bc3a617f74196d909933383609a20e7696277c851024bd6af48b4e95ea2d32b0

Analysis

max time kernel
3s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
21-05-2024 11:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6331f5c84fe283f7baf4cfe1fe5ac433_JaffaCakes118.apk
Size

21.3MB
MD5

6331f5c84fe283f7baf4cfe1fe5ac433
SHA1

1de3f20bc7f7849da8b5c7eac4f59ccdca48ee90
SHA256

bc3a617f74196d909933383609a20e7696277c851024bd6af48b4e95ea2d32b0
SHA512

89fefee26c9d5494078b7516a9c67f3b51c1f28e8992004d76bc29eb351cb50c77d995c353e9e31ceefe8a2f95ae2453e8f59afa6d26a674805e5a0f4ef77a42
SSDEEP

393216:jQ0LWU9qM9plIYmcio52XKGuL71Sr32bUPrtr68YjycHCCIVLuxR4:jd/qM98ctGRcST2bUjtWUgct

Score

7^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.kflyy.feilaoyingyin

com.kflyy.feilaoyingyin
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4236

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.kflyy.feilaoyingyin/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.kflyy.feilaoyingyin/databases/bugly_db_legu-journal

Filesize
512B

MD5
2de5e71dd89c7ec19eb61608134bc524

SHA1
c9d2a9bb77b524a38cf4fba1ccf3166e1f10ab34

SHA256
925a71e16f53059018c47ff0b632efab66038d71dc366df6d667c87d735c6b59

SHA512
1b15235604ed5b9cd3ae6b2efd48b4c20fa27b8ad07c3df0e49c21f2a2c0dea726aa5f99dbea7949de63549dfdf89849ab7d4a469f0ada2c52894b8308a7d13c

Download Submit
/data/data/com.kflyy.feilaoyingyin/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.kflyy.feilaoyingyin/databases/bugly_db_legu-wal

Filesize
92KB

MD5
e9087075d2ce94b3885bf3192f4b5dd9

SHA1
205f39a0d9f9923db4291b1d7668699d817f75d3

SHA256
375cde4fbfcf5640efb5abb721452f813d73c1060937aef40a61593e6ffacfb3

SHA512
eca79afdcf4304d759e3e12a871e56397e51634f38f0c1a72b1a638961433e3011755a6258205233f9d8bdf30ee3270a9a9f226da6ceec1b16a6d1dc94740806

Download Submit