Analysis
- max time kernel
149s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
11/09/2026, 21:08
Behavioral task
behavioral1
Sample
jaffacakes118_95123c12214fa66ab8d86c8d1fa71348c37aa10ab375d03016a249d4b7c1e707.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_95123c12214fa66ab8d86c8d1fa71348c37aa10ab375d03016a249d4b7c1e707.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
jaffacakes118_95123c12214fa66ab8d86c8d1fa71348c37aa10ab375d03016a249d4b7c1e707.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target jaffacakes118_95123c12214fa66ab8d86c8d1fa71348c37aa10ab375d03016a249d4b7c1e707.apk
- Size 15.7MB
- Sample260911-zywkvsdf85
- SHA256 95123c12214fa66ab8d86c8d1fa71348c37aa10ab375d03016a249d4b7c1e707
- MD5 20a7fe746d3dfe5f99d3113313947cdf
- SHA1 e3fd67eaa836e6ee97db8bbf9d01f683fefaf062
- SHA512 ff6da551ce565cbe18d987a32dae248b92ef2e6340b612c8d9aaf333c732d70d4369c74eb3d49747d245a105161b65a30c0ac8fb1744a367a6aae87141404c58
- SSDEEP 12288:KZasCTBfOKqnhuZxBQa43Ujnz+RayrQTIRcOypyWoiEn2kvdeWiDJqY3SaYW:gEf02xiaVjz+/QTIR3IWckvkDiW
- TLSH T127F6BE53FB23CDB1E4F385368B24A3695F2A0C66D35381D71868B12D9F77AD80A694F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
pid Process 5091 den.analysis.promotes - Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId den.analysis.promotes Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId den.analysis.promotes - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock den.analysis.promotes - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver den.analysis.promotes - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule den.analysis.promotes
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-12.txt
- Size 33B
- SHA256 0386200206e16350eb69eada2e01254b24ada2b880ec5fe098efc22250949475
- MD5 e7465fc7d205ff9f67cb3675087e51ed
- SHA1 61da57db9fc31118bc9321c4dc791332bce41f9e
- SHA512 5324a59a217ca2dbcdf4b05740a6906fa5fd2bd71fa80e123a408678946f418f114026cd7fde032eae79b31572dcba73106b7d0f29e10dd81dbda08d9921d34c
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-12.txt
- Size 25B
- SHA256 2d6988fb5afdaafc4e33fa1f71d6f10c95ab5a49a8ec820add5b13eef05439af
- MD5 ba30336bf53d54ed3c0ea69dd545de8c
- SHA1 ce99c6724c75b93b7448e2d9fac16ca702a5711f
- SHA512 eea34ca526e03349e746d3687ea660b4748f0174fe2ffdb65161e232e08630b345e03329614852ce881a71362ba68575e9dd08fa361a416e5b2fb231e21a0a3e
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-12.txt
- Size 284B
- SHA256 bec178784dc6e848c1b49c045227c7c14f6a066fe300a07742f1753235d7c6ff
- MD5 2e1e64a0698e3e9597e0f52a997f54b0
- SHA1 7f1c4c3d05da3644fe461be88847891f7edf2242
- SHA512 72c4cfbd0ec46fd88f9c11bd6d4f44cd1515035c8f70747c17296e44c798be56badef6a780096212549efbc7ae9823442ecc8ba9f7163644c1c642be6d78cae0
- TLSH T137D07D90074129D6E424D14412952401CE22511034EB596041239F03F73977BFC04C5E
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-12.txt
- Size 29B
- SHA256 5a290151305de1ec4f790cd8ada8bd68c076a2c4ed497c40a519509659b65150
- MD5 b9b530e2448252311640bbecb69b796a
- SHA1 215ede46fb42a68a7ae84c3019acb3019668a46c
- SHA512 5834499307946d130887067b2f837ddfef7fdfe3a7e5ed8977eb14c2dc1ab328334da35ed4c978e20b3e6b28ff30dbd12f0430f4b7c831481f339d360c260919
- MD5 SHA1 SHA512