Analysis

  • max time kernel
    153s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240506-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
  • submitted
    11/05/2024, 12:43

General

  • Target
    34a41f4ccbf25357178e55eba0f604b1_JaffaCakes118.apk
  • Size 31.2MB
  • Sample240511-pxynqabc67
  • SHA256 d873706f1b6fec11290e290828862b144b5317d8a88d4519becdf25dd1dd33b4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.d8games.raft.mt
    1⤵
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4888

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ua.db

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db
        • Size 32KB
        • SHA256 7ace299f21b46f6244443657f143a1c477080627bce07e26c7f9d756caa53845
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db
        • Size 32KB
        • SHA256 d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db
        • Size 16KB
        • SHA256 435daf2145cda566a373a54e0ac085e2455e1207054569d0ffc0a69eb6625ac7
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db
        • Size 16KB
        • SHA256 0f893118e9f021ca0a8a72fe4dc57fe86ecc9fac1fb0aa977ece09898d7d576a
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db
        • Size 16KB
        • SHA256 34551ab8b7254b0620faf4ef9e4c8184d69e1ae58fd629f213078216e27274b2
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db-journal
        • Size 512B
        • SHA256 727cc491558f657db309fd8fb5a324db26a7f9b4b8b84b17ef5355f5447ccbae
        • MD5 SHA1 SHA512

        ua.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db-journal
        • Size 8KB
        • SHA256 b18e2d73a98b7786475daf6f3690371da9a8ff8a58335c08ff4a8795b00bb5e5
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db-journal
        • Size 8KB
        • SHA256 63a962ed6bd11355c6612b6bbdca913d9319c262e23525f6dee50ac665d79d29
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db-journal
        • Size 16KB
        • SHA256 fefaed88a401e128287a5c57bbde228e910243d1bd311c61d11d193e214315fa
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db-journal
        • Size 12KB
        • SHA256 eb4df9e70908a2f9f3a050fcf89c0cc62a596e163e98d09a132f8c553a6f868c
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/.ua/ua.db-journal
        • Size 8KB
        • SHA256 b2da2c6ab617eccefe5d1ac032f3d84ef9f8ad6e2e984abc14e65ea4fc707ecc
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.d8games.raft.mt/databases/cc/cc.db
        • Size 36KB
        • SHA256 c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.d8games.raft.mt/databases/cc/cc.db
        • Size 36KB
        • SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/cc/cc.db-journal
        • Size 512B
        • SHA256 bf589d50186a5ef0be36cc685258559fad63386533f545e80066506f9a21ffc2
        • MD5 SHA1 SHA512

        cc.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 e6c388a664b937cd93cc89e1f57f5f49c198b847ac0c9e2dbeae8f6b56edb30d
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 5fde97dbc6b63918a599ed3cca99e50de607c4d80dc90adb3ceca8941c5dcfef
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 37805802304c543aebfa766d021b236f0c0e5b7c07a8ebe49589d224476f9c5a
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 c1304dca9f0de6214a10e3e1a274205569165fa0a5963a2dd0699a4f7bee32eb
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.d8games.raft.mt/databases/cc/cc.db-journal
        • Size 12KB
        • SHA256 0281e9351311fdc0baf3f06a6982a4cbc3b12486f4397f93c8f56f5d8a659e0d
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/user/0/com.d8games.raft.mt/.jiagu/libjiagu.so
        • Size 485KB
        • SHA256 183990718a96d742bc6f1bb04c313e04db6dc62d445ecb294a7f15babd3281c6
        • MD5 SHA1 SHA512 SSDEEP
        • Path /data/user/0/com.d8games.raft.mt/[email protected]
        • Size 4.4MB
        • SHA256 95fc97aeb637b4660a8ef3a78a7c413ec27ac6db9e634268d9c3655539b20b15
        • MD5 SHA1 SHA512 SSDEEP

        gdtadv2.jar

        • Path /data/user/0/com.d8games.raft.mt/app_e_qq_com_plugin/gdtadv2.jar
        • Size 142KB
        • SHA256 365f148e463ef91e0f8d8e6a2050449a5a69019bcc7d96b54e3985e61fa99b53
        • MD5 SHA1 SHA512 SSDEEP

        gdtadv2.jar.sig

        • Path /data/user/0/com.d8games.raft.mt/app_e_qq_com_plugin/gdtadv2.jar.sig
        • Size 180B
        • SHA256 6fa69f99042de4deacde22922488977dc3602d0aa8c86ea86e693ce938feadcd
        • MD5 SHA1 SHA512

        uuloi

        • Path /data/user/0/com.d8games.raft.mt/app_ebody/res/xmtok/6600/uuloi
        • Size 1.1MB
        • SHA256 ab5a0c6e8a1be2731bfae6635810549358019c3c6004b8ba6433164aeb83a238
        • MD5 SHA1 SHA512 SSDEEP

        .jg.ac

        • Path /data/user/0/com.d8games.raft.mt/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 be7262b7e792594cac98d5d909d6dd53026e156d5695388808ad7b31cadf85fd
        • MD5 SHA1 SHA512

        .jg.ac

        • Path /data/user/0/com.d8games.raft.mt/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 b8c23adfd565b81857f465aae3e24488a20a38bc7660af1783ef4324f7df23b2
        • MD5 SHA1 SHA512

        .jg.di

        • Path /data/user/0/com.d8games.raft.mt/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 47eae83134d9ec73497e5da7815bd708e798285b48ebb45895feae757223aa5e
        • MD5 SHA1 SHA512

        .jg.di

        • Path /data/user/0/com.d8games.raft.mt/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 d009a55055ba70f5a682e16b7089b6d70488b6fb257d0600e2db572765fe68d9
        • MD5 SHA1 SHA512

        .jg.ic

        • Path /data/user/0/com.d8games.raft.mt/files/.jglogs/.jg.ic
        • Size 40B
        • SHA256 9c40d066f56c48067f90c73f144ba64ae5a8d6333578cebb186539dd2ad2bc0f
        • MD5 SHA1 SHA512

        .jg.rd

        • Path /data/user/0/com.d8games.raft.mt/files/.jglogs/.jg.rd
        • Size 32B
        • SHA256 2ceabf6de707b889ca3f9d49bd52189de0eb8b9e67c2801195ff8eadf6c71fe3
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/user/0/com.d8games.raft.mt/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 6024e65ddc08291553d0a88fc03029fedefd008151bf0aa7045a012c46c692da
        • MD5 SHA1 SHA512

        .jiagu.lock

        • Path /data/user/0/com.d8games.raft.mt/files/.jiagu.lock
        • Size 27B
        • SHA256 8217b81a2cb2dcb9f59c49bc1cfe115d198cab7c9bc08c5bfa5b975a21148281
        • MD5 SHA1 SHA512

        um_cache_1715431559367.env

        • Path /data/user/0/com.d8games.raft.mt/files/.um/um_cache_1715431559367.env
        • Size 1KB
        • SHA256 6cf4de1b7100818ed49bbc1590f39e765da01575a2e2924209b54d19c32e10ab
        • MD5 SHA1 SHA512

        exchangeIdentity.json

        • Path /data/user/0/com.d8games.raft.mt/files/.umeng/exchangeIdentity.json
        • Size 170B
        • SHA256 422e5fd94ead0e45e193a9a1297d85e4151aef6d2990506de2c3e2e714e0547c
        • MD5 SHA1 SHA512

        cheuu

        • Path /data/user/0/com.d8games.raft.mt/files/ebody/as/cheuu
        • Size 8B
        • SHA256 4748d26736f423fca8a6362cf75db7a5a6280d58113e56fe729cb012a1b93f7d
        • MD5 SHA1 SHA512

        vva

        • Path /data/user/0/com.d8games.raft.mt/files/ebody/res/6600/vva
        • Size 1.1MB
        • SHA256 cc26f9de16a19362ab24365fcbf5deb82a9d33267bbea2bb1e54a046af36d980
        • MD5 SHA1 SHA512 SSDEEP

        vva.jar

        • Path /data/user/0/com.d8games.raft.mt/files/ebody/res/6600/vva.jar
        • Size 365KB
        • SHA256 0496dea2240489aa98c44d4519f1d583825100fcf00665741c73fd7b8f0d2515
        • MD5 SHA1 SHA512 SSDEEP

        vva.jar

        • Path /data/user/0/com.d8games.raft.mt/files/ebody/res/6600/vva.jar
        • Size 1.1MB
        • SHA256 563becdcb3a98f7c736e22ad6645ab1e1d8085af03d319e2d2ae9724af6c8a5f
        • MD5 SHA1 SHA512 SSDEEP

        tmd

        • Path /data/user/0/com.d8games.raft.mt/files/ebody/seey/tmd
        • Size 32B
        • SHA256 15f705d0658d5615dab87075b030a620eaa66a815f5c4005841793d3e6b63bec
        • MD5 SHA1 SHA512

        tv

        • Path /data/user/0/com.d8games.raft.mt/files/ebody/seey/tv
        • Size 4B
        • SHA256 1ff474b06c92dfea39c7c1a93f238f385ce3f9ad4cd634ccef22f66c3129b3cc
        • MD5 SHA1 SHA512

        exid.dat

        • Path /data/user/0/com.d8games.raft.mt/files/exid.dat
        • Size 63B
        • SHA256 4821fcac809787503a3280ecaeda8dc28019d0faa0b15369ab681c84c53eeebd
        • MD5 SHA1 SHA512

        umeng_it.cache

        • Path /data/user/0/com.d8games.raft.mt/files/umeng_it.cache
        • Size 350B
        • SHA256 06c22e55552df3891d5ac5627cec2465122865f97aae37bedd0a08ad20fb7dc1
        • MD5 SHA1 SHA512

        .deviceId

        • Path /storage/emulated/0/360/.deviceId
        • Size 48B
        • SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
        • MD5 SHA1 SHA512

        .iddata

        • Path /storage/emulated/0/360/.iddata
        • Size 32B
        • SHA256 5508b2ed33c73807fc55547d63de8f9affbc45da35d3bf30295445bc837a363b
        • MD5 SHA1 SHA512

        config

        • Path /storage/emulated/0/Android/data/com.d8games.raft.mt/files/Unity/0881b7b2-c4e5-4829-ad24-2be92baf985c/Analytics/config
        • Size 293B
        • SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
        • MD5 SHA1 SHA512

        values

        • Path /storage/emulated/0/Android/data/com.d8games.raft.mt/files/Unity/0881b7b2-c4e5-4829-ad24-2be92baf985c/Analytics/values
        • Size 153B
        • SHA256 58f7642ee9c6a6d1b1628c84c393425ab7cea746e73ad137bcd542ef6380b427
        • MD5 SHA1 SHA512