Analysis
-
max time kernel
3s -
max time network
156s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 19:24
Static task
static1
Behavioral task
behavioral1
Sample
6858b30c001644b6451f2830f7e2f9f5_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
General
-
Target
6858b30c001644b6451f2830f7e2f9f5_JaffaCakes118.apk
-
Size
12.9MB
-
MD5
6858b30c001644b6451f2830f7e2f9f5
-
SHA1
c77e18bb049d2e319d63774c31e70e917b394356
-
SHA256
cbb979fb5451144fecbbe6e6e503ff58d9dc5f5b476e3145debd41bc675b3052
-
SHA512
52079fa3efc6329e1954646c36ba108fcfce91df74fd1adab7dd21e84555d0d8ec7bfbda9dc579fd2750ced7804973ee151116d0bbc5dc81ea10c4e5a0a180d2
-
SSDEEP
393216:d5oYjs/Y5O4+wgkFgyRRDfiH0k9sIjGUCp9x5g:pj/5/gAR96Uk9xIvy
Malware Config
Signatures
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.zycf.chegedescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.zycf.chege
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.zycf.chege/databases/bugly_db_leguFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.zycf.chege/databases/bugly_db_legu-journalFilesize
512B
MD55de29c272b1b8e3ca3d1d839cd2701b5
SHA1960349ae9611ab1a1e5a4321379b692831e028de
SHA256acae0282da03fc7abc706450b8c485914da53131cf2e5b52821b7d125a1935c2
SHA5127bbf7c44c1de11ba66592d3a4f0e3250f83c8a48cccd4085ed05636ca46df2ac4457cb871c80c2fe5072e70c6cd928fefc989db42424499b2cb9fe7e4b46d5be
-
/data/data/com.zycf.chege/databases/bugly_db_legu-shmFilesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
/data/data/com.zycf.chege/databases/bugly_db_legu-walFilesize
92KB
MD539dbd0ada108d4601b42e70da8a2afbd
SHA1fce77e38821f21f6d9a5f047fa596f40d49d6d11
SHA25698a025ef6a5aa0924b5d1c8ce1f8f7d5320dbdc17326a8717914ac5991ec8772
SHA512282e797650bc73c7c9fd0d693516c420cc9494de76c83b7bafa0108f48811a90c8348aec458bd3fdd16f18e6564222e73d1241852ee5cfb800eacd0b3b121354