5897beecc696216283ced82fcecc9e13f3d485d7fe26d68ae6c4818a8728ad15

Analysis

max time kernel
32s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
01/10/2026, 18:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
073fe9f3-jojobet-release-1.0.5.apk
Size 2.1MB
Sample261001-w1y7zsyscs
SHA256 5897beecc696216283ced82fcecc9e13f3d485d7fe26d68ae6c4818a8728ad15
MD5 5dd939ad920cd22103f5e867123add68
SHA1 38eb1ae776c9f7d6d8fb37437c0f02c993728fcf
SHA512 a372c4c1089af1e0a01db6dc30eda062b55198c91fc3b4e1a9dfbda3218f06ea8eba45f270c56888596db4c7c728f57e6e05b3d7611160d3dd655e4644f576b9
SSDEEP 49152:I0inmoFbUC+cZEIU4BjA96LGktOV5lI9lrs7i/pnUzfrfHCw:I0ivUC+QEI1s9aV0I9lYzfrfHCw
TLSH
T13EA5AE86F768A93FC8734033495A5636227BCD168B829747794C372D28776EC0F89BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.jojobet.android

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.jojobet.android

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jojobet.android

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.jojobet.android

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	20	https://www.jojobet10012.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a43d8098b8368885	3

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.jojobet.android

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.jojobet.android

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.jojobet.android

com.jojobet.android
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5017

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.jojobet.android/databases/com.google.android.datatransport.events
Size 40KB
SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
MD5 15d5b92dcbda7ef7f9ca327a903e46e4
SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
TLSH
T1E703F05D4A202611C2BE083FD7E257531B3CE35F5B2387612E904CF6DDC68B6B831998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jojobet.android/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 59595e16a839345502db1c8418dc7de57575d04f64fb2c807f406b5dd558a536
MD5 8d0f1ea4f701c172cad59b0307db7e3e
SHA1 90cd50d095ff1cfbc38e72ade6054a4ff186e864
SHA512 8047dd92823ce62382d66735d195226b6743aa0439145d997c105cc7ae3435ec83350b0087900988486ef0417238dffd873138dc0014927d204f878777795c23
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jojobet.android/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 711a9a6d49c8c4b7d31d512d090823becb346a18c1dc2bc7761722275770d285
MD5 640bc209e7f774262fdb75562d89c5c5
SHA1 1a0d2c406813efb4ec565a5e4a147e79965cab17
SHA512 6080e7d7737d0783b4226eff2908c2ca021b67e30f7b6ba7e2aa37fa18cab38a0d5281e528e8898ca07db6fa5654d4750c5b70b40302bd510dd09fb3a6d94eed
SSDEEP 6:7+/l9zLgn1fng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKorV:7+tRmqLiuWdwRmBEyPbL
TLSH
T1C402228A63800822C82916B794D483408F10F7198161CB872AA008A8BC036CCE4A0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jojobet.android/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 d043fe37ff82370cd012d2fa7c34273e747650739fb486a870d749bd3683b0a1
MD5 841fe0a709474896b6658a0a71673b91
SHA1 65d33ce9d6abf082f5473ebfd6e755568944730c
SHA512 25a31642c568e5c1fb2234ce0992b55cfae2b077280702e3ba9a33dcc131e5ff1ed43324b80a56449764c6377ac9399e49fbd3d95a75f3cd8bcbc9a6ee596e26
SSDEEP 6:7+/l96Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKcjs//zn:7+tMqLJdTRmBEyPb7sz
TLSH
T16202228973801813C11917B790C8C3442E10A7348223CB0715A009AC7C027CCB8D1D82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.jojobet.android/databases/google_app_measurement_local.db
Size 16KB
SHA256 a9bea62e02d2d1b67356317799be291b3867c502a6d412d96fde5122cd59a73b
MD5 32b199f72d9f2889dbb00a4a9fc5ee03
SHA1 2d22b35e0b36dd7fd418742de2459789d08548c4
SHA512 6cbbb271b05e3674041611953e8df1db615d6dd01a5cfd61286efcd0daf6120e5f9ffb1048647e48d2b94745d1bbd70f535d5b53d57ec5bf15e37a54b02bccc3
SSDEEP 12:TLiEy9zmzrfRmBEyPbP/P+/0Fl69gX/h7:TLApmzr0GSP/PlFh/h
TLSH
T157726FCDBA106703D273477AB4CF93E22C30A2198323DA0BBB940468AC43289A092F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.jojobet.android/databases/google_app_measurement_local.db
Size 16KB
SHA256 ad667f1692f5b56dbbbaae4be5fc92ba226e13c106e5baf5a2d932c368fc994b
MD5 fa1d314c2a6f2362e018c3c09602c402
SHA1 b3ff85f040a49a9e4ecd4f24244f01637707a9ac
SHA512 f21121ab9ea4e8934bfaab82778fb7eed384ce27be3442bb0f00ecc09e1de82e1efc2d4635b10981eb46292e26cf46659dbcfd265231401f41554171812a8ff4
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlNl8H+/0Fl69gX/h7:TLQpmzr0GSP/h1499F7l2lFh/h
TLSH
T10D72E99D7A109703E6774B3974CFD3D16C34B2169723D917BA551A2C6D433C65062F05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.jojobet.android/databases/google_app_measurement_local.db
Size 16KB
SHA256 f21ed944f7a8f89d1556e4217c89cb98b036a85d7a0274408e168e725dd0611c
MD5 c90c5d92bf6a4e0fad40f27c8844985a
SHA1 0fd7f95f0d2261bcbe4979a0a91efc713ee69352
SHA512 6d7bfc19f420b3e3c106b3fcc60c14fcce5dd26c95f151ea979472ee6b011c56ce30d31fc802df3439470831557d51361bffbb32b6f4976dc9567ca71ec55eb6
SSDEEP 24:TLEvpmzr0GSP/JKabCCbT499F7l2lFh/h:T4vArSP/kabCCb057l+h/h
TLSH
T1A5722689B564CA03F6774B3961CBD7D12834B2665727DA03BE062B1C7D433928172B02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.jojobet.android/databases/google_app_measurement_local.db
Size 16KB
SHA256 385803659ca8448021766d118509cba4e22494a3d238e9aa1b95f2be24c13a00
MD5 0bb8d2a77571cbacf3f01c670320904c
SHA1 41f800bb079a0c02cfec268e01477775a515a58b
SHA512 658d7cb1ffba85f8251c9c4a740b908c266afc536391fbd42d21ae2d94b3f6cf409a88cfe00d56b73b2beee65903915938573b0d0b19330c356d8749e0eac9ca
SSDEEP 24:TL6Xpmzr0GSP/uKabCCbT499F7l2lFh/J:T2XArSP/7abCCb057l+h/J
TLSH
T1C7722689B964DA03F6734B3DA1CBD7C1393572674727DA17BA062B1C7C433928072B01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.jojobet.android/databases/google_app_measurement_local.db
Size 16KB
SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
MD5 2f1eeee3602c828b8e9f81f6fbd20d41
SHA1 d240b568bb6929702815b9a5edd05ad635671caa
SHA512 a8642cc12cb9af0cd9d3fdc4bb1fe3b246d02af6b36714d80cdd2809def699b0b93eb585187c17f0a8e19801879e2e9edef7963ee416ae9e8cc35fd9cede2859
SSDEEP 6:l9bNFlgls1qlvlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WK:TLuEev9zmzrfRmBEyPbP/WK
TLSH
T1A8722BCD9F102603C5730777B4CEA3916E14A21D83379E472BA90574AE834499061F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.jojobet.android/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
TLSH
T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download