Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    31/10/2024, 14:50

General

  • Target

    8357b3235ec10e92cacff374a392adb6_JaffaCakes118.apk

  • Size

    24.6MB

  • MD5

    8357b3235ec10e92cacff374a392adb6

  • SHA1

    ef17111b273fd59dfe3e3bbaaa81e4b8cc14f03d

  • SHA256

    2541f86feb55742d5c41a76ce903e77a9906a6be38926cabb5abd487504dbe2d

  • SHA512

    76b08e335156fdce4b9431cbfa902622932d18cf14eabbc83c1eb3707941b159c3935b00dda56986dc32483ff9d9e37824cecede4f331a0667a896669bf52702

  • SSDEEP

    786432:h+lqgp6kCs8xkAwD+amaA2ujKtkUoxsxayd/:A8gp6VVtkTxujwkUoxsxaW

Malware Config

Signatures

Processes

  • vn.adflex.process
    1⤵
    • Queries account information for other applications stored on the device
    • Queries information about active data network
    PID:4736
  • com.redantz.game.zombie
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4778

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.redantz.game.zombie/cache/1582435991586.jar

          Filesize

          9KB

          MD5

          e8e0527a01aefdb89afd2c508f131da1

          SHA1

          f1103e6b260c657ceb3d95f1b023af3fda8b133a

          SHA256

          f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

          SHA512

          fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

        • /data/user/0/com.redantz.game.zombie/cache/1582435991586.jar

          Filesize

          20KB

          MD5

          fde2ee00cbd121cfab5290b078aa3ceb

          SHA1

          e2b77d5320e155e413d040a8c20020962065b2f8

          SHA256

          2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

          SHA512

          a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

        • /data/user/0/com.redantz.game.zombie/cache/oat/1582435991586.jar.cur.prof

          Filesize

          153B

          MD5

          f9431a0cde5766b6a47fe517f0dbe91f

          SHA1

          41ebffb9e03db4e211961286e6c233726d1c704f

          SHA256

          48409024aacda3669e2112419ca8742dedca12f5310521730db60c8387710616

          SHA512

          3102a350b8cdbfe686564eb79892a609f3cccd74d4b420f831156b1c57b736853f1cba0988d4dea7bf728f341e3ed2b997274684726afa2d97d31115e5213382

        • /data/user/0/com.redantz.game.zombie/databases/vungle

          Filesize

          64KB

          MD5

          202561263b04ad944f149efca3bec534

          SHA1

          ec98a49244e5da035cde3a2d6e34c63e1b2805e6

          SHA256

          d3a6f4e75570ef598efcfcfc45f3f827af243f45340c72a474615af4c768a4c5

          SHA512

          744c876fcc3e35ea56e0c994e51ffe0f821b7b70cac754c98f62ff5e8d2e2092695235076e72c97332bd3edacff6a0b6021ee3a330f8ab9233a52de67ae82f35

        • /data/user/0/com.redantz.game.zombie/databases/vungle-journal

          Filesize

          512B

          MD5

          d6960169d4b216ee18ee3abdf97c7d7b

          SHA1

          e9944e9602f7b9703e81466bb0bffee67daade4b

          SHA256

          204398074b9e0441136bb315c90954f6c1725a6507c20e66f2ab0e4e7d174877

          SHA512

          5bae23b8f1056dbbb3f3cbcd6fbc16d88fd198035d01666e80eda8c792013b3d6d2607c29eb187eeaf62a80f852a43d872e7b7a9f379d70d9c1bffd3fe057a41

        • /data/user/0/com.redantz.game.zombie/databases/vungle-journal

          Filesize

          8KB

          MD5

          622d7738092ceed2f934e1484d34ca4f

          SHA1

          e670e716e473b1adbafcdf333d3752bb9a246d68

          SHA256

          6e6fb1236ec6fe160aa435296319e57b57daa9511cc16e25aa095765f520af90

          SHA512

          bb9bc444340f35d629f5d2febcca59744d89aad1b018ba172e2d3216ea824b2f7b884822f8d6d7206179d0cc5cbf6f0a700b7df994ee65be82f98f18ccb51a0c

        • /data/user/0/com.redantz.game.zombie/databases/vungle-journal

          Filesize

          8KB

          MD5

          4c2d03cf90de071b1ebfd3f3d940f118

          SHA1

          cc5e94765a4e8ef0d9f4e6e1ccabd3aba2f3ba68

          SHA256

          f8f29fb63eea4b5db8252372dc02830c67bac33f76cfe5d7b7fa1a412b16771f

          SHA512

          3ddb90485a9e2ceec866a26b60b78533b84e2dde1f3637e17c03c1c841da699ee5d443a6ab5176c9d9fc148c0f6db126bf69ddab8fa19164f101722b2953e045

        • /data/user/0/com.redantz.game.zombie/files/.FlurrySenderIndex.info.AnalyticsData_7JNSTN36BF7HV9CN8RHK_157

          Filesize

          42B

          MD5

          26fb911f6aaca1273b05518bc490edb2

          SHA1

          89ffe776561d993566e9a1d7a0560d17e72059f8

          SHA256

          aaf37c64f69fc08889300e6be7be0f6c2202e0f97b541c65741539aa611706c4

          SHA512

          dfccc884c8b785c39970f21142fde726855a7cb75c90de595c066a4a1d6f201675119c0250e31281adfce4530168f7bbe92125e980c16c099a07ef85a8c88c78

        • /data/user/0/com.redantz.game.zombie/files/.FlurrySenderIndex.info.AnalyticsMain

          Filesize

          44B

          MD5

          7b39e9517c6212e7e3f4acdbce1bb43b

          SHA1

          b9203abc6c73d684825d492620ae3d90cd76fb99

          SHA256

          d8dfbfa8c3ddc521c37295fd1bf8e0937a42df50b84e07dc0d7db58ee3926645

          SHA512

          ed0679f654976b3201e4720aabab67cb2f7ba97745156e2453e519b2f4af1bfeb85375928bd7e52e606f3baeda40ff2e757cd510e5a30670ed709550028aab46

        • /data/user/0/com.redantz.game.zombie/files/.flurryagent.-4ec3f0b

          Filesize

          58B

          MD5

          da1c67381e0f4c62c8f740dfb5007190

          SHA1

          b41a85c380a1b1de163b7ac774083e31bd0dbca8

          SHA256

          3f32495f190b6ea74213a1ffe32274264d3173ba73096a9765d4dab0169809d4

          SHA512

          91ed32b53781f310ebb5f50d9e173183949e9d1ff062065f4874f85b343728a0db661b54e1ae0d66236c5b659853365449c4b6e76d4007e515abe69b78be79e6

        • /data/user/0/com.redantz.game.zombie/files/.flurrydatasenderblock.17cd950a-65c9-4ec5-ab50-a758a78ea612

          Filesize

          254B

          MD5

          51e37c65570bfc46e2b41aa3f5146b9a

          SHA1

          a526db1061ed110784bc13b9ae8fbde93b865448

          SHA256

          68bbcd5a32d97034aef2c631d459d10efba531167b505fe76ecffa3922c92345

          SHA512

          b25a3f823a0d7782498f9ad8bda6bb2465bf2b16855a630cb28aec78be9bf4eb3d9992cd50c84c71751fd0cefd38ab44bfd4e89f9f7fef2d9e103b5f25bb9cc2