Analysis

  • max time kernel
    138s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240506-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
  • submitted
    09/05/2024, 15:15

General

  • Target

    2a93d80aa472c989ecda588de1f59402_JaffaCakes118.apk

  • Size

    26.1MB

  • MD5

    2a93d80aa472c989ecda588de1f59402

  • SHA1

    1128d338ba5919afc8d8777994bea7a46a818344

  • SHA256

    8bc37804014f9adf1a3f19cc4105c573c759330d1d9d0853f60ef34b3ecb2847

  • SHA512

    515cf84551653900b14e59706388b4c2f12fc887c7fd555d533d8c20875fbb11db2c59bfc1b5254c4a43c69381fd7e05c23da868fe58e44adcefa09f6bba3d71

  • SSDEEP

    393216:pyyIaKI4c1qNxjZ6NmsT2rBm5L3UopPK5JLYC/Osz0rRsFt82Vn5Ogd3ujTXD8WJ:jum4XMy4R3LQ5J1WRIFZ5u3/kkX

Malware Config

Signatures

  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.aceviral.angrygran.dbzq.m
    1⤵
    • Requests cell location
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Checks if the internet connection is available
    PID:4776

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/0M3006CS7U0ZC2K3-access.db

    Filesize

    20KB

    MD5

    e8a3cf1519f76f90fe66482692fb2735

    SHA1

    de43fce34992dbfeb9d216b1ecf45e489c7a67f5

    SHA256

    950dcb46fb427d6c603ddf7b05954f5dcd02840e0a0657a40b71d0d6ebf488f0

    SHA512

    21b0c416e7ad89bb460aa7e8211c626aa20df41bdf46afd10877c6234649bd0a4de301c88af57a7000750a208774e06e2a30340cd9f96947b962f6e9ba112651

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/0M3006CS7U0ZC2K3-access.db-journal

    Filesize

    512B

    MD5

    c93e1a7042d9cc0e08ff5dac444f787a

    SHA1

    14491d6f7816b1e38b51c7f309660bbceceeb645

    SHA256

    5083624fefe53683a4ebb9749a3f1e5a09750c2d86410893838206061d23593c

    SHA512

    bc43395228ebeafade6e1378bfd226edd894a9271eab854bc91f9113aa3d7dd59b658009f42e9b7a6b5a188d5adcdd9ae5f6a3288849f9b1f7e891458b330501

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/0M3006CS7U0ZC2K3-access.db-journal

    Filesize

    8KB

    MD5

    b960a5f50e4ca5039e706b252c663d06

    SHA1

    4c312a7d74e807cbb39e9cd8e842ea4624654a60

    SHA256

    bf110acb5c6f7c00d8121d204b08350fe36764d015848f072bf54dede9d1be65

    SHA512

    d1ac6e903980305ccf51963d75f9872821c5a146679cc3d499395aa427efba72877119a087888ddc132d88449de9e5eefaac4893fe097a425b5ac74e50706fc0

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/0M3006CS7U0ZC2K3-access.db-journal

    Filesize

    8KB

    MD5

    994397d2096f2b6ab51dce01e1385bed

    SHA1

    d7aa8492fabf5e999b32ff575a78b5ec1399a635

    SHA256

    2e12883c749ce2d22bd4b0981efcd28a210825b9abeec1fc38efcef7c062c1a5

    SHA512

    a8e1d16f4574527a5b4199d03856840a323abe108190fa5200b9cae7c7ce3785438df88730d07bd7be985784b99ac5e902ae1ae553b48cf8fb0bb867a3a5812b

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/ownad

    Filesize

    16KB

    MD5

    f0e8abee57f702bd0e2a823a262041ab

    SHA1

    9d18ff633347d64e1adb0674dafd2794ba22b6d5

    SHA256

    6d517767b4a447861cd669c54712a899c27c90e1729621326ac2476071225b81

    SHA512

    6bb4ddcac407af57cad9232b38bac6880a22f9b1ae06beae60e0e3ed8a933f725f2a4fd6686ebcc09a07ac1eafe4594de389264ffd963db98a6f2c76fa48cf11

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/ownad-journal

    Filesize

    512B

    MD5

    7b0088c037aaf5ca790be38514739190

    SHA1

    114c63da041cd2ad4db2a5293b399ae65ced5023

    SHA256

    bd0f6b2115486f892e13dec0d31e1f7e494cc4951576e3a4bb962311e5ff7788

    SHA512

    091e97072618e9786e73d0d317c6532e5fc93acc015d4fa090e1f87272956e176095d4d8687223e4e2a91f2fcd9c8b89b07899ec513b6f2bb4351ddb85749593

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/ownad-journal

    Filesize

    8KB

    MD5

    1ccda855290501a883ff08691348b3b6

    SHA1

    ba294c150c784b81a038fcfee7956f0022c44146

    SHA256

    db955f10a750f3c44aea7911790fa5f638da8b0bac30dc79f92528c2292e7503

    SHA512

    21d31c8a9a7017c5610f730d0248166fe0023782afedb02d6ac824cb8ef86263a2bbf593ff4df20beb4327f568db454ab6c1488e6fe66e45bf60e99266c8cb09

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/ownad-journal

    Filesize

    8KB

    MD5

    3aa62e406ffd82a29ca1d8f6a3eafa48

    SHA1

    e965d644a659b68c96f8959211a4fbb0999bccf8

    SHA256

    c92303624d9d3b582501bfecf9aeb7696584d775fba78513ea447e92392dd380

    SHA512

    0be8f6cff2eec6dc642133e9e40804cbfedc84c02874258b3f37e8b2b6b9095a803d1b67e0c7f89b2dae914352bc5dfe14c464046d2ed3710d8c299b0102b356

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/pri_tencent_analysis.db_com.aceviral.angrygran.dbzq.m

    Filesize

    40KB

    MD5

    98d90374c877613ebb93f585109ae0b2

    SHA1

    2eef710b0e346807e6ab8a21493c8ed8897636c6

    SHA256

    ec62041940c01e9508bfd594a97eb406a1c9a0db60c41dad86f6f0305e3a058d

    SHA512

    58f1d1eb7c833034baf59fb830878d1a30f44ccd632f5a205fd0e72dcf043456782ae8f8ffb6f2f98aa92865af51aec9984b824b0b4964b54f6dc6830f1a488a

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/pri_tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    512B

    MD5

    348c1c8c409f9f13ab001dc9296bbac3

    SHA1

    2df3d191740c501bcc7762cca8a85415c94dbe81

    SHA256

    7e46c2a09ad81ffac91abf2a666bfda41ce8efae35469250e1c708c823e58d5a

    SHA512

    68f668707c50fff4b6b4027bb36d323ba016411a6eb9e0545e7f7dc3ce48ab5879b9d507ceea666a516ecbb5b0641610b6bab1d4c432103aa3d6a09f4b9e3f4d

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/pri_tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    8KB

    MD5

    7a8d794f8c76839b96467e2ee055791c

    SHA1

    4f06fd834a3a1ac9723c4a7dacd2f58d24b5bc14

    SHA256

    c50d9fce1c436f5918b182c56b01bcf240ad6fff37dad90ebba4b1d41fdd56d2

    SHA512

    d5514fec13af9b7b32c0c2c49f41c49c395cd0bf492c74d6117cb1e840cf9604488b1dc86098b0ed85c8f7c2b9d1e81164533c0aa488111fce13af4d93c4906d

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/pri_tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    8KB

    MD5

    db0f7e8d3c86940824debe9b2f2b3b75

    SHA1

    56a817ef42c1d4f2d3fe0156fa23a2c31078b7b3

    SHA256

    5188240f8c7c9aa887a4c826c497a9e7ecd72f9a1f212925b6ecb01f80b01dfe

    SHA512

    6d19b52eb35e6ed437e81b894066c182c0540ef4d44d1f9dc7aadd39397ceb6cbf725b6a55b654c1e76f25d21866951e1ad1d032daeb34b7882a213ea860f8be

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/tencent_analysis.db_com.aceviral.angrygran.dbzq.m

    Filesize

    40KB

    MD5

    78a9b1c9437aff41b84705f30f28ad46

    SHA1

    d848b27fbe73aa5bb68d58736509196aff710f07

    SHA256

    80a41103aba455068690da40b48721a25a54c756f0d55ee1a24277cf748a7672

    SHA512

    cd54b38f4abd8352f810b2b0465996f577c677fd928c85e16bab0edeafc00a3538e5fc8c07c56e95bdc646eb8d486d003212229b3e03d2c93384bce58bba3430

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    512B

    MD5

    2bfd26143e7d47927c3d5a09b8040896

    SHA1

    a66e5b222b481771379002494ea6b355f30f2af6

    SHA256

    ea72b73765f506a2804d0a8a97015a3d3c3f71cac0f7437205f9d95625c53b78

    SHA512

    f82b736a7fbe22f258bc07adfc0caf805bade899649ab9dca1301beec6b7869a449f66fa8f99dc2d897b5c51838e6798e2454eb4638b634e48b08c0dd2579786

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    8KB

    MD5

    6cdf40372676995cf1ce423c6063975a

    SHA1

    ace6d423c57136171a10e0c56271738c7fd21b3c

    SHA256

    4c88fa90151e87c7af52092d10b7030948d2843d8b4cae54671c3e196665b8a1

    SHA512

    fa85ecebca896b3a4e33456158635782880d17d8101cbbbfcca78536984b8d25993ba475a0fa5b9da7e018cb73caa6b7993745c813e867de1ba358f8eff77da1

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    8KB

    MD5

    cb9694f8ed1a626e6ef1d837480d6f0c

    SHA1

    8eb09e7b0cd0cac344cfec5171e9ec9033942d57

    SHA256

    a98b70aa46901a54adb7765f73804ef5128a8ceb1a1e402234b6a3a9d12178b9

    SHA512

    1447246272a55ec09f71a38dc14d908ea328cf3abacbcbdf384494a6432f61c62f3a477963189da0f4853121a13a08a658a5be98d4989214c26da97f32b3a837

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    12KB

    MD5

    1f6f46b9adf56a0ed3399ca1adda44af

    SHA1

    4726af4ca87584268cd22d3eb56bc9e7691484ec

    SHA256

    784f657dd269ccb37ee1bb4ea10b9ddab05018cb33f90de28c887d75de323fe5

    SHA512

    77a95a95a438481496481390134843da31e5fe15cc5c7e38f102b8ab92ed711ad349ddaddbe46b88bf5c47b76e6d667f51680805c982330c2cfba39372b78bdb

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    12KB

    MD5

    2366961da7548d40fb12a244de6335f5

    SHA1

    c30dfa7bd041d9dd670f4d33acfd5954e5c556f2

    SHA256

    5e4ab6396a1f6aa8a96ccd3d365b74c30e8a6c48997ed584c7fc3a0c6172560b

    SHA512

    267ea19392e9a7662902182962fef4cf1299e0ab3b4bc9afba1b0973ba79b98f4ddf73af3a035a03e40d9f035a41c3858d8432e215963ec9b9a3866b9eaed2e8

  • /data/user/0/com.aceviral.angrygran.dbzq.m/databases/tencent_analysis.db_com.aceviral.angrygran.dbzq.m-journal

    Filesize

    12KB

    MD5

    4ce9d33f7dea851755639ed9373c8f5d

    SHA1

    32c5eeb41fd25804d769d0541888069c4dedcaa4

    SHA256

    01dc71c6209f03c34b9b3d9cdf5719cbfe0cbdd0b09b9b77f6081ea03c366515

    SHA512

    0b069a7b377780f8b67897174be4d80f9aa89a7918ff8e0eb2e85f264aeb755498b36fcf9bdf7100ccb866e30e8c863d6c2ac0ed7cab0c2106f222be461baf32

  • /data/user/0/com.aceviral.angrygran.dbzq.m/files/kuaiyouxi/datas/res/1382/dex.jar

    Filesize

    1.6MB

    MD5

    e263163bd36116c66d403aba7de20f4d

    SHA1

    f89db2733bcdb07261f741e410e2753eeca24d92

    SHA256

    78c53316255328e623269bc4b55064686829472eadad59e893e175ccf3174682

    SHA512

    641bb4d8029d1a50aa542964ef53d44ca746e737d2d9facf0da5b7df3f0ca1ff7fe9b47011b252f95b66737e926f3eaf32b7290f7593998022f1c6b4253bf8fe

  • /data/user/0/com.aceviral.angrygran.dbzq.m/files/kuaiyouxi/datas/res/1382/dex.jar

    Filesize

    3.9MB

    MD5

    11006719861c47777fe46959550d1121

    SHA1

    db0b54fb07c3d25d7ca73f54563b0098eaef55b4

    SHA256

    0ea7f9ec6d4ed710845635ce78a88b3577bed6c7c8fbdbe65dc9f5c988561ba9

    SHA512

    773ae750ef32c70b253bda424a0ff7aa36d12ff0f1840e0a0e65cd5f3116fa2ba90a6191c9850dfa2b94916428911079e98da101585e58091109c47de0f5c2ec

  • /data/user/0/com.aceviral.angrygran.dbzq.m/files/kuaiyouxi/datas/res/1382/pack

    Filesize

    4.0MB

    MD5

    d9f84b825dcfc4d36dc704193b5e6a5e

    SHA1

    24d3bd1657d78ff190079de9b1d98c850aa79e44

    SHA256

    9f00d3ec244d49924b5a2c9036d5ac3e085ffd94c65030a1e9ed03b986669f89

    SHA512

    f5eec3c52848ca4c9818b6b660c79b94d8822afbf8ac6c18bcb3f543b2cea3798ce0006a89aecfbb0cd42bad9b45022a2661222de739df6d876a796661ded319

  • /data/user/0/com.aceviral.angrygran.dbzq.m/files/kuaiyouxi/datas/xiaomi_dbzq/1382/md5

    Filesize

    32B

    MD5

    51ce350c4980397cfaa75363ef41aab0

    SHA1

    1c1842ebe4714c6858a77d704157e5952b68ef77

    SHA256

    04040dd2e42da1817c340c4ef4f87a3841f48a863a840ee5ce630c28aa051add

    SHA512

    def21cd5c9e617d56b88f80d57bbb693ac694e2f47fe3bf694b46b4ebfc25fc858c71764ea2d77ac25b5aadbda240a55d9dd99ebb60e777e518e4dad8e4443f1

  • /data/user/0/com.aceviral.angrygran.dbzq.m/files/kuaiyouxi/datas/xiaomi_dbzq/1382/update

    Filesize

    4.0MB

    MD5

    6ff910076b59eff1f1ccd42cb1a09136

    SHA1

    42e987737ed2a8f05bf3f8d2f8769c5a50f0f2df

    SHA256

    325eb8a2953cfb22e8f47ae3cead36cc5b6db78850b8f4da9f55287fe7063a0e

    SHA512

    ef920a90e85dadb14383172406be6586f304860c7737281c3a512a5911e416aa87756786503aa10b8b00402e6d5d5ef15a6b30ab579787ec1b89e7be30bd99f7

  • /data/user/0/com.aceviral.angrygran.dbzq.m/files/kuaiyouxi/datas/xiaomi_dbzq/checkupdate

    Filesize

    8B

    MD5

    dfec2cf2534ffc824dd2a4071b6bce5d

    SHA1

    6a077dcdab0a04463946708d4c262529ec6d48bc

    SHA256

    87cdd7a51b083e0f8ef3ef917792fb9d16c8350c7f234deb5ca4a4dd1345f5e6

    SHA512

    b8c4f3e04020488e4ce5b0f09b6dedb2cf46b12868486ad8546c3cea369d1fb5aba4aaa13f91bdb41f633f39435c6d53f6eec6e7329b43a6298ca1fd76b1fee9

  • /data/user/0/com.aceviral.angrygran.dbzq.m/files/kuaiyouxi/datas/xiaomi_dbzq/version

    Filesize

    10B

    MD5

    cd669cf9ad6242bba74cd4b7bb879c85

    SHA1

    e37c374c24d8cf6c4b9950979b2df2ebb2da7d2d

    SHA256

    a1ea1838f08b6f4bb48cc4fb0b023c4c7dd26e43966ef2a656463713e2cdc4a4

    SHA512

    87eb430adece6e53c4f3729767ac95abc0eb58203d640b610764f0bd3cc76d97bc523cd7579054427f6784a857c7291b662bc4208e70f87a4e7b4a6335177d4e

  • /data/user/0/com.aceviral.angrygran.dbzq.m/files/libtencentloca.so

    Filesize

    20KB

    MD5

    d018e621791abf660b1e41f74fd0da1e

    SHA1

    f38b205be0e27a40d0e6741ddd4c4c2194e2a2bb

    SHA256

    333764ab27e3b523c202a01040fa275e6b3bb3a7aeeefe69983174d17c5a8cd6

    SHA512

    c29805bd62ea9fb540b9fcb13d6de1f320e3e1fe3cf0a2887199eeb6766ab2e3adf9d847c82992b44953fb570183c35e6c4b0538b519a41485fd775b70e4f92b

  • /data/user/0/com.aceviral.angrygran.dbzq.m/mycode_cache/mysecondary-dexes/base.apk.classes1.zip

    Filesize

    8.0MB

    MD5

    ff41aa631f2a7539590482f49075e75f

    SHA1

    25088d6c7648431c113ac801a1233173a92071ee

    SHA256

    aa1447577890603d13c04158b1fb3696c02499e84f8baaa495c845489eda59fb

    SHA512

    39d831c76fe52b55424fbdf8e7c8c4f787673fc9e0ec6318bfb375c45adf2896af89bc698288b3573f604864006409179a9f2ac1f3c5d8deebbf6ff614b2c7be

  • /data/user/0/com.aceviral.angrygran.dbzq.m/mycode_cache/mysecondary-dexes/base.apk.classes2.zip

    Filesize

    923KB

    MD5

    3b27feb9c1344a80df1df3ee6e4516a5

    SHA1

    9480bde80445eada45b5b488917ab344674dc169

    SHA256

    17948af573ecdd02984adc0b543274124102e19e27f6d579688b8e2370449281

    SHA512

    b649287094fe77730021ad57c9dbd974bffc7d76b4b508307ea7a8a57253c6e9e317a4daa725b2e1990e6e7b278d313092ac757cfa010bbbf05986f854d8d689

  • /data/user/0/com.aceviral.angrygran.dbzq.m/mycode_cache/mysecondary-dexes/tmp-base.apk.classes4233043569466737876.zip

    Filesize

    2.9MB

    MD5

    7173dfaa376beafb50f0ed88a37de275

    SHA1

    8de07e2e9bc82ee7d4050a75f3863f83fab5feb5

    SHA256

    293262e2ea2c97a28ae954334538426f7b62837a427385cffe6ae09216ee5060

    SHA512

    151ca873cb459b910080d5aefe5723c77937c392dcf0bda4cebc93c7e35bd5dab796c9996642c8f0ae449725ee22fb9fc3139a56c77abab6794736b4c173271a

  • /data/user/0/com.aceviral.angrygran.dbzq.m/mycode_cache/mysecondary-dexes/tmp-base.apk.classes4624140413175883127.zip

    Filesize

    378KB

    MD5

    f43f47a0b4bea44beff98db4b19bcc86

    SHA1

    3e9d292f8780d6dae07123a311041aaa9112ba70

    SHA256

    e9bbb828cc741a92679b966c960f5748611a70bcd9184bf25cadbb12540962ca

    SHA512

    a8b2b289aa0b992936e4fb049903808095957db0da05bb0ae4efdfc4b97098469a729ba165afb482423ed1db8a86487fed89099bb2b471510050069978a25431

  • /data/user/0/com.aceviral.angrygran.dbzq.m/mycode_cache/temp

    Filesize

    1B

    MD5

    c4ca4238a0b923820dcc509a6f75849b

    SHA1

    356a192b7913b04c54574d18c28d46e6395428ab

    SHA256

    6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    SHA512

    4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

  • /storage/emulated/0/.rwtest

    Filesize

    1B

    MD5

    13c8ffd977013703a701cf8e11deac65

    SHA1

    067d5096f219c64b53bb1c7d5e3754285b565a47

    SHA256

    e7cf46a078fed4fafd0b5e3aff144802b853f8ae459a4f0c14add3314b7cc3a6

    SHA512

    527cff2b6fdfbc0f54fe092b17d6d8c7e22500242635fa56981e85a64da6ce8a12a3a66cf69fd48f588bcba9bad141b8e351a0cdd4925ae57289933eec1fc153