Overview
overview
7Static
static
66754ec16a0...18.apk
android-9-x86
76754ec16a0...18.apk
android-10-x64
7__xadsdk__...__.apk
android-9-x86
__xadsdk__...__.apk
android-10-x64
__xadsdk__...__.apk
android-11-x64
alipay_msp.apk
android-9-x86
1alipay_msp.apk
android-10-x64
1gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
qhad_dynamic1113.apk
android-9-x86
qhad_dynamic1113.apk
android-10-x64
qhad_dynamic1113.apk
android-11-x64
Analysis
-
max time kernel
28s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
22-05-2024 12:57
Static task
static1
Behavioral task
behavioral1
Sample
6754ec16a09d6d635d8c0355cecdf4f1_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6754ec16a09d6d635d8c0355cecdf4f1_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
__xadsdk__remote__final__.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral6
Sample
alipay_msp.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral7
Sample
alipay_msp.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral8
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral9
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral10
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral11
Sample
qhad_dynamic1113.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral12
Sample
qhad_dynamic1113.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral13
Sample
qhad_dynamic1113.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
6754ec16a09d6d635d8c0355cecdf4f1_JaffaCakes118.apk
-
Size
8.0MB
-
MD5
6754ec16a09d6d635d8c0355cecdf4f1
-
SHA1
d68d04111e9ca2aed2c38024ef9d8477e88ee7eb
-
SHA256
fcde5c680f4604d1da7b4d032fdb4ec28090cd2fe3c539e5fefb70328336c7a3
-
SHA512
2a306f9507ef5953f2ccd628b2d64d58bfedfcc500805aed00622b0fcfc01d156b67743a00aa3121447ef870dc4bcc3acfaee598063d26c176404a4930a00081
-
SSDEEP
196608:yOuWRntxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxk0xcnL1sfJbVZUhmcD0:/uWXxxxxxxxxxxxxxxxxxxxxxxxxxxxF
Malware Config
Signatures
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.esbook.readerdescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.esbook.reader -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.esbook.readerdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.esbook.reader -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.esbook.readerdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.esbook.reader -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.esbook.readerdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.esbook.reader -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.esbook.readerdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.esbook.reader
Processes
-
com.esbook.reader1⤵
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.esbook.reader/databases/easouBook.dbFilesize
36KB
MD5362c57498525a0fa8c76b41ce812af63
SHA10bdf377a6ada46ff09bf798dc50a87e54368e4ae
SHA256d7d27b3a95127862cbe647511a5ce26d73bdfe53e94d564854ce51930b11fa78
SHA51206690348cf7c8662d79040dd1ddb18ac9756b0a98dfc405e59587a3dfbf721facc646ba9eb2d8f85e0b9ca987824c2d58c99ff20c7bec5b4311b381cfe395d5c
-
/data/data/com.esbook.reader/databases/easouBook.db-journalFilesize
512B
MD5e3c03849acbdbd46ced16799a808f0c5
SHA112bd820692b1323ffafc206df5b653efb4c8505f
SHA2562d5ca37148793ca0379807753ae6a99675e15aa0aea6799a47d5c0326692f02a
SHA51280edf5f6e6ff71d3a71f68c2b4035b82d13488c6e78a865de98760ea801b10d3e6ac822df3b0f98955e4d941a702e1288a759b4e7ce14561d83e250dbd6e02cc
-
/data/data/com.esbook.reader/databases/easouBook.db-journalFilesize
8KB
MD5225738adabbad4fa7b1c4fcecae65acb
SHA1fe47580ffa0ca68606482506429418bae95d242e
SHA256caba298193f6c61b9b6e65daaff69daaa4046d60fcbc8a1f18c51682b0a2d315
SHA512a18794b6f4147ab4ce75c678c94456b9cf940de3a319819a6455b88f074ba179e3b4af701ab60c65712abc2492f96fa628021443d5cd6ead2229416f731e5fb5
-
/data/data/com.esbook.reader/databases/easouBook.db-journalFilesize
8KB
MD5fa6809b6296042c6c5af19239f952473
SHA1f02ec089a7758a48a989864bf2fc60844a72e1bd
SHA25676d6fb38ac3cc5da8e446aab7e7f577a49f13de1296f487165251ad20d719737
SHA512d1aba4d5f5079164d0de82c9cdf43efb9fa6a3065368dd942b66b556c40fb44a7c60cc37efed018df7fd839f3923583c99298b875b444f1bf91454ab20ffb0a5
-
/data/data/com.esbook.reader/databases/localEasouBook.dbFilesize
24KB
MD51375756f7880fd7db5157693718bf290
SHA188e75f17877ea3dcacd0283f4cf01750cf306959
SHA256f4e7f8444be252e7b62fffe6827f8315e5a8cb30a9075c6f0f7b3a3ba1e567c9
SHA512ca110f77cc8b637ba8b6f982b4e5ce4b3dd76dffe14ce318c9d0ffe0b939f8a6287f658f8ea51923fc13fb0e3d006c19e1b2cf29d30c6af90ec5a41c05380bad
-
/data/data/com.esbook.reader/databases/localEasouBook.db-journalFilesize
512B
MD520f3530c1eaa6c59dc2e7026641407ff
SHA1e08403ccb579e172fc6a15611e8016cfc8bc36df
SHA256a03bd93293558c37fc463f203f6c400261dbeb379ab0b97e7cf10819e14e2ab3
SHA512a25dedd9e13d7071e18b4ff8ef53ecb5d1cd7d43ee1a2d6508c4d508070fbe02f5974e326ef7c180a21a9d89c54d1a481a861af84994388a9df0cd653726c78a
-
/data/data/com.esbook.reader/databases/localEasouBook.db-journalFilesize
8KB
MD5aa2a7a514d1ff0ea1b5d3a0bec917939
SHA15893d147f4989fa3530af0a0ea4fcf49957abaa4
SHA25611de3728614b7a7172deed8036d345f2a0d7810abc691a92cf18dc574d387e64
SHA5129900bf17b1475657ecc3b6aab19d13bff4dc170ca1675501cf7972a41736bf719d452fcea80786f215c51d7d08c93ea1f6c6d0a4bb20ad81ec125e3cf32c2bc4
-
/data/data/com.esbook.reader/databases/localEasouBook.db-journalFilesize
8KB
MD58d45102b5456b8ea5c7d54345288463f
SHA155e71b2d9a4c0a1564f8de3dc650015a78f640f4
SHA256bc93af12436d20d71bdf78d01a9f399a371e0d404ef939040261c41ac4d8f119
SHA512de690cca867e35e918e123a383f574bef358d23742f6767334f0430e187343e4ca08aa9f60c9903b8170673047793f2c0b4caeddc15317a4fdb7c53eaadeb72e
-
/data/data/com.esbook.reader/files/CMRequire.datFilesize
1KB
MD525e57636aee83606d202f04f26c2913b
SHA11ef0ade456ba38aa31584d0fbce647d0ba74b399
SHA25689c56da41f0046c9e733fed330d2636d623510c217f72c2d025df3343dc66783
SHA5123a8d294b8be98abe4d18116cbf7c16d44a541d1d20dd4dfbbbf3bbd8cb7997abcbaf51790bbc1978135d888c4e89868a9a2575d9cfed65a331969de77ba07326
-
/data/data/com.esbook.reader/files/VerDatset.datFilesize
172B
MD5caaa975d7bf4952bd5dd695ade33f1da
SHA1119373fbb2db036712df72ec9b26c0c2840dfbb1
SHA256d0f94264a6b5c355dbf5c0516202c732bcae471a2401542b2ca43307727a0d02
SHA512db2acdecd236eab67cb67151032f53e51c9c04e754f3c21d74e05cacb1ea5edecbbccbd66ee760624b9cac97b8dd77f568324e8abc2b9c16aa73131db81c8b06
-
/data/data/com.esbook.reader/files/cfg/a/ResPack.rsFilesize
684KB
MD537c7d7a469620c696b8812831a527d62
SHA12e54375cde7ad35666184f5c7aeb65d5887f746c
SHA256f3f542caf19e546f5cc1d265d5e6e35fa5ff32bb24e9282a60ef21d4c8588d9e
SHA5128726878886379a8174b1ea11bb0c21dc6ef9bfe0ff2eafdfc4260a8c8666be82e3fd95309915aa0b40ad1a34b2f8f62f7c33860247562e84cac7e156dbf995bb
-
/data/data/com.esbook.reader/files/cfg/a/mapstyle.styFilesize
131KB
MD5db362e36518c847ae80caca571e3c8c8
SHA1610911bf7869016fb7c9a2026b3024eacf0b4593
SHA25695549560fbb3d96dc791c2d16fdd5f098784eee75ac293556fe9688fb2f0ec9d
SHA51241fa2b9b61c131b0926d0f47f86eea56859ca0d4e44ac23647a73ff4b98214183cb0a523336dcae4e2ddb4be932e994e1950365fd3590eb2f7c3b96bd4bb8a41
-
/data/data/com.esbook.reader/files/cfg/a/satellitestyle.styFilesize
119KB
MD56034f2a3f8bc9639ae820bd977bde4a0
SHA1599f7994853b61bc5ee09a75b6383a13a5a685f7
SHA256753705cb1ab2a676a9ef48881cfb036f212c4a7e7a5d34d9f8708075078e5818
SHA512acaf0d146e4e3739eeaa40d46f7002776ebc4074bb89d12a5c25b12f53190a0e367ef0bd3225835e7e4b39a70b06e9f7328b1e342a9c5829af7610c14d41898f
-
/data/data/com.esbook.reader/files/cfg/a/trafficstyle.styFilesize
3KB
MD51e4b535871c4feb2010b614713def5c7
SHA14c5dc67838d12b795b6882c6dbbcc6767e42184f
SHA256efa3ec85127a21a8c8a74640acc5fe1d992952964d4f257682f832f63c2ad3fc
SHA5120c5443dbfdafab2e6cb7740587f48ca9a2c971b93afafcebccd17691edaa7c7fb75dfd1b6c939dd591a5aa65977f55e64b6c3690ab0a660432269fc43bf3133c
-
/data/data/com.esbook.reader/files/cfg/h/DVDirectory.cfgFilesize
69KB
MD54baa4ede52eacda76bd26d5838cc2de3
SHA138b65c75440581f43ddb32ef17480e5c87f0153f
SHA256c0f2b002adafe50265789ca04bc8dab8c176e6a7eaae164fdb98ebcb9ff98eb2
SHA51258fef595b1db5f8fa7dbfcaa3b6b676bdbec8931ffa833858e2452c2f35a1b192746d2315acd27551594377ac121ec80574deee632d4bfa94b6315b8a0d33feb
-
/data/data/com.esbook.reader/files/cfg/h/DVHotMap.cfgFilesize
10KB
MD5c16f5ca1517683c46e02a6b71aab3c00
SHA12d09a048d1b8d556d89d4d723947e9e234b5e59b
SHA25613d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9
SHA512a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b
-
/data/data/com.esbook.reader/files/cfg/h/DVHotcity.cfgFilesize
1KB
MD56c495e47c754a9b25437ff9a88c7a51e
SHA18c4e36fda1e1f80918a3a8f1812c4e68b2326a4f
SHA256e68e66e643d690d203a5153156e9cd6383ae1b3c481afa4b19e903d4a82289a3
SHA512f3c030504cf50fdbd284acbdd893c948fb7ddb7544ce01d11c94fb00fb554f878949b1867fd5ab6c25e76c4be717aa819a917d4f25c8eba904df1a2819becf1c
-
/data/data/com.esbook.reader/files/cfg/l/DVDirectory.cfgFilesize
69KB
MD565685a117c72fe8fbf5a92b07073c99e
SHA1b115b527f74e4c291edcaab19b316a446aca8f5b
SHA25619bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8
SHA512e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253
-
/data/data/com.esbook.reader/files/cfg/l/DVHotMap.cfgFilesize
10KB
MD5cc3fad9057e0940ad4d4c7ad27922023
SHA1403cbbcd7b819733b5caf49ed2a58d654441e99d
SHA256f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864
SHA512ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21
-
/data/data/com.esbook.reader/files/cfg/l/DVHotcity.cfgFilesize
1KB
MD51c6abcbbd253448057930ad1cc59ac75
SHA1a5845d1c4bc87b8b4785b456d76edcb8309eda4e
SHA256a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136
SHA51271aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631
-
/data/data/com.esbook.reader/files/cfg/l/DVVersion.cfgFilesize
127B
MD5e962c995c0664b5cd8d067db1561cad7
SHA1263524863998525598f663ba7134ecec2ab592b2
SHA256b83792f572112503fa2c542595047271d632318a775061ae3a964948738639f8
SHA5127337967c5759f8a078eed90adc45054e5642b1e319800549c80395dcdc1956baa8d9741348e1dc0be931f24cdb899b95d4beec35e52995703dad8d0feb04ab26
-
/data/data/com.esbook.reader/files/libcuid.soFilesize
109B
MD549dc8b15d18ccc5773d8471be16c40c7
SHA1cf42bbef14a0167c45a867454ede99adb7904bd1
SHA25684b40d10cb32c9c379bdb8961c4cf37fe140a6df81521cbc7ae86a57b637f056
SHA5126bb9acbdcecc317d9f55c395782c082524655ade62e61c1223b403491445484745fd57f77b40b21d840b30690bd6d7398dac85b1f0c98a31c671ce4858288244
-
/data/data/com.esbook.reader/files/ver.datFilesize
6B
MD55f7335045aed321b93c6ebb7a4d7417a
SHA135fbd4bee538b385d7abfc56df4e701615f73784
SHA256f9d1a10b6885f6c28d841e07df992a2f620dd69e65d0a318523c232982158ed9
SHA512ae94d011816076c988605e82e75c18ca6cb1708a20f079ac6dadc4c874c16b653a9ade7ec1015deec39bf98b840be69eb6e0d3705321e0bc59c8460c4de6ec4f
-
/storage/emulated/0/easou_book/backup/bookBackup.dbFilesize
20KB
MD565cada3011613cedc811637de12f02dc
SHA1949ea15c94750fc48a781dace29954a7054a674d
SHA25621f439d0bd187b2d2e855d8d880f51d8047b22320216bf37ff7bd0379df44d2f
SHA512d25ae70bec5fc6ed46d1113cc5809f7da8e417c889033caea81ccd86b382cd6e75e8c2450fc67e7c1a46a9f939b6038a453717fd28b9e59bdeaccbc2ca5b8af1
-
/storage/emulated/0/easou_book/backup/bookBackup.db-journalFilesize
512B
MD53a1239e87e200e5a6cd5b7f7ee98aa5f
SHA14629c28218bbe96e83c3a02f550cde2d0e26a223
SHA256d13f4b5a6d93cab92b449afcd77da3d297d8be5c46d9e8260f0c183572dc8083
SHA5121078f2a9922f4ae88f8f44c5b4d843d5c4249222efbc198349eece24360e231a8fbd58d2c4051e3690e9a47d87587a3852da8159a34a9c21f5f65e6613171d54
-
/storage/emulated/0/easou_book/backup/bookBackup.db-journalFilesize
8KB
MD541fe75b84afd91b858c800a5308d7714
SHA1b7be2da469fe5cf07807e99552602e5135fc6e4f
SHA256da9ac9f1c5b8a6b9312004568ca9e113d9b0be00214968f60549f25d79b16029
SHA512464e6e7862ee90862ed85c218a4f3d85e10ade0aaf21d8f41cac3447f933d24b419e43e0aa8ee84eb707e4880465535f5edeb60e88263ff3b672c7207703b92f
-
/storage/emulated/0/easou_book/backup/bookBackup.db-journalFilesize
8KB
MD5d84ebc0d23199eddd31bfb2a5ad52201
SHA132f2e475b17f99716bd70cff03a760237e3896b0
SHA2565e3ed6c4ed3139df44c04f4644ccad4fe30745351b059d8b5bc3aa46a11eb29b
SHA5122c08af578d483f6be9917e37b8b2a8efa2a2ed6993df8b4704048759fb44ae5ceb5d03d22c3037d1b7d8ba61591727004e0cb3388b77b1c3643b5e7b237acfcf