86f2da2a0113d4f9ef3e5f7595e1d80841d96098c09eed6e0b746fa63116e9d0

Analysis

max time kernel
140s
max time network
148s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
20/10/2024, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
605969012e8875785503e7fd0700f578_JaffaCakes118.apk
Size 1.1MB
Sample241020-e2syxs1dnj
SHA256 86f2da2a0113d4f9ef3e5f7595e1d80841d96098c09eed6e0b746fa63116e9d0
MD5 605969012e8875785503e7fd0700f578
SHA1 76be41fe50b5b776ab242ebae5c16e7d3147daff
SHA512 995d893c17f5b7df432875897a9a235971c9d088ec6c099d5c3462e3e45bf1042d03dea146a6b2f5eec0a013c1e5751040120078b13c3f5641d554b11f2e16e2
SSDEEP 24576:C4w1YsZlncVIZx0E9LVnme6SwPqUzLFJezUfN+qetEN6G0GYo:sqgcVIZxr9LVgVPbJezi6G0O
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.idiom.english/cache/ads3302159778162502580.jar	4964	com.idiom.english

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.idiom.english

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.idiom.english

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.idiom.english

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.idiom.english

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.idiom.english

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.idiom.english

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.idiom.english

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.idiom.english

com.idiom.english
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4964

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

ads3302159778162502580.jar

Path /data/data/com.idiom.english/cache/ads3302159778162502580.jar
Size 2KB
SHA256 c9015ed1e8436b145f069d37608b035e7ddc981c55a70385aeaf3c7e90c1c2bc
MD5 030f79e160dd93acc424e00ca3b1574f
SHA1 6c67ca0369bd381d6426dc642d731ad3a14df2cd
SHA512 d6f8d6f7cc5943a6e1bf8d2d9504494561658642d36dbab75cb294944f2e5eea20ce2f00425c2100e50af97f687b9e7e4c61d72625e58427df862aa94c6f586b
MD5 SHA1 SHA512

Submit Download

AdsMOGO

Path /data/data/com.idiom.english/databases/AdsMOGO
Size 20KB
SHA256 f61a2c64b996357c4708e22eb3c04c4b82eb1441034c24d5c35de10598ca1c52
MD5 d0a5a1d7dc1c0a37f8314e4991b7db94
SHA1 2bf0f354a0e0c0af0347d51ce5fd8c137220fc70
SHA512 5247168aaa92cb98e032f64b21a2d25102d8c3767a6e9dd80c5ded9d8390489fea4103dce18912222c467e01f8bfb40fa2d5cdf79dd1fe524ebbb4dacfafc123
SSDEEP 24:TLo+dufPnLpkk7w0GSP/blkDwdKYnGdWEiDwdV:TFMn/7ISP/xkDUK1dXiDUV
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO

Path /data/data/com.idiom.english/databases/AdsMOGO
Size 20KB
SHA256 a43093481cd6e1a074d81d0cbedcf4556c39a88d53c23dfcc82af0e851542343
MD5 c7a75250d5238acbace2a9f49a687ef6
SHA1 3727b5c54b39677e54969c5c47b2dce4e645f7d1
SHA512 67cc53f6d5dc08ff44b8b3a8aa50d3d1b16d1f644ac06c9b69791cdcc58cd95f2de1593af7db118e5d5eff4974fa966ba798a4abc7a8e63af14f52044a426c9b
SSDEEP 24:TLjdufPnLpkk7w0GSP/h7bt7Op1DwdKTlkDwdKYnGdWEiDwdU:T1Mn/7ISP/hAp1DUKJkDUK1dXiDUU
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO

Path /data/data/com.idiom.english/databases/AdsMOGO
Size 20KB
SHA256 050087f917c735c8fcdb15f8c2ad0b23425ae96a61a1de5e03d6d501c9c27159
MD5 9d34fbad3f25a32017afc937c6776c4a
SHA1 050ebc9f73245a055b87ce7456ae37c0c1ef468e
SHA512 17b47949e0a8ece76a4c922005dbb5f0bf4079325e1048dcc8c7306cf677b06ba51b5a2fcc8517b27d968c7c68655c7e59e490172207d56a41f2e5f500d6fcb0
SSDEEP 24:TLTdufPnLpkk7w0GSP/i+9DwdKI7Op1DwdKTlkDwdKYnGdWEiDwdT:TlMn/7ISP/RDUKrp1DUKJkDUK1dXiDUT
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO

Path /data/data/com.idiom.english/databases/AdsMOGO
Size 20KB
SHA256 18cb9f7ae987f1da67cb5601d71d07a84d7dea17c8f37f3665f2a5df10848b12
MD5 40e8e845a6828081c5e3343997024486
SHA1 e4502a6abe0a5d41d834a0d4377f1c4d4ef6ff78
SHA512 8a29e858c022237e745a6ad4da99a688771b02aa9977dcd69991ce7d9ce139d3a06dbfcb0beda3523791dc9a0eb12f5c590cc05446f08fbcb0fb9f1a60d14f01
SSDEEP 12:TLykl5yyNTSFbyQfVm0Hpl9hroda6cVAARqsbxiHE7wfRmBEyPbAVOwSWHdWEiDn:TLykldufPnLpkk7w0GSESGdWEiDwdqP
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/data/com.idiom.english/databases/AdsMOGO-journal
Size 8KB
SHA256 cf88a19cb159466ee984c9a8b6ea7150a3385626c65126eff5083fcd01ec0858
MD5 917a79467249fde08157c1a5a2e6af3d
SHA1 5e29e13c67e31563edec5a2ea6f5e915d205b714
SHA512 b0b36d39c1aee1a9926c8f8a001dc90649a31dd2fd99e7e788ad2f6e9d984071f0bf7543dfabc3daaf229e52c431809ae7c150f677400b4293bdff1804f32786
SSDEEP 6:7+/l9yIn1cpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKoA:7+t4tqLiuWdwRmBEyPbS
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/data/com.idiom.english/databases/AdsMOGO-journal
Size 8KB
SHA256 5357844a852c38165c2684a39387a896567cf4fa42152ef64d871919210521c3
MD5 7f86b00d5304845232fbef10670b4056
SHA1 a83b19d0660c8c92de51a8ccdd090ff58554832e
SHA512 f8be3556a094358def100739c3ed2de66544288411e6f28d0909cf35b7d4cf07dfac779426b8fde3cff0c19ef0ca2fd90bdcedcb0e33f8b8a1fa909a71ac3e06
SSDEEP 6:7+/l9GPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKj/D7:7+toqLJdTRmBEyPb0D7
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/data/com.idiom.english/databases/AdsMOGO-journal
Size 12KB
SHA256 a8a625f60cc4a4ac784ab8bc771e6594a188f07be8f092a5f836d333b6258748
MD5 8fb939d8ae5f48974ae6c0e36f0fedb1
SHA1 ebe8be1e4ece82bd463f443940325002dbf4526a
SHA512 6867f45a2defd5b867029aec41272c23ba047822e7cfa9fc1b7b880b9b9501252cf532b69081085e6703f6591e00281becb362ea809c9e0cc78ca0c9159e7cac
SSDEEP 12:7+tq3gpqLT5yyNTSFbyQfVm0Hpl9hroda6cVAARqsbxiHE7wfRmBEyPbnp:7+ttqLTdufPnLpkk7w0GSnp
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/data/com.idiom.english/databases/AdsMOGO-journal
Size 12KB
SHA256 d5512e50f7f53a41e6f9f5c0fd39308cf19cb38dc3e5363deb5235739ac78d9c
MD5 3356a379ea48aaedd0e49164ffcca0f8
SHA1 fe7e94d9fd2b9edf561a8f6eaab1f2e0e647ff4d
SHA512 d1eb421561626ff1244b668a1542794a85d375ff84cff8e31aee338422f3c6565e3ed72febf8ca0d21dc112bf13638a6d0f57b9a78d43be25e6c548ac688f0f4
SSDEEP 24:7+tzfGdWEiDwdS0RRqLykldufPnLpkk7w0GS9:7MzedXiDUS0RRqek3Mn/7IS9
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/data/com.idiom.english/databases/AdsMOGO-journal
Size 12KB
SHA256 b763ac6888cc0df62dc8a1939d1e18ec02e110bea05f7a5682c191f445cc60ca
MD5 56bff23cd11ddfe75a12097b2334bfd3
SHA1 34273dda161d7c1f371fd60889aa8e9bdf40eaa8
SHA512 b802a8a150f87159be45f64d87658860627458b3573bbc9e37ca3fb685707334d7b8b5a8c40b7a1bad5fc3c26dbd1497412a644347dcb072bd6de75f90407ce7
SSDEEP 24:7+tmbt7Op1DwdKTlkDwdKYnGdWEiDwd6aqLjdufPnLpkk7w0GS6:7Mjp1DUKJkDUK1dXiDU6aq1Mn/7IS6
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/data/com.idiom.english/databases/AdsMOGO-journal
Size 512B
SHA256 feb2c9aef7e6a3cea82e90803fed88f23b20f84a0f6c31274c1c822cce0ff93c
MD5 613514e2b89af2a06dbba27163ee921d
SHA1 17cb9c51b9482aad7e002e959a7e4bc58039e0bc
SHA512 698de45d7a3c824fc22f518c06efe9dc54e8d31f09896fe8d8c6e1ebe5b4c22e2de96eeacf77675dfc5c3f099db6f692806c898fb9c713deaeaab850a49b76fe
MD5 SHA1 SHA512

Submit Download

idiom_english.db

Path /data/data/com.idiom.english/dictionary/idiom_english.db
Size 98KB
SHA256 b5f0259863b062e9ab20bfec03b16e66fce218c34a4eb541db78a4467b63e83a
MD5 43bd2cd1284541f45837af0d8e55c309
SHA1 8488115c20500c55669dea8c0ac9625796afcb68
SHA512 8e767f174071d2946df7bdce1654c1b6b1526b7bea60868d80189d03133839615e5b3aa0b33a1bf46486d3aca8708c87bac83816412e1ab8a5659cada0dce4a8
SSDEEP 1536:cvsxBf2HAVl2oVVvqMv0pt9CL2fKxSw7e4hjYQPlo/0mcU85naOT6cIi:XxBf2HAV0EFqMvKWbpYQLzXGcIi
MD5 SHA1 SHA512 SSDEEP

Submit Download

idiom_english.db

Path /data/data/com.idiom.english/dictionary/idiom_english.db
Size 99KB
SHA256 c6acb08ced69e98a1fdd87bbd2abbf72c4751aa2ec7ed1c283cc80e9c40493df
MD5 d79c169f2cea445bdeadd343d41679d3
SHA1 c88348fb0f9b8aa28371394a7b54c9b4f96e352b
SHA512 0683e38dc563214ed115e69471f590d68a11fe8d639ba89fb60d94b4bb67c19a84d772786413e9a70bf064986792053aa43344414d2b75949eb4cc9d4bf08e59
SSDEEP 48:8bcOoL+L50bcN02mm8mcm8nnuaOocnphOLfoiPLruaO0Jsg49:8bcO1L50bcNZ8m8jophooiPbpal9
MD5 SHA1 SHA512 SSDEEP

Submit Download

idiom_english.db-journal

Path /data/data/com.idiom.english/dictionary/idiom_english.db-journal
Size 4KB
SHA256 6a93e8faa3c807883f7e8d9a8e603dbef4f7607ceeac20e06bab2ebb94d3bf1d
MD5 dccfa0c3ce2a211c65a1b54ff450dba9
SHA1 47df84edac156080af32775f242ca6305fef7014
SHA512 b9096ac37e78ddc145fd1af04ea3bc11f288b29609b6313160059b05456eb99c908eb022c3b9e7e7da314da6479d086e4702131e732c6ff191a90e8a1cfdf942
SSDEEP 48:7MZpbcOoL+LcYbKbcN02bm8mcm8nnuaOocnphOLflPLruaO0Jsg4R:7EpbcO1LcYbKbcNq8m8jopholPbpalR
MD5 SHA1 SHA512 SSDEEP

Submit Download

idiom_english.db-journal

Path /data/data/com.idiom.english/dictionary/idiom_english.db-journal
Size 2KB
SHA256 28abfd2d6c73e7117e4172aa47ad90b42919cffcc7dd2c1822b449b5e5d771fa
MD5 b24cfe3cf4532741b9ee73c388aea67f
SHA1 22510c8f7786b15a5e32525178a12069f0feae54
SHA512 c9c7697d04c349de8539ee30d6c439ec32cc45c6e4b3538ed8e670fa6911ddbed4e36b1f13aa288189b9f033fd942177abf8aac2e3d541ba0ada40bfd5071860
MD5 SHA1 SHA512

Submit Download

ads3302159778162502580.jar

Path /data/user/0/com.idiom.english/cache/ads3302159778162502580.jar
Size 4KB
SHA256 f3c142f78cadcb57d7da3d8e4dc5f8c7b05377417c639059910696c844afc1f9
MD5 12670a32ad1380c9021a9e74aa5f2281
SHA1 7e8caf0c7a4d78452efb90958e8ce1aae5148e44
SHA512 1277dde373cab02d5df62732834adb79f8dbf1d1a9ac56b5b348e354317fadc24fe20b5ebdd1ecc28f8fc98dcdff807d2839bef75ef7d871e976e68a95851b06
SSDEEP 96:8V0+Z8fg8M9CC/mkE2K6Uq7tJ5FVDNqv3jokVbdzfgDmM0/:8VXYglD+kE2K6r36v3dLgKx
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads