14aa650e620db68bcce8f5f895a0befafb8deb655127d46374b2b627c9fc2e9f

Analysis

max time kernel
104s
max time network
170s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
18/05/2024, 01:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
52737965d644ab1b157c4d4ca0d6b338_JaffaCakes118.apk
Size 4.7MB
Sample240518-bvb52sdf8z
SHA256 14aa650e620db68bcce8f5f895a0befafb8deb655127d46374b2b627c9fc2e9f
MD5 52737965d644ab1b157c4d4ca0d6b338
SHA1 324b525c21d61c564087aefa5547fec93f94fb4f
SHA512 af1c4509737452e2d8494dafab6b6385691fccf75218d944386a03cd6c36f92a30b8eb047c1abf78b6f0cc3651644333d1439e56f04c555abfe634c280eec3c5
SSDEEP 98304:HHafc4//i3tWaVgFaX36mkuKPVmP37yZUJKMtXVbCdo1ilc268fSJRX++57g:HHI/iBKFaXSUGZUKMrnw626tvXfy
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker discovery impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.sunshine.gamebox

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.sunshine.gamebox

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.sunshine.gamebox

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sunshine.gamebox

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.sunshine.gamebox

com.sunshine.gamebox
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4627

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

journal.tmp

Path /data/user/0/com.sunshine.gamebox/cache/network/journal.tmp
Size 33B
SHA256 92e87187fa61d8d625dded97035fdc062811dfe4cd61f33632b2fd3393b7b84d
MD5 b45ba83b06d0324bfdb64cb730ba10aa
SHA1 02c1d65823ce94bf1e9d0dc5fe756017571d558b
SHA512 8b0ae65ba4d013024c294c831328e942a9880e013999eac95ef87b1c54fb3f5c48068521f06f86f1790cf7e90cc27b5d6ac009b3a09d36bbb2c9ad6ca3eb9880
MD5 SHA1 SHA512

Submit Download

okdownload-breakpoint.db

Path /data/user/0/com.sunshine.gamebox/databases/okdownload-breakpoint.db
Size 36KB
SHA256 f4a4f8d3e92ce7e4444330ff504a8899fc75623bec034de3b9b3abe0689d5994
MD5 0e60c251fa77752b029d4dedb90a9cb8
SHA1 556ce17dc2ce1763c1e7d507f671a9b79ffcf664
SHA512 93d9b2805c45cb528585eeca159b61d3dd29537c4294cfea937c537ba9d0f6837d42bf0e75e92bf6a538f4a2535e308e1a385c83f35d216b34f27c9e43025ae1
SSDEEP 24:TLXAU5BIUtL8ZDXileMLbtZGzS+N8GSgGQQe:T7AU5BIUi6eMLbtYzjS
MD5 SHA1 SHA512 SSDEEP

Submit Download

okdownload-breakpoint.db-journal

Path /data/user/0/com.sunshine.gamebox/databases/okdownload-breakpoint.db-journal
Size 512B
SHA256 3cf914b525a368706624a1327babb8df5c47c06fd188cdfcc0e8023139a2c912
MD5 29f2eb530305b5f554a1b2a0ed30a7a8
SHA1 42357a30af84b92a084d209755558949519a0cea
SHA512 a2957d98c03718f59b56e693e76ef6cc79312e6c7e47532f8563ad8a1e82053c483cb017221f57e624dbfa808784d9e962567107a42eafd9c5b28ea22e7934c0
MD5 SHA1 SHA512

Submit Download

okdownload-breakpoint.db-journal

Path /data/user/0/com.sunshine.gamebox/databases/okdownload-breakpoint.db-journal
Size 8KB
SHA256 35cfed86a557ae91166d05ed658a7bcaa64a29310f5775e341669150cbe8005a
MD5 7f2e399a5c198a1598edcef916936fb4
SHA1 a899bfca4c0551bb74ff763d84dd015ccd40247c
SHA512 14de08cf2a2506fc0ce72215f1ba0efed355563e5b6a620d6982a6c8f30a46cceaaf8d67d18025daa71e5c2d85ea8106a34d0e9d70b6d92a844052f8bb6f179a
SSDEEP 6:7+/l9Sn1Qkg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKql:7+tPkqLiuWdYRmBEyPbbl
MD5 SHA1 SHA512 SSDEEP

Submit Download

okdownload-breakpoint.db-journal

Path /data/user/0/com.sunshine.gamebox/databases/okdownload-breakpoint.db-journal
Size 8KB
SHA256 d8ff645be806f678130b191bbdd70e7b90b0b0548b2c29274a2fe0eb222d3d24
MD5 be2886da41f713ac23dbdb2a3fadc743
SHA1 6d2857b582e701c4c822fb2e6ab7ac606e56e754
SHA512 9ba40956910081672e530dd29788ad289e0a834dad99295f800941e1ad55e1c31550663b078a92e3106952a9b0654769b6eb9b0607694171c3c4abcf5888b354
SSDEEP 6:7+/l9xE0Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKq29M/6x:7+tIcqLJdeWRmBEyPbb2Sc
MD5 SHA1 SHA512 SSDEEP

Submit Download

__local_last_session.json

Path /data/user/0/com.sunshine.gamebox/files/__local_last_session.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

__local_stat_cache.json

Path /data/user/0/com.sunshine.gamebox/files/__local_stat_cache.json
Size 758B
SHA256 ae3714ca5b1d0daa2e960bbc408688f30d2f69ae2f8ae7e8e10c99fed1878e07
MD5 bdd89b2bf49dead94d31baf3569dd7e6
SHA1 c2d9e0d321cbe3b41d6df74305ab8de1e6575560
SHA512 6c34b5594b164075f0b788dd35b7ccf5358e4d1b259afab9b80b108635058cfa88ae80d06b2ae2fe404cd1889cac225a619971cd5fc3d7936d8ebfbd3ea2522b
MD5 SHA1 SHA512

Submit Download

__send_data_1715995668531

Path /data/user/0/com.sunshine.gamebox/files/__send_data_1715995668531
Size 1011B
SHA256 966adb356ebc1e0f0e3e565101742c39f667b6a4be8d84f762e43ab3057d8499
MD5 ebe279d4cde088b5bb7f612735070aa7
SHA1 00d5393502608485d3a7f04dca1d92a7c272294b
SHA512 a6d510b140ec7ad34a96bae30b7d500bb9b826a639dbffcb09fd4fc8b03d930a456e803300194b6390b5d7a16a4f46d864ecef34a2378e83193a3929d21f0cae
MD5 SHA1 SHA512

Submit Download

libcuid.so

Path /data/user/0/com.sunshine.gamebox/files/libcuid.so
Size 109B
SHA256 2faa36aea8cfdf100cb451288d19c14c5b23db7f35bf21d1da35754ef5119c2f
MD5 63038999a0028da5cb3b3fe1b04f761d
SHA1 a16a6fb60b69b807cb6ecc9c826657af98404fc5
SHA512 141a907f156385449ed5bbae7d7071c7dc892f84a8efbc7932526b31c675aba8dddbcb972b650ba6e60477eeced0b8ddb56a6e79bf93a71474c725b49e39a641
MD5 SHA1 SHA512

Submit Download

trace_circle.data

Path /data/user/0/com.sunshine.gamebox/files/trace_circle.data
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 20KB
SHA256 72d1e0672f5346f5904aaa5cb09085dc2b71bc594034760bce25fe973fccb80e
MD5 1c8872cc763afb2f791a9347e8dc895b
SHA1 92d9e156ea2640bdaf7e883cb8e4e11264e381ab
SHA512 58327074c8b6442221caf181c2f979714d98240c4a8e43ea41b10eb11f67d3941731ad0ac0a6edfe49f2fab2081f4e8cfbb22ffc2652648ecc594054c15d8e00
SSDEEP 12:TLyKPXDyNTSFbyNHUP9YERmBEyPbAVOwG:TLy2XuLwY/GSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 24KB
SHA256 03024cb648aea2f615db16ad719bb230e4f7ae7b54c47dac309089821c45fd28
MD5 915b14670a6e358714ac6afe9458360d
SHA1 a80bce9280db4aa28fa17f27bebdc9c1075ca964
SHA512 ca97b5a8f52446894d36feae7d8d3a76e0d361b914027705ee564ab7b4855faa7faac702ee3d1542a9c2c253cf60fc6e0c1fc517f998b1b92559c36a6170180a
SSDEEP 12:TLWemHWzkya9YurNTSFbyNHUP9YERmBEyPbD+:TLu28YuBLwY/GSK
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 24KB
SHA256 380b734fc1999e440c0593521be28aeaa9f246ce51b101bbc88a48d0c6d3bb65
MD5 f3f13aa4ab95345397ea53f531c855e7
SHA1 7a0ff30e05c33d21472aa3de4d2a7b7a4bcb647f
SHA512 95583c4f303f0b4a27a75e5f1fd4dce1ac657810e8437f3acf0fd9838f949b7612349fec236349eeb798ded79c6118f4859fee26024b017bd38c4ce8301a88bc
SSDEEP 24:TLv8YuBLwY/GSP/V9UJChjlK6KzvlGwfdca108q4x5R2Cy2xcR2:TAXBLwpSP/X3hjlKBlfdLZyNw
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 24KB
SHA256 7d192848b098f95fe27619f86119f15955f69994d4c6817f2beab5747f4e6ca8
MD5 7fbfb29407891247f625c28e893794de
SHA1 46ffd63050fb81f6d4b9c38a89b921fe49ef3d14
SHA512 e5e004c11d367bef28903e79ad9143d4be4e8ef6afc79dbb0240d9ad700d0cd0ffc1c393f1985c42837e4a1417ca1dae6b65528bbff7603c46f7545cf6b1ad05
SSDEEP 96:63BPSYvg5pcFm3ltAt7s1k5fEJQ4rShj6lfd:65SYvg5yFcwUQ4sj6F
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 32KB
SHA256 ed9c585d54bea6cb91a2503fe8bd371094c9bae68c18d1a236e9e68a6959fc57
MD5 ce3b52bb2dbf86a5bb57bc80d2b0427f
SHA1 68204540fa584d55693d6a2f6740b892e7e51a52
SHA512 2f96ace9c513524dcd9e4a1666cb66d4a4ac1c038083e66fc670a0647e9898d0b489331a6594dde0e4ff9a46c58f85f0aab0c2a6a0d064eb206104fefb41603a
SSDEEP 24:TL0QfnYe5Y0YuBLwY/GSTlrekQ4ziqdwmzNDw6R2CHl1R7pEEw9+tcV5bN:T515VXBLwpSTtM4ziFmLp1R7qEw9b5J
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 512B
SHA256 0436d38db2329c68ad82a3446dbaf95ba5fe13df1c946f1f7d7b7ae639fbc9b7
MD5 ba076ab94ec6235ebb58719e89580fc1
SHA1 f0e2f30ff058254dd55b4179033d6671dd9b35f4
SHA512 9a5462b6665439012cef7519832b341a1f22269c5323363bbd52d2c8555838c905c35532c32c91a0eb424f0da2b9d771e34bdef174ea4bf91ae412d8920b7c64
MD5 SHA1 SHA512

