b8059c610fbcd50b038bdbc0d207243deb6255bb8f09020a0acc06c9d237550b

Analysis

max time kernel
3s
max time network
131s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
18/05/2024, 05:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
534674063f2620470bdcf5836e6514af_JaffaCakes118.apk
Size 10.3MB
Sample240518-gn2d9aeg34
SHA256 b8059c610fbcd50b038bdbc0d207243deb6255bb8f09020a0acc06c9d237550b
MD5 534674063f2620470bdcf5836e6514af
SHA1 654019291e504a352d3f1908b66649a9781f3e80
SHA512 efd6e9745e01e258b748f48b3703f3c4aaa417469a932d679bf2962963d0268d4db9b3aa69e1a6e6ad031d29d65ca6e378eb55e2627bc7a7e625618bdb5d129e
SSDEEP 196608:Vw23XnFZkhXPfaryKxUJlvIK1rRUFA11etSwbY3rBqD3PauNXGipcEbLmLECQUm9:Vw23XnFCh6GKCwK1rP11fKY9qDvBvmLM
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.hfhy.student

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.hfhy.student
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5223

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bugly_db_legu

Path /data/data/com.hfhy.student/databases/bugly_db_legu
Size 60KB
SHA256 6374a6a8a19045bf511d7444077520b1821cc69332cad555c1b53b30541a60b7
MD5 8104fdc24fb773743ea889b7f05e7e1d
SHA1 08ab913cd14227f2deb6e28f3e1dcf3f0f0dc9e6
SHA512 f049b93a3a92a607becad1a0df0ba169caf3b77192d20a1b08704eebd2c85dc16ad57bcabd7e7350a7f4148df97f27d8bf1c13b7cfbdc3fcce27922e810ab8f2
SSDEEP 48:TzfrQiw6uMg6/YBg72meposS+sqMKAgM:/4m7FK
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.hfhy.student/databases/bugly_db_legu-journal
Size 12KB
SHA256 24f6809f799ea22a69773ddaa993041be480f3153e03d05469cc5d32cf9062cc
MD5 ad3c6cc776bd94c16c971b0f35059a2e
SHA1 2ebf6b639088e3dc0d4449769ac9fb6ad328e214
SHA512 fb4756f29147745538cd7888404a57b2dd7c2016639650f9c64082688656ba79683c4b21c34ddf1bd0bbe21f5ce50bfa52271bd06d0096d98e432976cd0f0ee3
SSDEEP 48:7Mk+oQAWvqjfrQiw6uMg6/YBg72meposS9:7EkaO4m79
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.hfhy.student/databases/bugly_db_legu-journal
Size 512B
SHA256 f7271628ffa39dc4bf5aafe8aa917e74c7095da85c09a216a4ab93042ce6d4f6
MD5 8a4cb4f0dc8b7ad179ee3e28bc7d6e1d
SHA1 7c31e287edb49f44718a7eed66a25fedc69e1924
SHA512 54e111df0866f887b5d71faedee74cdada966014ce32e8f6c1bac339276e3129fb20e16cc76eb1928e7042d02c72a552ee8ee49cd5e8664cf9472fa4a5d7d94e
MD5 SHA1 SHA512

Submit Download

bugly_db_legu-journal

Path /data/data/com.hfhy.student/databases/bugly_db_legu-journal
Size 8KB
SHA256 5c5ad72e00e5cc15a8ac144f8310a15ba694f1df44db3a2fd549a695c81d80be
MD5 e13c552a162ac477064d2b6a47ad4d72
SHA1 438120d20c50e2d834358a45ad6ae852c61b6770
SHA512 87d9972353b7d0efae14f7cb00fea5299ed4f6f0e476935c93f888fd208329b0e278861832c9a5b786412fa743c3d15f80d6ba07192e7bf3e5951a2bf96cca7f
SSDEEP 6:7+/l9O4n1Shg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKwu:7+tcqLiuWdwRmBEyPbQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.hfhy.student/databases/bugly_db_legu-journal
Size 8KB
SHA256 c51bcddb691bbdc9543c99c9376c6019099e4795ccbb3a2c979276d933b38e7e
MD5 4c04d152c85704d4e175c3b507905b1c
SHA1 b8a50ae407bbf93770432483319cd7ea068bd6d8
SHA512 cf03867203be1c8ed80b59bb1584d6a8c27ba0f17a06a7c8c1237696f978aa44b81feb4b9846371c751d6ba4f9932aeedd6b66e92a3385fd6b7f50b0c6ca2fa6
SSDEEP 6:7+/l9MjHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK+4/L:7+tsqLJdTRmBEyPbP4L
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.hfhy.student/databases/bugly_db_legu-journal
Size 8KB
SHA256 f74bda6ad56f416221ead671d3796beeb8411273bd8fbc14da214dcf02ecfc25
MD5 3181b8c810a03f8d0ba4d543e76068ea
SHA1 a2e5987a5bcd8a877f155339ece951a4046ad283
SHA512 be332a2be7fa4a87d5a871ce2f0afca70870ca719cc742567efd5513f6460d0706950f74dd8100d44667b824a6e6086d30d8da93218267dd2e5a87dbfd3ef6db
SSDEEP 24:7+tlqLTt/qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSD:7MlqDfrQiw6uMg6/YBg72meposSD
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.hfhy.student/databases/bugly_db_legu-journal
Size 12KB
SHA256 1a191cb02edc729c3ca2babc9a34e8b22e0ccbc19948f1c846a852641ed5c24e
MD5 17c550967f300d698841360b3013ed36
SHA1 2339fdd271de06994ab4a5efc71ba3fc22ad7c03
SHA512 00523df882e3182c6e832f45cf0500af76af01eaa261a12b638f35a9c88187e542b5a3467ec97b0af5a8a6761f28d88eab4e9006fd4f03a48746b42623035b5f
SSDEEP 24:7+t5oqLMvtslqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGS5:7M5oq3DfrQiw6uMg6/YBg72meposS5
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads