Analysis

  • max time kernel
    178s
  • max time network
    190s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 15:19

General

  • Target

    67b44eff181f78e2fcc9dba4d4990464_JaffaCakes118.apk

  • Size

    31.3MB

  • MD5

    67b44eff181f78e2fcc9dba4d4990464

  • SHA1

    39944fb5a85aa4800b58a6f2cc32a71ffde7287c

  • SHA256

    c68ca4692f210836b6585d98136143b5d4f94e6023c89c1082cf6ba41bf6fe99

  • SHA512

    dc07a48316faa71ca395ec777abc5d869aae99cdd880b51afe042352e2053083ea804d1fca4d9d9f941f463b2928f0b0911bb4bdad861eae43f9fa40ac164974

  • SSDEEP

    786432:bQasBxiqhNBDzHAdbZJN0cyCtk2mqfGVOY0mvuiD3WfcvWZneu3D:0RBDBDzHA5TNXFk2hfGd0mvui6kueC

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.towardsmars.dungeoncrusher
    1⤵
    • Checks CPU information
    • Checks memory information
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.towardsmars.dungeoncrusher/files/net.redskylab.events/20240522152018-90eb5c7c-eaa8-400e-be39-8adb2b029c76.pack
    Filesize

    232B

    MD5

    90740cee59c8085468629b2502f71589

    SHA1

    4576657016d2aa009505a6faf279d9822f591350

    SHA256

    18183ba232706c47bd5a1e7c34616374b57adc1c6c921f8c11e1170a9747c875

    SHA512

    cc7b5c40436ba2de2f203cffbd07f1652815f43081b458419b0c98f392102b2933127e5bef63dfa70039939bd907d615410538edf2f6e122fa16407efbe56364

  • /data/data/com.towardsmars.dungeoncrusher/files/net.redskylab.events/events.journal
    Filesize

    270B

    MD5

    dc47c2194a4da613b120927ddca6bdb6

    SHA1

    07a1f58e8050486a25cdafb9034f85a684dbb313

    SHA256

    96592f4c84bfdb392b08e5cfc7a9cec032f7aa38fa360142556f8221173da06a

    SHA512

    4b7e3fddbd95ccd35ec03db86f3d357e5cb03e9f6774b3b7b1fcb1d49ce274635d69b96e6e3a971d0eaf06c58eb4552a695b0a8c83840fe370fabd9a5572b318

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/Metadata/global-metadata.dat
    Filesize

    10.2MB

    MD5

    b254dd5da486c001acc391b9286c8f11

    SHA1

    9594675ee9023079c85f37e82bf32ced03aff4c0

    SHA256

    f257b6dd8c515a6a813d321f824aee34c7303dcfaaf289fb73feed267f4c81de

    SHA512

    4dd484b6c6a028e8707c4292a7292cb6530ea1f68382ac509118a4183bd306fc5d76ba4e2ada165c5fe1798a9b9bf0af51272be8078d0d9fcc998c67f0d9f00e

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/Resources/RSL.Core.dll-resources.dat
    Filesize

    40KB

    MD5

    39227e0f402df332e92ca44004dd6aa4

    SHA1

    2684d79e0e7fea4bf80201c448af58596e3e9494

    SHA256

    1df6f429e00c00614ea51c461f4ca56a8123c7b1ec3ddabeea01927f3acc00d2

    SHA512

    0ec5ddf45e41da618c646c4f9abb3a962ee08618277c903efa2af045b94083a68d8a2c86c366682ed24110bd71d71cfbae9faeda31885ff870fe7579056e76af

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/Resources/RSL.Standalone.dll-resources.dat
    Filesize

    1KB

    MD5

    bd585e3f0af727d254cd31c74b375dfb

    SHA1

    9bb37abd208bf2f35c12c0f00818d415b8bf93f0

    SHA256

    c60909bb91eb2676a9c9e70e2cf9a1aa62f8d59b343c13148aeb1b964d394ba4

    SHA512

    bd1da43cbcf7e5711dae56a8dcda4dc691fdcfb56d2fb4b9b145c5c317454ec3bdb9d41f610892375572b4dc70d899a975275040bbaeb76d8861282a08c98c99

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/Resources/System.Data.dll-resources.dat
    Filesize

    91KB

    MD5

    4860ddd4350579f8fcacb1881582335a

    SHA1

    493c03e9cfef6f72a00f92023cdb88527dfdf72c

    SHA256

    98a7950ec6de3242c2e190dfa630188dfa32511a125542b94baa952d1c757d49

    SHA512

    51421a1e79914cb6d828305103c5f7cdb020d98107586abd7e04614f65bae8004101e5567a873f52fe2daa3a7984bf4f7a4930e628cc5f86e709e3a37f812a95

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/Resources/System.Drawing.dll-resources.dat
    Filesize

    24KB

    MD5

    be7be6458aead12c07a04f26e260c3d1

    SHA1

    34d46d957520cb1a525ea9eab36cc40d57a3715a

    SHA256

    7c33aa707bc3fdc83991b81a97d6fc622b140762a767300f08f616c2c0a91255

    SHA512

    554a6b2983fdd055bab56b7f210340521b7e7b480f38aa6368691ea9e38fbaa5eb93aab0137e6c9d7f3b58feb0780753d48eac951a83ea8db67a91df1db0ced6

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/Resources/mscorlib.dll-resources.dat
    Filesize

