Analysis

  • max time kernel
    125s
  • max time network
    153s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    22-05-2024 21:56

General

  • Target

    68c427f520db24e6bc2d6428fa6eee24_JaffaCakes118.apk

  • Size

    12.6MB

  • MD5

    68c427f520db24e6bc2d6428fa6eee24

  • SHA1

    b39a2c7c418b46e3d37bf6ed428b2e91b3735fae

  • SHA256

    a87ab90a048ac6945079f21800574b90ed2498ecdde6311a19548f98a78dd450

  • SHA512

    8112b971d83fbc50e444eb356efca05eecc5f1e1956f1e14fce6d131ded76eb0c7b32ab4bfa226759da36b4385d547945340872ab28ab01b29a8679bc948b023

  • SSDEEP

    196608:4v7X/fqm6nGbibTxhujtT7VRt+yVyVHeE5HfL7c3Q2SwP2aS4ngj7H:OFxiP2jtlRt+yVAHesj7c3Q2N2aSH

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.Easysys.cHairstyleses
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5122

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.Easysys.cHairstyleses/databases/db_default_job_manager
    Filesize

    20KB

    MD5

    c2810d7e661b18a9ebc3d1b2f4993403

    SHA1

    ef14c987c020481a22fb475223cd3d4b86d64692

    SHA256

    eed45ca74837fe7ffd934a7359ac11dc2394ec4f3a55226fd752c186e96fa337

    SHA512

    90be91836668216f3f9f0c954d75816efcf6fdf296a76f997f7e4e845e89509f6d923f27c9d2a1b0c7747f57100e2d2a63f1fcb32a164be923ffd9886f5f2732

  • /data/data/com.Easysys.cHairstyleses/databases/db_default_job_manager-journal
    Filesize

    512B

    MD5

    61cf205cb2cca331c89abd6f834186e0

    SHA1

    f0ce2d5a76439933598ca1fef3b03600fbf0ce7a

    SHA256

    2d8c8c8bc53173e2455aef321e99923081989e4a3bfbec3835e5f0fed9580c95

    SHA512

    768dcf768eaada8184207dd2a80317948bee9279f7021b8ec57768bff192ac253ba77eae8b5b97795939abee2ec3929d202121e725a8d1b67e550a64398678fa

  • /data/data/com.Easysys.cHairstyleses/databases/db_default_job_manager-journal
    Filesize

    8KB

    MD5

    cf51de79e85c0473f2f337d7cea030f5

    SHA1

    ebf2f62e052755330be9b8ca3543af7ee3aede2b

    SHA256

    e5f8ba59339c18fba7a868d0db136cf5ce0195fb5584c3def34cb284c982e688

    SHA512

    b4bb1cbf7651b260940f4fa54bdfff08c233338f292c8991348bfb5085eb94c0308322eb59b67064ea78f384ed7e362e9b1428efe3b69208b05e81770516ac0b

  • /data/data/com.Easysys.cHairstyleses/databases/db_default_job_manager-journal
    Filesize

    8KB

    MD5

    d9bb1055bad1e10742bf6b19bb8c47a9

    SHA1

    4d6568f96e7dd8658010c3d768a8d3ae36abd391

    SHA256

    c8f8f9c55ba7214468b4c4b0ccee1df6507c94158a507fc0f94519102087a56a

    SHA512

    263a6b6ad3bd44a07157d5feec0991451f69aee7473b3a09303139f35d166839bc02fcf2b6d41ec9e7eef21194b8460fb25506df489a721e16323dc44f0d5d9b

  • /data/data/com.Easysys.cHairstyleses/files/.YFlurrySenderIndex.info.AnalyticsData_M97YQBVXXXNM6NTWYN74_202
    Filesize

    88B

    MD5

    a24a4f2e76427d422ffa89671305b4c9

    SHA1

    64cddfa855b335536c524934d79298b2be38acc1

    SHA256

    2a1911d507cfb1704ad914121a80e8cf4277da56127dfc702212d112bed36464

    SHA512

    467f14c6ccc54f3dc0a8736acff1e86dadd8ee47752e36e4d6c8d8c7c77b98b14e6a4e61fce0bbbc91ca03a6fa2721016ce06ecda570ad16f0818fad465218f6

  • /data/data/com.Easysys.cHairstyleses/files/.YFlurrySenderIndex.info.AnalyticsMain
    Filesize

    72B

    MD5

    ad48590cf52dbb0ee7563b86a630387c

    SHA1

    d249255c6e3a57b325c35957c67d46b4be42fa02

    SHA256

    c1729a2404eeaa56d8e5da3f0de37651675ee915d0ddeec9574507ae6b52f14d

    SHA512

    63c28de09faaa1404a1ce9f9089eb3910640b6d2b53883c766ca9f27f8da9dc09f4ca545d29f698639d1bf535e9d4c4486a47f4a96743b885841f031b9fed07a

  • /data/data/com.Easysys.cHairstyleses/files/.yflurrydatasenderblock.2021ad09-269b-4920-8e31-024869ea52f9
    Filesize

    304B

    MD5

    c021417ddd6ce6a5ecd3a63f6f5907ad

    SHA1

    4f7f16410b1142031fabe1e96998b2efcae733f6

    SHA256

    d5318e97512b727099f47e88fcb4b7c325942d71ff2db60fe37dbfbaa34af19b

    SHA512

    57d1c1c3116db57eb8f39998a3ff6c2d6e363bc95504db781b4569d79afac99025aaedab5d0818d8799beea08cd870bdc151523ad432e2ebf135a6b3359272b5

  • /data/data/com.Easysys.cHairstyleses/files/.yflurryreport.-58f68ca1b945f6ae
    Filesize

    330B

    MD5

    b614430216c49774a806a55b98cf064a

    SHA1

    5437346374149a82be8f3130b92df449217a4d2c

    SHA256

    7ad3660049e1635ce525821cefe02cbf79af4bb905103b8f4e12f2718958fa33

    SHA512

    26c49e280244509eac8ee2a54160bdf4aa160761252ac8559939573ef4ba5544817ac44c58eb275ad9bf5abcf5be24bb939816606d6ba51364123a6bd2f88547