Analysis

  • max time kernel
    128s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-20240506-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
  • submitted
    12/05/2024, 16:45

General

  • Target

    3b1991e3b20512a9c5bfc08244ec6bec_JaffaCakes118.apk

  • Size

    7.8MB

  • MD5

    3b1991e3b20512a9c5bfc08244ec6bec

  • SHA1

    c614d97494fddc3f8d1182e899f94625ca9e9162

  • SHA256

    a6ecbdb5fc257f59a2aeca5f6d44e5f4f0637c5a837dadee87a42ddb2fac3c41

  • SHA512

    6abbcbec3f344ecde8cf71cf73cb2f6ff330e2c5a1ac7707662a5fc6e03c6b43d6fe23ea9295c25ec773019020e080ce44ba8c2f1e1880b9a2111c0d91e269e9

  • SSDEEP

    98304:WUDrpQIYgqOibemwKOH5qW5xoaDtrD3W0ERsKaX+m7dtnoD2TyxEQGgs9XKnPzEz:W+Yg26heSybStumhBoD2Tqs96nSf

Malware Config

Signatures

Processes

  • com.begcmnq
    1⤵
    • Checks CPU information
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5093

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.begcmnq/app_crashrecord/1004

    Filesize

    220B

    MD5

    e1fc7c373e8fb02818748133806ff8ab

    SHA1

    57e2ac237d07342b5c841d88da8e7eefe5828b33

    SHA256

    e6fd3ae18b02403c9f9544f40a5a682b363f0f44f0769f5f9007991303ac7b2c

    SHA512

    f23a10d91a372e52077b5a15a20864f3b8bfca00a18f3d9a1a860715a418879881b4065f47b8c7429f03804fcffcab544763a5a9e4946e824452039d3f5c16a9

  • /data/data/com.begcmnq/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.begcmnq/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/com.begcmnq/databases/bugly_db_

    Filesize

    52KB

    MD5

    a0c7729026ff78f7969e428124b4e7fe

    SHA1

    ac4e5fb3f9c9cfb79840b2dbc24444adac75f9c9

    SHA256

    7d37241461c7d2fc9e74ab35b8939e8d37ea66b3d7fd2b55a5783c8ae9ba4350

    SHA512

    1c83238d0ee75681e67724c891473d94321e66a54df3be2897601d8ce7411d4c8c2cf18c0248d5a22288f137bbce5be5e9e8d774472fa01cd938f75b6a0f0d8c

  • /data/data/com.begcmnq/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    aaf8b10dc9535ccf231f1ba9b254549c

    SHA1

    dc64c8845dc11a8a77c9929268f95e526c18084c

    SHA256

    d883d101d82f777286dc79e1740d4a8dc9751d2e3b97dff200d88bb09c905824

    SHA512

    2d0b39637c67fdc2666d60f520684aee2d26b7ba170b4c546b79be67f8b8719d3ec34faa3c7980a08db2880b1031213634c242e3041e38f2c9bd8084c49d53cd

  • /data/data/com.begcmnq/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    b7a85abe33307d76cfcf701510d79f39

    SHA1

    44998c17e2844b580b8a310e30d7d63c1293a7d8

    SHA256

    cff572f477daba0e0b88faecbba7d0ddbbb0bcb81bb241ab8b0c3035eb9afa7a

    SHA512

    00c1a83be163258528f24396d83cae15b35ec796be9aabf5d7d2446cdc87aba0b6860507071f2de6bde91d4979242a214b8243083bfa370555bac72998337300

  • /data/data/com.begcmnq/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    a87f94998cc870d99eaee9fad51304d7

    SHA1

    33dd24768a7fb64a43b4375c3af13b5c65c3e9fb

    SHA256

    bb4b213bef91ee829e8c7822d7bed6d4e9c255ad6278db0f195499d847293b6b

    SHA512

    1d63c537d5ec01f14a4c2a54d8e3a7494479e3555ea7cb9d11197de6a0f90696783564eab3cd6a4e74846ac1f4502af3431d72b51f2026290dcb3c2dff2a6ab2

  • /data/data/com.begcmnq/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    144ac7ef16d0b97dbb3a397c00d7ac3f

    SHA1

    76e1572c4abd21a80342097ec5d8a1bc2b91fa55

    SHA256

    56b50a7b9a7ddddcd54c7422bc180461aa97342d6ccbb2e504426e3f2789e9cb

    SHA512

    0fc6825bb6eb09d4f35bc2575b8b4bbb4bfcbbf6c51c0fbcc3267fd929788e12343ef0851bff54fe47dc6e9a95c73417ddd9dec1b4b65f08ca51e55d27c6d4c1

  • /data/data/com.begcmnq/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    28fb63db4fbbce35ed3c39e693538435

    SHA1

    a64d10b0a5214af09ed5d62d30c5a4b446be6981

    SHA256

    1f99c39c06981a1951c896d8258607baf3336211ef593eaabe4542d75db2570d

    SHA512

    d6279bce9ef1b218a6d6742caedf98f392a899c2ca8447ea64b4aa1778423f72168b5b17aae640ae7b42638b81f2b80e094ba6ff247a4bc9b011a8a250445fe1

  • /data/data/com.begcmnq/databases/cc/cc.db

    Filesize

    36KB

    MD5

    0908e924aa236931dc7166fef6e00862

    SHA1

    7782648d6d8f6e835bd47058d4852932c096a467

    SHA256

    38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

    SHA512

    3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

  • /data/data/com.begcmnq/databases/cc/cc.db

    Filesize

    36KB

    MD5

    67c12933d1e0e63d9801a6aa43092ce7

    SHA1

    b6936908554e4a1986b8eb08289e2d3545e8ff74

    SHA256

    abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

    SHA512

    db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

  • /data/data/com.begcmnq/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    fc9cdf928720161b72d5a8a6fcc1aac8

    SHA1

    b66f965f3dee7a7ed655762a977c774551bbc5fa

    SHA256

    a4ac772ff92546c8ea5607bdb8a5e53f5fda802b59225a936e6672f0c93a2052

    SHA512

    2ddcbd9bb5e0f14a0cf6c6ffe2843311d111afe0586f632f082d620ec953edc7b385b89b0fd91e2bc96ce134a8a6e7ddd1b24345202ad23c75e71b2245d62a3e

  • /data/data/com.begcmnq/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    f6ad9c749cc090485883b474dd44cd93

    SHA1

    66c6a80986778f13dbecaea9e87946395c2580d4

    SHA256

    fa5e0ab708ba59975b5931a2ba6a6ab6c0218b95682a1518946142738db9e351

    SHA512

    200abbc444fa3a2f35e8e38f721a81b791f504200b1e0dc50d1f3a5aed1c9142d898cc06c542c2ca95c9c7e7dca1e725561491819c81b742b867d3e6dd984b10

  • /data/data/com.begcmnq/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    a1f9563ea6c690619985fbbbd6077b73

    SHA1

    454fccbf706643db0670f876001e1bf5430b49f3

    SHA256

    9bc0a9b3533915bfcb385a7d85e7d7716e98c16d6e200d6c40e6398e60009d06

    SHA512

    44f7fc2c21a186e16e88feca4c1a961b155ace44cb418cbc5cc23b3924768a988804f8cb91e37b75eed2b68c56a5c54971dcdc4770f1be132a3a8fbb554a75c6

  • /data/data/com.begcmnq/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    59aa706df368d0fd2a8529649cab780e

    SHA1

    2f3f529abb8c11569981e36d87c6b143b43d8e95

    SHA256

    cdb8283cf7f4b302295cd9ca28d48cb5691bba895ebeec79f6cc354e284d28d1

    SHA512

    faab3a160974438a706e5c6e794c7d933890fb8f5efd4c43dcc3252cb4ef7c035f756a3c33022fc488dc16b12bc7df503122b1d9e86db4fd4bae963589ba2b23

  • /data/data/com.begcmnq/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    6cbc8d6284ba99b436e9df5a5008887d

    SHA1

    4098ecd8dd153a4404de61aca246ee2ee9492b60

    SHA256

    3e3c6f246e3c87e9e9ca26e3be6e463e685cb48f9efc97bad46c4bca2e6d536e

    SHA512

    3fbffeac5310365bb2cfc42b8e38c91341350995d2f21feecef5a4d022ec00d01b6bb382a5f6b140da53e60b119c96210d521f198adfc581700bb49c7d703fa1

  • /data/data/com.begcmnq/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    ad118a42a7bc65c1f227098462180a2f

    SHA1

    709faad6a0105b8c5fce918f183e7dd856320dcd

    SHA256

    aba2907fe7c54761e86990b12ffea33f60219a979ee4da9bfc50dcacacb725ac

    SHA512

    81a793db6f5bac4998be0445c36e7c9267bad312562c0a4a2ac779d26338d1c054d600d6c10ca2512ee75ee07ec62adae97e8744b787aa8c289a77fc29794cf7

  • /data/data/com.begcmnq/databases/fba_game-db

    Filesize

    24KB

    MD5

    4fb6851cd5cd0a788b10985f646cd27b

    SHA1

    667b268309a46041d39e7a5273e116e4229ae518

    SHA256

    70be2f52eafaf2dd27764150cff2c0c9a7b43e70eab9d1f5e5267806f7756ed5

    SHA512

    4ce70d6a259c61de222a8a97cba1cc207bf5cd852ec9e3e1e5dac5d8a81dc2fdc505a6557a7dff340d93d743b506227d259fba663864ed8884cbd86a5c421763

  • /data/data/com.begcmnq/databases/fba_game-db-journal

    Filesize

    512B

    MD5

    77b363f2f7c36140eaf10fca60804fa8

    SHA1

    c3d8b63a94e59a8ba4a5ee0ea25fb2dd3584a866

    SHA256

    83c989fc15ac79e580985197acf7a06488b00e840cfa4e52c7c42f10e4582d55

    SHA512

    d57d85724e624c32381024cd4a736ca296ebd20f1a29b3e868ca28783b29a453db809a9d3d054f53d3d7f3dc8ca0e61bc1a4795115e10d28f5d25577730c3ca7

  • /data/data/com.begcmnq/databases/fba_game-db-journal

    Filesize

    8KB

    MD5

    8a24344df04d9f65284cb2a0301298d2

    SHA1

    c20e66f1b63fc9acb2df812630963cbf1e9aaac8

    SHA256

    a936211d085fbe333ae8527d9565648342fbc8b8e271047671173b44560ee66b

    SHA512

    49b8d8f6706540b3c5fa4439f668cb9994d43e2b8ce0e6a356001f4ae1db5100497ea8d322e6910fe2ede55096bd3651f1fbab28cd843dbe1710bb2faf79edf0

  • /data/data/com.begcmnq/databases/fba_game-db-journal

    Filesize

    8KB

    MD5

    27f4fcbae686f24418a051b40aa2cc68

    SHA1

    7158375fa5cb634f05546fffcfd34d830c2dc813

    SHA256

    744e4c94273271fb22109ac14f5fe521df60d6b635e27a0687d67f757caa3f5b

    SHA512

    26072bdcb6fc228b59b0ab29bc8aed9dc0d39f368580a028b163170a7ee6c3556235b83df13458c0e597368026d08d504ffdcb8edb212e27f2c707af033bd085

  • /data/data/com.begcmnq/databases/ua.db

    Filesize

    32KB

    MD5

    9b84d11eeadd606ff01738170e51ea15

    SHA1

    d5ba74c4a0fc756b162361124f47ab5796367526

    SHA256

    734c211745b29ca41cedb7b23cd16f216a65360c94019a2ec382de5abc88fa26

    SHA512

    aea5ebefd71c96026ed5fd1d1a655d94cf31090293fb2535ea496c98f6158b5311e69f1190329a2761ec72cd6a1722dcad01728fcf6168dcd45d104e659d6e20

  • /data/data/com.begcmnq/databases/ua.db

    Filesize

    32KB

    MD5

    38564ad4c73e5619bc2264b0c44997a5

    SHA1

    e55f6fe1b20347ad4cd58d77af0b0feb149f63d0

    SHA256

    1820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8

    SHA512

    30d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d

  • /data/data/com.begcmnq/databases/ua.db-journal

    Filesize

    512B

    MD5

    4f17d3d267ceb631fc74046931fcbd4b

    SHA1

    50d901554b4a42d864abe0993414fe6c9d7fbab5

    SHA256

    b57b469677e4c2b416cc718c5286200167de9a1550f82cc07dc736fa95a577ac

    SHA512

    76a894b2b3fb6dfae436213be52b9c084bdaacb3f92afefffd7bbfb953558beddb3bfe3b0b621fbd082c214c019d858cec32c65d2ae2037530f411f3267db0a0

  • /data/data/com.begcmnq/databases/ua.db-journal

    Filesize

    8KB

    MD5

    8a6cf570c7b866af1e81114bfa39c022

    SHA1

    def1ab182672ef6020eab83ed1649020f3fe8eb5

    SHA256

    b99701b842204450ee2429049aff08531504409f888222b21e030be22dd4ed25

    SHA512

    34f78e89053c6b8862f4baf720860ba8184e589e70a243afb8c6d1582de9f26b0b0c2eb150dd43867c2e4833702c51147479eefdc354caf70e00e34311bac7a7

  • /data/data/com.begcmnq/databases/ua.db-journal

    Filesize

    8KB

    MD5

    2e107dea9348c30cea11cc427d04acb4

    SHA1

    ef82eea5305213fde6b332dcd5952129eca8fab4

    SHA256

    9eb52f96ab1373cb78537edec6fd6bdb5b087468f25b720981a8f1e30f7ab3ec

    SHA512

    9160d4e246db98321a6ad9103c3210753f07342b059bb1f57b5ba3a4fa06d93ff2100f8cd1b021d4cfa6e3b589bffc3c8f82840d3af025e79dde3136aa42b9b4

  • /data/data/com.begcmnq/databases/ua.db-journal

    Filesize

    16KB

    MD5

    6c428f0f2e238f454b63872bec2e755c

    SHA1

    10bafb707b458eeb0e50245205161ee7d51c0d70

    SHA256

    c7526b9b08e1c22b6f55a296334ca504a377a8b3c2e80576abd1a4c46ea58c2d

    SHA512

    d78ea3aa845e4d6a21b7fe37aeaaa97bb84a0cd9e33f37a5a298146e7bfbbd4799f0162fafbcbccf964ca5f5accd455666b7b27237793acc3870d73e942118c0

  • /data/data/com.begcmnq/databases/ua.db-journal

    Filesize

    12KB

    MD5

    08336ec2852371f1f2ac4676088d6ddb

    SHA1

    420004a6b7d5c2eefe25596d9a88a281d99f5ed6

    SHA256

    9508743eef92c20c20fef49bab3181f9115f70f1dd58d5645ff1f06465b330c2

    SHA512

    ea823a2644399e7988cef7a32d593ee712f6e7c1836964db0e11c4d63f12f4ed4a805a7b0230ef658ef778a2ffeeb4ca4b62368f73fe151e7a90fa191bd94823

  • /data/data/com.begcmnq/files/.um/um_cache_1715532440962.env

    Filesize

    1KB

    MD5

    df08b6f40eef81981be1371cb9779ce9

    SHA1

    39b97853ad908ff51a68f673c9d54e9add4b3b39

    SHA256

    92bfcc83301bcea0fc5569207e4210cb6ce5a9392c0c668d198da380be78d230

    SHA512

    38d7bab82b73f50476e1a06088335655d6e4525c3365eadc6502e1d33a34efed023ab14aff1ee6f241c63e0be3c374cfcef960bd6ab643b37e0ef56ab88cbc54

  • /data/data/com.begcmnq/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    46df7a986996d719dbff50698de5e9e0

    SHA1

    518554e55a8d34ba2a392c5a24ea76ac7c97530e

    SHA256

    8efe75d1ff9b0aaa4e39772edc4ac8d40147e5c7d6ba87bc3ea8df909fa1b85a

    SHA512

    499744921c3058e9d224d1ef3860e608359e7e2397777e04a2dcd3d5c55d7659da6e9d7ab24cd512e83ae0b5028c6ee5d919da4aa051c128a896031543dbd495

  • /data/data/com.begcmnq/files/exid.dat

    Filesize

    60B

    MD5

    dc4299a178ca680dd25ee77f7117e753

    SHA1

    20bbbdd67fc73b4f6374021996c0da633397b523

    SHA256

    e8ff15a6a47a3718a1d8d70c958b97e56edb713bd51760bfb7f33dd012d449f2

    SHA512

    d89332769c8a3c3fde88aeda9aff0a6bea1251792df6bbb0d17f2c2b37c4748ec2fda4766e846cd420fe6ecb7ec92911bb93fa1a971b636415b4ab39bed2aacb

  • /data/data/com.begcmnq/files/umeng_it.cache

    Filesize

    350B

    MD5

    a324f9b09a899c9d81296cfaeced64a0

    SHA1

    4b14e87450f6be9119afaf61263ffa912c4bc8f6

    SHA256

    22bbaec9c737d84325a92c3bac700011f099ed23801531bcec40f300fd377bf0

    SHA512

    2d3e2e8eb1b98886b45d24a89511c5b582693beb5d481fdb34d4253bc74cd3d81e88de55a01c389dcd1e8f5719b30e87447df89c6e0893344191338339ee5a9a