Analysis

  • max time kernel
    175s
  • max time network
    186s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23/05/2024, 01:27

General

  • Target
    69490f5c942540a003baa2adc8d1a96e_JaffaCakes118.apk
  • Size 20.1MB
  • Sample240523-bt764agg46
  • SHA256 9a61f3c840baffe0b9675aa08099b0bae2e6a0132a29710e9a86f7e33110dc87
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Requests dangerous framework permissions 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.melestudio.PixelArtClassic.mi
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4258

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        analytics.apk.tmp

        • Path /data/data/com.melestudio.PixelArtClassic.mi/app_analytics/analytics.apk.tmp
        • Size 545KB
        • SHA256 5a0062937d99f0b85e6fcfdb162ce6224ed0635cbb8cf6e3ac253d57fd8ef97c
        • MD5 SHA1 SHA512 SSDEEP

        analytics.apk.cur.prof

        • Path /data/data/com.melestudio.PixelArtClassic.mi/app_analytics/oat/analytics.apk.cur.prof
        • Size 816B
        • SHA256 dd75e571d1fd47102bd6ee0d96dd679b618eb01f3c2f0cccb7d8ae5dac930f2f
        • MD5 SHA1 SHA512

        mimo_asset.apk

        • Path /data/data/com.melestudio.PixelArtClassic.mi/app_mimo/mimo_asset.apk
        • Size 300KB
        • SHA256 aca4c8f0522c09a77bcc790b10c772611525456cc88da97b0240ffdfe1c4a2eb
        • MD5 SHA1 SHA512 SSDEEP

        mimo_download.apk.tmp

        • Path /data/data/com.melestudio.PixelArtClassic.mi/app_mimo/mimo_download.apk.tmp
        • Size 400KB
        • SHA256 1b01837a2b9004309bff95248adc60d39ffdadc90e52ebf645b2c5ce76f28bc7
        • MD5 SHA1 SHA512 SSDEEP

        mimo_asset.apk.cur.prof

        • Path /data/data/com.melestudio.PixelArtClassic.mi/app_mimo/oat/mimo_asset.apk.cur.prof
        • Size 760B
        • SHA256 477b8c5a5cbbaa7ae7ee1bcad76feaf2c783d15fcb92502b52a66223bf77898e
        • MD5 SHA1 SHA512

        ua.db

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/.ua/ua.db
        • Size 32KB
        • SHA256 71ac3393394f7758db5c21fac6d6fc490ec4c526e8c900f262f0d8dbf9f921ca
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/.ua/ua.db
        • Size 32KB
        • SHA256 329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/.ua/ua.db-journal
        • Size 512B
        • SHA256 f20e1db539c99601ff0d7fc04f62757b620a53d4698fca97c412aaa6d63423c4
        • MD5 SHA1 SHA512

        ua.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/.ua/ua.db-wal
        • Size 56KB
        • SHA256 eef971f5228adf37bd194f8bb5956c51070f127bb7a30b1bc7a092383c3df1ae
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/.ua/ua.db-wal
        • Size 8KB
        • SHA256 bc9e8392de13fcaa4ad1e61e38fc61f967ecfef05113124442b701004d9a12a0
        • MD5 SHA1 SHA512 SSDEEP

        analytics.db

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/analytics.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        analytics.db-journal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/analytics.db-journal
        • Size 512B
        • SHA256 cd19148e4feead6ac264427377787b5b295bd28c3a63eca20a42d14c16d4be55
        • MD5 SHA1 SHA512

        analytics.db-shm

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/analytics.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        analytics.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/analytics.db-wal
        • Size 32KB
        • SHA256 287ce796281eea00c809f4977d5a98732753203b1bc5d5e3eaa79a5dd60bc074
        • MD5 SHA1 SHA512 SSDEEP

        analytics.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/analytics.db-wal
        • Size 40KB
        • SHA256 df076634933a5c000431e2c2fd2fd2b6004d84d65922e0b4e6aff3e4e4c7cca2
        • MD5 SHA1 SHA512 SSDEEP

        analyticsv2.db-journal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/analyticsv2.db-journal
        • Size 512B
        • SHA256 193c858b53c5381c4ae3d91458aba9d731cb2e314168b3d19be1e46a54702f62
        • MD5 SHA1 SHA512

        analyticsv2.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/analyticsv2.db-wal
        • Size 28KB
        • SHA256 ed20a51a22564ea836b59770a5f5d17cb2d4449a975e84321fb770f97402882d
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/cc/cc.db
        • Size 36KB
        • SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
        • MD5 SHA1 SHA512 SSDEEP

        cc.db

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/cc/cc.db
        • Size 36KB
        • SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-journal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/cc/cc.db-journal
        • Size 512B
        • SHA256 0165a198403af35fb3f9045fdbdbcdcb7ad6961ed9923217f6d79a38228e8164
        • MD5 SHA1 SHA512

        cc.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/cc/cc.db-wal
        • Size 48KB
        • SHA256 11eb93eac0f066ac907aeff1ba6cce35e91c4afbebcc9bf20377c3adea11093e
        • MD5 SHA1 SHA512 SSDEEP

        cc.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/cc/cc.db-wal
        • Size 16KB
        • SHA256 103a0d747eb593fa63730942934df21baed8775780653e6367a4b2323adc84c4
        • MD5 SHA1 SHA512 SSDEEP

        reportServiceDB.db-journal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/reportServiceDB.db-journal
        • Size 512B
        • SHA256 24e4c03bc8f2272094a3b8180df6a2ba239ce2ee66fb54e2122c1bf7869e83f4
        • MD5 SHA1 SHA512

        reportServiceDB.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/reportServiceDB.db-wal
        • Size 64KB
        • SHA256 7f1b9cddd71e9348f71db33c933badc82d7ca6f0f6ae8c67378225f896e9d246
        • MD5 SHA1 SHA512 SSDEEP

        requests.db-journal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/requests.db-journal
        • Size 512B
        • SHA256 24655766b61f83e4f177cad3db25e767606f98acfe896dbc780cd0868d8e10b4
        • MD5 SHA1 SHA512

        requests.db-wal

        • Path /data/data/com.melestudio.PixelArtClassic.mi/databases/requests.db-wal
        • Size 28KB
        • SHA256 5cc217ecfcaf58d17fd88b9b1db5f273631ef54444fa45b3d83d8ef6dc68ae10
        • MD5 SHA1 SHA512 SSDEEP

        um_cache_1716427792241.env

        • Path /data/data/com.melestudio.PixelArtClassic.mi/files/.um/um_cache_1716427792241.env
        • Size 1KB
        • SHA256 93774d7a57c69965a91336cfe8916c469f209757cdae9dce731615eb0e536777
        • MD5 SHA1 SHA512

        exchangeIdentity.json

        • Path /data/data/com.melestudio.PixelArtClassic.mi/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 f645ac64246d7d8a2a969550f645513dffd325b4054ec677cdcc2519cc61e428
        • MD5 SHA1 SHA512

        policy.cache

        • Path /data/data/com.melestudio.PixelArtClassic.mi/files/54db829f09424caad69f7fb9350fa48d/policy.cache
        • Size 12KB
        • SHA256 c59de2f2197323aae35f444e18f7f5d7ae2967cc486b0297bceaf329ef8dfcb7
        • MD5 SHA1 SHA512 SSDEEP

        policy.cache

        • Path /data/data/com.melestudio.PixelArtClassic.mi/files/54db829f09424caad69f7fb9350fa48d/policy.cache
        • Size 12KB
        • SHA256 866cecf8b38bad56c4dc3055a73c701839c90d7d3ffec6dda665d0a0d78100c6
        • MD5 SHA1 SHA512 SSDEEP

        policy.cache

        • Path /data/data/com.melestudio.PixelArtClassic.mi/files/a194a0a7214f6cbda0672045c51505d1/policy.cache
        • Size 13KB
        • SHA256 690fff1587a5f29c71dd12bb95f7c8d0d25518679ef90c9a9adf8c69ff5f18bf
        • MD5 SHA1 SHA512 SSDEEP

        exid.dat

        • Path /data/data/com.melestudio.PixelArtClassic.mi/files/exid.dat
        • Size 56B
        • SHA256 9df4f42fd351f1ea7261175594542a30d197f224f46ee8f98b83b50a737000a7
        • MD5 SHA1 SHA512

        umeng_it.cache

        • Path /data/data/com.melestudio.PixelArtClassic.mi/files/umeng_it.cache
        • Size 415B
        • SHA256 57d33a1f291380ccf81d01d6ed8a09383d74b59d5ff2064186fdf15882dcb6bb
        • MD5 SHA1 SHA512

        analytics.apk

        • Path /data/user/0/com.melestudio.PixelArtClassic.mi/app_analytics/analytics.apk
        • Size 1.1MB
        • SHA256 ca10a9f91f5246c09ab701368126bf842e33e62c0559328b34fc91295c13d298
        • MD5 SHA1 SHA512 SSDEEP

        mimo_asset.apk

        • Path /data/user/0/com.melestudio.PixelArtClassic.mi/app_mimo/mimo_asset.apk
        • Size 504KB
        • SHA256 454d49ed08121de604effae547020357ca79798a558451b688481aea9c7383b2
        • MD5 SHA1 SHA512 SSDEEP

        15c00550a22039c4eed4c9ec36504763.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/15c00550a22039c4eed4c9ec36504763.png
        • Size 749B
        • SHA256 ad19ca36a1891bdfe73dd1dcd50c36c86620297c89dc41a0b481abcc25abc35c
        • MD5 SHA1 SHA512

        22cce8fc1bb3c34009c6f89487d6f929.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/22cce8fc1bb3c34009c6f89487d6f929.png
        • Size 678B
        • SHA256 79142bc8917018af2407c6dfdc22ccead89f510978d5af34b39f78d8435e9b1f
        • MD5 SHA1 SHA512

        2fbd56ccb470f2a4c67fd29866cfe6cd.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/2fbd56ccb470f2a4c67fd29866cfe6cd.png
        • Size 604B
        • SHA256 c2671ca912faff2534d3119151c2a57a8262d7d6f193a02451135c5a254b2fe3
        • MD5 SHA1 SHA512

        447c8289ad905f018b778f79257ff223.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/447c8289ad905f018b778f79257ff223.png
        • Size 1KB
        • SHA256 806320e1c1f6e3120381baec587037f520a5a09f4046d54e38d1dc6d589b3570
        • MD5 SHA1 SHA512

        48b1cea0ece9eb2eeb740d592a789b33.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/48b1cea0ece9eb2eeb740d592a789b33.png
        • Size 511B
        • SHA256 f87a06a000cebcbcd7888325a8ef96e8080d7cf4038bbc50d84305926c3fc6cf
        • MD5 SHA1 SHA512

        5779f32d01f9c55f83eaf9aa177986d2.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/5779f32d01f9c55f83eaf9aa177986d2.png
        • Size 37KB
        • SHA256 41e93837003f798e172100324dcb1cf48e6d7ee6516e6e451ab4ddfc3bb9a660
        • MD5 SHA1 SHA512 SSDEEP

        5779f32d01f9c55f83eaf9aa177986d2.png.vox

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/5779f32d01f9c55f83eaf9aa177986d2.png.vox
        • Size 22KB
        • SHA256 a80d05359a096f3c0fbf00fef4e88e4b547ff8b2bd555fd598de98e42ae9a841
        • MD5 SHA1 SHA512 SSDEEP

        88c09b98b9f7e12656cbe71cb2aab661.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/88c09b98b9f7e12656cbe71cb2aab661.png
        • Size 3KB
        • SHA256 54a2d2f00553740ca74cb8f9f8b4bd78654ced48b78ff6528a2a3006bd3455bf
        • MD5 SHA1 SHA512

