Analysis

  • max time kernel
    160s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    21/05/2024, 01:53

General

  • Target
    61ac68f9e8401b3e94149f4aa22d8f1e_JaffaCakes118.apk
  • Size 9.4MB
  • Sample240521-ca3myaed59
  • SHA256 2896a3ad8920a40bfa8614fea54d31745c148d8ccd57936d50e43e421ab35c0c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.tongyu.scbquanji
    1⤵
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4616

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .fsgkea

        • Path /data/data/com.tongyu.scbquanji/.oabugaij/.fsgkea
        • Size 1B
        • SHA256 334359b90efed75da5f0ada1d5e6b256f4a6bd0aee7eb39c0f90182a021ffc8b
        • MD5 SHA1 SHA512

        ua.db

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db
        • Size 32KB
        • SHA256 54fcaf30cbf6acc7b9610c22a475cbeb13e987fe4fa2423b94c71cd878e0a3d8
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db
        • Size 16KB
        • SHA256 adb5722558ab3f339a79964403f8fe72c70ec70728460f674514cefa52cab68a
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db
        • Size 32KB
        • SHA256 949c594ac28e39bd7c1592cb87625acdf8672a415da1728e79280ad0cb6c4b33
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db-journal
        • Size 512B
        • SHA256 422a529f9c3aa89914a586f7ec10b4d512047367811236cdde9a67a1a57b6e9b
        • MD5 SHA1 SHA512

        ua.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db-journal
        • Size 8KB
        • SHA256 35016f96ca7704e7674d8953be1cc8252148089eb0d0551c28cbaa1b1b731e54
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db-journal
        • Size 8KB
        • SHA256 27806fab5a207c4c1afdfcb9568505244be855a373915bfec4666b2e5aadaa67
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db-journal
        • Size 16KB
        • SHA256 003304fdc4c8e98d07a68d9e0f33c39e3558a6ae3a5651327061ac4a25a606c6
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db-journal
        • Size 8KB
        • SHA256 e95e518627164c62bb5e5465b09dc50609d55610426ef657ff0720e694bb9394
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/.ua/ua.db-journal
        • Size 12KB
        • SHA256 1cbf86dc0167ce6dcf75a6221b24fc73e00ccb381505d85d6e93e97115dc3e41
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.tongyu.scbquanji/databases/cc/cc.db
        • Size 36KB
        • SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.tongyu.scbquanji/databases/cc/cc.db
        • Size 36KB
        • SHA256 c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 b5b09069dfa5e81ea4531a17873d1fd3dcde3f5119d7bb1c65462c2b4cf78dcb
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 72d576c9fcfd200898a80361bc55604d6559b396019134ca7e4a9509c1a4e1cd
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 1d2edf924ea10ce39478ad61bf3853ed0f6088ccd5c167eaf4b087a26b8c350e
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/cc/cc.db-journal
        • Size 12KB
        • SHA256 92230c17c163e6d4aaa517c722461515f1e572388ee3410d8286e28fd718ad66
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/cc/cc.db-journal
        • Size 512B
        • SHA256 3981abb29699fcba04fe34c1f21f804a48b0f9d57f85e9bde0381f266362c18a
        • MD5 SHA1 SHA512

        cc.db-journal

        • Path /data/data/com.tongyu.scbquanji/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 b9d76bf71cdfd683141c81b152634695a62c3a398544c148e8ad33f6fa520c20
        • MD5 SHA1 SHA512 SSDEEP

        classes.dex

        • Path /data/user/0/com.tongyu.scbquanji/.jiagu/classes.dex
        • Size 5.8MB
        • SHA256 df2f3c853bb7f15a57396779ee0c135bd258d820496919105c461c7936a5bbf4
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/user/0/com.tongyu.scbquanji/.jiagu/libjiagu.so
        • Size 487KB
        • SHA256 baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu_64.so

        • Path /data/user/0/com.tongyu.scbquanji/.jiagu/libjiagu_64.so
        • Size 525KB
        • SHA256 dc9d0faf8652513f0a1eed698b9559e0bbfaefe12c203d239f551ff557abbe5a
        • MD5 SHA1 SHA512 SSDEEP

        085f2401c8c3e99f38501d9f40ce272ad6e75b9d2384db768c1c5e5ae857d6da.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/085f2401c8c3e99f38501d9f40ce272ad6e75b9d2384db768c1c5e5ae857d6da.0.tmp
        • Size 1KB
        • SHA256 031a0110f96a09ea8b57f37219739658ccf30039517894b542feb9b70c714f3f
        • MD5 SHA1 SHA512

        128074b21d86848138c92881db98daea10e5729b99ae7f17ada71ad464bde4c9.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/128074b21d86848138c92881db98daea10e5729b99ae7f17ada71ad464bde4c9.0.tmp
        • Size 1KB
        • SHA256 8e6cd94cd25f5e5c15ff3762b139833c8d2cf0499773baa2df7aff0a05f234ea
        • MD5 SHA1 SHA512

        4146cf0864a28486af4a18b79ba242b99fbd7171bd277fc87f0fe0eb50e33e55.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/4146cf0864a28486af4a18b79ba242b99fbd7171bd277fc87f0fe0eb50e33e55.0.tmp
        • Size 36KB
        • SHA256 b68c5ed12cb9a0985a95a318fe8f9cd2c67e6f6b4a416e17f6283be8f0a9afdc
        • MD5 SHA1 SHA512 SSDEEP

        47bcd347ab962733f02f2fc8a7dd003bc9a07d47ff0bcc4a0fabc07a4569223c.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/47bcd347ab962733f02f2fc8a7dd003bc9a07d47ff0bcc4a0fabc07a4569223c.0.tmp
        • Size 2KB
        • SHA256 930c90738203af78af61fa5bf45dd25ef289371e9c97116dc508fb091069b6c1
        • MD5 SHA1 SHA512

        59e3f1bd6263857c8a6893c47691b77844272088d0f9befc0dd85a1d6f8fcb82.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/59e3f1bd6263857c8a6893c47691b77844272088d0f9befc0dd85a1d6f8fcb82.0.tmp
        • Size 1KB
        • SHA256 8f6896f35f572a9c7356af3ac682ceda07c44f9549080cc7754c6a19652001a9
        • MD5 SHA1 SHA512

        64a0d9f1b217ddfafec0071e3f82496a653ab51d7b45859d32d56122f026d35d.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/64a0d9f1b217ddfafec0071e3f82496a653ab51d7b45859d32d56122f026d35d.0.tmp
        • Size 2KB
        • SHA256 07bd59c9635a0f672487384800c1ef8dbab8247451078e7ca305061f884f9386
        • MD5 SHA1 SHA512

        6ffde6b9c83ae8a8d0cdda4b9a51a37bc14e112677bf2f5ebe4000b40341ed95.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/6ffde6b9c83ae8a8d0cdda4b9a51a37bc14e112677bf2f5ebe4000b40341ed95.0.tmp
        • Size 17KB
        • SHA256 e273f302116b5c1055f052271d9252ab291d179a88c026f72cf562786b905ccf
        • MD5 SHA1 SHA512 SSDEEP

        705ce0c22c6c716dbc43dbdfe1fd92085d93fc774fbe0e61bb73284c3371b948.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/705ce0c22c6c716dbc43dbdfe1fd92085d93fc774fbe0e61bb73284c3371b948.0.tmp
        • Size 2KB
        • SHA256 f16511945f48f04de14ea1ed5365c7a771e38ab63e015e5e3b808e8214e8d1c1
        • MD5 SHA1 SHA512

        842280915512f2e608f36c009f458dd08fa8f0e8de08b160fd27a6f880a98ce1.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/842280915512f2e608f36c009f458dd08fa8f0e8de08b160fd27a6f880a98ce1.0.tmp
        • Size 2KB
        • SHA256 d3ef88651fb5b3ada38bb3e3717e5178f63ce6bca9f2a23bf872bd0fbb026cbb
        • MD5 SHA1 SHA512

        a6adba1543644e852503bf840ced90e5b3857e5b406e6321d63f4ec0dad0ce50.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/a6adba1543644e852503bf840ced90e5b3857e5b406e6321d63f4ec0dad0ce50.0.tmp
        • Size 1KB
        • SHA256 0305660d2f53470cf20e4d0ab603cae4060a915d71e627c4fd8f439725dfbc20
        • MD5 SHA1 SHA512

        af636e67eca8e6ac83485e7e1f2ae1933b877c4e0931d8432ef90008b4a7978c.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/af636e67eca8e6ac83485e7e1f2ae1933b877c4e0931d8432ef90008b4a7978c.0.tmp
        • Size 2KB
        • SHA256 2ae3da896031da46eedc5dcf10defbf3a4e2ac74bb8374937f9462e7f0fa7c34
        • MD5 SHA1 SHA512

        d0e81503e05a91497927c2b36e985fd973943141e834d372f0031f74698e0895.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/d0e81503e05a91497927c2b36e985fd973943141e834d372f0031f74698e0895.0.tmp
        • Size 27KB
        • SHA256 0a08d6026980f22e3873bcc573bb939e2ca0f21b4e92ee721be01687bc1f7204
        • MD5 SHA1 SHA512 SSDEEP

        d1033366c029f31eeb86956ecbc36aa5cbef93374b16e392d0a2629bfeea6bb4.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/d1033366c029f31eeb86956ecbc36aa5cbef93374b16e392d0a2629bfeea6bb4.0.tmp
        • Size 2KB
        • SHA256 124bedb3662c2092d3dd51378ba19767e05741eae4f175e5f95e7ccb17444353
        • MD5 SHA1 SHA512

        d640e002d44c81857103eb8bb983f8c72ac92ca4847b3ac2dfc7898d8c7126cb.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/d640e002d44c81857103eb8bb983f8c72ac92ca4847b3ac2dfc7898d8c7126cb.0.tmp
        • Size 2KB
        • SHA256 e01f37b6227cb4ecf893ebf9f7b38874cdac29aaf3762c9960f2a3ea09cafe72
        • MD5 SHA1 SHA512

        ffa587bf6c2d6d3c2ca7efdc17bc8de227c8f6fc4fcf00e485ec7f37579362c3.0.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/ffa587bf6c2d6d3c2ca7efdc17bc8de227c8f6fc4fcf00e485ec7f37579362c3.0.tmp
        • Size 2KB
        • SHA256 31ea26af52531860e104d0e5ccab586a53fd874298391437e8fa8e89405564e0
        • MD5 SHA1 SHA512

        journal

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/journal
        • Size 2KB
        • SHA256 7a1ca5b32d5183ea14e7e3c7bd7c752a3cd9277bc3e9cb721c66b83cae6e7fa5
        • MD5 SHA1 SHA512

        journal.tmp

        • Path /data/user/0/com.tongyu.scbquanji/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        .imprint

        • Path /data/user/0/com.tongyu.scbquanji/files/.imprint
        • Size 938B
        • SHA256 e9d986f28d30f424e766046f0771debcc395facc67fa22f366c714a5a42d1785
        • MD5 SHA1 SHA512

        .jg.ac

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 84bd8e6b6c0315f0572e8baf8a40ef68cff779d73ae2276ac308683d17a3b825
        • MD5 SHA1 SHA512

        .jg.ic

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.ic
        • Size 32B
        • SHA256 12b51eb53d5eea95e0cae3190bcbd0aee1730d18d2ceb4b99255b5ef6d15bda5
        • MD5 SHA1 SHA512

        .jg.pk

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.pk
        • Size 32B
        • SHA256 71b38d5a50eacffab61fb662bb58f992efea8c900cea0ab00bb457fd402c8e6a
        • MD5 SHA1 SHA512

        .jg.pk.h

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.pk.h
        • Size 64B
        • SHA256 c3d3ff5e12b07bb4a5bec3a538bfb5b1b5ac02aedd26321ea5a8a846ee50d02c
        • MD5 SHA1 SHA512

        .jg.rd

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.rd
        • Size 32B
        • SHA256 1707510e4caa63042626e5d1167662b6ed030eeb4b1b7d64a591fd4a6f9c72cd
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.ri
        • Size 307B
        • SHA256 ecade3bf9b48f617817b4e5bc808811bfc783b764b04e47d60debca60bdc6155
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 9442f8942ad588a9582a491194d490bee05f7678f18f8cffaadca45dadaf4529
        • MD5 SHA1 SHA512

        .jg.store.report_cf

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.store.report_cf
        • Size 32B
        • SHA256 6a802b3e9843fc5403f511c045fb0d75275968dfe350f83eeefc402954b11427
        • MD5 SHA1 SHA512

        .jg.store.report_cf

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.store.report_cf
        • Size 54B
        • SHA256 e96b963c803566ecea6b89bcafa848b2148bce5cbc4a2850d69466569c621f5c
        • MD5 SHA1 SHA512

        .jg.store.report_pid

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.store.report_pid
        • Size 54B
        • SHA256 034f574af0e6c4a022b5a5f70e8f09d43cccc03c699fa7bb3af0d5c1ff46479f
        • MD5 SHA1 SHA512

        .jg.store.report_pid

        • Path /data/user/0/com.tongyu.scbquanji/files/.jglogs/.jg.store.report_pid
        • Size 32B
        • SHA256 c94a72aa111aa87517f1ec2d2663d4ffbd379940e8afa4ace225a37d60defacf
        • MD5 SHA1 SHA512

        .jiagu.lock

        • Path /data/user/0/com.tongyu.scbquanji/files/.jiagu.lock
        • Size 27B
        • SHA256 42da96cfc8ff1ce146404de848c79661446d7b70a0357061d2f6683ad3e907af
        • MD5 SHA1 SHA512

        exchangeIdentity.json

        • Path /data/user/0/com.tongyu.scbquanji/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 5fb4993bc51e5db31af14e679cc60372e3724a665d97161d71ab3469f1355cdb
        • MD5 SHA1 SHA512

        exid.dat

        • Path /data/user/0/com.tongyu.scbquanji/files/exid.dat
        • Size 63B
        • SHA256 4c89622a97d274b73961e8a42eebed4039628726736b19030514b9cc555f2363
        • MD5 SHA1 SHA512

        umeng_it.cache

        • Path /data/user/0/com.tongyu.scbquanji/files/umeng_it.cache
        • Size 350B
        • SHA256 b86cec025c0699b9cbd315e3264a3aba35a8e4db6cce34464035f4834374109a
        • MD5 SHA1 SHA512

        umeng_it.cache

        • Path /data/user/0/com.tongyu.scbquanji/files/umeng_it.cache
        • Size 178B
        • SHA256 830f2335cbcd64a9c0f5f62b177c94b52ab5f41bf40bbe4c576e6a69fd2893cf
        • MD5 SHA1 SHA512