c40e93a0a6aa29a985d1434a4ae928bdcb8a63c5c8c19eb82d47bc89bbf1776b | Triage

Analysis

max time kernel
8s
max time network
144s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
29-04-2024 01:53

Sharing

Report Analysis Logs

General

Target

068f4a67f26e87e11b2687eb3aae06ff_JaffaCakes118.apk
Size

547KB
MD5

068f4a67f26e87e11b2687eb3aae06ff
SHA1

6ce7cdbdaf7721aefb6725ce2a09d7cfb68f95c5
SHA256

c40e93a0a6aa29a985d1434a4ae928bdcb8a63c5c8c19eb82d47bc89bbf1776b
SHA512

0792ff7da2c0af5aea1a6ca9010c560d9c8966e32d0b11e195ae2920b9ba3ae17959a1758755f96e849b65744c835dc42ef039c9e63ec20228f9d336159a5e13
SSDEEP

12288:Yd7FgItY5ga55sxqCd/XpL/rjNCmRn8UZdpSbSdB4SI15l:YZF/tDJhd/XN/fhHddm15l

Score

6^/10

discovery impact

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cloud.sudoku

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Data Encrypted for Impact

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.cloud.sudoku

com.cloud.sudoku
1⤵
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4476

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.cloud.sudoku/databases/down_sidebar.db

Filesize
20KB

MD5
2d4c32d9b5d2b94d28430ea7e3e50cf1

SHA1
3b9b1512adb3ada23e710cb9812249922063e1a4

SHA256
9c8ab800392a3884b907473b265d5bba4ba210f8a247abf98faa02fce7a4e626

SHA512
7638a5b26a30e6bb51576d61b7b388188d813a635d030a120626927956a93d983824497b6b9f20aeffafdb0d014fb8c23605388f28e83ce13782daeb33ef8f4d

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db

Filesize
20KB

MD5
e217cc13dbff428636ea6fb9fc3f697d

SHA1
0016636a07831f7482d84cde5991a7147dea03ae

SHA256
09d174b61ed0609976e5cc83bb311533f3d60689ceb8ff2bc18697f17551d047

SHA512
b552ee716a942879b6f378e94bdef4baf65e36052a3c6a2f97008574c7f329cd9a5050c89c73e2fe125910c3e39edd6e3b0eed04cc188defcaa52fa090ebd080

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db

Filesize
16KB

MD5
9250e7057acdf1f038d0a219a7df534a

SHA1
b168a191570a15343b7f7d640f4941a9c5b62e17

SHA256
8ea56a03116a0c81ee4f4f8fe3a82f0a579069c3ccb54f8dd8402cb1d5459de1

SHA512
6603d925dda055c5c700dcb4bae37331f4c45b096fb4ea060a770cc4b4b2fcac5a53b08e71b22471e2c5b8290b10e3414b70fb3087218fa1b9eeaba621748fb3

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db

Filesize
20KB

MD5
c1899d5d1b11c396d33f50fbdae7ea48

SHA1
ab2a9d5b4d6457c5836956d3a5a82a34d7a42bfb

SHA256
79d310dcb89dea7513562074067af0e938d9a90f6d4a9067b18b6b020cab55ba

SHA512
36ac626ed3eaba7290d6cfe71f6ccbe8c1a7e6fc679ced1794810aaa0d5d9a47479d922bffbc2c34bea97efa503535560a71a96bf25bbc430618faa8c684d528

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db

Filesize
20KB

MD5
23792a25b20e48013f48e5ee8fa57577

SHA1
d28d7b576dab6d0251b52a63423f66b4c5fe68bb

SHA256
16171cac58d2dde99a7d1409261e36be60d5d8a8edc99c51c0397884c862f1d9

SHA512
c8c10623279602f1d353c68e6213aa7b5cbf40b6d705be9dfe73058a1638f8b4532cacd944d9dadeb202f0dc9e22703e11e97f2a9aeb3a6f27918c86a21c5025

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db-journal

Filesize
512B

MD5
bacc57f7d39924cea29f6d7c83fc184e

SHA1
002528f2147cced55144d1f3857cd304b093eeaf

SHA256
d1a09bab3634b55fd9257dba58340c699b323b8c7db3ab79f18dab01afc551ba

SHA512
be8763ade4ed3708436e16496a564c0a3db5e36914e30e4ab4dcf2da25625f24a726bdd0f85954b9bbdf22c9d162541c2b00ecf40796eb654b02051226027d1d

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db-wal

Filesize
32KB

MD5
a7dfda2ad148b0b48306ea98281f5584

SHA1
f0a69470c90745d84d7aa0fcf298d94314b887ab

SHA256
d805f0e3aa848a53301adf0c3ea4dbfcde134f885e01465f76bd135e37261136

SHA512
5b1234d3d8c0728b3637a8f36270fe387e595f31b2ad1f19ce84fc24bef8123cf798399fc1e9b4965e74a36ef8dabcec16513dc5de6889249dba690fcc971232

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db-wal

Filesize
8KB

MD5
0886f9763515542a7877004d4ce2c13e

SHA1
d0e2422d9166d75b35beeb9fbc46c960ef03f9b9

SHA256
2bb1dd88b48356c4096e5c1aa31d675a4fd309de906f67f542caaa90ce0f1a39

SHA512
722a854c7f11683c9f1f07654234873642c7e6b0c5b39887d8bf9373a57ee650836b67c7025dd70b7b595b8895fe54f085ee585b484d88342cfc584a655aa881

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db-wal

Filesize
4KB

MD5
07b54c2eee488d697d0d82628d506bf3

SHA1
3c3e859214e463f65a19d0aaf586c6ef49be2898

SHA256
c9baf52c4f7dbc7c70509ff8739ad0f435556ba0c0fa386c6ebfd6d09c39b611

SHA512
d8633ed85a254eceb134cd8726f64401afcfa5f576f0a4cf8ca0dcbf0fe5afa24291b693f1f883e98c64619e9264fbe308ca454ed1eccc9c6aa86b143cc3a47f

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db-wal

Filesize
8KB

MD5
f33b5bf3be0d7d12ffb2b39b70623368

SHA1
9af71da670e25a7a97ccfd3aeb39d6079fddf726

SHA256
d5841bdb3dd1f5ad1221e5840413bf743ed6e4cfda288250f44f30976d61ff36

SHA512
9312d1f00076bb8f4d362d5da4f3d903b52bcb274a75abd2b0535d9baf73c48cdbc168f936de3f412f0c0457edaffeb819c0375cf9852cde57de7d809357439e

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db-wal

Filesize
4KB

MD5
70bcdeb0bfb1f5dde3cf66747ae9ece8

SHA1
e12e55e1e28282e0b60e37c756e02c7353530ea3

SHA256
4371bf5c0f1edb5673e57e41e3baad485bdff7902348a83784e0a626c80f93c3

SHA512
a4aa70358147e5b652d2f4115663aa2d4ebce5f95bc450cadbb24a02a7485b24152480f10101ac834b4d93ee4a8fca6a074da07c3f3f985c630c1957553d379c

Download Submit
/data/data/com.cloud.sudoku/databases/down_sidebar.db-wal

Filesize
8KB

MD5
f6981d76a9906a38f3cf86e98c1615d8

SHA1
6cbb2137bb6a50f548ea28cd2a1fc6ccc20a0696

SHA256
7c5b5f1af8d222dccb0ebffe7051ae730cfcc8b936176b341274c4f1d2b63950

SHA512
b6110486aa6638c1af99ff593b48e4c32aa88f6e0d41d358cb8700e738d67ec9d2b4166687c115270b1f8abebd0b59aa2a703e158527a154639eca0e86e6b912

Download Submit
/data/data/com.cloud.sudoku/databases/opensudoku

Filesize
444KB

MD5
21af33ba24cf61cbc740e1a34c2fd00a

SHA1
809b718bd5997d583419b8ed6118ae0117101c8e

SHA256
9b7c34e7516d4eaa3d229fade6ed2f8ee0c66d22acaa5d98bff06fde212c5a28

SHA512
557e94c9c1e9684549d8aaa70d48df680075c79f4bd49631de939a450c7426ec92c9b8ee1c6211c3b41479a174be666bd1602543ff0cb27000f808cd6eda0aec

Download Submit
/data/data/com.cloud.sudoku/databases/opensudoku-journal

Filesize
512B

MD5
05f4a021532bb44e5bc6e984eb1b6f87

SHA1
71b3392c7c7d8ea77f51160f38eec419933234e1

SHA256
49ac2a5781cd42aef131a92f2fb486c62b94428ef3a304c9864b41f436860779

SHA512
960a6363b33d972d64da9ea1a5b644a800d4caa1c55ba87e4d40010f099b47f0bc70dc013c88d7dbd61ea603b2c81de40ae565cb9599ae99e11b5b01396f7d33

Download Submit
/data/data/com.cloud.sudoku/databases/opensudoku-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.cloud.sudoku/databases/opensudoku-wal

Filesize
458KB

MD5
de8ccd1fdc7e951c10cf456638f3e4a7

SHA1
7c0494f4ba0c58c73bc97cfbe320d064917b11a7

SHA256
a5e0f7e2a89a7c55b831d2027429a88e47d9bb2b5362409f4106e5790824cc9b

SHA512
070dabd44d4ff329e585d6ed5cd228f9df9055d27c2e019d5c61b5b7d7176c98cd3b2adb7d1714bcecbd44ebac417c6f5e14ee54d94556dd7570fa575b9a5d71

Download Submit
/storage/emulated/0/Android/data/code/KI.DAT

Filesize
58B

MD5
2b53b6b030d7bdb5da6ea0d501b6a165

SHA1
fa4e9e8d724d91963a3fa3def11790559cac11c1

SHA256
d8209526853a232417c586b6c130ed3ec53af8a2928b95d032ddcee37b4698fc

SHA512
dceddb69f3c907593c47edd56cea3b5cd68e560f020244e6abf9e63c58263d38b36e8736617758f2c5c7292bffd815af44fee3805217aa9065cd143e0599b128

Download Submit
/storage/emulated/0/Android/data/code/MID.DAT

Filesize
60B

MD5
c679783f144b5b77cbcc89952b9590de

SHA1
339c29f74856fbb0a27070d1d90c1acde4d49142

SHA256
03e9e03b09bb456d2e730f787e5b232d119d59547959fd73617cbf44dcf56de3

SHA512
5ac8cdf1e7950029ccd418c6df2991e9763083cc631f549ab2302758b0cd634817c1f712db7310927ba39aa9612e7be746532142434d314fb7231e2f97d4aa2f

Download Submit
/storage/emulated/0/Download/ads/clst.dat

Filesize
15B

MD5
a77f6d5c0647ceb591c8dff6eb230c3d

SHA1
30310984e2f0c8f328ec854c06fa898f353a5d2d

SHA256
640255e878e8672ec9ff3b738a14ba81f13485087c71d209e04b41d3cab5c642

SHA512
d1e0b5bcc1a4903671fc3c690a1b7f7b649fea38867375e0dd8b983326a9b35cc8d5894278beeefbf1644af9826a0ce4c1cc31bc104256bccbbf8ff0a684d919

Download Submit