Overview

overview

7

Static

static

6

6850d89b83...18.apk

android-9-x86

7

Analysis

  • max time kernel
    63s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 19:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6850d89b830c1fea5d1478183760d21b_JaffaCakes118.apk

  • Size

    14.5MB

  • MD5

    6850d89b830c1fea5d1478183760d21b

  • SHA1

    e0a63a268f777e83f678ff9cf38b12e6a0218bf4

  • SHA256

    285c7d0e50cbfab488bd4d6b236746eaf2794dce24c8b2f066ffcbf22dbdac03

  • SHA512

    7f4bf986096cc01823854dbc2dfc84b423cedfd730d4c76beb299c83220078a8cfa0f6ed6022edfd76dfe5b72a86b03b248b8998f2cbb825f207c1cf1b43af4f

  • SSDEEP

    393216:aq61F+rgK+ZPXVKfR7DPtd19zTJqzbVHR8fGbrEHR8fGbR1:at0rb+f6NFJceMrWeMR1

Score
7/10
discoveryevasion

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery

Processes

  • com.bbdtek.guanxinbing.patient
    1⤵
    • Checks CPU information
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    PID:4290

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.bbdtek.guanxinbing.patient/files/.um/um_cache_1716405153371.env
    Filesize

    617B

    MD5

    6237be5e1c8e3b0d02089b0319b798b2

    SHA1

    fe522e4afeffafe04e5e02113f0f94ba4d9d2292

    SHA256

    54f6b8b8f4529308b3b4ee59ffb4d398e4e4760d946b868a2ec052cfc4baed48

    SHA512

    3d1c7e7ed11dd4876b25f995586f4a5b040bf86820c0dc100c74e93e6527ebfd0fd617b0485775572073d0020113296ee4aa39a3bce7785cbfd9c529f5dd4a29

    Download Submit
  • /data/data/com.bbdtek.guanxinbing.patient/files/jpush_stat_cache_history.json
    Filesize

    158B

    MD5

    27eb6a51bc38314461bddeaed28ec038

    SHA1

    4b3561b3ea31e3091fdd8b18d4e6f1d1f3ff17a7

    SHA256

    72c49d13969db9ff165509f6ed7d61976154514e9254369f95d8c6de58e31015

    SHA512

    cd13ac44a65dd6d40b4c2043b1600ef014dce7a8c9ac75cb137c81ee00856ffecea2f970ce55f7ca2bd4a073f95be83f6de4156e961267dc12c4bf1037329a4f

    Download Submit
  • /data/data/com.bbdtek.guanxinbing.patient/files/umeng_it.cache
    Filesize

    310B

    MD5

    46c3641bf530febd00187b524277e645

    SHA1

    684c5200ec6e46fa6fd38b7cdfadfa0e738f0aed

    SHA256

    43194ed8ae2fbe8f81bfcfc309156c722a0f8d1510f0ed4de19624c58f7d6647

    SHA512

    cd9da403ad3a48b0e3cf347f6cf27acaf1dbcf18597799238aa247fa38ab78681511705cb16c53657f58b673010f108c0fc354c929de744fc5e2a3e3c4f21811

    Download Submit
  • /storage/emulated/0/Android/data/com.bbdtek.guanxinbing.patient/cache/bsCache/firstStart.0.tmp
    Filesize

    205B

    MD5

    ebd0a8eb67558615753539aeb3d65b8e

    SHA1

    8f0412e9c02b550e32277b4156148bce7d76b558

    SHA256

    8502516fe3736502849dfbfe1b7ffacee408b4f12c16faef354c6d08abdb0790

    SHA512

    2984c3bda0bcba4b6303319790462ed33ce3727c4a0deaac559478ca335416cb8f07e04f81556c9f5a52d27bce9c6e17336321ad615c54ac3b29313b7cf7be15

    Download Submit
  • /storage/emulated/0/Android/data/com.bbdtek.guanxinbing.patient/cache/bsCache/journal
    Filesize

    69B

    MD5

    1a3b0e64d7c68c81e493bbcceebe46e6

    SHA1

    13a0e21c14986136493183ef92051b21db6e4ec2

    SHA256

    2c9ad8f4db099d483d239881681c72f49aa18fc3c275d88efb13d48c816572f4

    SHA512

    ff1d27bd67bd076228bb565cbfabe518f27e1eb57abd40067c3c9e064888a1ad9efe4004e784a67ef9c32ea63bf7774c662b5e0fcff9c5abe33e75b33a8b900a

    Download Submit
  • /storage/emulated/0/Android/data/com.bbdtek.guanxinbing.patient/cache/bsCache/journal.tmp
    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

    Download Submit
  • /storage/emulated/0/data/.push_deviceid
    Filesize

    32B

    MD5

    a31ce93322f197b280d619a01e289f1a

    SHA1

    3e56ac88b78f9f749547f3d7d9e9c7ffb90a9836

    SHA256

    a4b625cc106b555d630c86859a9682143916a4588fcde1a0f413c0f5a9ba8d32

    SHA512

    34d3f0f15d8418e25098bdf985ef807c2f45031a2772a686035aa4186da6042d7a2d1fc69115b7ea7de2fd4e7014a8c0e81c239d76026670d4fdcb6a8c41bc03

    Download Submit