ee9869eee1c4711f339cae7e8004e941a846941ba84bcb0ae543a90e351064cd

Analysis

max time kernel
3s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
15-05-2024 08:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

455014466682ab96dd4c0449c9860e3f_JaffaCakes118.apk
Size

8.1MB
MD5

455014466682ab96dd4c0449c9860e3f
SHA1

01b3180808dc1fbb1771835c4da19bc8ab43ccc6
SHA256

ee9869eee1c4711f339cae7e8004e941a846941ba84bcb0ae543a90e351064cd
SHA512

da6af8f08b6920ed6c25471dc4464b3ea82a73de16396127f61004fad1b842dec9932a078d5fa1d7baabf916aee8cc17da33d24d18449a4bcdaa8b85c5864400
SSDEEP

196608:NGHQoN+WdJLoQ666dVoMPoV5zR2U5Z6miH7oCmVm2EVXXRqsUvRw+:IlN+WdJLoQT2VZw5zR2CZ6/ba02iXRqf

Score

7^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.zhongyizhilian.zyzlapp

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.zhongyizhilian.zyzlapp

com.zhongyizhilian.zyzlapp
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4247

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zhongyizhilian.zyzlapp/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.zhongyizhilian.zyzlapp/databases/bugly_db_legu-journal

Filesize
512B

MD5
2ebe97bdd632608b522dd976c4bf7597

SHA1
8134d6038937ff2445a1eebd06344fc67c9a0096

SHA256
0f5aa12d94a8bbb5b4f20f3f2a1a9692806e2d113d76ffdd7c35a926a8a373c2

SHA512
08ae137c36ab92885c67e52b978b34b74b718b5a6ddf6f552232a1dfcd6e8eb861de987e8252911c29891074222922d00ca4cbd5b7edd66e70d8f5838968839c

Download Submit
/data/data/com.zhongyizhilian.zyzlapp/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.zhongyizhilian.zyzlapp/databases/bugly_db_legu-wal

Filesize
92KB

MD5
2f8f918a0465cfc31c59d442480477af

SHA1
ee699ad2adc28a8c0c6040f672ec31404205c32d

SHA256
28901dd34dcafdfbe7e4f19dd43849f099dc282cac51e2912fe8b17631e1d34f

SHA512
be3dbf77e86cfcadd63e813cb4d2cc942e44bf2a00eeb0f471c0dcc29154d56aca1bd179174eb42e0e796bc2ea843232fc88b81f64e75e19a35359d90f41f7ac

Download Submit