Overview

overview

10

Static

static

10

JaffaCakes...fb.apk

android-9-x86

10

JaffaCakes...fb.apk

android-10-x64

10

JaffaCakes...fb.apk

android-11-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    141s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    03/01/2025, 22:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    JaffaCakes118_7185ff85ec43f1a42fe89725720975fb.apk
  • Size 5.0MB
  • Sample250103-2a7dkawphz
  • SHA256 de032609bda6ab2da5ccf34923eccf0024f2342795a220f5e7ce8c14ebc87e34
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
smsfactorydiscoveryevasionexecutionimpactinfostealerpersistencetrojan

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    trojaninfostealersmsfactory
  • Smsfactory family
    smsfactory
  • Checks if the Android device is rooted. 1 TTPs 5 IoCs
    evasion
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.halfbrick.fruitninjafree.hack
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:4603
  • com.halfbrick.fruitninjafree.hack:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4649

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/databases/OneSignal.db
        • Size 52KB
        • SHA256 802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 fcf62e572536772c9f6f724012b4deba946c4f6c33d3a253393337b9ccb698fe
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 a6961021ac18ebc94e982c6cbade3c49f232b8205c45a051b6f3527793511227
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/databases/OneSignal.db-journal
        • Size 44KB
        • SHA256 b95dab6ac85e3d8c9c588ccf0ff15d15e5b1d401df6d0874fe35e158dd3d2418
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/androidx.work.workdb
        • Size 116KB
        • SHA256 ca6aa197f24ee9db53c098702a239e037c545e43f28e42bb782cd21693119c41
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/androidx.work.workdb-journal
        • Size 12KB
        • SHA256 99c267b5738848c5305bff8c116c823539ad919f7dd888e6eda67f42190f9c6d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/androidx.work.workdb-shm
        • Size 48KB
        • SHA256 558738fe43e20a58b804a7c31658b368b880c47489b38d8f76b16e5b45a968bd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 91afd81c18b1517e7859a1fea3e33e9562b6a751802be8ef364561adb7351406
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 36a76b944281c51d8fe1a2c50b31500f3c0d27a2a91344fe07703dba7135329d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/androidx.work.workdb-wal
        • Size 309KB
        • SHA256 155b48214882915f0e7b1466bfaa85333a269fda31c58c0f4a7500adb4a22a3b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 6f91620b12da3f0172f05dbfcf9573521f39be09e13009c2f677bc99a3c8de72
        • MD5 SHA1 SHA512
        Submit Download

        credentials.dat
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/credentials.dat
        • Size 226B
        • SHA256 a77b89539686ed1398ae67badcb888b1591f9f2344de524f020d81a9713deb05
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Size 333KB
        • SHA256 4d850862a7554feed9038886316ff84bf8ddfa50c7d75229a1fa09ea3dbbf592
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Size 12KB
        • SHA256 1ad4945f2ba621cf328cfe3378858458837503fb3ac4399e71d4994001c2f815
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Size 20KB
        • SHA256 6a7b1d402f8149b49108db261411ec97e638d019a55e99f6ff400155e9f79187
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Size 20KB
        • SHA256 b3b038ab4fef530161f084aad744db43f28675d0e681d15dad141a65e32bc9a2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack-journal
        • Size 24KB
        • SHA256 c4a9bfe7e35a1c106e579426d9f0147ee58f748844b477c621da2d2039c69fd6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 00b9daf75134d36f172ed9761e0c4a6b269ba42f041b31fa2048bad79785a68c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 fe5bb55c97a0013e621d224a0a423af286ed0629632c7f1070d2e8c1142580d4
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 510c81b3af663d94326e89485100d884858682d2f2146f927fdf02b26b862c33
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 32bada13a23c65d7a2fa3879498fd4dc11a93df7189564a27d4dfb3a7eb87a5c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 a3295c105178d53c6df88e9b0c86d4619f3a5820409bdb5a9c9c7dc647dbde50
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 46318a116a64c671477ae7de270b3d2795b559ca5c5c7b52e66d748de101487d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 06c41f0aa0224d8bd39ca9d1aa5aeaaffffe470a3481ac86035a2659e865ef0e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 c08a9715f070e320f54e2a5d24c271948803d77303ac0265ec8a3c6941f4bd95
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 29d61d6a8460615358640106479161993c06fe3248cbefa53a34a7b1bd6ce555
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 103eb48fe30c6c688267b674dc68ad01e0eba662cb007388860bc17c7067faca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 5895c847f8016d677e87b2e34e6f31994e63c97495f65abc50e73ca5ed1a5f1e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db-journal
        • Size 512B
        • SHA256 7f2e566ddfd1def4203e37b057e6df0cecde7747263ec50ab1a4a9caa882d4df
        • MD5 SHA1 SHA512
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 b28dc1bd4b05ed6da554e6b55578ee42c1ba6ae741d0df9ad939de9ca99c1bca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 9191b53f4e5f52db1b3f182a8a7522a92fbccae01e39c3c8d62855a63e49a3b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db-journal
        • Size 20KB
        • SHA256 1f7cefa1ffb8b2ef900b7f9891966d7a3dcd303d45aee4a7c6cf9292f340df0b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/user/0/com.halfbrick.fruitninjafree.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 27ecde42349f9e126167df10530599ed0458835fdc32c13825cb42fb2ea8224f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download