        9d1be83aa57c81992c12997c396ec6cb.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/9d1be83aa57c81992c12997c396ec6cb.png
        • Size 4KB
        • SHA256 40acd9920550190667581713e74f195928814b37141704eb1ea4f12773949e2f
        • MD5 SHA1 SHA512 SSDEEP

        abe02a182ae1a2d5157f4f51f1ea123f.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/abe02a182ae1a2d5157f4f51f1ea123f.png
        • Size 464B
        • SHA256 113cab6389ba0c3b7cbca5f393af294129ec6d60cc3be90938a9df14d347abed
        • MD5 SHA1 SHA512

        af72e913ee3d9e502506ddf99f263e50.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/af72e913ee3d9e502506ddf99f263e50.png
        • Size 433B
        • SHA256 4264f1dd156df00ac7b3af821f4bf320cd608cefa94c3755c5528ce8bafc8726
        • MD5 SHA1 SHA512

        b1fff5c5e2586d05a1fd85c8b242a015.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/b1fff5c5e2586d05a1fd85c8b242a015.png
        • Size 404B
        • SHA256 a3b0e27f6d656609a5d05c2a26f9bbee7ae4c4d7349d2c8005f34e5301049562
        • MD5 SHA1 SHA512

        c1ffd4db768827479132c759a77dc1a9.png

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Downloaded/c1ffd4db768827479132c759a77dc1a9.png
        • Size 1KB
        • SHA256 4c881927d389cee8cf5ae023a91fb8d1bbfc8af456aa041aef910181d256ded6
        • MD5 SHA1 SHA512

        e

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/ArchivedEvents/171642767200000.3b3e2069/e
        • Size 63B
        • SHA256 e36f549d065627318a8c8b0bc7342694a6f49f34fcdc6302a024e42e1e94a5f3
        • MD5 SHA1 SHA512

        g

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/ArchivedEvents/171642767200000.3b3e2069/g
        • Size 1B
        • SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
        • MD5 SHA1 SHA512

        s

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/ArchivedEvents/171642767200000.3b3e2069/s
        • Size 337B
        • SHA256 bc528de231e2f75620078e06f637745d96e1413c8b729ac534b640b8cb64e5e1
        • MD5 SHA1 SHA512

        e

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/ArchivedEvents/171642767200001.3b3e2069/e
        • Size 106B
        • SHA256 8ebe03f05273632ea23103959eb30fdd01c9189b05aad5bf03d8bfddc19658f1
        • MD5 SHA1 SHA512

        e

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/ArchivedEvents/171642767200002.3b3e2069/e
        • Size 1KB
        • SHA256 ff364d02e38f8653ec935c63cf9fc6508924bdacda4c32b6836662fac8c717c4
        • MD5 SHA1 SHA512

        e

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/ArchivedEvents/171642767200002.3b3e2069/e
        • Size 1KB
        • SHA256 629911a137e37756bc9a234c55e51b91b4ed002dd13b07963d9e4b358969ac5f
        • MD5 SHA1 SHA512

        e

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/ArchivedEvents/171642767200002.3b3e2069/e
        • Size 1KB
        • SHA256 25917ad48b9bbd7a77fa540b474b9e34ba195437ecc8e61500b37868d53aa7cc
        • MD5 SHA1 SHA512

        config

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/config
        • Size 347B
        • SHA256 cd744c82ab836aef8791ebac4782f30590fad7e6cb70f54a0c643747403b0065
        • MD5 SHA1 SHA512

        values

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Unity/8b199f79-b4bc-4b16-b3e1-c7668f306467/Analytics/values
        • Size 153B
        • SHA256 bf7cad5b3565cebded283e4dadbbdfdf176a857caca41297e4d491a95728c579
        • MD5 SHA1 SHA512

        swl.swl

        • Path /storage/emulated/0/Android/data/com.melestudio.PixelArtClassic.mi/files/Worked/swl.swl
        • Size 729B
        • SHA256 defcdfe6d27b2313dae2db82fa63d1532611388eb798787c8f05bb9181044843
        • MD5 SHA1 SHA512