    329KB

    MD5

    21d06dbc8af6432b2b49536ed30609af

    SHA1

    11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d

    SHA256

    c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f

    SHA512

    2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/2.0/machine.config
    Filesize

    28KB

    MD5

    cad24142abba464dd90777c3d347ef88

    SHA1

    d8db7111fce5a08d8b7c9a6e1e0ad2fbf34cfe12

    SHA256

    edc5bcf685d930a607bc097927260a3f9ac7f52dd809db68158298bfd934b7ce

    SHA512

    5d3ee2ee7921c95cc30790ae670fcadcf091d4fa1b9b5e1b9c7500c67230abe25467236ed160c51aa662e764ccea10e4955887359a65b09432b727abf27f8454

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/2.0/settings.map
    Filesize

    2KB

    MD5

    22c818a23169e12bd3c8587b6394c731

    SHA1

    dd2be2dbccd34736719301aee92429d4258ea5a0

    SHA256

    49c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2

    SHA512

    c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/2.0/web.config
    Filesize

    11KB

    MD5

    2b6303c4f12762b71051db6e947f90a4

    SHA1

    a4d7e05516f63d6ab67327b299d4fb2852cb840b

    SHA256

    3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc

    SHA512

    80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/4.0/machine.config
    Filesize

    32KB

    MD5

    24c866ce8037fcdca2287234eddff637

    SHA1

    9245befcd116458e9619694f1a785c50fa61b58e

    SHA256

    6919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664

    SHA512

    f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/4.0/web.config
    Filesize

    18KB

    MD5

    b127480ee9f0b8dab6a3f73ad79dd332

    SHA1

    7d776d730cbd253564713f36573dd8366782788c

    SHA256

    f1a6416eeedd9d040387fd85dcf7d6e074b6644c6829d08be220ff9fc32efb31

    SHA512

    00ddca43ad38127cf71477810c46617fc2ccdc33f197e26ba761151107eff701fec2caa51e43575fb5b4fbc11f640f525ba70b6b3e97811cecabc63773492401

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/4.5/Browsers/Compat.browser
    Filesize

    1KB

    MD5

    0d831c1264b5b32a39fa347de368fe48

    SHA1

    187dff516f9448e63ea5078190b3347922c4b3eb

    SHA256

    8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

    SHA512

    4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
    Filesize

    59KB

    MD5

    f7be9f1841ff92f9d4040aed832e0c79

    SHA1

    b3e4b508aab3cf201c06892713b43ddb0c43b7ae

    SHA256

    751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

    SHA512

    380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/4.5/machine.config
    Filesize

    33KB

    MD5

    0869544722561f5aff0eefc83fc7b001

    SHA1

    1e118f4b5c1c6a7b1858e3fccb1b1d1095561976

    SHA256

    ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6

    SHA512

    ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/4.5/settings.map
    Filesize

    2KB

    MD5

    ba17ade8a8e3ee221377534c8136f617

    SHA1

    8e17e2aec423a8e6fb43e8cbe6215040217bb8a3

    SHA256

    ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8

    SHA512

    c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/4.5/web.config
    Filesize

    18KB

    MD5

    08101241b15b53ef0ab908f6d388881f

    SHA1

    ea3e2ad6d71d483c54b12852dcbdcd0baa569988

    SHA256

    15a2c7a9242bf54d3ccb3e07fa6d8f84ba8b303d8877243787a1103009941bdb

    SHA512

    a1ee7f17bb069ac42483d1f98ca839ff1bd06f3fc15cd379dff4aca3732a5dac24dc17e15acc8f8fa39e60e186219f4fd70664f9ea284002274a4ff8609791ed

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/browscap.ini
    Filesize

    304KB

    MD5

    378be809df7d15aac75a175693e25fbb

    SHA1

    2d5454e161de8a5b65910f27bd70d9d0ad8fa476

    SHA256

    4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e

    SHA512

    d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/config
    Filesize

    3KB

    MD5

    506d24f8f3641d85468a61abc6cae294

    SHA1

    0323f0a888441cfbcbcb8d7084b77ece44415bd6

    SHA256

    f6238a41089538523af3926af29c9e8e97a94a71aa01d9ba223d1bc0bbf42241

    SHA512

    ab23d1b8f6b6ac2bc4f9615401e8db44ce553490a13df39bfad0e1483ef3b157b180b19ec0df4fdfa68e13b54e00513036df04934a516577adcc5d0b52f0e13d

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/mconfig/config.xml
    Filesize

    25KB

    MD5

    f34b330f20dce1bdcce9058fca287099

    SHA1

    936520d5bb5c00a1985d7a4c4f0ef763a9031862

    SHA256

    0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d

    SHA512

    d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd

  • /storage/emulated/0/Android/data/com.towardsmars.dungeoncrusher/files/il2cpp/etc/mono/registry/last-btime
    Filesize

    3B

    MD5

    eb844645e8e61de0a4cf4b991e65e63e

    SHA1

    5031aaf7e6de72cb3e0d03005007ef58cc368b8a

    SHA256

    ee3aa64bb94a50845d5024cd4bd20202a4567aed5cd5328c0d97e9920775fc28

    SHA512

    2a9a07515af006a6877718b1069c4923ebca4ac59d66e32d4ba6ad041cbce653dfc3926dea262bcae183453f533a8754a3706c6b5b60e0d83a7f73db3f19998c