Overview

overview

8

Static

static

6

jokesphone...re.apk

android-9-x86

8

jokesphone...re.apk

android-10-x64

8

jokesphone...re.apk

android-11-x64

8

Analysis

  • max time kernel
    35s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    05/08/2026, 14:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jokesphone-4-0-290526-341_N_A_APKPure.apk
  • Size 12.9MB
  • Sample260805-rnfgwstyhv
  • SHA256 1c43ecdda7af79320017e458c9be04f1c85a27ddc136747ab675ef23681bade4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.cashitapp.app.jokesphone
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    PID:5087

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1f18901a60b6d179dc603a21e6d28c88c03b469c26a229e3be4da351dc99aa76.0.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/cache/image_manager_disk_cache/1f18901a60b6d179dc603a21e6d28c88c03b469c26a229e3be4da351dc99aa76.0.tmp
        • Size 263KB
        • SHA256 b24cdd93914577195ddd1a8e629c094876e3262280f6822a5e0ccaddb944f7f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        journal
        • Path /data/data/com.cashitapp.app.jokesphone/cache/image_manager_disk_cache/journal
        • Size 180B
        • SHA256 0a2dd5b5fafe4bf606e77d95e9efd774717d216b7c19f489ae18c8edf0618f16
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        journal.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.cashitapp.app.jokesphone/databases/com.google.android.datatransport.events
        • Size 64KB
        • SHA256 226572554fcaa27565a01495ba68f0cafdf79e025c55e15ed3c410bdfc430046
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 8ab5561d0dffd0966b16d5506ade9715d3a76434d2ce515a6975fdf95c849d5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 b280cfcd88994d1de72d3521510ac6d44483fdb21a6130e4f246635e34b02ce5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 6c393c1f7f93ede8aef81f48e9d20b3a6288025c318aa42f71d7147d9e2f995f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/com.google.android.datatransport.events-journal
        • Size 28KB
        • SHA256 5c9c2d0458b13990d823fc267edff03d5a7dd46bb8bd14203bef6b56a7875c8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 4be6aa12b1d8efa930f9ca0ee897117a1bf456e60f7b878bf830f8f27c04b3fc
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 2a413533fd07a1ede84725e7dfb307e1172c6b6f941e4c2a79ce73975be4a5d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bfaf31e4fd506ae9aa757a610d48d3dbf99a87579d331ab6d56e9204a726ecee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bead7e8dbf44f15ef62b989089f31f432d92ba696f1de46df75dc4555c729bce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1c41c9dee68ba408664107535b42c4291f3df92001da5d8d71ae80b65ca0c7a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2bb6bd770bc10b1cd08040dfa86d4b80ab46bc377f457ded8158c73fe4dfbfab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c1295ffac30f802f7d74d4dc8c5c6c47f6ea3c899eb425b4275efb5c8b507f64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 a3db4ca85fcafe31b5609a00addd5371600a0f8a7f0d2fd615eb8973447145da
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c7908ea7a22f12d95f6c7809db602afde061f6b2e170dc639760bd2556ffb59c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 a481535419af248f9f9e6d370d9cbb0999c42304b858078088f2687cf322e511
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0935bb2dacb613aaec78e191c7ea882293e90f05bdb022b977007e0e65a822ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 6d664ba95fc91750a1d1f3c66938c78e26e12bc7f3b907d0ab0869ec207ba4f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.cashitapp.app.jokesphone/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d5992b0e0575c92318a06fc82847763b82931816193981963e3bd6b9a4c93363
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.cashitapp.app.jokesphone/files/.com.google.firebase.crashlytics.files.v2:com.cashitapp.app.jokesphone/com.crashlytics.settings.json
        • Size 777B
        • SHA256 1a1397aea39a5fceb40e79ae151ce0e5ed7f7f42cdc1ae5e4084bf7b60c4d33c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        event0000000000
        • Path /data/data/com.cashitapp.app.jokesphone/files/.com.google.firebase.crashlytics.files.v2:com.cashitapp.app.jokesphone/open-sessions/6A735D6101A2000113DFB3DC7E459F23/event0000000000
        • Size 2KB
        • SHA256 cc9208f0fe478a1ed89bc81cd8d9b0a6047160b97ad6819a10ecd03a52511d33
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        event0000000001
        • Path /data/data/com.cashitapp.app.jokesphone/files/.com.google.firebase.crashlytics.files.v2:com.cashitapp.app.jokesphone/open-sessions/6A735D6101A2000113DFB3DC7E459F23/event0000000001
        • Size 2KB
        • SHA256 a077b48997a4cb2f29d60a2b340da80a673df673161499ede2a096d1747e6b28
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        event0000000002
        • Path /data/data/com.cashitapp.app.jokesphone/files/.com.google.firebase.crashlytics.files.v2:com.cashitapp.app.jokesphone/open-sessions/6A735D6101A2000113DFB3DC7E459F23/event0000000002
        • Size 2KB
        • SHA256 087a40d1d7d9759a08f5e1e266f28d8992b42747e7803a4e0b00ad9e54176521
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.cashitapp.app.jokesphone/files/.com.google.firebase.crashlytics.files.v2:com.cashitapp.app.jokesphone/open-sessions/6A735D6101A2000113DFB3DC7E459F23/report
        • Size 824B
        • SHA256 890b153d1ba7cb32a493c761bdbc65e5c42548358d1744a4d34b70874f0e46a7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-data
        • Path /data/data/com.cashitapp.app.jokesphone/files/.com.google.firebase.crashlytics.files.v2:com.cashitapp.app.jokesphone/open-sessions/6A735D6101A2000113DFB3DC7E459F23/user-data
        • Size 40B
        • SHA256 22717acd200fbd11356fa4d38f932d435b7926fa4037c0d2f5f0901f85d7ffe9
        • MD5 SHA1 SHA512
        Submit Download

        userlog
        • Path /data/data/com.cashitapp.app.jokesphone/files/.com.google.firebase.crashlytics.files.v2:com.cashitapp.app.jokesphone/open-sessions/6A735D6101A2000113DFB3DC7E459F23/userlog
        • Size 1KB
        • SHA256 b807f7b8ba1f5b46fe615a12d70e4fd720643f66713653c6f01c58f3a19a0700
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/.com.google.firebase.crashlytics.files.v2:com.cashitapp.app.jokesphone/open-sessions/6A735D6101A2000113DFB3DC7E459F23/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation3834110671946978937tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/PersistedInstallation3834110671946978937tmp
        • Size 568B
        • SHA256 37124980ca1688c5424afa84094c18156b043fb1145c4008700c6ed39ff9c903
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5523062390786238950tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/PersistedInstallation5523062390786238950tmp
        • Size 90B
        • SHA256 b9b776f51c277114d6ade43c5b3f6f0f40eee93ba2aaf68055185a8e90f6b001
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_data.preferences_pb.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/datastore/firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_data.preferences_pb.tmp
        • Size 50B
        • SHA256 b1d2b79c9de54a1b2017cb717ea6cd4fabd291e26cefd5c8e6bd4f8573f07c74
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/datastore/firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/datastore/firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/datastore/firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/datastore/firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Path /data/data/com.cashitapp.app.jokesphone/files/datastore/firebase_session_Y29tLmNhc2hpdGFwcC5hcHAuam9rZXNwaG9uZQ==_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 447cfd6472784f879ec355c084287297459b5bd7cc1f0c4388d8484499f53586
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.cashitapp.app.jokesphone/files/profileInstalled
        • Size 24B
        • SHA256 475c2a70c1476767b8029d14d5298565d945ba1fdfc1c1562014fe81a7e3eaa8
        • MD5 SHA1 SHA512
        Submit Download