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 8KB
SHA256 c8fde79e95567c30ca8ab752c3672cb87ee08c0e0f26ba9ad39a643902d3751e
MD5 950c0b791dcf3b126f1c3a0796b748c4
SHA1 04daf74c5e5f779dddeb55346879307e64ef7f38
SHA512 3c15da11b371efc078fa3c341e7ad2451690743626bb9eae3c783185631b19d4197c3beecb4072c3365b7c764f799a173165a143894dc0b37268bb95aed1adf6
SSDEEP 6:7+/l9lNn1dmg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKN:7+troqLiuWdYRmBEyPbq
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 4KB
SHA256 28f7a4d6f1071a7135b4fcdfec86ebe1d6d7d21a8ae70a098cb3a032c8603385
MD5 37c4645d2bc130c7b5535e8a5f254675
SHA1 00152663e58fda6409c30217b1d4a014a4efbc16
SHA512 4e55d921313c4d117ca0eecdf249fcbe6c55b7b321bec81b299c471cd80b4b505d100339b6741acd8536646fd83e3590b768a52f4d8993e455ea5ddb5393999b
SSDEEP 6:7+/lTJPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKC:7+tZqLJdeWRmBEyPbl
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 8KB
SHA256 b6ca2a8e017d183e8c101f44c08bfa0d9dfc517947ffd26951f9b3bff856d080
MD5 60b11302e452d0cd8a29e2de3306dd04
SHA1 ff966286b9798f9baf19bd25e719388ef9396505
SHA512 7d7b71fbd9789c51ec4fdef83c89576fc2ac11cbaf05256ddfc113aa706f43a774becf67648a63a276444493a37dcf7750fc365bad3bac7485396faaa241d9c5
SSDEEP 6:7+/l9FEHPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKkU/6u:7+tEvqLmqKRmBEyPbN06u
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 8KB
SHA256 d4b6a9aced0c25b616118f21e210268282a0c78c8aad4d2128ce8da5435371bc
MD5 559a6fa924b77ff72fbaba726f3cabf7
SHA1 fc1df414d6c89f9ca03fedc6b1fefd6a282c2d80
SHA512 2df0704b29757d65d9020601ca7bd4666a11158e95d6b2b6ea94fdaa197400dc096e55b39677ccf31f93c0c7c6754313105238b5e3bf2b50c7c8d9e3614da92d
SSDEEP 12:7+t5nqLyKPXDyNTSFbyNHUP9YERmBEyPb9a:7+ttqLy2XuLwY/GSU
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 12KB
SHA256 c381c3372cee301a5b466600f7288db97371b67e99bc52903b0fe01cdf3fefcc
MD5 38a8e70068f39c14508586315d784c1e
SHA1 2638de800fd7dfbd7e6c3bab58be27912fc30143
SHA512 ef08028c3ca0b104551305080a6d7e78a156dd21a2f426165a4a72db328194aeadfd8bebb93361877efd0b60d3eb786673169500f212e176abe17124a1d4f8f0
SSDEEP 12:7+tSG+qvqLE4gFydBl9Ye42aqX9YIIkya9YurNTSFbyNHUP9YERmBEyPbN:7+tNqLJfnYe5Y0YuBLwY/GSN
MD5 SHA1 SHA512 SSDEEP

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 25B
SHA256 ae217a66a216f62149256612b78736519493642df2797848cef3f77039c7b9a5
MD5 f8fcacb162f71be4f3865000e6fa27b6
SHA1 092b4ab2dbb25b6430571109accd17b5cdf09d88
SHA512 12646254c2a06b73404c3339f1a1ab5c37220b9d1fe05eae3647b21a10ed58f43bc011cd31a30f016a38f7fbf943e67b599bcc5729cbbef6fc983d42b4e4b228
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 55B
SHA256 10488e2e633eafe3da4a062cc54ff72ea42070ba42b36eda8ade0e5f28977b02
MD5 886e45d6860381e78afe9203c0b76343
SHA1 28421229ac464b2bbbde5ff0b7981f8a9b4b7188
SHA512 a302c4240a450c4f87b338eda732c78b13c87421d73dcc580c9bb3ee2b1b06007572bf0ff8eded5f1e3688fb7b7b00b848cca49a2215e7f9c39ce8e35a290024
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 84B
SHA256 bcaad63da9ecf69fee9beccb99ba47ec19620807b00c8e67d209117ddd1a8e68
MD5 1cb85f972e401dd3ba3cb0d4a1c51252
SHA1 284ec827e21037f07b50f367ee5ccc2fb4e977b7
SHA512 207398e3d9482ab4cd9a3b7c10fc1f5cbec73ac7d88dc8f89bd0ae1ae07ec1e395fc9e4ac70cba363fe6916f40260bcca61e92b79ad57622b30e2c80d8a63d17
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 114B
SHA256 656459ff95c45a852b1e2c0449ce826dfafe89486d4e489937751326b5cdd02a
MD5 e70d4a82143178b4dbd7df6f314630ac
SHA1 9bb764b1a1baf4858fd62dbbc8547749d2c4df5f
SHA512 55d68eac80ddc43c15a14932edcdd86254f64a84b8ed02e11048e16a07d64421cbd2d5810e610007c8aeb7ad55f3a98e67e9b3b465ba90ca20f7c31410ecd97b
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 138B
SHA256 324a5e5b67b99900ec87109156f03491c3c01fb4656b501382442f115d576172
MD5 6d3d2a437f47a41ac6367f85fbd31148
SHA1 118ec41865092b2dedc09ff89d4478020325ca5b
SHA512 c5a72837b132fd9202edbc6f8c849d62f4a23faf5f7ceccaacc58589d1f049b816f47da49af2d25f817c4387c1b456bd0a2c036811c4f210b260025b9d65f795
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads