33edafb9357463559d8f420e3b49b8f3e5f66e81a19e6bf0b981a0adf02d9b51

Analysis

max time kernel
174s
max time network
187s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
15-05-2024 00:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

43bd657d456d1560c109c8d2cef9963d_JaffaCakes118.apk
Size

26.7MB
MD5

43bd657d456d1560c109c8d2cef9963d
SHA1

58f9fcfbc6a50e072fd2a83ea7737fdcdf809ab7
SHA256

33edafb9357463559d8f420e3b49b8f3e5f66e81a19e6bf0b981a0adf02d9b51
SHA512

83bf0116af2ff32cbb8775da9abb10bc396012786dfc553c230f79bba1cb5647332211f46dd6faa833c887adebef306dff3386c487e09f6749bfd48a502d12cb
SSDEEP

786432:z9PomeONUa+167/LpRsbljFUNctqg5E+owaGXs:z9PomeOp/LpRAamtqgqbOs

Score

8^/10

banker discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

Processes:

com.app.starriseuniapp

description	ioc	Process
File opened for read	/proc/cpuinfo	com.app.starriseuniapp

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

Processes:

com.app.starriseuniapp

description	ioc	Process
File opened for read	/proc/meminfo	com.app.starriseuniapp

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.app.starriseuniappcom.app.starriseuniapp:pushservice

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.app.starriseuniapp
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.app.starriseuniapp:pushservice

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

Processes:

com.app.starriseuniappcom.app.starriseuniapp:pushservice

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.app.starriseuniapp
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.app.starriseuniapp:pushservice

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

Processes:

com.app.starriseuniapp:pushservice

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.app.starriseuniapp:pushservice

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

Processes:

com.app.starriseuniapp

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.app.starriseuniapp

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.app.starriseuniapp:pushservicecom.app.starriseuniapp

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.app.starriseuniapp:pushservice
Framework service call	android.app.IActivityManager.registerReceiver	com.app.starriseuniapp

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.app.starriseuniappcom.app.starriseuniapp:pushservice

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.app.starriseuniapp
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.app.starriseuniapp:pushservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

com.app.starriseuniappcom.app.starriseuniapp:pushservice

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.app.starriseuniapp
Framework API call	javax.crypto.Cipher.doFinal	com.app.starriseuniapp:pushservice

com.app.starriseuniapp
1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4285
- /data/app/com.app.starriseuniapp-uof1JwsIYpCoZyD9uLmS_A==/lib/x86//libweexjsb.so 69 119 1 /data/user/0/com.app.starriseuniapp/app_crash/crash_dump.log
  2⤵
  PID:4586

com.app.starriseuniapp:pushservice
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4443

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.app.starriseuniapp/cache/image_manager_disk_cache/7c75aa823b4b2d24b61d6fd9dc5f0e3d186bb5d0724c8c6e177a95bfd3a5e4a4.0.tmp

Filesize
883B

MD5
4de69c01e8ada1731ed8f7003406ab6e

SHA1
42ab5c2c72f3a5bc9e0a65c9a8080cbcc3bbbd68

SHA256
5857670aa59db17a6c38c7aac6425eeaa6a087b28e64dc47094c74ec057f6a4e

SHA512
ab1628a246673f80eb8b222bdc5bf4cbe96cf5277f9479eaad79c11b008ab4215a749ccb7c2d03fb70d8728bf1990a41f1292a9cef77cf68f7932e106fe7ec16

Download Submit
/data/data/com.app.starriseuniapp/cache/image_manager_disk_cache/af53f536b991f911248fa0dfda01b7d95489301f5e66d3301256e5115f8f5734.0.tmp

Filesize
683B

MD5
4a00e38792215258e05fe07cd8f84390

SHA1
2966eb880706403164d717c17d0b7502f9a22149

SHA256
66d182332131ade3049bdc98f297aebadf60e1081ce6329ed9a5ff9a5c100b9a

SHA512
5f8a3e57ba1f99f0cc5e7c7fc28e7aabd5179f44d01865b5f575b5f4ebcc8ee64cefdc9c8e63cc343f9e4ba6916c8f19783fb655f27aa3ef7e15680c2d0cbe09

Download Submit
/data/data/com.app.starriseuniapp/cache/image_manager_disk_cache/c7f4ae546f2b923cf8d1da98c0ab556700e2a4512b284255133b516a5f2c35e6.0.tmp

Filesize
768B

MD5
dd1b92db2413bafd533811098114f792

SHA1
cffbfc6814463be82a34bb3d8b2a901c64cd7a50

SHA256
8b2ee46a0bd3dc22d5d8287cee1ee15fd975d59367d9c1f69df4029874c3eada

SHA512
00f6290c421ea8129ef026774bce36e1c89d1ea203422a9a19e698ac5ee2e3f349b4a6a9526fb5298ffcf0b16454c1681c5697317831fb948a82f1387eeaa4dc

Download Submit
/data/data/com.app.starriseuniapp/cache/image_manager_disk_cache/journal

Filesize
469B

MD5
bcb585abfea7b8e6454930f97c8916d1

SHA1
386575048ab6304bd237aa7e5fd42fa710560293

SHA256
b44b6d020d69b64d94715e73832a0ea048109c12cfe339d945e90cf60eec6d29

SHA512
0ff612a34dd5c2308a5bc3aecc0d2dc3b7ae79a18d40b894adc1fce3227ca8ddace5898f78f8527817ba0ba876af01c2c4f5532029befcfbb2818fe43c591ef3

Download Submit
/data/data/com.app.starriseuniapp/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.app.starriseuniapp/cache/libweexjsb.so

Filesize
32KB

MD5
48547386f7ad27fa37d2a972f009e22a

SHA1
655752e0350504cfd73495a16019c54e3b097854

SHA256
d1f8197d3768600438fd40c85a35b584d62d14297ec1e9819bb1a98a3479a771

SHA512
3d785a9d03907164e504d7b059200831cff4ed756ee43f800e57d1ef33d7798b0068d3d4337e98a7e929ac21abc09a052e90a084158b7254026d1972a364accf

Download Submit
/data/data/com.app.starriseuniapp/databases/pushg.db-journal

Filesize
512B

MD5
10569eb14c865723778e562f10c10a49

SHA1
56375b0f756c69971e68dd6d39d5959e5f1fc632

SHA256
f25807c8fd0025d9f443d4b3dc4491e83f201bc92641a217915efffa14a08c35

SHA512
c3f235e13600858ea8eb772363c335ea7ee217fa0d62af6f66969b08ac6031a5d3b26be89d10d34f487ea4b83543b40ed7b7db8644b5eebe5f73b825db00baf9

Download Submit
/data/data/com.app.starriseuniapp/databases/pushsdk.db-journal

Filesize
512B

MD5
81bcd0aaf273f0be92177e40aeae4093

SHA1
05b68922a210e27bf836dd83efdad57694f4e225

SHA256
66d8a714abcd048c6b245e7a698722b737fe5ac7535fbba780349f352f3dfb5d

SHA512
e977f1dede3c0413f78a36a8d4840414d8e394bf23e5cca49b7cb73e76bf4006105fd20f4c0451a3a4ba601218cabf947d173381b49f8c31e730f0f7249da1a0

Download Submit
/data/data/com.app.starriseuniapp/databases/pushsdk.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.app.starriseuniapp/files/.imei.txt

Filesize
32B

MD5
f88eff35736953b0dc256d6859346147

SHA1
2919f4b2d27c8a554c4ed422b76e71149995a329

SHA256
1179922b0da18cccd0e344c7fa14b3db4e94749e22ce7a3778a3d1e9c3a34823

SHA512
0d08fcd504dd5f8d22fd02c825a6034e4b68d6372766fbb41e6c9207ceb0eec14eb3d34df26832f0b28ff3da91d755cc4a1f3686c8893978a14956ce3ab1ed98

Download Submit
/data/data/com.app.starriseuniapp/files/cnc3ejE6/eje3cnc

Filesize
39B

MD5
7769d4507985f59116153463f09235a2

SHA1
b081e84d14300ac7a7947aade9c025fa83bc17fb

SHA256
5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf

SHA512
ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

Download Submit
/data/data/com.app.starriseuniapp/files/init_c1.pid

Filesize
14B

MD5
39e10b55e3333fb514ef965e2d257ad1

SHA1
bbfd33db7c335bb46f307d13cb3ab350c75da2cc

SHA256
f6e9f9013940501c8a4f919d7ed3af0bd8e802c4a5d371ec7064351475828ef9

SHA512
01b4b4f5d1cd74c7200ad7759e5c81b559391069d236ef6dbdd03ce5f05cc0cae40871977d235156a2410094db4eb18d76fb194ba7c1ddcf1f0aaaf7e7fb3027

Download Submit
/data/data/com.app.starriseuniapp/lib-main/dso_deps

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.app.starriseuniapp/lib-main/dso_manifest

Filesize
512B

MD5
b045bc7d97e0368317e53c15dbad2f5c

SHA1
9cde5502875d2cedbe9642e68fcad2aa669ad819

SHA256
e679a5e6572cb056a513c8828f0be3d27f1fa06d9cb8a8675584cccc07817a96

SHA512
6653830c5ee986d94b4a69ab713f186bc98841ab4fbcbc32643e9ffa736f61d326be015baf27677be174f7bc538585087b35fa885b4eda1713f9d656b14ed6bd

Download Submit
/data/data/com.app.starriseuniapp/lib-main/dso_state

Filesize
189KB

MD5
136bb81f3cefc5c8fadad5da0fb8f6f1

SHA1
417999fa80e179e13e1ecd011084df5ea7d35584

SHA256
c6c40570e6b61c6b25e5ee0df4a9d58688e1ee3c190b9a286537700dd12ddd39

SHA512
8cc47ee7bdf6d39f4def71ad45cf9ea935eeb6e73e3a9be2dfc91a0e61c9925473790704da0a252c859537ad28d9ab8b3c0fe4f10a500e63cc437c075eb6602e

Download Submit
/data/data/com.app.starriseuniapp/lib-main/dso_state

Filesize
52KB

MD5
e798e55bff670900ee34bedb70f2c56e

SHA1
9773252d1a547d990fc0f8df36bb951e00863a1d

SHA256
789ca1b9c943cd6ee063405226817dd16e4580d1e58ffcec5d9d2844af98e9fb

SHA512
7fc1b90e0cabd7574850800ee341f9d9a2ed9eb65230b88cb64dd692b4304f5946572d5a601f94b454d37125adb873716954f216e400fc7cd5a24ba9de527e33

Download Submit
/data/data/com.app.starriseuniapp/shared_prefs_ext/test_app

Filesize
29B

MD5
5fef3f23369ee43c901f6b9ad93933a3

SHA1
22c9491925a93681571507a7006eefbb28edf773

SHA256
55ed0328d0e32d2106489d2278020afcd27d16f62f13417738a5d8e5a4ec2dda

SHA512
cf21cc8fdf4d42c4c2ea84b7411f1b36b1415fbbe6037015a8bbfc9863a665fd5ff4c42bd230281aaf8f655fa6ec7a13aa2f502a1b135b48303e1f5b724854b0

Download Submit
/storage/emulated/0/.imei.txt

Filesize
72KB

MD5
475cd90c978aa0a7e74c4bacfbb37c62

SHA1
9c87e27463cd154d0525e2a476f8420f2da0b48d

SHA256
9b7fee6d5e2803f9052826c27f0b0aa0d0783dc56783af69f4c0a17daa5131ac

SHA512
3e3f8b1bbd39276c94be9d09edc43a5ec951da81225b6120cb8b02e589ac2f2cba4c4d1314ce42231caae4cf042291875693311295e8acc8af2e9cd1701a7229

Download Submit
/storage/emulated/0/Android/data/com.app.starriseuniapp/apps/__UNI__99FF083/temp/1715732315174

Filesize
1.3MB

MD5
bc7445214e18352b64b57d66b6cfd3cf

SHA1
08eeaf613f0130b05bec1dfaa881cc34a38fee36

SHA256
119eb5e2b18bffbae0e3cfc1fbfe2b55844beb0d69b59a8cc1240cfafdd7207e

SHA512
3e6f9f022d708584586602e4b81df9cdfa6b7e1de0890205b596a88222803e4eb9ccbbba0ed62e22dc57b1e6752709d2b4c9f10a14d9960c497536f192e6e86a

Download Submit