Analysis

  • max time kernel
    7s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 13:50

General

  • Target

    677a706ab0d298e1debb441ad38d9350_JaffaCakes118.apk

  • Size

    1.1MB

  • MD5

    677a706ab0d298e1debb441ad38d9350

  • SHA1

    ca00ad45c25432f629bf22e4ca3135bd4e71da77

  • SHA256

    c5e7e57751e45d8b76e85fb669867941e17f741979bdd5259ca6a34026dfcf30

  • SHA512

    6819cd6b2c43203f6602f1b578f5c55667398fd8d3b793f9be250be69481a3a9ebdd7cee7824ded571d6c1ffc9aee041ebf28bad42eea0fe3a26952d6da003bc

  • SSDEEP

    24576:2HWkmNAfv4x/5KkccXrIgShgW7xijfY/en7kZaVQOlR8:EVmNivKcyIgSOW7OfpwUhlR8

Score
7/10

Malware Config

Signatures

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.cloud.fanyi
    1⤵
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4306

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db
    Filesize

    20KB

    MD5

    e217cc13dbff428636ea6fb9fc3f697d

    SHA1

    0016636a07831f7482d84cde5991a7147dea03ae

    SHA256

    09d174b61ed0609976e5cc83bb311533f3d60689ceb8ff2bc18697f17551d047

    SHA512

    b552ee716a942879b6f378e94bdef4baf65e36052a3c6a2f97008574c7f329cd9a5050c89c73e2fe125910c3e39edd6e3b0eed04cc188defcaa52fa090ebd080

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db
    Filesize

    16KB

    MD5

    9250e7057acdf1f038d0a219a7df534a

    SHA1

    b168a191570a15343b7f7d640f4941a9c5b62e17

    SHA256

    8ea56a03116a0c81ee4f4f8fe3a82f0a579069c3ccb54f8dd8402cb1d5459de1

    SHA512

    6603d925dda055c5c700dcb4bae37331f4c45b096fb4ea060a770cc4b4b2fcac5a53b08e71b22471e2c5b8290b10e3414b70fb3087218fa1b9eeaba621748fb3

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db
    Filesize

    20KB

    MD5

    c1899d5d1b11c396d33f50fbdae7ea48

    SHA1

    ab2a9d5b4d6457c5836956d3a5a82a34d7a42bfb

    SHA256

    79d310dcb89dea7513562074067af0e938d9a90f6d4a9067b18b6b020cab55ba

    SHA512

    36ac626ed3eaba7290d6cfe71f6ccbe8c1a7e6fc679ced1794810aaa0d5d9a47479d922bffbc2c34bea97efa503535560a71a96bf25bbc430618faa8c684d528

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db
    Filesize

    20KB

    MD5

    23792a25b20e48013f48e5ee8fa57577

    SHA1

    d28d7b576dab6d0251b52a63423f66b4c5fe68bb

    SHA256

    16171cac58d2dde99a7d1409261e36be60d5d8a8edc99c51c0397884c862f1d9

    SHA512

    c8c10623279602f1d353c68e6213aa7b5cbf40b6d705be9dfe73058a1638f8b4532cacd944d9dadeb202f0dc9e22703e11e97f2a9aeb3a6f27918c86a21c5025

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db
    Filesize

    20KB

    MD5

    2d4c32d9b5d2b94d28430ea7e3e50cf1

    SHA1

    3b9b1512adb3ada23e710cb9812249922063e1a4

    SHA256

    9c8ab800392a3884b907473b265d5bba4ba210f8a247abf98faa02fce7a4e626

    SHA512

    7638a5b26a30e6bb51576d61b7b388188d813a635d030a120626927956a93d983824497b6b9f20aeffafdb0d014fb8c23605388f28e83ce13782daeb33ef8f4d

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db-journal
    Filesize

    512B

    MD5

    34d665c89a9fe2433f7d90d2fa1ae73c

    SHA1

    1221c79d63c7f171820ef933dfc88d40b6b867a8

    SHA256

    f38e9bfcb628338b94a87e1defec727ed3dda838b2489f2cf7fe353a9f7b75b7

    SHA512

    9e10c0ae90ae2b8d22e6a816756c517f9e9eea4e41152283f491ba2ca483f3be9c0394d259fb767b0179ddb4186b4d5b4eb87e0e4f2919cc659b752d76d28059

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db-shm
    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db-wal
    Filesize

    8KB

    MD5

    58a2bd52bf16ce4216e00476759695d5

    SHA1

    691b05b1c7db65c70e18f5fdbd40f2299e945882

    SHA256

    f3c091f412aaa0f6500491f33f1fbdcf37505b24dc37bcc9eb176b0b5635c7ad

    SHA512

    a0d62cf3396ec00f6266a6ecd303a9d2d58e2d87652ad46addd0413e95f1c0adc0c835436c05cbd72880a543150ae23ac9bf3ec025fb133e8ab24da7ca796fe5

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db-wal
    Filesize

    4KB

    MD5

    97a1d791437047f7b93bb08e9aebbd2b

    SHA1

    b0f2aa06c221e09db11a17bb8485103aade7560d

    SHA256

    044f2ec94f8e9294e1fe29f93b461e26afc61d07d480a43a3b69050673af4784

    SHA512

    bd62e1b96d23e1f59c75fe206c1dc4438f57d2e32d4f652a8c30800ab1321a4fa768ac230886e7284055156c6c7047352332392625291783cec471b68d60b036

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db-wal
    Filesize

    8KB

    MD5

    f97d0f4ef78caaa586e60c1c0dc1d44a

    SHA1

    da6dbe6eea34d55905f2d68c306def08855b51f2

    SHA256

    982c50ef6fdbed6573b53a068c58f5a3c970171d65e246ccf25754f3e7554409

    SHA512

    a4a768d277bace85313da50a51ec2a4c672c4cca5074d63a1ccd5b0f4cd3d45e826a7376d5c82a18000742abfa2815e9093a2aa75d5a83b50137039c466e6d5c

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db-wal
    Filesize

    4KB

    MD5

    4a2fa90fd231ff4319562cfdf5a62b2e

    SHA1

    0f2c75956c76ac8fc79c85437e84fa948f047a22

    SHA256

    7af52d555f22a74f691786e9c426206ffb031ca4f276b75fb7f444de0ffd6b62

    SHA512

    d8249a77e009437ef3065c7d1413b5ca9fdd89a43bc01a6d1bd135c7bd364f26dc735d08f9e9336b2fde0996c5b40176a65b54a7d1ab395210a687800f63557d

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db-wal
    Filesize

    8KB

    MD5

    4f153a765fdc85132d89acee7089d20d

    SHA1

    708c0caa6375c8dff9b830337942e6db3bd376d9

    SHA256

    ceef5997ac203f88ee632715e174e134eff23dc9f29e47027ad44670c83fb8b0

    SHA512

    9926c5f11d14c5ffb8106e9032f34e317c9bb683e5d1812e373358e5916b26cb090596c689e35abede1db3ede188514b32b4fad24df648ffbcb2e5e4172d5523

  • /data/data/com.cloud.fanyi/databases/down_sidebar.db-wal
    Filesize

    32KB

    MD5

    447e45b72fde6752a95e59fcb3d9f858

    SHA1

    5d6e04072912c4b7e77d713801e89faac93ad5c7

    SHA256

    f71a9d10920b3fab74757ec906e27ee97b54f3eb38beb95435211098f649c772

    SHA512

    83c4cbd9a2d3e04ebc5a2690ff93537241571402bab0c3466956b34061d49b5ffa0a323cbca3c3ac356ef44f6bb8c307821a4a59efacf06148fb4cdd837dfafe

  • /storage/emulated/0/Android/data/code/KI.DAT
    Filesize

    58B

    MD5

    2b53b6b030d7bdb5da6ea0d501b6a165

    SHA1

    fa4e9e8d724d91963a3fa3def11790559cac11c1

    SHA256

    d8209526853a232417c586b6c130ed3ec53af8a2928b95d032ddcee37b4698fc

    SHA512

    dceddb69f3c907593c47edd56cea3b5cd68e560f020244e6abf9e63c58263d38b36e8736617758f2c5c7292bffd815af44fee3805217aa9065cd143e0599b128

  • /storage/emulated/0/Android/data/code/MID.DAT
    Filesize

    60B

    MD5

    c679783f144b5b77cbcc89952b9590de

    SHA1

    339c29f74856fbb0a27070d1d90c1acde4d49142

    SHA256

    03e9e03b09bb456d2e730f787e5b232d119d59547959fd73617cbf44dcf56de3

    SHA512

    5ac8cdf1e7950029ccd418c6df2991e9763083cc631f549ab2302758b0cd634817c1f712db7310927ba39aa9612e7be746532142434d314fb7231e2f97d4aa2f

  • /storage/emulated/0/Download/ads/clst.dat
    Filesize

    15B

    MD5

    fa1be6a965dc7f415b4e2a83e0cd768b

    SHA1

    c2f78d7ea72ee709975f427cc1eb8d9ffc5f2c17

    SHA256

    f262e37d47feba02a7bc7d7f8b5f69399d626e1e62db78b1db151e198fcfd5be

    SHA512

    519d56f17a67207e767c73b7de8737283045fa112cd389ed1203adf1989bf7a5f96f1262650fa53283848ebf41098c7a4e236028887a3a54175c2c8c9e700d0f