2c3be1db019077e19d3de552e00eb31c8e87dafe3b45dea59e5bf90220403cf8

Analysis

max time kernel
176s
max time network
174s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 01:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6ced0f2f4b81c1cced1e09019740dd04_JaffaCakes118.apk
Size

29.9MB
MD5

6ced0f2f4b81c1cced1e09019740dd04
SHA1

589365b6d03f50e77e21fff18ca6fa58fdce13e8
SHA256

2c3be1db019077e19d3de552e00eb31c8e87dafe3b45dea59e5bf90220403cf8
SHA512

42a86a1a41f96ee1b21fb47f706ccdb40e5c6f9d3215dfb1e55679f172c187c29d3f635383a46b2fec817969352cba5a3f80753edabb4708b23c2c6ee6ace96b
SSDEEP

786432:PdyDnDAvW52MPrOn7nyDNLJD4NQr3tS2H0Zz:P8jDAvWbrOn7n+NlD4NQzf2z

Score

8^/10

discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

T1426

Processes:

com.ragaman.rideup

ioc process

/system/app/Superuser.apk com.ragaman.rideup
/sbin/su com.ragaman.rideup
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.ragaman.rideup

description ioc process

File opened for read /proc/cpuinfo com.ragaman.rideup
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.ragaman.rideup

description ioc process

File opened for read /proc/meminfo com.ragaman.rideup
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

T1422

Processes:

com.ragaman.rideup

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ragaman.rideup
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.ragaman.rideup

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.ragaman.rideup

ioc	process
/system/app/Superuser.apk	com.ragaman.rideup
/sbin/su	com.ragaman.rideup

description	ioc	process
File opened for read	/proc/cpuinfo	com.ragaman.rideup

description	ioc	process
File opened for read	/proc/meminfo	com.ragaman.rideup

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.ragaman.rideup

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.ragaman.rideup

com.ragaman.rideup
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.ragaman.rideup/files/UnityAdsStorage-public-data.json
Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/com.ragaman.rideup/files/UnityAdsStorage-public-data.json
Filesize
111B

MD5
ab8d0a41c65269bd3797774869ee7bee

SHA1
88eaeaef3225cd536d5eac6cdad370ae1f572b9c

SHA256
8018b61c37344d59e287749918265f505028e6f01380042374d0a79caa05ff36

SHA512
ca06037cdb69a7a0b96dbb1fa01c6c78296a88d2c5d8441228bb9b5ddceb3b734f4c305bf210bf69953ac687789a2a17c5861ed9f901b4b215e5318bb7a95f04

Download Submit
/data/data/com.ragaman.rideup/files/UnityAdsStorage-public-data.json
Filesize
272B

MD5
93c0f6a5492e6aa86aa1b7d96deadcc9

SHA1
bac88e063a05fbf785be901b5ae1096b68e05e69

SHA256
b57e7d6836c81a715911dd323e7152d482d6fb5b5978acfeed30e2909d20d749

SHA512
01a6882767696b8ec6e32d2a0c1ed3166c65a7dfcd3434f64791d33d8c1c1cfd33b1e10a87301ca95ba875e9d72e1cf3b2dd3aea0349f6af8457f92a36d49552

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/cache/UnityAdsCache/UnityAdsTest.txt
Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/cache/UnityAdsCache/UnityAdsWebApp.html
Filesize
1.9MB

MD5
64422fdcd23be491dfdb527ad240749b

SHA1
d7b1f65529f271af72d4a96d35dfa6e3beb98a81

SHA256
13dbfa5fa1d031e92e2edd8ccf015e83679a0314e03c10f52369e1e48f9781d9

SHA512
f954a4afb943c6d8c6e6c07cf5315bbf97065d9777dea4610ee27ff9230b0664c5ae5f6fb01b24c4b607cf7584b546bfb22ca15cc616d2ea1dfcb01f7abb31ae

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/cache/ga.sqlite3
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/cache/ga.sqlite3-journal
Filesize
512B

MD5
250046066dca1b0b09a3c3e4503ac0b9

SHA1
71efa9b83ad44063e83fa9408bfa3e85e7055527

SHA256
1ffcec32e9697688d42a9b2671fe4244c7a24e9ebda9296eed44f362ff20e233

SHA512
24fb8f770e94382231ac13176e70cdf86932d22626a68719717876eead29d4fa3bfbe74e97dd93387a5900f2fe1c0f143c42ee6834baaa00cf3602dea05a4f64

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/cache/ga.sqlite3-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/cache/ga.sqlite3-wal
Filesize
346KB

