8507a157b668ea7084c0a5611aee4f76d4add9a6c87670510c20de4e8c53f312 | Triage™

Analysis

max time kernel
16s
max time network
134s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
22/05/2024, 09:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
66bfabbe80f4ab5bb4f8da130924b822_JaffaCakes118.apk
Size 5.8MB
Sample240522-k4bejsab75
SHA256 8507a157b668ea7084c0a5611aee4f76d4add9a6c87670510c20de4e8c53f312
MD5 66bfabbe80f4ab5bb4f8da130924b822
SHA1 645c3d9dad76ea8a3862ce2feaebc8dec191bac4
SHA512 ae850fb81ff5e55ace14145b66cc6309f143059d8f4964eef9c3ac5345e1de17141f3bc24e422a7ea86898b60220afb8126d0699d744e8d4385e2486be2e81cd
SSDEEP 49152:bq/4L6pi4ylAHa0rr9JZ5Bx3e3x/pCX7XtZsuSaLuPHRa/A/D+dap:b8dBxO3futZLSaLUR+Ab++
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

pid	Process
5160	com.Minushu.NushuEDU

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

Process Discovery

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.Minushu.NushuEDU

com.Minushu.NushuEDU
1⤵
- Removes its main activity from the application launcher
- Queries information about running processes on the device
PID:5160

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Process Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_analytics_v4.db

Path /data/data/com.Minushu.NushuEDU/databases/google_analytics_v4.db
Size 28KB
SHA256 aa6510e10f11f79fa4f83784454af8f026f02cc93b3944134e6b0f6f8c16bfbf
MD5 eafcfe85fa15eb04fc08780ef10276b5
SHA1 44ad7591e0ab38bff660655b3325bd93f5f3f34e
SHA512 3effb4eb2feea9e28785ffc25cf8723d20474a9355f7c189b5a63bcf9ea1287bd239b161bc861d945aa845b4b8bc6b17cb2b76db6471abf7d5e4720de8fba739
SSDEEP 24:TLmLVXixByqQWWEqrUhCafBGBGSiGkrHQQMBZX2Hh:TKhX9hWfqrUhnBZSgw92B
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics_v4.db-journal

Path /data/data/com.Minushu.NushuEDU/databases/google_analytics_v4.db-journal
Size 12KB
SHA256 1e0b5b4f3b9a215c8c0327be1b02c28b4531fa600b797a9c33f97d1b0c6a87b9
MD5 e68e4f15062a3cacd3cd1ab8d7bfe2d6
SHA1 8c3faf2c3ad1fdd9dde46eaa470bb4137605f563
SHA512 66c26ac8f2c9bad091e186202a02231476c620f8617fe8a1d891eb5d7f5f8ddd4ac3d619110dbc4988796bc84c30cf0d34d5aaf745052d9fe48cf5b74574a201
SSDEEP 24:7+tfbYqLGfLVXixByqQWWEqrUhCafBGBGSH:7MfbYqahX9hWfqrUhnBZSH
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics_v4.db-journal

Path /data/data/com.Minushu.NushuEDU/databases/google_analytics_v4.db-journal
Size 512B
SHA256 4c4249e9136aea79d02d7097a86ae7bceefcbee291aa7e0c81de0726c2032d89
MD5 e70f46c9a6a5267909c30acc3e83a774
SHA1 8aea9206de9487e74b379d11b2a2a8ca5c5cc471
SHA512 f0b77b601190a4fb469eb04b1f8e35ef25269730d75d27b1b4a3038d621cc1a18c72117826ff0662c20db555300a8c784b59c1975ddf5dcb0774e3735e9fd155
MD5 SHA1 SHA512

Submit Download

google_analytics_v4.db-journal

Path /data/data/com.Minushu.NushuEDU/databases/google_analytics_v4.db-journal
Size 8KB
SHA256 c41c5f10dbcd52c67db04a11d6af5eab94df0fb6476f485ff29b05abcee5ed53
MD5 00455319a0e202a50e75c80fcc58918e
SHA1 41e7d94bfb1b0e1215bb521b563d4c8b77f3b03c
SHA512 3804fd67f2a4a24b02f23a02f056519fc4483dd7f2d43837a39de077d6694c0b0c50a3b7a0df8aad7d9ee5a656430811243bb97feacfce07e847abc77ea951bf
SSDEEP 6:7+/l9cZn1Tfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKQn:7+tAfqLiuWdwRmBEyPbnn
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics_v4.db-journal

Path /data/data/com.Minushu.NushuEDU/databases/google_analytics_v4.db-journal
Size 4KB
SHA256 941a9d959c6eff172fd1623f3816d84774120dd84e428f01f7327e846e18a86b
MD5 35f79bd1098945b9ea6c3a2ac617dcd7
SHA1 2b0d440cd4ee5d50ea79ca8c604f839a269aac34
SHA512 941f9820c9b1505bd62fd9cc89a4cf46aa16e0b96a8f9c3101a92dfd919072cfcdd8a1ce983b8675efe13c6933a5885edd8bedd09dfa70e1653e2594b59908e3
SSDEEP 6:7+/lZ4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6I:7+tWqLJdTRmBEyPbLI
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics_v4.db-journal

Path /data/data/com.Minushu.NushuEDU/databases/google_analytics_v4.db-journal
Size 8KB
SHA256 4f1a8e7589f97cfbdc68dcecd6dbbb2e6092d7fa002236ca878fcb47933d9882
MD5 839febe6ad571cff4e8daad43a27d903
SHA1 e23486e742ac303e698fd82775e75202f0b211a4
SHA512 ee8ed1bb7cc7d980a3b048808f1672aa533dfbdf7c39907b5bd79f4c8df591c96454822fdbe0f561240081e07ff4340c12b78717202b3ba21e98b7c563947f05
SSDEEP 6:7+/l9v+pSFPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuK0Mkl//E:7+tN+YBqLmqCRmBEyPbHXE
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics_v4.db-journal

Path /data/data/com.Minushu.NushuEDU/databases/google_analytics_v4.db-journal
Size 8KB
SHA256 d4097d3d8b28b3e0d8d6f9a2cdad3bdf7091be16372131a72ac46c06f4ea7fd0
MD5 37c3ab3a6d3d2eddd2e97bb803daa8e7
SHA1 b021a12991ffe420ce68024ffaba9728d1fdbeb1
SHA512 3e98f4c33ad74dbbaea8537516475282e2672b48ca0483b47982e7ebf7262dc0864857134a77ce0e0793c23cdac6d89da07520342f7b3c02bbbe5c69f7aac6d9
SSDEEP 12:7+t9nqLyKEfyNTSFbyYrrQXxFgjOt97aXJjzjkGyRmBEyPbslo2n:7+tBqLy9aqrUhCafBGBGSsLn
MD5 SHA1 SHA512 SSDEEP

Submit Download

EeJSUMWRN

Path /data/data/com.Minushu.NushuEDU/files/EeJSUMWRN
Size 354KB
SHA256 ceabc13543b85b641452cfd734949aaa44b662ea3fbac8c730c52dccdb7e8192
MD5 1fc72953b027fb07a60eb580a1190931
SHA1 9f3a513ccf3b7b753ba6805bed946c32ce13c986
SHA512 0e5ca64ca08d87292ba515cdd136bfb4143d1a0bd081dc53c8563413439424020c5bd6b724377b007ed81b9956585f80cc83f8476ccc07b891fb3c80729c1314
SSDEEP 6144:fHKut4jmdTcEgQT9FUWT+OyN3WYKRnTPObNon0GHQBxZtJmd2NeqAyHo5tONCdr+:f1wbJmd2NGjdNxdHPPpwdS2CF+BwO/
MD5 SHA1 SHA512 SSDEEP

Submit Download

EeJSUMWRN

Path /data/data/com.Minushu.NushuEDU/files/EeJSUMWRN
Size 631KB
SHA256 2e45b2ca65d890e29c5bd695fa4a1a941bb2b7e619a8a50d6666dc3df606f1e9
MD5 225d0920d9777b946dcee57b898d6934
SHA1 338b38c486fd19a3bbfcef5eb40ad1b044097991
SHA512 9145c23a96528ed81e2be467a8a90c0cfb4c696b52da0fb909595ef0134152caeba436636809bd0be7d65418e298c8718dc185edd62467dda4ccfb4324287d1a
SSDEEP 6144:FC1v4YmdTcEgXTWFUWpyW+N3WYKRnWPpbNonhvxu9Y1Vs5eAam5LnygcfI0V3RPt:jk58qnygENxJ46UDxHY09c6pe
MD5 SHA1 SHA512 SSDEEP

Submit Download

calculator.data

Path /data/data/com.Minushu.NushuEDU/files/calculator.data
Size 24B
SHA256 a48d60dae2e363a21401b797126e0521356ce6344bb890de55c2a6d8f37ce3e5
MD5 7ca3759e0828de39924dc46f2946293f
SHA1 0b316a3c9e2a10fe073a7fece7370debbde03fca
SHA512 ba917960144339f1055ba319cee00ee9a24ebd9aed8c98be036b74d2de093c03d4c0586f9af4085a0d08e85f590363b2bdf7107f584f4922e83c873ece208936
MD5 SHA1 SHA512

Submit Download

gaClientId

Path /data/data/com.Minushu.NushuEDU/files/gaClientId
Size 36B
SHA256 8a1d1773b38aef270bf9824605f2f7b6919028896a38f0e116b1adb5137d353c
MD5 187ed7b222c1b0592eaba26e2eeb7fa3
SHA1 903b6dabcf541a1be01e40b6e1805f477cf7cc52
SHA512 0d60ba0b006635b05b2988e14e96fabaf1df3055de1b40d30f06e485383388a96aebf7eeba1fef7516f212fbfbcf3e8fb5f30ca1ef8e16437152544e480c6b57
MD5 SHA1 SHA512

Submit Download

gaClientIdData

Path /data/data/com.Minushu.NushuEDU/files/gaClientIdData
Size 32B
SHA256 145533034b2e6b60a5c8ab6613877214c49fb649bc8c4e15b06ec8c9ab75a129
MD5 31bda73870ae52b38fba5e37b5e97ebf
SHA1 0f3f222bf847452807278ff4884bb6eb24da9c62
SHA512 e2d971cfc833dbc2f9fea6e27f1fea0caefc9027545eb8a825fd65d7cae44625095f11a3c1e42f7c1734dfdb1a69ed95c1e13c156d10bb344a93a649ac998b73
MD5 SHA1 SHA512

Submit Download