Analysis

  • max time kernel
    176s
  • max time network
    187s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 11:06

General

  • Target

    670b83382bb50c60c1474cffa1b4b87e_JaffaCakes118.apk

  • Size

    10.5MB

  • MD5

    670b83382bb50c60c1474cffa1b4b87e

  • SHA1

    81f5ffe1c677af694854e7679175cc830476ed89

  • SHA256

    5afa8b44d4b7e945fd25cd587f32e82eda7e8879e2dabaa2f271c6f8399fd4b1

  • SHA512

    94f693fe3e3efb1a8cfa0cec6c9ae2b751b8586877a7339ed811fd9f3e0530bf86e6d5aeada91c149a9a5469c19ca13e8ad4dab4ea4e5d2cd24129c1ead50b49

  • SSDEEP

    196608:3QpZKlUBMDNzn5CD3VvdMiKO4FEx6ssJYTGBdCzC9oIWtRti/q/rq:+BeNb23F+iH4DtJEGEXNi/q/rq

Malware Config

Signatures

  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell information.

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Checks if the internet connection is available 1 TTPs 3 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

Processes

  • com.youyouth.video
    1⤵
    • Requests cell location
    • Checks CPU information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4254
  • com.youyouth.video:pushservice
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4302
  • com.youyouth.video:remote
    1⤵
    • Requests cell location
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4383

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.youyouth.video/databases/cc/cc.db
    Filesize

    36KB

    MD5

    a952509925875477aade03f59fc8d626

    SHA1

    c4fa69dd1bf1569baefbbb9239aa6cb4826244f3

    SHA256

    4b818b49aba1fceb5f3a3726cd150de06d63c569491e7954957ff8ec0c173c8f

    SHA512

    3afc7772bf7fc090156ab17f69b8482f69fb9ed04f6a83588f78049e567be1576202123fa623dfcead1da773a9cd9101afa304b438e03cb750fb305941e81be0

  • /data/data/com.youyouth.video/databases/cc/cc.db
    Filesize

    36KB

    MD5

    ce6135aa1b1fe4f2c2db2a546d2a5558

    SHA1

    79b59582154017aadab783dc266fcb158c252940

    SHA256

    7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

    SHA512

    2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

  • /data/data/com.youyouth.video/databases/cc/cc.db-journal
    Filesize

    512B

    MD5

    32ee647f3298229da24470eab8902019

    SHA1

    9ddffae27401b35aa1a586808e0c0d827a705a91

    SHA256

    f53759dad64e3994f27897125fe7cf0d5bdc5e2d57174691f5d7f37f3ee1e85f

    SHA512

    02dcd5515b95be1f73dc0df855ee100b2c42dd552fac2a3abbf9b5f1ec778f831cd297e10a6ce246587b3ad80795262b7d3e392cc586eaef6cc7203cc51560b4

  • /data/data/com.youyouth.video/databases/cc/cc.db-shm
    Filesize

    32KB

    MD5

    a63a1030b3efcf2417c1559b18e2bd46

    SHA1

    0ad4f7fd5092b43a72a5e05da83574fd2ec022a0

    SHA256

    26205e1cc24f18de8850a5177fe687dbb70da339ea983a5265db5aef4ddc14c6

    SHA512

    7985ef96a819f048c3fa666a3947288052170d26df8d6230fe60a74a5dd5f2f247c288088a45c140422a1b047688d7c27b4117742d8f87b89fcc3d768ea01ee8

  • /data/data/com.youyouth.video/databases/cc/cc.db-wal
    Filesize

    48KB

    MD5

    7adf4f3c0fd3df6a8abf0f91d9d91316

    SHA1

    46b04b32aef1f566ae1e994ca744563416781737

    SHA256

    1e75f4e54c310211e59574401ba7875fcf3201fa9a36e7246360db209beb949f

    SHA512

    1f4226cd5b447a7f4e7a16f2e8b5e735f13b47bbb2588ffada5d5769ef56b26303a203e64a15f36747cb3f7b1bfb032e64b2015caf7a95d74950cb6e66e68557

  • /data/data/com.youyouth.video/databases/cc/cc.db-wal
    Filesize

    16KB

    MD5

    0eb13ceab2c4fef446aa08d51349883f

    SHA1

    e103522cc682513050a4b7ea8dc1c2366fa9fc32

    SHA256

    a9af845b86402e1381ab82ed59dbcea00d91ea9ecc072e69d64fcd9b9d27404d

    SHA512

    106de105fc53838cc2666512142b09d2381ed553ab9ceeb1c464ebd2e225e7f5cedfa64b6ef8532bb4bfabbf538e4d3b3f6561a8362e2b577f14fffbe050b747

  • /data/data/com.youyouth.video/databases/pushsdk.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.youyouth.video/databases/ua.db
    Filesize

    28KB

    MD5

    34db3317c1eb464686d19c5606302af4

    SHA1

    efdd2409cb777dfe9c23665b86ee12505512e8eb

    SHA256

    680d50c2e5b1a0a0de379eaa96b2ac5bf96b7c223054fdac7ee9b0e2b9d5f2e0

    SHA512

    c157d62698c917987c34223629d71ba77503ee2022ecc87caf558954803adf52bd99ff578e804dbb9f9a2e762790556afe42b8e0ce549745a6aa0b985fe204e9

  • /data/data/com.youyouth.video/databases/ua.db
    Filesize

    32KB

    MD5

    ccdd4391dca73ec91e2b32e0738eea79

    SHA1

    cb265fbaec475adbfd214d7fb552a76cef58501a

    SHA256

    c9972ff3389533d4bb57499149e1824f298cbb0e7715bd903dcdd451a5c7ec5b

    SHA512

    948f9f4c7ebdde07ca465084af39e6e66636f1b83948d6880097139e14dd091e1a782f579c2ce7ffef6086dcae564f317a34f78be5a60a1d581812d3416bca92

  • /data/data/com.youyouth.video/databases/ua.db
    Filesize

    32KB

    MD5

    15e300b5051c92dcbfda0c7143e7ca70

    SHA1

    38f7ea96bccdf62f4708d8d4ee597a245807cc9d

    SHA256

    c090e79bb353e1b184a3789a9c1ac362ef830f67df13ff34f6e09639245c07ff

    SHA512

    4c81a7e3c9a5e0499d378dc820fe729d23c05a6e23e9e64d532dcc050bae68d64b2b8bd6bba7f42ea8020400c3a0f1544b243c3d41aed18187ab980d90ab90a6

  • /data/data/com.youyouth.video/databases/ua.db-journal
    Filesize

    28KB

    MD5

    0d3e99204c6401ea499fe9e6d9855497

    SHA1

    09829f00ca458eab7374d5079393a2cd69a2348a

    SHA256

    63ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca

    SHA512

    8d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68

  • /data/data/com.youyouth.video/databases/ua.db-shm
    Filesize

    197KB

    MD5

    144214286952f52784e11f871e82ccb1

    SHA1

    900d77449a6b5eb6ae1e9a0d5918dfda0cb7550b

    SHA256

    53fa9060dd952b7081416b35fcce40caa42625795d90fb904f1c2df9268d9735

    SHA512

    62c8d7a1859e61f86892333786b430616e00cbd807b50c8fe1a01262531530306c448a2967c16b942500d500487c10ffa499ed2b0b65aa7ab6bf18abb1dabbc8

  • /data/data/com.youyouth.video/databases/ua.db-wal
    Filesize

    156KB

    MD5

    a56bfa73b55ca08982735bcb574a775a

    SHA1

    aed81d5d542d1dee1465a0ad5140180dbb09d747

    SHA256

    fde088b35325ad4d986edfc84680ee0c00fe387a51a023a6f054d6d080d0b1de

    SHA512

    93ba2a042242d9650557f686c68838350da39c7716a14a05165142817ab14dae9cfc9945693b7a81c150e5a0ddfb862296aea98620fc5a4a4a60111a891abe5d

  • /data/data/com.youyouth.video/databases/ua.db-wal
    Filesize

    8KB

    MD5

    4eb257d044d18d32269531662d4057dc

    SHA1

    e1e2d7b9b35e8bc6e8731fb6eed265adf815ca7f

    SHA256

    bf3b176bb38ffbd818f8cb6c770dd0167839907c37819e7579281ba60f837ea6

    SHA512

    a059d0b372b98047b0adef19224c9219238114dd414e3d50790b6adb6f559805c58e16d5f225cf034d99531e80ccd985b1d4f9caa9d9bf07182c62474e9444e4

  • /data/data/com.youyouth.video/databases/ua.db-wal
    Filesize

    52KB

    MD5

    838fbd06ffb5f738628d396e2652f1bb

    SHA1

    b4210a075a59a19a0347ea37ad5642e083fc2517

    SHA256

    75c90711fe8b42aea01bc158974542abe27cef5d66397cff144b4557dba2e2b8

    SHA512

    aa80e339aaac213682f4886b38c807f366f393706a95180967ebcc570ed515f39c57b26a497974bae196877420e5b24b52cdcf5527c1b8b22fbfdb6a51afc1be

  • /data/data/com.youyouth.video/files/.um/um_cache_1716375982753.env
    Filesize

    1KB

    MD5

    3c85e018074734f58de13c8ddf8f12cc

    SHA1

    ed741b39c8086733d4f8c8686ef7a54c14d8f4ef

    SHA256

    1bdf339b5fb934561ab05e421248fbac1b9205ebec7cfb38a6cc660e91ee5bf3

    SHA512

    365dd5ae0364f65edccc5cc4d8cc8257475796c4bb360cd64aa5d235f2a96adcce4aad0cfa1dc59016feffa6b2ee1e6407c3f0383ad794d411db36af20d75b55

  • /data/data/com.youyouth.video/files/.umeng/exchangeIdentity.json
    Filesize

    162B

    MD5

    2debf8d9aa70bad8ba7929cc6091df4f

    SHA1

    39814d49fcf627c8a6a096d4c1cc5222aee51df4

    SHA256

    7416705cbc61249d5185cad3f7b9666e2da4db61d629d95da18d816e6e1fbe0d

    SHA512

    a6dfc605862a1b3a5a85285ef98611e866a668dac2c51eec9a3a32dde4aae55fe61089f81f82ecdfc07f5d61276fd0b4c720ec535de91c6ae5fd4b598eb955b7

  • /data/data/com.youyouth.video/files/exid.dat
    Filesize

    57B

    MD5

    8215e7c7e37b8923998f13f9796d62b2

    SHA1

    dbbbe72a3409913ac7e077221aaa32c68078c634

    SHA256

    c6428d55d4db1d26dcfa1bbbe3404e787a08c68a60dd15e212d9a233ed185e0e

    SHA512

    2a4efcd755dc43718c0251e081084284d7fdd2b8a23b88661be6972a098384d631341a5c8674067b04cafefa1381645fc44b001afbe6c16188925373e6cb7fa7

  • /data/data/com.youyouth.video/files/libcuid.so
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.youyouth.video/files/ofld/ofl_statistics.db-journal
    Filesize

    512B

    MD5

    57faac319087d2fdac071f5e210d8f94

    SHA1

    74cb9e563be1550e151b3e8d97df1e7a4db03a92

    SHA256

    470da06a3d81eb6f067f9a73d9fea383657ec34f8c9d3799ee1b3556090d8473

    SHA512

    85b494a9422e4356f3ac31acb420e8df2e2377b324a095d0a931430f846ac903110e749f4a18bd9a1ba0e4ed87bc6f47f174e633ce5023c2cdb0d7683982d6f9

  • /data/data/com.youyouth.video/files/umeng_it.cache
    Filesize

    413B

    MD5

    ef78aa09cb4c30388487635471910c97

    SHA1

    5453c180b5e8a98a10d911d4680af9ca97a3e6ca

    SHA256

    e55f48ee02eb67703b8ac1cc8f21430c60d8d4e0c8075cc85e768e2dd8744445

    SHA512

    832ebc8fb3f962b543e47c8f07d65b17bf22de5349e773de4e6be1992f5241cf7dc5c0203ece7bbc3405d2c58f02142d7895ea8354bedf484a1494f2fa32e5b9

  • /data/data/com.youyouth.video/files/umeng_it.cache
    Filesize

    210B

    MD5

    da8ac32328870f11cbb7514b0879ead8

    SHA1

    374d4da9784758d6163a5f524b7fe139232e5549

    SHA256

    1c11c7e31d17af195ccf21e6fcc717222183ff6fc6b2c1dcf0bd9b842702fbed

    SHA512

    5aa7c2149f3b99a13b2f41fb49ae07bda2f3caf7cf059c6b5f4ac24c36c46d801246d7824dcda4576e1e02013d0d83986e60a7901ffeba7faa6336d96388614a

  • /data/data/com.youyouth.video/files/weibo_sdk_aid1
    Filesize

    46B

    MD5

    4028c8b91f544d6bd51a266683ff791e

    SHA1

    d8bacd93b5724c8500f66cc46632704115635afd

    SHA256

    7cda4149bb95d3c082f01b19b365228fd339ce4fcfa02969294e13bdae41270b

    SHA512

    a8fdcbe785c7f9eabff76f227db4e8c1d099dc8adc81a41283f8fbf118fd0fbff93be1aaacd3c966888f30f247215125317efa56495f022486f5262cd2cc3831

  • /data/data/com.youyouth.video/lib-main/dso_deps
    Filesize

    512B

    MD5

    22e900d60763a8f18aa99a63d940b473

    SHA1

    e16eed5c770bdbb15bd2e6de71e46fbcfd69ed76

    SHA256

    6c893654e250289883bbfd514fed832f7a053f9248f90d706ce5df2d80ee83eb

    SHA512

    ce9e76c66fd1aae67b7f765eb0e93e35e5b147e229ee8d0c1180d00e6e41a5d3413bab9c1d081219cbc8eef64b461b687e4e3fa007b392b3b56e00c5f18063de

  • /data/data/com.youyouth.video/lib-main/dso_manifest
    Filesize

    20KB

    MD5

    0267085075e43f90f8dfda78b24d88a5

    SHA1

    aa630edd5e46f1fdeea6952873a864cc23455602

    SHA256

    5138d1a254124cec2c569c602afbf5c319959a176454841a54cbc69365eb8ae9

    SHA512

    46024bffb40a095a24a00a88adfbfc7c3c740fa152eff93a3f5bf029f8234735f4f543129038df7002e1a919ab55677fcbf9eb85a9d64b801c7b6879b137cf5a

  • /data/data/com.youyouth.video/lib-main/dso_state
    Filesize

    36KB

    MD5

    e0bbe87b9a7c70ce5d4caf377f6da805

    SHA1

    2a06a6e3acbd7838b1b386b52ef378f75a5831d2

    SHA256

    378412a6f7deed822e4536901497c500f93ddb627cc7208e9d86eb5d7e7c8069

    SHA512

    055c81cc7752c9d8f740216fda0d3a8be97b4d2df44c96a7d731a7e26bf979bbc2d19090b796943c396a8aeb9325c2beb3480e7bff579271d5f56e02f1c90c11

  • /data/data/com.youyouth.video/lib-main/dso_state
    Filesize

    14B

    MD5

    368667493dab19dba326e39c608c65e4

    SHA1

    648531e703363843ac9c0537c3d93de5e2761bf1

    SHA256

    eacc2d2b0c9b6e0270478e84ae070f7d4c3d1e577f036491e4c9778962146f8e

    SHA512

    5eb9aa7c212c986baddea93c3ecc7db8426655a361214b5af9b979967ae138451772b3116d6c5fa443f6cb53369bbe848be9e111c72a906443658678fc83c037

  • /storage/emulated/0/Android/data/com.youyouth.video/files/baidu/tempdata/yom.dat
    Filesize

    24B

    MD5

    a936690571e9104e1922dda4a0ba5bd1

    SHA1

    65f49c57edde2f96be2a1dbdfc3f7351f1e66554

    SHA256

    f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

    SHA512

    3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

  • /storage/emulated/0/Android/data/com.youyouth.video/files/baidu/tempdata/yom.dat
    Filesize

    24B

    MD5

    1681ffc6e046c7af98c9e6c232a3fe0a

    SHA1

    d3399b7262fb56cb9ed053d68db9291c410839c4

    SHA256

    9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0

    SHA512

    11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

  • /storage/emulated/0/Android/data/com.youyouth.video/files/tmp.licence
    Filesize

    681B

    MD5

    bcdb159a571e35e5d91a48333c335405

    SHA1

    7ee7bf8682250be9a864221611ea663fa90bb156

    SHA256

    fa43cd036a4e425938d11754f6f78f906dbbfa6d699f654d3cb8d4b3f2f88ba5

    SHA512

    e55b2f09a4f1794e4685d25a17f419b717a663e2b04a349c7d3446bc1d012c0cd110a916172d85cd7c0230563532e70aa1e7231c233288147ed123db6f9d7d18

  • /storage/emulated/0/Android/data/com.youyouth.video/files/tmp.licence
    Filesize

    681B

    MD5

    0017607fcdb3a519b145928647c373cf

    SHA1

    6e78526cfe3a4cafc4711265ef8d24f8a4756154

    SHA256

    1f1d6119251aad870c18c296620c9219ad83bb65813f830a0af32157272223c9

    SHA512

    ce5c413fdd787b40773b6cd8787c3b62808d6b9433f08784314d9cd589afd13b70e18a1700b1ca6d73f96b22e79f6a8bc2687a6695955c49b2093654c4269f78

  • /storage/emulated/0/backups/.SystemConfig/.cuid
    Filesize

    28KB

    MD5

    fdd8418a7b615c72a57bcbeb080eac67

    SHA1

    2b16bdf49da8bed573d4266fdd248ddcc0f224a0

    SHA256

    4e5cae63e4fe079e94468cbb370460326009b31d700cf8eec594cb8cb61d7d3c

    SHA512

    5c7f7ed2943f99eb799f5d5a4904660a7e884f6d9924ba32f78717f721d3f001296cd50e09bd91d2aa61c24a439ba13054e36983e99832413f5d45c8bf552071

  • /storage/emulated/0/backups/.SystemConfig/.cuid2
    Filesize

    48KB

    MD5

    d30625abf0da4dd43834c41c8f35bb24

    SHA1

    19e594196a30ccda889fe3746da416c80f411830

    SHA256

    a847aca1509277351f089f1d9edb3267ad4df9869eb2538a61290fc65181a1e5

    SHA512

    eb2b0f184235f273e23732e09c78e62c1223ce434e953648687bf0eb7362514d5927899d7ecdcc9b013c482b8a1f057faafa2bdb84344057a49432e03e12790a

  • /storage/emulated/0/log/tencent/liteav/LiteAV.mmap2
    Filesize

    150KB

    MD5

    aab6136c2390f3e81aca6b72b7d2b039

    SHA1

    97f97d5b3903a0ada906ba13c283fd3f1755280c

    SHA256

    437f9bef8917286653922931fef8d4b1a17427bec9996bd901c03f3010b7d00e

    SHA512

    911d12358edcc5601f9a694c56032181df6eb4576e04716e3f42c96ce9dc9af2a68b94b638a436f424bd51731c98b4a3e6e7a7dfe64d53285f00fb8c6250ff65

  • /storage/emulated/0/log/tencent/liteav/LiteAV_20240522.xlog
    Filesize

    3KB

    MD5

    a423d9acb06c446c53f17b8bc41ce1fa

    SHA1

    9601e93ea03f1d5103f6e6de4edc55bae0e88a69

    SHA256

    b051809e88266074245dde317f629e93ecedf5d6e83df8acf5560e2a3ed9aeb1

    SHA512

    67cee250095b895538dbcec0a996d280247a7c2fb28da24c59438267ff853e39ca1311bc14cb656de32d819a7b3b1d32acaaf451d24a9487cd9ef025f839f32f

  • /storage/emulated/0/log/tencent/liteav/LiteAV_20240522.xlog
    Filesize

    3KB

    MD5

    badde1e54ed32add222c500a870c0efa

    SHA1

    a54be4eb1cf9c0ec15a95345ccfdf4ae454d2ea2

    SHA256

    e4a3d10e9d8e589f6d02297c190d2d522b742162c81cadd92e5b6bd045b11dae

    SHA512

    6149dec0e6a50860e32ac911dd82b92e6187c671842f9c802e3afd006dfebdfdd9624bedc36a5e391570dbc658c5c7fb1d2231370f1020df49a8c8cd9f01d991