Analysis

  • max time kernel
    3s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 19:24

General

  • Target

    6858b30c001644b6451f2830f7e2f9f5_JaffaCakes118.apk

  • Size

    12.9MB

  • MD5

    6858b30c001644b6451f2830f7e2f9f5

  • SHA1

    c77e18bb049d2e319d63774c31e70e917b394356

  • SHA256

    cbb979fb5451144fecbbe6e6e503ff58d9dc5f5b476e3145debd41bc675b3052

  • SHA512

    52079fa3efc6329e1954646c36ba108fcfce91df74fd1adab7dd21e84555d0d8ec7bfbda9dc579fd2750ced7804973ee151116d0bbc5dc81ea10c4e5a0a180d2

  • SSDEEP

    393216:d5oYjs/Y5O4+wgkFgyRRDfiH0k9sIjGUCp9x5g:pj/5/gAR96Uk9xIvy

Score
7/10

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.zycf.chege
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4307

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.zycf.chege/databases/bugly_db_legu
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.zycf.chege/databases/bugly_db_legu-journal
    Filesize

    512B

    MD5

    5de29c272b1b8e3ca3d1d839cd2701b5

    SHA1

    960349ae9611ab1a1e5a4321379b692831e028de

    SHA256

    acae0282da03fc7abc706450b8c485914da53131cf2e5b52821b7d125a1935c2

    SHA512

    7bbf7c44c1de11ba66592d3a4f0e3250f83c8a48cccd4085ed05636ca46df2ac4457cb871c80c2fe5072e70c6cd928fefc989db42424499b2cb9fe7e4b46d5be

  • /data/data/com.zycf.chege/databases/bugly_db_legu-shm
    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.zycf.chege/databases/bugly_db_legu-wal
    Filesize

    92KB

    MD5

    39dbd0ada108d4601b42e70da8a2afbd

    SHA1

    fce77e38821f21f6d9a5f047fa596f40d49d6d11

    SHA256

    98a025ef6a5aa0924b5d1c8ce1f8f7d5320dbdc17326a8717914ac5991ec8772

    SHA512

    282e797650bc73c7c9fd0d693516c420cc9494de76c83b7bafa0108f48811a90c8348aec458bd3fdd16f18e6564222e73d1241852ee5cfb800eacd0b3b121354