4f02037fadb849d959136ed36bc3e2c189d6769285d4c3d28e4bfdfc7512f733

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
19/05/2024, 05:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
58d4a608fb38475b210ac75fef1ccbfe_JaffaCakes118.apk
Size 22.1MB
Sample240519-gf8tcsda7z
SHA256 4f02037fadb849d959136ed36bc3e2c189d6769285d4c3d28e4bfdfc7512f733
MD5 58d4a608fb38475b210ac75fef1ccbfe
SHA1 d17ed3d06493947fbf2ddf32abc300be6d431a16
SHA512 723c0ef9500b4c5a10fae756817f75af1a54c6d545b61fb255e1826e2a7e6cdde2937b9c10ec04081dfba67f416ed3f05a10036163ea3b30f9debab0dad23066
SSDEEP 393216:EO6Vd9USONOKrvq9u/8Vc3EE0rasvRlQmW4amT8kzIbczy/klQXANZFeuj:ERVd9i7qI/LEE0X1jPTvzIPkuQNeU
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.iyoudoock.citymine

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.iyoudoock.citymine

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.iyoudoock.citymine

com.iyoudoock.citymine
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
PID:4608

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cityMine_db.db

Path /data/user/0/com.iyoudoock.citymine/databases/cityMine_db.db
Size 20KB
SHA256 8552d97b821dff2ed993c8a3eda86dbd0a33928ba7205f2c134ad14fce24ac97
MD5 95a7b0eb2e6bdea41a5ddf4f1f429d36
SHA1 e2a6b940c333c28013ed108159a55a148b2840d1
SHA512 db5616f85619092f60939e21955d842405c34b3b4a9580922dcafc56fc9086b8016b6169ffb4bb55226ffe0b6ff8877241aa21a237f02003170b9657077db363
SSDEEP 12:TLWzxtp4XywjzpbXEV5WsnjUffI+/ISlNQ62fBcf6BrEbl5O5UIfUAgX0IfIfqIf:TLKxkwEnZSQJbIFGIyI1vpGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

cityMine_db.db-journal

Path /data/user/0/com.iyoudoock.citymine/databases/cityMine_db.db-journal
Size 512B
SHA256 6b932c15a69918aa3aafee779762432b95305b9f12ffb54a09f784de5044d1b2
MD5 0c5f0e5b0ac2f560c811e1efe1f8a888
SHA1 0d6367e045b0615577dc859dea8fa1ab5c74d7e9
SHA512 5f7c33180fd4319fa13eeda527322d359961bcf8f1f78d1b8866647a39b5adc69d916c9e6ecb49e685ef01b2a27af95ca84194edd66077acc6b31159b4f25661
MD5 SHA1 SHA512

Submit Download

cityMine_db.db-journal

Path /data/user/0/com.iyoudoock.citymine/databases/cityMine_db.db-journal
Size 8KB
SHA256 fff2625bbee908a021930c50d9bb642e29a26503f73cf7b7848e70301d311866
MD5 a35c64c6299f03de6a2649dc71acc8ab
SHA1 4dcf7e464bd30a925cda5298bbba00851b35be51
SHA512 9a0072c2b35911491b6065c9fbeb7bb6c39fbcc57a2eca64c4d5bab09b61b317938c40b4beda16afb0fa5faee6bebeb7db0c06e5cd48e276e372c79c0cb39ffe
SSDEEP 6:7+/l9mcFn1exg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKCg:7+tSxqLiuWdYRmBEyPbm
MD5 SHA1 SHA512 SSDEEP

Submit Download

cityMine_db.db-journal

Path /data/user/0/com.iyoudoock.citymine/databases/cityMine_db.db-journal
Size 4KB
SHA256 de51fc94650c66e900e95c14f9638b209672b3c8a5b650e1d133f52144df3d78
MD5 dc2f1011929070ab260045382b7175de
SHA1 87377d7532bbacfd2817cbade3eab3986ca3ceca
SHA512 90dcd113e76f856e0d402ec78b0bcfa10f7987b85c59bce4185849b0ef1bddf548e19f3423a9b4fbcd7f0ad81fb1bbdf89f1db19d40bd607e5c3d017275851c6
SSDEEP 6:7+/lFpFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKq:7+tXBqLJdeWRmBEyPb9
MD5 SHA1 SHA512 SSDEEP

Submit Download

cityMine_db.db-journal

Path /data/user/0/com.iyoudoock.citymine/databases/cityMine_db.db-journal
Size 8KB
SHA256 780f9895f70811e787dcf68d7ab9fbf29e4ad3e054e98b25a9a3ffaf8188e22e
MD5 1d0a95cdd64947a6898be2dd8ca3ef06
SHA1 f34e5c642fbe360a0ed4718d83ac5b67afa4ca94
SHA512 15658f9d793e595223355771934a1b410a9bd4077fd52e17229e3fc0293de155606baec70f005a7b5e16aad9137a6f199c04a155e335f3b24fc7374853ebe4b7
SSDEEP 6:7+/l9BPg9bNFlqha1/kPlOERX4PBX4ogLugMBX4suuKoH/M9:7+tPqLm9RmBEyPbxM9
MD5 SHA1 SHA512 SSDEEP

Submit Download

cityMine_db.db-journal

Path /data/user/0/com.iyoudoock.citymine/databases/cityMine_db.db-journal
Size 8KB
SHA256 7ce7a9853ec197a29f4899be4943ad16b31a2a2e775a28740943165756a2ccc1
MD5 906e252f8bb432784fdc67329685a982
SHA1 7844e5b0c014cbeabb3b1789537ceef64b82cb16
SHA512 6b6df62ccd02081dfe1967d73b7fa7a4ee9d385b4fe465bb0dd30a6cb292d12554293c10f06d9f0852132b62466c8e4ad67c58015b9d12996431f64ed6d64d3a
SSDEEP 12:7+tkqL83w5WsnjUffI+/ISlNQ62fBcf6BrEbl5O5UIfUAgX0IfIfqIf8y11W2vbm:7+tkqLrEnZSQJbIFGIyI1vpGSCF
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads