Analysis

  • max time kernel
    112s
  • max time network
    190s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    18/05/2024, 01:05

General

  • Target
    52615b9c96ee0e15e634878be279508a_JaffaCakes118.apk
  • Size 7.8MB
  • Sample240518-bfyeqsce63
  • SHA256 9319f0dd5a70995afb688a40fd6f6f147b6b1d80f005e6665a4fe33fcd060eb0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.sogo.appmall
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks CPU information
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5268

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MessageStore.db

        • Path /data/data/com.sogo.appmall/databases/MessageStore.db
        • Size 36KB
        • SHA256 ecb0e8c93a782292a1dfe20a90e204d1c1c804e2773f1831c9ca34826aa62071
        • MD5 SHA1 SHA512 SSDEEP

        MessageStore.db-journal

        • Path /data/data/com.sogo.appmall/databases/MessageStore.db-journal
        • Size 512B
        • SHA256 3f9fefae10f1578029fa466a1d837c9ca7ac0ee2baa4da9325adce0fdb4e975f
        • MD5 SHA1 SHA512

        MessageStore.db-journal

        • Path /data/data/com.sogo.appmall/databases/MessageStore.db-journal
        • Size 8KB
        • SHA256 70676f9d5e928fbbeb4d6175758d5738c032cfc52b5fc2af0b5b57086e10c758
        • MD5 SHA1 SHA512 SSDEEP

        MessageStore.db-journal

        • Path /data/data/com.sogo.appmall/databases/MessageStore.db-journal
        • Size 8KB
        • SHA256 1053d9176843fe4924151aa70973b003d2131b94107f85516fc7549e7035b1df
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db

        • Path /data/data/com.sogo.appmall/databases/MsgLogStore.db
        • Size 56KB
        • SHA256 c84271af121e4a92faaa2844c13969392ba1a0a0bbb49be2af0ae6953286afdb
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db-journal

        • Path /data/data/com.sogo.appmall/databases/MsgLogStore.db-journal
        • Size 512B
        • SHA256 862ea800ee62f399a210760bbb465f134b10a1aaa6b91ff465c62006d6245966
        • MD5 SHA1 SHA512

        MsgLogStore.db-journal

        • Path /data/data/com.sogo.appmall/databases/MsgLogStore.db-journal
        • Size 8KB
        • SHA256 336770e0bd4eda84dff4dc36024207ab3c19ae637b9991f40ed5d8cfb3a47a9d
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db-journal

        • Path /data/data/com.sogo.appmall/databases/MsgLogStore.db-journal
        • Size 8KB
        • SHA256 4ead3c9882dc2ff04c6510cdaa172cb8296711eea8f17fa7504ff58b8b1f47e4
        • MD5 SHA1 SHA512 SSDEEP

        account.db

        • Path /data/data/com.sogo.appmall/databases/account.db
        • Size 36KB
        • SHA256 e9210840283cc5362216e5b8f0c07b44bfc403173969142e4e9c0089feab340c
        • MD5 SHA1 SHA512 SSDEEP

        account.db-journal

        • Path /data/data/com.sogo.appmall/databases/account.db-journal
        • Size 512B
        • SHA256 f6d6d60188a1a7038b2d88ee9b8eda4df982b0635e8cf570bcdbb27fce80b03d
        • MD5 SHA1 SHA512

        account.db-journal

        • Path /data/data/com.sogo.appmall/databases/account.db-journal
        • Size 8KB
        • SHA256 1496896e0dd8b750b146790aa401711af4bfb5f7251a13133c629bd6f91bea59
        • MD5 SHA1 SHA512 SSDEEP

        account.db-journal

        • Path /data/data/com.sogo.appmall/databases/account.db-journal
        • Size 8KB
        • SHA256 ad0660cfd460ded48a36aee392233bab2e025d28e1f419a28e817bd93f37a0cd
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db

        • Path /data/data/com.sogo.appmall/databases/androidtool.db
        • Size 40KB
        • SHA256 af46631f780c04a2e7340dd2b09aa9a966aa5ee879a997d27757678fa3d8ab96
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db-journal

        • Path /data/data/com.sogo.appmall/databases/androidtool.db-journal
        • Size 512B
        • SHA256 a9a12d88f06b5bccfff1ffd244d913d03c77038929842b858eb07cd7012e0850
        • MD5 SHA1 SHA512

        androidtool.db-journal

        • Path /data/data/com.sogo.appmall/databases/androidtool.db-journal
        • Size 8KB
        • SHA256 4f63f4ea16fd1a092373407093ae43744d92e437eaae04df31c82d33ed6e465a
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db-journal

        • Path /data/data/com.sogo.appmall/databases/androidtool.db-journal
        • Size 8KB
        • SHA256 aa7b966b25511504b7ea7395bb2a14d64f4e3bd4c8a0cad3127adf56e32dc59f
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_

        • Path /data/data/com.sogo.appmall/databases/bugly_db_
        • Size 60KB
        • SHA256 242fbaa2b47de4d0cfbe4b5c901827740749adc4451e42c7827e2f708e2f29b1
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.sogo.appmall/databases/bugly_db_-journal
        • Size 512B
        • SHA256 a032686462e7a71fabf10caee948a27b4785ef8e0869b80ca93ee1f59dfebf7b
        • MD5 SHA1 SHA512

        bugly_db_-journal

        • Path /data/data/com.sogo.appmall/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 431ce4bd136fabdf52566e2d3b7f963b7c8acc843dc6c23f6c1b95c339a17702
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.sogo.appmall/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 4284ec33cb3534ed75a7fb2e5f041f405089756ee5fffaa02f6fa89f2e385a2f
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.sogo.appmall/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 40de59eaf0da9dfa42a969f99599a6908bd2d9f4b5c5f60f80d5a337c903e726
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.sogo.appmall/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 114971c1cd44b6018deee7752c12bfb6d86be4e30e7d5411798bdd41b67a23be
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/data/com.sogo.appmall/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 49900f47f980a64eb31aa355b17a8a26235566e7b0c5b3684cd0ae1e77b79b0d
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db

        • Path /data/data/com.sogo.appmall/databases/downloads_classic.db
        • Size 28KB
        • SHA256 1cb9e0b83c09803d54755f425182eff61db67c83e409c86fbccdeed30c0594d6
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db-journal

        • Path /data/data/com.sogo.appmall/databases/downloads_classic.db-journal
        • Size 512B
        • SHA256 b549f7ce4d97cbd7901f6e9371b8d02fb5019632529455a234490954b857449c
        • MD5 SHA1 SHA512

        downloads_classic.db-journal

        • Path /data/data/com.sogo.appmall/databases/downloads_classic.db-journal
        • Size 8KB
        • SHA256 eb173c283ecd77d45b7b0a262918ea03b00e051ef56602d6c0bbfdd8115cfe1f
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db-journal

        • Path /data/data/com.sogo.appmall/databases/downloads_classic.db-journal
        • Size 8KB
        • SHA256 a4c47f8089b8158bdfbe900b9252b68443ac3dabcabace38c31f71d518fd56df
        • MD5 SHA1 SHA512 SSDEEP

        pb_db

        • Path /data/data/com.sogo.appmall/databases/pb_db
        • Size 20KB
        • SHA256 24a937e220e4145ca69aa28e9f714f0b6c6c7e760a871fde091d0eb803ef2fd5
        • MD5 SHA1 SHA512 SSDEEP

        pb_db-journal

        • Path /data/data/com.sogo.appmall/databases/pb_db-journal
        • Size 512B
        • SHA256 beb76cccee162f1578a0c279c2b6f4e9f7355a126fccea0e75c1d69dffb9293e
        • MD5 SHA1 SHA512

        pb_db-journal

        • Path /data/data/com.sogo.appmall/databases/pb_db-journal
        • Size 8KB
        • SHA256 a0dd0838b272011eb4f69fcbecaebe32c1206a134f5eebc539b514f4369efba4
        • MD5 SHA1 SHA512 SSDEEP

        pb_db-journal

        • Path /data/data/com.sogo.appmall/databases/pb_db-journal
        • Size 8KB
        • SHA256 14ede92185801aa0123bd9ba96744d1a83ef762705c71a4298207cc953cebf2a
        • MD5 SHA1 SHA512 SSDEEP