86f2da2a0113d4f9ef3e5f7595e1d80841d96098c09eed6e0b746fa63116e9d0

Analysis

max time kernel
149s
max time network
138s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
20/10/2024, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
605969012e8875785503e7fd0700f578_JaffaCakes118.apk
Size 1.1MB
Sample241020-e2syxs1dnj
SHA256 86f2da2a0113d4f9ef3e5f7595e1d80841d96098c09eed6e0b746fa63116e9d0
MD5 605969012e8875785503e7fd0700f578
SHA1 76be41fe50b5b776ab242ebae5c16e7d3147daff
SHA512 995d893c17f5b7df432875897a9a235971c9d088ec6c099d5c3462e3e45bf1042d03dea146a6b2f5eec0a013c1e5751040120078b13c3f5641d554b11f2e16e2
SSDEEP 24576:C4w1YsZlncVIZx0E9LVnme6SwPqUzLFJezUfN+qetEN6G0GYo:sqgcVIZxr9LVgVPbJezi6G0O
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.idiom.english/cache/ads96999688910400511.jar	4447	com.idiom.english

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.idiom.english

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.idiom.english

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.idiom.english

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.idiom.english

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.idiom.english

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.idiom.english

com.idiom.english
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4447

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

ads96999688910400511.jar

Path /data/user/0/com.idiom.english/cache/ads96999688910400511.jar
Size 2KB
SHA256 c9015ed1e8436b145f069d37608b035e7ddc981c55a70385aeaf3c7e90c1c2bc
MD5 030f79e160dd93acc424e00ca3b1574f
SHA1 6c67ca0369bd381d6426dc642d731ad3a14df2cd
SHA512 d6f8d6f7cc5943a6e1bf8d2d9504494561658642d36dbab75cb294944f2e5eea20ce2f00425c2100e50af97f687b9e7e4c61d72625e58427df862aa94c6f586b
MD5 SHA1 SHA512

Submit Download

ads96999688910400511.jar

Path /data/user/0/com.idiom.english/cache/ads96999688910400511.jar
Size 4KB
SHA256 f3c142f78cadcb57d7da3d8e4dc5f8c7b05377417c639059910696c844afc1f9
MD5 12670a32ad1380c9021a9e74aa5f2281
SHA1 7e8caf0c7a4d78452efb90958e8ce1aae5148e44
SHA512 1277dde373cab02d5df62732834adb79f8dbf1d1a9ac56b5b348e354317fadc24fe20b5ebdd1ecc28f8fc98dcdff807d2839bef75ef7d871e976e68a95851b06
SSDEEP 96:8V0+Z8fg8M9CC/mkE2K6Uq7tJ5FVDNqv3jokVbdzfgDmM0/:8VXYglD+kE2K6r36v3dLgKx
MD5 SHA1 SHA512 SSDEEP

Download

AdsMOGO

Path /data/user/0/com.idiom.english/databases/AdsMOGO
Size 20KB
SHA256 f7b4aba161a7bb3988834e9f61e2b4dfdee731b47a7e7a9255017717a2236263
MD5 d0297f3b077ddafe2040974a95b4bfac
SHA1 839aae183b70fee00c4be8c9a4e8023acdc02581
SHA512 a9c38c81c85c01a2c889f499749c404fc2d5a84da2e1229d36585d2a8d5c207bcb148d8b99eea1d70c2595f3ced0cbfa0e04bcff9a8297efd414d4eb2df7a911
SSDEEP 24:TLAxQdufPnLpkk7w0GSP/b/Sf+kDwdKYntpDwdV:TkAMn/7ISP/jC+kDUKwDUV
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO

Path /data/user/0/com.idiom.english/databases/AdsMOGO
Size 20KB
SHA256 ecf9a80d0fde68f829972cc154adace5d536b5f0a574d9673282c674804e19e1
MD5 e95502fbd069517d7bedf8fd5382f2a6
SHA1 d5d5457a20c64bf621bc66de53da5fad5e172c04
SHA512 29f055f222d500c90e031f99a3c734e5013a918c4a419baab81856e525dc157e4db2cb41f392ab9f7077f35c5dc6f27376470ccaaae25748fd1d9eed8e8264b9
SSDEEP 24:TLOQdufPnLpkk7w0GSP/h7bt7LDwdKT/Sf+kDwdKYntpDwdU:TNMn/7ISP/hVDUKLC+kDUKwDUU
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO

Path /data/user/0/com.idiom.english/databases/AdsMOGO
Size 20KB
SHA256 151158bee575363533fcbb729946f59252b3e4832e798a477c77c1377ba4467c
MD5 33ab1a9eb861814680609021336f074c
SHA1 0fc5030d451fb520bab2be938ab0fbfd618ffd87
SHA512 ca3d7aea0ba73fea27f0a1840dd1731275d9d886f291e695784c0c0d9f40e7b5e35d80ffcc41abfcfa861fa4c4394e040ba293eeedf49dbe2311bf5ae69cc2ae
SSDEEP 12:TLyvQ5yyNTSFbyQfVm0Hpl9hroda6cVAARqsbxiHE7wfRmBEyPbAVOwSWMNzDXXn:TLyvQdufPnLpkk7w0GSEStpDwdqP
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/user/0/com.idiom.english/databases/AdsMOGO-journal
Size 8KB
SHA256 83f849cdc41f35d1c048cf91de060bcd1a5a6657cb61c86820430fe4f55da305
MD5 98194b5cf28f2a2a3e10723db209e42f
SHA1 dd83149ff70595a9d7cb0c9107d6e75a62be843e
SHA512 5bbdc44ac50bcc09c52bb143e2cd7a68f482f95bbc72398923c91536b63844ff27c5242bc3229a0deff2daef89e87454decb91b972d8b414b767f1d98fa0eb3b
SSDEEP 6:7+/l9x4mn1GJg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKq0:7+t0lqLiuWdYRmBEyPbb0
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/user/0/com.idiom.english/databases/AdsMOGO-journal
Size 8KB
SHA256 2ed657bbce148783038928d626ffd597d9e3e54bb160383fdb8e695035990708
MD5 ff089188dd0bf0e0cce17ecd3e70becd
SHA1 dc05aeb6a307fea735d53f1fd7a1c93dd0d41ea2
SHA512 f07b9e1d40b537b116d289482feb400b1c51d72a2a7b775aea3ed185317936193e1482dfea3d68bf916552478a8361df00f4e8f346f820772b3cb953102bf32c
SSDEEP 6:7+/l9zA/GPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKoFMl0//Gn:7+tRdqLJdeWRmBEyPb7k0XG
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/user/0/com.idiom.english/databases/AdsMOGO-journal
Size 12KB
SHA256 251781971b00ea52c846ecb1b14141fd804e311e4e580f2a9ed134a99b9cd757
MD5 ad385ee70e92ff4f91c02239e7522196
SHA1 6cc5902d0d859b2dbc68dfd0458b40c946e63181
SHA512 e86469892178df4123add3c8669084d42f1a3a6fdc2d31dfbc3de142aae91679d9f4be39a925baa079fc7625d003b4e57b7a2c12d7d832d817072e23d7e46f36
SSDEEP 12:7+tEI0AqLeQ5yyNTSFbyQfVm0Hpl9hroda6cVAARqsbxiHE7wfRmBEyPbxr:7+tD0AqLeQdufPnLpkk7w0GSN
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/user/0/com.idiom.english/databases/AdsMOGO-journal
Size 12KB
SHA256 a9384594fee7c17043647dd1ab52e13b74dcc94a0eaeb738fd4b78af96718dfc
MD5 65337c5d57631be91dccd04b058af97a
SHA1 5c6e3b2d458d51416ecf3e013122813f58ad97ce
SHA512 28fb1428f4efe92e386b00cb21b3a73467475832d2a67ace773f5c9a845f05272ca61ae74535eb06eaaafb59a4d40ec1ab13eddb44dc0f262fd21dae3ec312c5
SSDEEP 12:7+tUnWMNzDXXwdJ+oqLyvQ5yyNTSFbyQfVm0Hpl9hroda6cVAARqsbxiHE7wfRmm:7+t8tpDwdEoqLyvQdufPnLpkk7w0GSPa
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/user/0/com.idiom.english/databases/AdsMOGO-journal
Size 12KB
SHA256 b1293abf12d85bc8c52d1951c2503da7aed63a6c6c1a4f5e09ce793e39afee4c
MD5 20d5eb4db17c3e4e71dbeea04f50f9b8
SHA1 9af2320503f9812196328584fe6616952ce35ad1
SHA512 9ae0eeb558c05da0412bc3ec6c61156b4ec4b51d0e414147607642f0240d55a98b142975c616e85764f00f96f34ffc0965a3fdf0381db861325ec81adece1d29
SSDEEP 24:7+t3/Sf+kDwdKYntpDwdiusqLAxQdufPnLpkk7w0GSdy:7MPC+kDUKwDU/sqkAMn/7ISU
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdsMOGO-journal

Path /data/user/0/com.idiom.english/databases/AdsMOGO-journal
Size 512B
SHA256 79f5f3c90946fca0393b671a8f4e1684d196106b75b4237999f93024ee59ebc5
MD5 02f16cfbef26d30e881553da646935f4
SHA1 b8651d5542af6204b74e3f8b2476d6e9c131e5cc
SHA512 c2201121fde31a0579b24e950797b69312e23b676cce017f74c9aa0e12251d3b149ff911fde0b17d5358b4ac52c179a8a0b0fa5f287972c42ebce9ab9568b029
MD5 SHA1 SHA512

Submit Download

idiom_english.db

Path /data/user/0/com.idiom.english/dictionary/idiom_english.db
Size 98KB
SHA256 b5f0259863b062e9ab20bfec03b16e66fce218c34a4eb541db78a4467b63e83a
MD5 43bd2cd1284541f45837af0d8e55c309
SHA1 8488115c20500c55669dea8c0ac9625796afcb68
SHA512 8e767f174071d2946df7bdce1654c1b6b1526b7bea60868d80189d03133839615e5b3aa0b33a1bf46486d3aca8708c87bac83816412e1ab8a5659cada0dce4a8
SSDEEP 1536:cvsxBf2HAVl2oVVvqMv0pt9CL2fKxSw7e4hjYQPlo/0mcU85naOT6cIi:XxBf2HAV0EFqMvKWbpYQLzXGcIi
MD5 SHA1 SHA512 SSDEEP

Submit Download

idiom_english.db

Path /data/user/0/com.idiom.english/dictionary/idiom_english.db
Size 99KB
SHA256 828f76f37c808f4be303cec330568291a452a535c521d745d70eb7eb47cc72ce
MD5 2438a0e794eaf620ca8bb4adb32c34a1
SHA1 48634e5c2f430bdedfa7a2f9abd88908d476e780
SHA512 d2d60e0cda5065332eb5b6c14cde0a747be4b71cb3e917eb89af2810ac4872399647c81026fc77bb2f28abf21490c6e582b1bb52e8aae88d81d0f6ea26024f7a
SSDEEP 48:EbcOoL+L50bcN02mm8mcm8nnuaOocnphOLfoiPLruaO0Jsg49:EbcO1L50bcNZ8m8jophooiPbpal9
MD5 SHA1 SHA512 SSDEEP

Submit Download

idiom_english.db-journal

Path /data/user/0/com.idiom.english/dictionary/idiom_english.db-journal
Size 4KB
SHA256 dba0d71cde319167d5b17cc5582fc296206323ba11c064a2a2b5d1a87e3deea1
MD5 148080fdec82ffb5f0b695cdc32f8ecc
SHA1 7b6b84d1848a12842f34cf15aae98f456a225386
SHA512 b45925a39138477868d28bbaa4115eec113f87537214cbcc5d4716ff05950bdd9012b6defb7aaa583dec2fea0086e5c4c378c4b279f8f9360b6890adb45aac57
SSDEEP 48:7MSEpbcOoL+LcYbKbcN02Bm8mcm8nnuaOocnphOLfMPLruaO0Jsg4I:7upbcO1LcYbKbcNY8m8jophoMPbpalI
MD5 SHA1 SHA512 SSDEEP

Submit Download

idiom_english.db-journal

Path /data/user/0/com.idiom.english/dictionary/idiom_english.db-journal
Size 2KB
SHA256 130df864b4abf1103f6e26d9f26213eb0076eeb1f343a1ff080a61a23874f594
MD5 46599596e6d2c2a486dbf96ff08aa691
SHA1 1bc8dae708ebbac2dd5c1700148438fb94a37804
SHA512 c29cdfe6a8dd0d8f920c2a6daecbf964677a00c1bfd8d878ab90b1fd5efd219dc947ad1bdc70bc633ab8bd453a42385883b1620c5a8fa84a6523574418836b2a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads