abf831897439dfb0c5a9084ecc760487ad17445e8c50dc9ad5e23896a826c0e5

Analysis

max time kernel
63s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
16/05/2024, 23:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4d70f7bcdaa10b3d63404b68c10be71d_JaffaCakes118.apk
Size

29.8MB
MD5

4d70f7bcdaa10b3d63404b68c10be71d
SHA1

bba81c19a8b057536349358c066232f434c095ab
SHA256

abf831897439dfb0c5a9084ecc760487ad17445e8c50dc9ad5e23896a826c0e5
SHA512

14ed8004a66eb56b03baac7f1ac1e60a33fdb0249d41441a39f619b130cc71d2f68e7573028b8c65d1e967362cb25d896c306b150c9b5ae3557586f152fab259
SSDEEP

786432:vdQUL2n1wja5xb5IeGMFnZyj/Ix9oDFm3ijZj:C14a5RXZyj/Ix9cm3ijZj

Score

8^/10

collection discovery evasion

Malware Config

Signatures

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.buggames.EF

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.buggames.EF/files/kuaiyouxi/datas/res/1247/dex.jar	4254	com.buggames.EF
/data/user/0/com.buggames.EF/files/__pasys_remote_banner.jar	4254	com.buggames.EF

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.buggames.EF

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.buggames.EF

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.buggames.EF

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

com.buggames.EF
1⤵
- Requests cell location
- Loads dropped Dex/Jar
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Checks if the internet connection is available
PID:4254
- getprop ro.product.cpu.abi
  2⤵
  PID:4337

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Credential Access

Discovery

Location Tracking

T1430

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.buggames.EF/databases/kyx_sdk_downloads.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.buggames.EF/databases/kyx_sdk_downloads.db-journal

Filesize
512B

MD5
7dda78b72c0ffd189c53b1d35ecb496a

SHA1
04a312e24b307970c82e32d4c4c4024927665d7e

SHA256
02136ac9af188b15032c417ae6d7110adca220ecfa65613547bf24e0c70967ab

SHA512
a9ffac309c790a00795bb8b35fb798acbf3e435f4f25adb9a4e35e33cdce6672a80258b04d85e79985b0458257f2c559dcdc4284d96057e132fa05662da64709

Download Submit
/data/data/com.buggames.EF/databases/kyx_sdk_downloads.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.buggames.EF/databases/kyx_sdk_downloads.db-wal

Filesize
32KB

MD5
d219d5575db8dc22d1ce66f47156c76b

SHA1
72bdd941c1b0fded7d7d1ef0a9ccf769e5213b6e

SHA256
3136f524539c5d7a876a9976379c5a3855619d4f71bc4e1ed06cc7af66bdee59

SHA512
7e28180c7e97be3e4b421aa39425cbf3bc0a73cc44d6f1072f7c9f82d7e56a18db7d93d07cebbc80eee9a124de625e38d56959732e62cce43cbbd47cd8460caf

Download Submit
/data/data/com.buggames.EF/files/__pasys_remote_banner.tmp.jar

Filesize
114KB

MD5
2ad9fb4b2d9b333883b7e38f61c2fd2f

SHA1
5b85041452d173ed0d81d25b9ca78608a998e328

SHA256
b9310a99f1b60959f6b725eea74623dc491adec55da740c17e8c7e02f35818f5

SHA512
6fc04e1e22ebf8920b4928a8086cf3e0814d155f79f80d71622916f6a0911262382710e5ee2acea653db4b387730e201134592cb9992b14f3aef8b09d83bda90

Download Submit
/data/data/com.buggames.EF/files/kuaiyouxi/datas/config/checkupdate

Filesize
8B

MD5
5edb2b029406884f88c63bf18cbe2da4

SHA1
4d651f957933b5e32e79781ef93041a1ad3904d3

SHA256
108679aa42ac80fe69b9167780a9f9be7cbe166b765855c5483213ddc0b6bfcc

SHA512
2a6564256a959ab46d664e09eac05c82ce0dcded2d4a2ece621d7bbbca2dce508533a218f4448cfe02a1a2cd736c20546fc16fc6efc1c23baec231121c577749

Download Submit
/data/data/com.buggames.EF/files/kuaiyouxi/datas/config/md5

Filesize
32B

MD5
99edb0a794c1b8cb986c9e841afc70f8

SHA1
2203492ecb8e377e10edd0bf496c221e576c7bd2

SHA256
125a11abe87d628819a8ea79d0da4a7aad6ee821c912d2cb04473e9cf1c3d71b

SHA512
07c84aef6f0511f2b904767e25751c44ba5185e350885e4f81a6d539ac702064344e40b445e39bfca0190fc49c41ecd7c702348cb317444f80d2371119c91c33

Download Submit
/data/data/com.buggames.EF/files/kuaiyouxi/datas/config/version

Filesize
10B

MD5
736cb1b40e1a3f4ed47372fd070bdefa

SHA1
97477e8e520cd32ca88190fa0555ab80b699b986

SHA256
d99770cb57a16910bd5c4688c4e15d7d53ac993f2e4fdc0d166563ef262dcdd0

SHA512
d37ed869b98936a26b7a5b7088cb0dcb4a05eb638cbdb8338612d431f27275e1cc043c2a84c30ecb2a50b5f17a95d5a6f7adc14366ddb8f524e61e10fab1c39c

Download Submit
/data/data/com.buggames.EF/files/kuaiyouxi/datas/res/1247/dex.jar

Filesize
685KB

MD5
9f609978f97fa0eafc70ed755ae8db57

SHA1
abf353670022ddc7a2a904dd73e4506829381719

SHA256
efd47feabc537b1e5a6b47613dab8d4e5e804d416425a99e0d3716bcaff24ce5

SHA512
f73fa220380770b9106e33b688a2e4884e53b5e48e56cec94ca8546cf2c41acab77d7159a509ce8de2b793b3926ff8808a8a73d57141503fea4c838df194eeab

Download Submit
/data/data/com.buggames.EF/files/kuaiyouxi/datas/res/1247/oat/dex.jar.cur.prof

Filesize
796B

MD5
d268795b10e490e5663ea122f34819c2

SHA1
183dd001266c9e520b4f235e0f39e4447755020c

SHA256
f3c684acdcafec4cdef9a9e5382648732d2e3b62edcc71372930982bb0d815d6

SHA512
9f09c9001dc17e958a6bf05a429dd9411ae6c735e39b52aa892867a0b2e50bb69e6708c2b9ad21e2bbc02003e1e05d98dde192172dda9f585082cf981660eebf

Download Submit
/data/data/com.buggames.EF/files/kuaiyouxi/datas/res/1247/pack

Filesize
2.5MB

MD5
5770e328c6d6b9e97fb96ff82ed8e8e6

SHA1
0c5ba60310763d5fc1f69fc0a3b9d7aaea430a91

SHA256
e99b7fd89c9fd31eb4bd669671ab18f46814822be827be3458589b072b67a1da

SHA512
b20e616a3f9fd818fed40093bd385d80f590a0b8854a1bc64e5e0eb4e1dd579b0ad8cea209cdde6e9468504d7a4728c7bdc446d4499514762f495f7d6bc4dee0

Download Submit
/data/user/0/com.buggames.EF/files/__pasys_remote_banner.jar

Filesize
231KB

MD5
c601107d24f96646ae86f74b0fea880c

SHA1
8a8ce84fe5b6e186ddcd69c8757de4fb1aae7ed1

SHA256
939120d702d97dc47c6963d98dc1d2694e0fae5f5d5199c0755f54741a3c2a16

SHA512
b573a0d74ea8c6e99c3ebad4ac7b42ce46940231f8a90c9b19c887c6c20356235241068d187aab2bae9914c3df84cbe80bca13b5b6d070247353f5e5eb282f33

Download Submit
/data/user/0/com.buggames.EF/files/kuaiyouxi/datas/res/1247/dex.jar

Filesize
1.5MB

MD5
818e702b0845ececcbffbc25095cfb6d

SHA1
a398799c130ef7f8de8002e366f7130c0270df23

SHA256
c319d43483c06ec2f7408e6927ea0e3d8e64da12cee60d069fcdd990761daa3f

SHA512
d5610f0703571e126548f91a3b339f8997ef623e8a92bb9cc7e351fe27a3cb82d96d8284523051d72a7777127779d6c2f84965c57e1e247905fa11cab44d3fda

Download Submit
/storage/emulated/0/.rwtest

Filesize
1B

MD5
13c8ffd977013703a701cf8e11deac65

SHA1
067d5096f219c64b53bb1c7d5e3754285b565a47

SHA256
e7cf46a078fed4fafd0b5e3aff144802b853f8ae459a4f0c14add3314b7cc3a6

SHA512
527cff2b6fdfbc0f54fe092b17d6d8c7e22500242635fa56981e85a64da6ce8a12a3a66cf69fd48f588bcba9bad141b8e351a0cdd4925ae57289933eec1fc153

Download Submit
/storage/emulated/0/kuaiyouxi/datas/res/drawable/launcher/default.png

Filesize
16KB

MD5
322588413f61bad8a51eb8158562f703

SHA1
746285885be60845778fd17de49ab3ae90c41559

SHA256
768dba3fbcfe45b3f6e24faaf891bd867db05d5618fb93cd22383ffcd68bb64c

SHA512
9f58b25ba3bcbed557798e07286e2bda58ac89bd27a4468cdcfd9f0ff4c2531cc079040d6c227b26f6da24e7937181df75c3523d1cbdaf8d3609d6a4a0f8f48d

Download Submit
/storage/emulated/0/kuaiyouxi/datas/res/drawable/launcher/default_xiaolu.png

Filesize
65KB

MD5
465fc69fb68f6ac5db31e4fd8f658243

SHA1
b6d6d638cc9c7fa122fe50605689d8238310760f

SHA256
30811a3b95cf73f6e2d8db0f2e30a8ca03e3a5af05e032b33e458546f10295b0

SHA512
7ef63227a7e156089b68fbba34da5b7697c8e18d8ed64df59bb01dbd21457cd291c0507ecea34a5d50e794e1197f33b8c7d71a61402b87c43a3125f43d38d347

Download Submit
/storage/emulated/0/kuaiyouxi/datas/res/kyx_videosdk_mzw1_ad/1247/update

Filesize
2.5MB

MD5
6c7bd7423801df566ccf944143ea7dff

SHA1
fa5c786f2958a9a8ca56405a07ea82df60e6cca0

SHA256
75a849183ae9ac73ec56b7de55d8099ea9a7680c980a6839f6a0bda7a8f7747f

SHA512
86eb511bce9926ce702ddb069a3e0a5ce0a00580d9c88c331fc98865523650de472dfbe8d3f3b44ca4d27b1224f6b7338e8a90ab1462c38ec57430bd1e0ec1b9

Download Submit
/storage/emulated/0/kuaiyouxi/datas/sdk/downloads/kyx_sdk_downloads.db-journal

Filesize
512B

MD5
2165c2f351a85fdaa4c40f72afbdf82d

SHA1
d87a4338efd9585e52383749d34f891dc0fbfabf

SHA256
1c5d79301f1346d6892c1a4b96b39ccafbb632a00eae987f05d562ebf9e6e805

SHA512
33456cbbdb9c6311dc811f931fe1d8a1bfe79cc9e369a0e9b372668e8d311f63825b0b32903e56818f9dae78f8fe9a7a3ecadd5109fa7a7aece6b442dbe9dae3

Download Submit
/storage/emulated/0/kuaiyouxi/datas/sdk/downloads/kyx_sdk_downloads.db-wal

Filesize
32KB

MD5
992f2edeebe8f233c41101b2fd2da2be

SHA1
69e0a4d078ece0b3cf14e7156c66d48ba108fb4e

SHA256
353b94904535e82916be4b1872d48be133483f6a246d9cf3de5c2471680ae47b

SHA512
9e6eea7902ef4e73fcb61f4f692758ea750186a5090ff953e2741bd633c2e93b7bd70fe091b8df55f340773d69ce21f7ed58273fb435d7043295bd151db8414d

Download Submit
/storage/emulated/0/kuaiyouxi/temp/com.kuaiyouxi.gamepad.sdk/shared_prefs/ExpansionPrefs.xml

Filesize
211B

MD5
5651374612f360b11fa5f273a50bcf34

SHA1
eac47d3d888020331d03e745edac5e458ba46261

SHA256
1ab802a2b2ec69407c174627d0a9b58a41da4054e0614d1458e6694c23eb2a3a

SHA512
b0214e225ec2f90b24af73e1729dfd61f83d15c4afec36010f4f0642d8386403a030133e942fb772915a89628d33e2726c2abb3dc04346e27ec46bbdfd3c2709

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads