f0293533c990df530b75c66e11db6fce94feae729a5982f0bc992c042d4f7b22

Analysis

max time kernel
21s
max time network
162s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
24/05/2024, 23:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7022b82e185b9da8edffddb2806905ab_JaffaCakes118.apk
Size

1.9MB
MD5

7022b82e185b9da8edffddb2806905ab
SHA1

0c64fcc82deefdde6fe7b2de3106c72aed788968
SHA256

f0293533c990df530b75c66e11db6fce94feae729a5982f0bc992c042d4f7b22
SHA512

6d51abfc4c7a4d5afa66211a14c3e3409bf8b51083686672b3fed93dafbfb37a186b35ed61d515188cd151bfebe8cc1f63f512b0e77cf2b7c8a977e0ccbb0213
SSDEEP

49152:F0BrcY5YMRpcRqp95q0qHenswOjZ4XsUmCPzNRRNYe4T93:F0YmpcRqp9kfHeswOjCXsCPzNWTl

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.huarongzq.dzh

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.huarongzq.dzh

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.huarongzq.dzh

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.huarongzq.dzh

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.huarongzq.dzh

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.huarongzq.dzh

com.huarongzq.dzh
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5190

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.huarongzq.dzh/databases/AJZQ

Filesize
20KB

MD5
322c39d24082fc326ea561dae6dee99d

SHA1
5bb170398477ec4dab3df5a0c88447c84de47688

SHA256
d6a275d5b63ef04b3e4a536878003186ce3324915d977e053e54694e74ee69f3

SHA512
5db4e714da3d98f15a7dbbda4586065847da2d0d6d76e65515a9665ce91546aa35ef78b4656d64b7999fd51c039ebe908cf4843cbdb390602394c2eb15c2b683

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQ

Filesize
20KB

MD5
560fa916db00a12f9316c945330ac87f

SHA1
add30cf0b6aa258183e3470f745bcdf4198b511b

SHA256
aca174b2374af8585222ca1782eca29d59196471c5629a3930e2bcfd9a35e6d3

SHA512
fb1e517e958b855c840ae290c8ef5d7ef587cba6c8af2fe77f3bfc776f00222e42df8641253c392d7e974a33cd63377a5495d5796821650a89d527653f509696

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQ-journal

Filesize
8KB

MD5
0b12108c163aa0d766557ca8d3ee2c62

SHA1
bf69867adbaf0c8f5a32ec7dba5fcc6a1a96c5f5

SHA256
ae888d5d11dbdf079188758e2b3e40eaad5387a6907dade29304387e2e2519ff

SHA512
748021e52b859b1b87c069ea1cbe89cefe8003dcd179914f17432b1c85585a19c25e119ee43573b571abfa4f7a532987fc5b53c6e968235cb312f8a86b44e5b5

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQ-journal

Filesize
12KB

MD5
81af423fe59bec8c373926319ec36047

SHA1
f66a308da4f724d705fda4d6f5482a9328d281c0

SHA256
21c270b1ffc37f7c2fe34b8c706e3a81f12015308cb83854ea7f99e79ccb244c

SHA512
7f640805c4a1be5a98a82f23a81a17c7e7a8728723db7c869602cd3564e61a3a0a18e180ea71ec672102dcf7fee3d18cfac916dc87c8a8ccd905a6df312a2629

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQ-journal

Filesize
512B

MD5
bcee7f76bad9d7773864e792519e40bb

SHA1
d3b31e784967f5ec2686cf1c4da1ab0410f4fcd9

SHA256
9b5e232417020ce9666ef0a1710cbe879c3e2a2ec8461fc91a42bcc836103874

SHA512
973684c6de0deca64a73f11266968570385e6917e4f1b1488691ee1eeaf1f62f11e933084c8fdd2480478f6e1a669ce7ff47ccab3bb74a6b94533f5732af00b5

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQ-journal

Filesize
8KB

MD5
a5cbaee896b47cd2d602a5478b484d53

SHA1
02e8eea901bb00f14e00ab45ab8f31d64cf0d89d

SHA256
d50eadfc2a3bf69e0cfd97abf4239dc5923786038ac168d20e5a853efc663e1f

SHA512
05926ab37c8bcd014e1c85612d21deee9602de0e8eb0ec7ff4a3ac3849a7670f74c517106d8edbc9962cd68331957195e532bb30a37411963d097287738cbbbc

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI

Filesize
20KB

MD5
11e2e5334641715eb6ac541cbf897c1e

SHA1
d501e891787e86e32b8d0d9982304bf72bb920a1

SHA256
55bffc611895736fce0b433d0c190147a21538cc82dfda0c2f35bae4cd08c576

SHA512
45ff3d3b951d13f1941cc77bdcfda0389a3a5da9393638d9c6344b6757afdbebcf1311d8badbc591cecf0cd7377bd6f456fecee83c27864fead9971b36f7b764

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI

Filesize
20KB

MD5
52520a9c3fa259428f649c5e7e925da2

SHA1
f1708efbad260b661bdb3bb601a612905b95c365

SHA256
132907f779e62563d73d65f6e979dd2d23814c23f1cb36778a81075fdcd4a5a8

SHA512
eeb2e18b7b55abc33742f81c9716c204aeff8ecc826ecbf88cdf242895b984e02ee3a325d462548123b97bf9ec76ac9f0f2fa8472011999758eb3f139001e770

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI

Filesize
20KB

MD5
f4c12e6b0c0dddc1434a0376d7c5f3b6

SHA1
477ccc8c973594c061c00f77267d82f41b37c19e

SHA256
cdf79024072016af54f9418197fc45e01cc4f685b7a693b4827055f75cd3e0b1

SHA512
35be48c05e71e165e9f5a84b226477343d9980870f79902837caf996484e5e0b04e7b511fe74e707b42607fb5f9aa113d744c22f50156bb9d603e39e06c53943

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI

Filesize
20KB

MD5
12c65c6075916b8e3827e878ca1c4973

SHA1
ce1ce14f5af52395af80ec9a345d8d4ed0383c1e

SHA256
aab2532f082da68aef3ff41f03af6851fd73d6ccf132dfb6e18304b0582132bc

SHA512
0a9d4edf2b49b447ea78e6547a17db3f8c5f483c4815eb5db88e62b1c2820a492c260e09aa34b05f6210693fd96c7a5602f9b2665164a96472d56016bf5b0f08

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI

Filesize
20KB

MD5
7d071740238147f6470be99aedd79352

SHA1
32025f16b55beb77f1524b209690a3cd907c6cff

SHA256
125c0d5912cd3f67ee58dcc74cd966aa4bfa48de4404dcc3221f5a7b94a78749

SHA512
deb4dea3db75e74a4b3401f7863db251c4fc5fc20373c3a9c08265e54ed53e0b07364efb18afce14cd9413c4731c4de37aa685b7d7b821727262ed5106e1adbe

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI-journal

Filesize
12KB

MD5
8487f1b3e202edd69b6dbaeff8757b17

SHA1
88d9e7ba1aa15e80a5f1fb202071f7748fe084b0

SHA256
acb50cb0456cfa87633085827472b4b666d84ddc9aac8ccf832806a46c4c120b

SHA512
c4f26de0a4bb08d8facfb4000d7f06ddd6f0dfe6a0028d48abe60b3034b6eebff231158905917fac445530aa5b86a7d339e995868960fb1a61b774ee1cf38d15

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI-journal

Filesize
12KB

MD5
b88777a8d773f0d5897795a5a267e3b6

SHA1
63803c0e1196073919356c0256fa9d6087b48f5c

SHA256
ad9b6ed266f9087253bfd5887ce8bc31840e37550c2e01599974b2ec233fddef

SHA512
a4a6ada47d21a0c800913903c27202553099af992b8f4e510e14211d9455954d725d03e2a16315b55ac7cd6ac8d7934dc47a4a3e661e12fd21fbdf3629a9f488

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI-journal

Filesize
512B

MD5
d663adee1477a6fab6f98ca76c1752dc

SHA1
e43208fa633fc895a5325468e6137cbf74536a2e

SHA256
cc89eeb478bc2973879b312de7404cf49b0d229a54868c9ccf227af4764a4188

SHA512
0d7b7204cd8f6dc9317d9d18657cf2502a1fc794049ad5dd5cedac52112884a15a9f0247ce41198406c0786cad14d226acb60ff04dc8b64664be155019da4fbe

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI-journal

Filesize
8KB

MD5
cd2d1b92e349b2660c0d637967cef693

SHA1
58c4315d1f0c34164fbf0ab1bf37d3363990053e

SHA256
285fc5b266070dc2683bb17ce97ab9b5a03bfe664fd6c20930448242b6ef9fd1

SHA512
8e2bb7a92ec1bbd3469368d63bf78f40c751bc56b901805c5defa969fa623bf854fd14221f5c3efdb79dba92b8e8359a89174a2517e66de7887389816ed2ee9d

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI-journal

Filesize
8KB

MD5
bccd3947a14e4c3a3ef7cf9ca14b3504

SHA1
447d130a98de4b78af461461966a6da6a13d3bd9

SHA256
e99644f7686950b4c532ec84c189b55dea8f5ffa1af5a9da68d70251606a7be5

SHA512
d39d49a0d35c271531522937c4d9d9b5b36a974567b018b198da864d2641d9ce5f2b5a5b50f204ff3104adca27cfcf52927ce31c80d5f5f83bc4a2e617bb99ff

Download Submit
/data/data/com.huarongzq.dzh/databases/AJZQDAZHIHUI-journal

Filesize
12KB

MD5
2924ec26822ffa83bebbe09f58228353

SHA1
d86176154a9c67f220863c06e46b34de3a13a701

SHA256
71315974cf7c58131d8caff10ed0e8ddf9aa252eb0b1cbec1d53a1867f743ea9

SHA512
8469e65d0c2b29ad10763f235d8ded5f75af33c0ee5e4b93c5b1c39e7a344d109894952c6c9fc4d5ad88bad892b5672e9e8cbb1b5a9d9b0f7de645c1880dba3f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads