dd5a719517e5ea3cf514ee2551
SHA256edd3bdbaafc19767ead157fa17ede94534bd8e82599230bc6af2be026cda2e8d
SHA512604f7290163838194ad60fb80cdfb1f34e542d4022555f8be11f1ada781dd3631b9435ddd852b41f13c602ecf1db2bc60fe84407f457d04690f059bf95f93652
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/databases/com.nth.analytics.android.676043593aadcebe807e5c888792237d1748670f10d787f4f9c60619ff4bc98a.sqlite-journal
Filesize8KB
MD56738784863660fd0a09cbe16fb31c357
SHA1aaaeb7c3c2e7a2fa5470802717ab2467a834c908
SHA256d285c4ecac66272c7eae9b30f91bf66f01c83758411059fd1971053dff7078d2
SHA512637a885e9f8ad3051b8e2927edf9882a2c46903152dba52d1c70775edf082e20042b5c3c4df687211939ccb027091ed658b2cdd74468d866111bd97369c00543
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/databases/com.nth.analytics.android.676043593aadcebe807e5c888792237d1748670f10d787f4f9c60619ff4bc98a.sqlite-journal
Filesize20KB
MD5744feb2f33071ee54609160c45cad3fd
SHA123533efad1428204120bad71f9cd6b5295679761
SHA2569f21a85b109f07cc195a8846a4e31ea52f6a5fc7bc9d4669fa49945ab3a01825
SHA512019a64ff8a14b45599bd6de4090b08a20d151e83be136b8ab2f4e52251f149b755ca527af574fc3aeb21c2ac7440f594ec50fbfb7ae1db9cc0c6f33cb19edd55
-
/data/user/0/ch.nth.android.contentabo_l01_ech_univ/databases/com.nth.analytics.android.676043593aadcebe807e5c888792237d1748670f10d787f4f9c60619ff4bc98a.sqlite-journal
Filesize32KB
MD534b26c18c54bd948c36ab327ade71dac
SHA11aa4e67fa23ace1070c979f6b7899fa808da5afe
SHA256890529b7395295273d4601aead8b0b41143877539596687ff57459f095c6fc22
SHA51296857d790dec27f042623997f3845e28a97875b28381d3cf3a532350b9433e07fe3c91d94e5fbe32cf7a1675bd1092e570e1213220d826b10cec2b0b7a0294bd
-
Filesize
45KB
MD5c81b4e9118e67bc23377d5ef99f48224
SHA1024277a4f1a76a92b5b8c5ee14eae75cc227adbf
SHA2568d6cf61c54bf1f13da672926d535633631ecc04e290cbf870ab03e4d7349e1d2
SHA5122b2b213ea352bd0b003f13ce280a5a6c3d1d7e6775701687ac183fc481a2cb25cf41c38a75d5215130e3142dfe11909664788bde7fb68be4dab8260a95d481a2
-
Filesize
3KB
MD50f6393edd01d876c42f66d0609f6f6ff
SHA1d242b9b79ae49807822502160682de3fefebfe16
SHA256dbbc3a96de5104373814f8cba9f829b186b18fa41d0510f0b79be67e3dff781e
SHA512e47dc06e9be077fc112368f2b1ca1b6576c68b69a465db25ea4ae2f2712436917069029f286debb79750470063d374cde4ecfecc23a01306bb7796b485f9ed94
-
Filesize
195KB
MD5142d023171e7d4f5d590a302d06c09df
SHA131a38a9287e5825d48925b9ce9788d4c9ead12d2
SHA2568bf1afaed813022b061b9fcd8c5ec7b5929a4d8a392ad095078e6d85126fcb16
SHA5128e94b36e0ab78610ca58653f51805490363a5af14e414f7098688abc72b344d7d524ef6fc462364c9def4cfa5c4dfc489d003e08e82b66a5d3bdc980c99d5919