Overview
overview
8Static
static
66600ada3fd...18.apk
android-9-x86
8bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
muzhiwanapp.apk
android-9-x86
8muzhiwanapp.apk
android-10-x64
7mzw_d.apk
android-9-x86
mzw_g.apk
android-9-x86
mzw_g.apk
android-10-x64
mzw_g.apk
android-11-x64
stasdk_core.apk
android-9-x86
8stasdk_core.apk
android-10-x64
8bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
Analysis
- max time kernel
174s - max time network
193s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
22/05/2024, 04:30
Static task
static1
Behavioral task
behavioral1
Sample
6600ada3fd0cf5c0f7b65d04889125cf_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral3
Sample
bdxadsdk.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral4
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral6
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral7
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral8
Sample
muzhiwanapp.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral9
Sample
muzhiwanapp.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral10
Sample
mzw_d.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral11
Sample
mzw_g.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral12
Sample
mzw_g.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral13
Sample
mzw_g.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral14
Sample
stasdk_core.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral15
Sample
stasdk_core.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral16
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral17
Sample
bdxadsdk.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral18
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral19
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral20
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral21
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
General
- Target muzhiwanapp.apk
- Size 6.7MB
- Sample240522-e43k5sca89
- SHA256 efa8e431c5d5b3bda3cfc0da4392d14ef447643412bbea22536a155c7aae82b4
- MD5 f166fff17a539f053550965c87c42054
- SHA1 8be071793576b6e324db218f02a017439fe826a3
- SHA512 26869689b5a58e52e63d95b07cf04f560c4580e9bd408a432a61acace492201ffe93cb7e4166a360530eff8fa3827ae0df83ee43e30daa7f670010d59a8bab8a
- SSDEEP 98304:thCSkJBDmTuhW+7eF0JUQ4KMB6NQP4WfxRENHpxPOJHMMC1dh4Zadvtvc8Y6dtR3:nru6wUQMBj4WfOHp+HPC1z4mkKdYIx
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/data/com.muzhiwan.market/data/mzw.apk 5253 com.muzhiwan.market:mzwlogservice - Queries information about running processes on the device 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.muzhiwan.market:mult Framework service call android.app.IActivityManager.getRunningAppProcesses com.muzhiwan.market:mzwlogservice Framework service call android.app.IActivityManager.getRunningAppProcesses com.muzhiwan.market - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.muzhiwan.market - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.muzhiwan.market:mult - Checks if the internet connection is available 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.muzhiwan.market Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.muzhiwan.market:mult - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
Processes
-
com.muzhiwan.market1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
PID:5155
-
com.muzhiwan.market:mult1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5199
-
com.muzhiwan.market:mzwlogservice1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
PID:5253
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.muzhiwan.market/data/mzw.apk
- Size 17KB
- SHA256 d0990058e5204d1a1bde2eff40893cb49d1e8972ee9b7e1b03ae35ac3cd5df8b
- MD5 e65188742e10046597a4c648d045699b
- SHA1 37b2f1e3e89d3b0d8683737ccae2ee725e82a312
- SHA512 3859b177492c74ec9448f7c57cf37beb7c747dca9580125cbd7c2e1f3a7761a3736072b1ec2ee14fa1f844f13df4163aa167b5cb9010e7e7fd00b2724553d481
- SSDEEP 384:s5X5qqwv/p1FQkfP7EI5dPbh69aFw4GoXzOOo6MGd5Ij//LQf:GXjwpokfPAI5dPbh69aFuoHOjnLs
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.muzhiwan.market/databases/notes-db
- Size 16KB
- SHA256 bddb108ff2c0d509cd953c8dfb2b7c4e838d205291a4da8ab6c65cb98986416e
- MD5 2667900bf3b5ab90121d0a3ff8ade390
- SHA1 d82120444613139e2f4547f2872aa2c95ed9dbf5
- SHA512 03db7a94d3760f47c9546e3c033647e853a984385e871d46d056509b8812422a2a3389551c30ec5a9360cebb5e1786315c6891611638c60642d3107dfd8006c3
- SSDEEP 12:TLpEpG2mD8dpw11iGxwNLclTID6rmG98RmBEyPbBvOw:TLgGGMLi5LYcD66GNGSN
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.muzhiwan.market/databases/notes-db-journal
- Size 59KB
- SHA256 2514431fe50d909ac1385e07341ed8878b5f2400df151df5a43a59b98a31ea02
- MD5 b2a8fd2dba92c8f75869f79c70d441da
- SHA1 faaf88b3c3653fc205a3a125ccb77fbc87b76215
- SHA512 a66893a5bb935dfefdc12ea32c2407cf9d8d040ff82852b415c599beb94d002ce77ec15bbac3f78ae6758a8c7f5e83c799ad84fb8ce2e6763da88a9bb20aa7b6
- SSDEEP 1536:zsgtqpcH/obgLKxe7wust6XTyLaFcBowg/pL2Nka2MXX3C:zsqqKH/BKxXMXTym/pyKiXnC
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.muzhiwan.market/databases/notes-db-journal
- Size 42KB
- SHA256 7a28fd857e1283e351d37931cc6e23cd6de5ad2fd4d3d23337a6f162b07f3978
- MD5 c04d422c5a4bf58a127bbf2bf014965c
- SHA1 3b1f3f4ad21fe0febe567e5a56996a7e61658cf9
- SHA512 6cb2768a8344e3da470472ea906b5be2e33a24384efe35cdc3c0b0c24351c3b34444a4d2d6a9e21c48927b85554aaa3904fb0361071c0711841565222253e0a8
- SSDEEP 768:ccPeR+EU5maX9WkB/gUrXFWLKxe7X+Fu9hRv6Xf3QpD+X7aFkuzkjEC:ccPeRiNWkZbgLKxe7wuzt6XCyLaFm3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.muzhiwan.market/databases/notes-db-journal
- Size 42KB
- SHA256 14b68457395896d3ffe12b777f52fe2cc4182a6c9ba383555b12522c93657b00
- MD5 7bc525aa5cfd71cd4d2ad570fd72a906
- SHA1 b411e1b345b5e9e4a0e4f603b46277278981e921
- SHA512 5f1973360665bdeb536d8dc2a9c5d2077990fbc6fd3653747de9d54c7032a776151f39986792ab57773623a143b2d65cfbb585aa53c823197485eba9e75c8e2f
- SSDEEP 768:ccPev5+EU7aX9WkB/gUrXFWLKxe7X+Fu9hRv6Xf3QpD+X7aFkuzkjEC:ccPehi4WkZbgLKxe7wuzt6XCyLaFm3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.muzhiwan.market/files/install_file_dir-journal
- Size 1KB
- SHA256 07b90e7fe3b00d6ad217d729f6272a16ab3f1ab109b8dd6abd439a11eabc80f9
- MD5 925939fd1b5cb47f8d85b2a5ea515eb9
- SHA1 27196b02e917afb10c2165c3a083ed05152e7f3d
- SHA512 7b1c20998a464b4cd15ad059dceeff7e8f01c1e1c4fcfff6606096ca8e0cb33d6d15e23cf70571f137c112e3050273ae03a75de5bafc53152ce78d5ae0f0e8c8
- MD5 SHA1 SHA512
- Path /data/data/com.muzhiwan.market/files/install_file_dir-journal
- Size 2KB
- SHA256 7751c431336bd615a76fe1fb9ccfc17229f12fa5561e2e2a85fd13de34db78ae
- MD5 3e8f3782d6ff7ec60ee5f1db2dbdbe6c
- SHA1 f850e5f420c3e2a0311d98e1533fb20b70d21350
- SHA512 1bbea56c5122fd8ac31a8409949ed0398c81fa03745c62f55f700b14271675436710012c3e07e7ea8c270019b2e07ebc3c589d2ab864321cacecbd170fd108a8
- MD5 SHA1 SHA512
- Path /storage/emulated/0/data/.systemid
- Size 5KB
- SHA256 b694abb4a56699542e20d3b3a38870dc1366822ebdd30abaa321f66cfab4bd97
- MD5 437260597d072bf8652ed2f2dc893f31
- SHA1 1f28291d89531b1a0389941f0636f52cee8dcbd5
- SHA512 cef20c4873433b811047d626e097eecab9ab41e07716871497abdc36748539f4613ae6118da0b999d3cc312411bfd04dc9004564bfbda98d81075830ce49b868
- SSDEEP 96:9qYevvTq6MLG6nH8oUvTq6MLG6nH8oO13fH:AYevGXJH4GXJHK1
- MD5 SHA1 SHA512 SSDEEP