MD5
f6d705a92b5f77ea5a66e773bf3b0954

SHA1
86f8e1dc6b22ae86a32b656420ea6952882c5349

SHA256
853501982c9116ce4bfbc24923b03a84c74f670de4e7816a2d5e9a2108a09a10

SHA512
9279bb574472212533b04bddc9ef5f641bdf79b453fc9002887a7356435ad0f2db7c1d527c4e387353de8c358e6004d38f8fe25deb4a603e8f409f6cdaa87b4e

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/ArchivedEvents/171651430500000.58ef3206/c
Filesize
1B

MD5
c4ca4238a0b923820dcc509a6f75849b

SHA1
356a192b7913b04c54574d18c28d46e6395428ab

SHA256
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

SHA512
4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/ArchivedEvents/171651430500000.58ef3206/e
Filesize
110B

MD5
0ff11556f8e54a65292d571371838591

SHA1
6ff77ce7c1c773cb836d4e143855c913d602fe7b

SHA256
9ba2b0995bc9d845483ab5b34065e5338e8487dd80d9059db3b45b99b6806983

SHA512
af3ca0f110198401b2e495fd8a9086f32856fedd610921b2e498f2acb7440674e5441b0b1c18d3ad6c285c473e64a9454a484e03e815c53a1a4c31bc869a4698

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/ArchivedEvents/171651430500000.58ef3206/g
Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/ArchivedEvents/171651430500000.58ef3206/s
Filesize
355B

MD5
6a0d07a0ee924ebb7316123e13769ca6

SHA1
8f8ea8104e14081d7179d40181b24892a530d452

SHA256
4c789b73c55aa96c5e7919835833f690a893d6c0b4743cc3cbdd27d034c00478

SHA512
ce5bd0143c9b00356403cc55f5f49630a92e97fb6ab6c7259ee7acdedf9367e64f10be423f158baa64bfe2ce8da70ff61a6058911d2e7309e17e10b952cbe6cb

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/ArchivedEvents/171651430500001.58ef3206/e
Filesize
132B

MD5
6cc754de5744f28967e1682583b836a6

SHA1
7c48e0cb6afb7e6a15f46439f06e6d3321008ca5

SHA256
01bd51a5128ff838df4fe14f0483bb5187d16e3343c0a76e016d7f27f7dab081

SHA512
cb0496fe79ba17599243370659ef8df9775d4c01f8e126e7d8e700114fd5bc45ea4623511efdcca42ba4047b32d2d60dac0ec7051b3369b02658f992a4e929b8

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/ArchivedEvents/171651430500002.58ef3206/e
Filesize
156B

MD5
d40616a192562e49c4d614193f63211c

SHA1
ed2b828a70ee155853460c5a603c84f81c18890a

SHA256
01f83d75b5bab048926af652196f5990b719e611e3fc07da88734275d0e8ffed

SHA512
87fa04a317b1d9794cefe84a2e91550c17640dfcedecba671121ebb9fc243f4aaf7876dae6a879382777468239527075629a80a4a1be6bd4ddb59bfee55d4b65

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/ArchivedEvents/171651430500002.58ef3206/e
Filesize
1KB

MD5
d380a25b0afd9363e92600a36544d44a

SHA1
fedd1adaf90fbcf73b1edaff15f764adc02334da

SHA256
2dc229bbd9d96ebd281fab5d8f2033950452aa8e147aafe4898a8bf53fd09524

SHA512
19a433661ee38094fd19d09c4d5a1badf26c21b35df68494b58fe1e7988c48e1392818da1f759c1a2d6ef30b5500cd4032f125a6281c077b051ccc8d68c33634

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/config
Filesize
293B

MD5
8673a8ac0b06a9d056d08d62f857ba4b

SHA1
a351bea1932270bafbe468584058fef20dcfc31e

SHA256
83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96

SHA512
edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

Download Submit
/storage/emulated/0/Android/data/com.ragaman.rideup/files/Unity/c57fae7c-0956-445f-a04f-943322909883/Analytics/values
Filesize
132B

MD5
b7476b4830012e15204af3c3b5c4a148

SHA1
4b68b31efe5ecaec7c514ef3069766e5abb313a7

SHA256
e1ace2a4455ddada66310a3c9e3445066b464a937cec7b39d5fbae56409648d9

SHA512
c1053509ac78c8d4050038d6063aad96b00c8700b2f6bcc625ab1de7e5b81cfefdcd8dfd35eb49f3e3647592934be0ddc2eb5fef138443b24e46a5bced235df9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads