Analysis

  • max time kernel
    20s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 02:47

General

  • Target

    65bf8a29f0fd119d1d0d6b052c2c4278_JaffaCakes118.apk

  • Size

    5.0MB

  • MD5

    65bf8a29f0fd119d1d0d6b052c2c4278

  • SHA1

    0e941e3b52fe699a1d9bbf943e7829f2299605f6

  • SHA256

    42b2ded4877d2750db85312e7f02e7dee6ef607101d9d4514d0f87810faa360b

  • SHA512

    f59e2d9a76f223dbfa5fd00298d2de0bbd55507fcf22feea62eeadf8a1bf19cc8b41385d5a08eab78855dc8f5dcfc69f3ee3743cf5f22ca63c8b4e4cdb6aebec

  • SSDEEP

    98304:tEWv1y/PfAVxXogEl/LvMYms6dP1fjyaeDGm1pZGS4kIKUc9UjoLOL:fv1yvyXogTCslyqm1zGSHUKUTL

Malware Config

Signatures

Processes

  • com.yxxinglin.xzid25591
    1⤵
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4271

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yxxinglin.xzid25591/databases/query.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.yxxinglin.xzid25591/databases/query.db-journal

    Filesize

    512B

    MD5

    c27f487699937cbcd225f1809e22e6ea

    SHA1

    d31a1ebc272f4993b50ee7ae05b4544cf9d88f28

    SHA256

    dec74ac3c303702be6936b1da32a798386691ee1e66fc85f6293f89a7466761b

    SHA512

    b1cd077167e0b1092a61b2edfb790dfcb1f337b0549d096dd3d6519e6b13253b679e2c37e407e2c175005a40a2a9a59fd7fc8c81f6d01ec6f85feb1d647b7ba5

  • /data/data/com.yxxinglin.xzid25591/databases/query.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.yxxinglin.xzid25591/databases/query.db-wal

    Filesize

    28KB

    MD5

    d177ac1ce2f2baffdf6342bdb1549a21

    SHA1

    28afce3b5c8cf5fb34dca10833aba672bfd36288

    SHA256

    911128c46573b153e73f8fb4a3c4d76999d4aa0c972d7536eb6785d7e790a321

    SHA512

    bb550b09147525154653a67ad2e7195bf96394bda9d5ed12659048e270dc888ed084067dc31ce52dbd6b02bddc870ce939c990eaf5f5bbe29117409836d753f0

  • /storage/emulated/0/zzyy/cache/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6