Analysis

  • max time kernel
    7s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240506-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
  • submitted
    11/05/2024, 16:59

General

  • Target

    359e1a584bcdc38b8e7e25973e6b2959_JaffaCakes118.apk

  • Size

    4.9MB

  • MD5

    359e1a584bcdc38b8e7e25973e6b2959

  • SHA1

    bf05bbb5d26a1d8edf1d2a2f740bf89ed0355238

  • SHA256

    e847d6756e238693f6f8144bc1451292f433f9f5ef6bc0b8b02bbf8cca97ea8e

  • SHA512

    0eac3417fea68cfe078e06951e71daa2ef33e26fe85cadbdf0be007cec284e1c75ca377aa7c36c5d1ccadc59ff113eb805fe75765ff88e3e123ca1a4f16efffd

  • SSDEEP

    98304:b5D+U97AJ/MfrKuW2f5A9psOK7SRXkvh4nXWflJ7NVRYDgMeYwHcLNnd:tD+gEJ/+rdH+9p8OZkvh4nXWfVYneLcb

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.yxxinglin.xzid885
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4235

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yxxinglin.xzid885/databases/DownloadsDB

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.yxxinglin.xzid885/databases/DownloadsDB-journal

    Filesize

    512B

    MD5

    61e3c38ee7746fe49cdaf09d4dd5e4c4

    SHA1

    2c7f7792524e104f73fc4c2c46d078ff06f3dcd7

    SHA256

    d953fd6ef79bb066f6d4cfcedbfd7c15cb968dc1b1d76322a67bf47aab169c08

    SHA512

    f0842df5a4087b9ef99cfe1d30ca1ef6945163f018cb805e42d6a179a38ec70287983cbde30da9375d1011d890ac8cee895834b20830295c80e402b4ef2c5dc5

  • /data/data/com.yxxinglin.xzid885/databases/DownloadsDB-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.yxxinglin.xzid885/databases/DownloadsDB-wal

    Filesize

    44KB

    MD5

    d8108970468b5406aa73007c6e9a6d0a

    SHA1

    0fd4cb4a1dd6453d42a71570a93ca729c64dd0b9

    SHA256

    6fa00aaf59e8a84da5ebad8a6ab0613b13ecbcfc654ad1a4754d3c8490e09ff2

    SHA512

    c9aa43fb413e18881eff30320e0217f313a3c7c7b0a2a7c83dd5677d47200229d36c635aa66ac3d225c0d0c0f36944a5704b1d3526cb3c5264558a664a1a190a