d54eb4e7c3f78a4a958bb0b194b1f3e3aab14680558ccc5cfce90c4f5be49ba6

Analysis

max time kernel
127s
max time network
149s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
18/05/2024, 16:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
55ca77ae0a55b3f6e44da66a25fcfb79_JaffaCakes118.apk
Size 1.4MB
Sample240518-vec7ysde66
SHA256 d54eb4e7c3f78a4a958bb0b194b1f3e3aab14680558ccc5cfce90c4f5be49ba6
MD5 55ca77ae0a55b3f6e44da66a25fcfb79
SHA1 f4afa1db5df237bf2c7267b945be85486f75e592
SHA512 5c384a2a5904811e10a0bfd7866e492997a9ba0e90ba5277e994c49e5560712297962b56f0be7a7d9ff6c024092b36d46222ed4a1a27274e9837ff63b6d03816
SSDEEP 24576:P/ze2AcJRpxReCNX/DZzm+yilRh0wUwfbGukwa/u0Q1ceH6JpkejOXAAixlBckXU:P/ztAO5vDZzm7u8Lw0/L2ceApDjOX5io
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.hujiang.news

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.hujiang.news

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.hujiang.news

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.hujiang.news
1⤵
- Checks CPU information
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
PID:5098

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

HJNews.db

Path /data/data/com.hujiang.news/databases/HJNews.db
Size 36KB
SHA256 6a32b87ebef0f13c6f27976874a556072c34c635227f6eea548fe481ca8863ce
MD5 6a0611518a4d2d82f647879886d00935
SHA1 ae5f7386d40187b65071ff398f00e2c0d4e1d757
SHA512 29127082e5129111968e1ffe4d3398a865cde306c1e33c31adc19f54c68b62b9936b171ff8a84537cfc326f3c17160bb7f873c9859704157bc8251e0cfaaab92
SSDEEP 24:TLklg8E+KtG8F5FQjimSKKSU/Q0sQ3/5AnJSYtlVGSgGQQQQ:TIli+KtDr/eU/TsQPSJnSS
MD5 SHA1 SHA512 SSDEEP

Submit Download

HJNews.db-journal

Path /data/data/com.hujiang.news/databases/HJNews.db-journal
Size 512B
SHA256 c5bbacc5c1fcc2ab1cb12d2aa120bde4a6021c354a7ef3dd6282329d6bb06ec1
MD5 65673ecd313777f544709302abd8c629
SHA1 7c9f07844b5ad0b6fab5e8983e2542773fece71e
SHA512 0dd47be7e3585fe12796dc9090cd412c902a20babdecd41744aedec6fde9065c515dc4358397bb72cc481229110ced44c64a4634ddd4eb0496ad191e975cec96
MD5 SHA1 SHA512

Submit Download

HJNews.db-journal

Path /data/data/com.hujiang.news/databases/HJNews.db-journal
Size 8KB
SHA256 f496e6d5291dbd4ea299b2c7d5c7793146f8afced13cb2ca0bb8fb361e92f266
MD5 c5ecb34a91aa92d52ec567ad93fbcf02
SHA1 28190164762fe762a500ef014c7132a9ef33a7e3
SHA512 9a89f355971d2671f2d368cab17aa13ccf9152a91546fe1ec7880472d5c2f7596ff32cb0601beaab3cf99488704bfe25f0f454171e4b2b18c1f33abf10bd4f06
SSDEEP 6:7+/l9W4n1Sg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKSaV:7+tgHqLiuWdwRmBEyPbNe
MD5 SHA1 SHA512 SSDEEP

Submit Download

HJNews.db-journal

Path /data/data/com.hujiang.news/databases/HJNews.db-journal
Size 8KB
SHA256 5feabf6656a0beedc782469252ab73800ad490b4f5e2536d998da2bb44093871
MD5 64b8476817b71a736989b887ffb8642d
SHA1 58f2a5f087b4a6d9e4889cf2773cad49c5c03f25
SHA512 46afd5fc555f69f25a22293dabc8530dfc0ffa42299fc8e665d4290a6c8bcff8ff52a6b4d1495869429d6a8aaca5d48d88eaa001dc6de1806d0fa00899486405
SSDEEP 6:7+/l9CdFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK08l//aAp:7+tcdBqLJdTRmBEyPbaXLp
MD5 SHA1 SHA512 SSDEEP

Submit Download

mobclick_agent_cached_com.hujiang.news

Path /data/data/com.hujiang.news/files/mobclick_agent_cached_com.hujiang.news
Size 100B
SHA256 dda23c35e60a3e774569e21e8c712ff366160cfcf871304b0decd95f2b893a0c
MD5 835692142477573ca822fa80cfa7b51d
SHA1 747b167d1ef50befb2ed8eb9c7760666e10d4b65
SHA512 3ed101444dd39d9a1e2ff15ba108eb59ff2963109b82c9099694211dec40bfeebd1e13dc9a1f3fbe5daa59830ae9c9f3f195de5c3a3ea6cddef4ccfc6af133c1
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads