Analysis

  • max time kernel
    179s
  • max time network
    188s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240514-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
  • submitted
    21/05/2024, 15:13

General

  • Target
    63be972fc9f87bd2089c41932338e617_JaffaCakes118.apk
  • Size 5.0MB
  • Sample240521-slps8aab8x
  • SHA256 2fd595cec1d47bf26e9f65afee4f9e18aeac18d638978d2a65e49c070785b425
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.kong.app.book
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4348
  • com.kong.app.book:pushservice
    1⤵
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4446

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cc.db

        • Path /data/data/com.kong.app.book/databases/cc/cc.db
        • Size 36KB
        • SHA256 6945d75275af161fa082eab8b348f4cdccbab03854963f5e861fde210447e058
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.kong.app.book/databases/cc/cc.db
        • Size 36KB
        • SHA256 66c83ae35e997c33eaffe9c0557d98ee31931c18b99585a64eb6cc8f63d303e3
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.kong.app.book/databases/cc/cc.db-journal
        • Size 512B
        • SHA256 d27e49557201361e47ac0517c49d049925e0980ea9abab8e1e07c167e2b373a3
        • MD5 SHA1 SHA512

        cc.db-journal

        • Path /data/data/com.kong.app.book/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 5d8f5ca3bb6aabc46a2c986272eba43ae9989bbde5f2f86b7a90498e1f7d19fb
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.kong.app.book/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 2f9d9ef2712b51ca591b7a33d9560233bc9adcdd635108e42b6b2474a9ca3719
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.kong.app.book/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 765e25024165deae4bd020a229a859d2f2b71b4e6c0aa94e789eae50983f61fe
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.kong.app.book/databases/cc/cc.db-journal
        • Size 8KB
        • SHA256 ba15aefd2502773094a8ffb1b561107470c78629dbaa78e508ec941344f6a3d2
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.kong.app.book/databases/cc/cc.db-journal
        • Size 12KB
        • SHA256 8ea14fbc6966a027cf51a51db3ec1ae58a3deb2a1bb8ca9260f5f3b293a228d5
        • MD5 SHA1 SHA512 SSDEEP

        zhulang.db

        • Path /data/user/0/com.kong.app.book/databases/zhulang.db
        • Size 60KB
        • SHA256 409704cc0ee2af4098a821b10876acadd10e924813c20c965891b2c1771bd98f
        • MD5 SHA1 SHA512 SSDEEP

        zhulang.db-journal

        • Path /data/user/0/com.kong.app.book/databases/zhulang.db-journal
        • Size 4KB
        • SHA256 f5ac5e852cce2af8d8edf866e95ee941753a971f61a303871dbdedb335172731
        • MD5 SHA1 SHA512 SSDEEP

        zhulang.db-journal

        • Path /data/user/0/com.kong.app.book/databases/zhulang.db-journal
        • Size 8KB
        • SHA256 38bfe11624f5372c0cabadecea7186e0069ec097a109ed45248df256e7449ebd
        • MD5 SHA1 SHA512 SSDEEP

        zhulang.db-journal

        • Path /data/user/0/com.kong.app.book/databases/zhulang.db-journal
        • Size 8KB
        • SHA256 927759e7e3f9682eece3b3b0bc7e18c72c88f594213c9e8f01b6e026ce39508e
        • MD5 SHA1 SHA512 SSDEEP

        664CBA0B0084-0001-10FC-D28FD3624871BeginSession.cls_temp

        • Path /data/user/0/com.kong.app.book/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CBA0B0084-0001-10FC-D28FD3624871BeginSession.cls_temp
        • Size 79B
        • SHA256 7374ea8878b6fd467995173210d53bd84978689fd32471412f8f369f66046342
        • MD5 SHA1 SHA512

        664CBA0B0084-0001-10FC-D28FD3624871SessionApp.cls_temp

        • Path /data/user/0/com.kong.app.book/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CBA0B0084-0001-10FC-D28FD3624871SessionApp.cls_temp
        • Size 48KB
        • SHA256 58c553b73aedcba4e21081dc8d06a3e6319fc114d11e0a3f075ce32885036625
        • MD5 SHA1 SHA512 SSDEEP

        664CBA0B0084-0001-10FC-D28FD3624871SessionDevice.cls_temp

        • Path /data/user/0/com.kong.app.book/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CBA0B0084-0001-10FC-D28FD3624871SessionDevice.cls_temp
        • Size 8KB
        • SHA256 e24fb863f4833cc17f462ad8e541249087baedc3429d282e63cd07a64980e47f
        • MD5 SHA1 SHA512 SSDEEP

        664CBA0B0084-0001-10FC-D28FD3624871SessionOS.cls_temp

        • Path /data/user/0/com.kong.app.book/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CBA0B0084-0001-10FC-D28FD3624871SessionOS.cls_temp
        • Size 512B
        • SHA256 d039d8480918d6056689327bbf68ddd25ccaf690fe05c171d9b90f1065b51157
        • MD5 SHA1 SHA512

        session_analytics.tap

        • Path /data/user/0/com.kong.app.book/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 425B
        • SHA256 a6b7778a52a59e5604d0b5c0b673d6690be6c81edbf5d905dd8d73c244fac8a9
        • MD5 SHA1 SHA512

        session_analytics.tap

        • Path /data/user/0/com.kong.app.book/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 2KB
        • SHA256 cb4bc03a6329e7e8fa428369609673c17296ad35ea70748790500eb653d371be
        • MD5 SHA1 SHA512

        session_analytics.tap.tmp

        • Path /data/user/0/com.kong.app.book/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        sa_e426dc7e-5fe5-40f5-beb3-f525ce1169b2_1716304395852.tap

        • Path /data/user/0/com.kong.app.book/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_e426dc7e-5fe5-40f5-beb3-f525ce1169b2_1716304395852.tap
        • Size 344B
        • SHA256 7774c7e2911dca9bd030f09bdb87672803b010b6bf68d5c9f6e053721ab7b6fb
        • MD5 SHA1 SHA512

        um_cache_1716304518234.env

        • Path /data/user/0/com.kong.app.book/files/.um/um_cache_1716304518234.env
        • Size 1KB
        • SHA256 972325eb0e5acbaeaff7f559e872e163abb8e9595e3304f663c4154bb15f50bf
        • MD5 SHA1 SHA512

        exchangeIdentity.json

        • Path /data/user/0/com.kong.app.book/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 22837cdb3873e7e30ce7815c8d989675f4834e3cccd3519e1e3eb13afc1a51f7
        • MD5 SHA1 SHA512

        exid.dat

        • Path /data/user/0/com.kong.app.book/files/exid.dat
        • Size 59B
        • SHA256 992b1288f483e09f60d26f9cbb3d822dba25c6b1b69d1ddc846d5464a2e99add
        • MD5 SHA1 SHA512

        mobclick_agent_cached_com.kong.app.book1000402

        • Path /data/user/0/com.kong.app.book/files/mobclick_agent_cached_com.kong.app.book1000402
        • Size 1KB
        • SHA256 da4ab322be4952d8074dce6eb57575c88f51d05b9cebb8ee05ae2f6b45c0cb7e
        • MD5 SHA1 SHA512

        umeng_it.cache

        • Path /data/user/0/com.kong.app.book/files/umeng_it.cache
        • Size 350B
        • SHA256 7ab54dafac3c56ca5f014a016a6b1914ceb55055d862ede0c70884158dee07bf
        • MD5 SHA1 SHA512

        1716304395877.log

        • Path /storage/emulated/0/.zhulang_novel/log/1716304395877.log
        • Size 167B
        • SHA256 ae61685864808a42387b482c7cef3501aae82d09320c2348c89887a07d606d14
        • MD5 SHA1 SHA512

        upload_1716304439245.gzip

        • Path /storage/emulated/0/.zhulang_novel/log/upload_1716304439245.gzip
        • Size 167B
        • SHA256 f8f46d19137a3d12aaffaa54f0a8a5b6e01c42fe5400b32f475a3aac7007721e
        • MD5 SHA1 SHA512