Analysis

  • max time kernel
    50s
  • max time network
    153s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    22-05-2024 02:47

General

  • Target

    65bf8a29f0fd119d1d0d6b052c2c4278_JaffaCakes118.apk

  • Size

    5.0MB

  • MD5

    65bf8a29f0fd119d1d0d6b052c2c4278

  • SHA1

    0e941e3b52fe699a1d9bbf943e7829f2299605f6

  • SHA256

    42b2ded4877d2750db85312e7f02e7dee6ef607101d9d4514d0f87810faa360b

  • SHA512

    f59e2d9a76f223dbfa5fd00298d2de0bbd55507fcf22feea62eeadf8a1bf19cc8b41385d5a08eab78855dc8f5dcfc69f3ee3743cf5f22ca63c8b4e4cdb6aebec

  • SSDEEP

    98304:tEWv1y/PfAVxXogEl/LvMYms6dP1fjyaeDGm1pZGS4kIKUc9UjoLOL:fv1yvyXogTCslyqm1zGSHUKUTL

Malware Config

Signatures

Processes

  • com.yxxinglin.xzid25591
    1⤵
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5223

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yxxinglin.xzid25591/databases/query.db

    Filesize

    16KB

    MD5

    21c082252139650f5bf604351fbc100f

    SHA1

    ac891965b034a9db9c5a87a53c42a08a3236d180

    SHA256

    41db1892a0515c3f7487858ebb88edaaed523ed4eb1af75cd44cda6f222ca1d8

    SHA512

    146130b7cc776afffcba47b6562845b2f9417d7fe06acfc61dbbf780919119f573b10c22668c7d4132ac4db9afac5c9bc7764728c7375d17477839ebf7412dae

  • /data/data/com.yxxinglin.xzid25591/databases/query.db-journal

    Filesize

    512B

    MD5

    db217548cee5d7675930493c6149dff9

    SHA1

    7fb08cb644e52842a8b8b93a256fc4d81cd0c040

    SHA256

    fefd9700b249d3f0ceac9fc17bab46ecdaef5295496de78f335817b2416c806b

    SHA512

    fc2ecb7cf0ec2b65037a74662b458573cb2d4612669c9d8e1d2ba7bac99bdc98db02ba6a0e621cab5712b6135ed7882bbcd5aeef681b622db929b159a5be6917

  • /data/data/com.yxxinglin.xzid25591/databases/query.db-journal

    Filesize

    8KB

    MD5

    b9f3bdf1b829c21145da61b31095a5c8

    SHA1

    d32087074d11d5925d71fe804e703f1f3f748045

    SHA256

    25537693fe04ca9e5d4d2f68573dabe905f4ab0f9addbaa7700c5e3beda2d286

    SHA512

    7f83ac356333164ae9574150a70c42a29e80ff48102ae1ed1c444fb62a9432d955a68f92303f180ac5d6bca4c133022972f1ae46a0874b13774efac3ddc13878

  • /data/data/com.yxxinglin.xzid25591/databases/query.db-journal

    Filesize

    8KB

    MD5

    fd1563d9272193a7326b166568469050

    SHA1

    51576689a657966cf6200265d1490c870c33a01b

    SHA256

    f635010578b759af303389e9cdec5ec0fae0ac1c0ce4ecc5783336ed7b17841e

    SHA512

    819736089b2e1010e505609947073d217c6af9ebd92788a7d6db1d80bc6c469511ab52135130bb3ceb137a9471f14ff41113bef63ef1f10fe70b5cc3cd37b39c

  • /storage/emulated/0/zzyy/cache/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6