9e17c1c4d08118d82ad6e9b5b03ffb55cd81ad27d4b318fab8bae0b456bdbd21

Analysis

max time kernel
4s
max time network
149s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
13/05/2024, 06:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3e3e2c2c75d08cab987a5c831abf9d8c_JaffaCakes118.apk
Size 11.6MB
Sample240513-hppyaabc4y
SHA256 9e17c1c4d08118d82ad6e9b5b03ffb55cd81ad27d4b318fab8bae0b456bdbd21
MD5 3e3e2c2c75d08cab987a5c831abf9d8c
SHA1 88d61fc2cc27b3f16aeeee4a65657d8fa8e20d50
SHA512 c51c47fd3088dfeeea1b5733df5178776164b7f93263b9c4fafd0fe7f2598ada5c1be2021fcd0677d8e690688805df5a02641644951a1718617c73ad964be3f6
SSDEEP 196608:0YVVL+gtICSe0joD635oka4E78r7BGhvsc6oOeHULPrWfcSJxcdrNf37AZic5nKh:0kJBIOookq78AhkwHULDKvJ2Nf0Kxl75
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.sy.zjjy

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.sy.zjjy
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5113

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bugly_db_legu

Path /data/data/com.sy.zjjy/databases/bugly_db_legu
Size 60KB
SHA256 f4b81c96f7c288545f373cfc72ee45471ac59bc4d0d31d87f7ee72990cec5295
MD5 2b6de3594c2ceb45a1bfe57388df67fe
SHA1 cd3301b9fad1766dda0cb3723ad3efe5d5db7334
SHA512 a89335475dda8e90f64086ad9fb1dafdadd5546be9306ab47f7406cad8f5f4d7d8b7e52c0590a07c217d474d1d1150c0491bab2310294cd37efea76491635ae2
SSDEEP 24:TLmt+qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGS68kbuRSyRSfMKzvoylqQQQ:TzfrQiw6uMg6/YBg72meposSyMKs
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.sy.zjjy/databases/bugly_db_legu-journal
Size 512B
SHA256 d9925125728fd0ab1931b3caaf4ccf115cf8777279a5cb9434d7eb4d6f8c97b9
MD5 a79b3d27795dbec08ee3e6af2d1594e7
SHA1 40cd04377f44dc3ae3d68f606a462ed70b4ca77b
SHA512 251c5184d8b49a0a3edb0afaff071c55211b41386ed66352b68578c68609f4cf019409823a50728d65bc1abe803dba07a94c317777c9de6403321f19a4c049ff
MD5 SHA1 SHA512

Submit Download

bugly_db_legu-journal

Path /data/data/com.sy.zjjy/databases/bugly_db_legu-journal
Size 8KB
SHA256 a2d1e287acc90e243a96535839124b9f81db77c4907597eb2c8294ea486a241a
MD5 d84aa983514333252b289bdcf30bc6fc
SHA1 9e850af0c34fb120b9043fcb364a44a64a23ec4a
SHA512 7c23723044d4e91f9d8ed161c2ee4fdcddcd29489d3a36884cd309c269e034ca2335a94f0b0b2a54facdfe480ba9d93b724e013395a099b8c9443b097c61e8bf
SSDEEP 6:7+/l9WulGn1hg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK4r:7+tcqyqLiuWdwRmBEyPbB
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.sy.zjjy/databases/bugly_db_legu-journal
Size 8KB
SHA256 cbd4a2b8576ce8e50adac322d40f05b590ec82c82b8f3073e0e8cef43dcbade1
MD5 401c81f0878bac78ca47a860aea55a6c
SHA1 ac0c21f6218a9fae83b9ff0ce75cba7cd0c0aee7
SHA512 8d15341f03c6dc44f89671f65c02958e36c70f6cc31fa0dfc82741b9d5e80287f0cfc54bfb336311988dded36df350535fab87c921656f074a91ab41fcc66f6f
SSDEEP 6:7+/l9zXuHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKx/J:7+tl+vqLJdTRmBEyPbiJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.sy.zjjy/databases/bugly_db_legu-journal
Size 8KB
SHA256 4a5c7e0cb037b882c14d8ad42f6d522d445190f6d7e09bb7a0ab75bd82907247
MD5 7a0bb94af6ab59596618a7ec6c33db43
SHA1 9c415895e27d57aeebbf5cd4334e42cf251f3c2d
SHA512 3e8512bffdb03d21283d5e5121eec76690120428e701494895475ea3bac477a81eda11501381bd06fef5a5eeb0f6d9b2b0e54e8e6027260e6d8091672cefeae0
SSDEEP 24:7+tOWqLTt/qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSE:7MOWqDfrQiw6uMg6/YBg72meposSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.sy.zjjy/databases/bugly_db_legu-journal
Size 12KB
SHA256 48f3efb9308e8b5c4e550a2086232b7dfd8061593eedc8f0da88fd47f0cb6151
MD5 21fed9d79bcd5a06d63e618ee20c4f4b
SHA1 67925aabbb7e3146f804029eb7dddceef9ea52ad
SHA512 a959023a9affb17cf429181b1a723f0a65967e5b5f1fd309ee71ed4a5a9c68772d4f274902645236ad197bced7767c2306bd3889b17fd036ffd54946a755ea43
SSDEEP 24:7+t+/SpqLMvtslqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSfM:7M2Spq3DfrQiw6uMg6/YBg72meposSfM
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.sy.zjjy/databases/bugly_db_legu-journal
Size 12KB
SHA256 21fbe67b2b9989158408ec283a7e5244d928375b574c824108780d978ca357ba
MD5 67a38496d6d81ce6b2e6681f0d8f2c5d
SHA1 3f79fac22c5db2bb67f4ae24ed5c8e1675ef92a3
SHA512 21ea0e0bf2be1c6b067bc050607b16326ad2870f195377a96426b720ff1544243c8618e3bc8946d528ab2e507d2536bf570c1b18c6d5cd453fcd1653744a91ea
SSDEEP 24:7+tull/sqL1tGqqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGS3n:7M6/sqjfrQiw6uMg6/YBg72meposS3
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads