Analysis
-
max time kernel
146s -
max time network
172s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
23-05-2024 07:01
General
-
Target
6a1d983b1b77a6b31c26b60eb8cbcd31_JaffaCakes118.apk
-
Size
31.6MB
-
MD5
6a1d983b1b77a6b31c26b60eb8cbcd31
-
SHA1
3f18c18fe66085df2d65f6cbfe3c405c70df2fd4
-
SHA256
19bc7b617ea340a61910fb95a6dad61a7574e455c1e244189259315e3d2faaa5
-
SHA512
6c65c908c5ea5fcff190c2cd79b2bdbba2cc4b7ee27081ff37f5293e707c375b964d4aa745314b83d127814752f9e9c53697bdc246694902f75493b221d924a8
-
SSDEEP
393216:w/S3q9dhsLqsXt/ASwisbpy5QsacYzG9GIy/LxM7Yr3xWHicsO1Lk+3oJAXpuJQW:DI2tQPsO7F/r3u/1LTYOXpqZf0U
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
ydx.android1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/ydx.android/databases/xhsemoticons.dbFilesize
32KB
MD5d9337b1b8227853621681038fcf1d82d
SHA19b9ff73e9ef2c583637ca2e0482fea409dee7e98
SHA2567699b7f3e3061169473b537a566af513bc429a371eb8da68f48b056579fdfbd2
SHA51221f329a3afc28ab79205618cdfacfd7ec7821729871993e1dcf5f5a890e66aca78f5fb91eea2a47114acbc4be9e29fcbce660cbaab4087e520ffe91eacfdfd1b
-
/data/data/ydx.android/databases/xhsemoticons.db-journalFilesize
512B
MD55b5a458ade7e5db36ce22ef5e05751ec
SHA1e2704bc0ffe77012b08872f4aa41b2525b9e3425
SHA256ccaab14873a0166eecda8d4da9e6a629e8faecbbfd965647dfc39464b2064957
SHA512d656813183da8a17b4efcaf6a28407693f2a82fa44cad13964f8fd3ff762381a441cb4d440b5d00c0d6d3f2963389a3c4633d9de4e469c4a52f7722af50a27b1
-
/data/data/ydx.android/databases/xhsemoticons.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/ydx.android/databases/xhsemoticons.db-walFilesize
68KB
MD5e06e92ad6c82e3c292ef958d1766e57d
SHA163c6897c10755de87e8ad61d0929f68e337d7bc9
SHA256736d693edd3d0e4194c692d360e9240baa2c2c7eec74f86e694fbbfc4e478c46
SHA5128f37e3a841221e7633dd95d2f431659810e7d158b50577dbf85dfb5170d8df7423a5190da81a4e1570e8ddb321b38b7277bfe7c6aa7db4d2a19e883fceeff612
-
/storage/emulated/0/Android/data/ydx.android/cache/uil-images/journal.tmpFilesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
/storage/emulated/0/baidu/.cuidFilesize
89B
MD5773a7528df4d9eb6ca08d5d9ce1c3d1b
SHA135dea3c1f47c26cbf309d44c94a73408c85e97a9
SHA2566ef57a7739bfa7ba593ffefb90e955a186dee198f81e30429d1bd86cc8d25d95
SHA51292e294369ea63008351dd7235513b63de8cf3df59d049f4a25165177c39dada058cb2c3692ad26e1cbd5b2555c23b02eb06a274576eed4445325190fcb00164e