863352633ac896a6a3a2eae5c95ffa6e276c7f7e25a825d8a5197cd2b48d59a8

Analysis

max time kernel
104s
max time network
167s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
24-05-2024 14:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6ec513634575a9bdd5dd20fad7529ed5_JaffaCakes118.apk
Size

4.7MB
MD5

6ec513634575a9bdd5dd20fad7529ed5
SHA1

aae4142ffa051aa5b16a3004309dacfdb9e883eb
SHA256

863352633ac896a6a3a2eae5c95ffa6e276c7f7e25a825d8a5197cd2b48d59a8
SHA512

f1f2db7f9e40920b164c7ee88ccd663c3604acba5b1f51713ec990876650060119b969ef2a7e2bfafff52eebc5a0c27a96f1e8acab98bb66d881ab8e2570f801
SSDEEP

98304:HHafc4//i3tWaVgFaX36mkuKPVmP37yZUJKMtXVbCdo1ilc268fSJRX++5Be:HHI/iBKFaXSUGZUKMrnw626tvXfS

Score

8^/10

banker discovery impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.sunshine.gamebox

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.sunshine.gamebox
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.sunshine.gamebox

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.sunshine.gamebox
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

T1421

Processes:

com.sunshine.gamebox

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.sunshine.gamebox
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.sunshine.gamebox

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.sunshine.gamebox
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.sunshine.gamebox

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.sunshine.gamebox

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.sunshine.gamebox

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.sunshine.gamebox

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.sunshine.gamebox

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sunshine.gamebox

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.sunshine.gamebox

com.sunshine.gamebox
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4622

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.sunshine.gamebox/cache/network/journal.tmp
Filesize
33B

MD5
b45ba83b06d0324bfdb64cb730ba10aa

SHA1
02c1d65823ce94bf1e9d0dc5fe756017571d558b

SHA256
92e87187fa61d8d625dded97035fdc062811dfe4cd61f33632b2fd3393b7b84d

SHA512
8b0ae65ba4d013024c294c831328e942a9880e013999eac95ef87b1c54fb3f5c48068521f06f86f1790cf7e90cc27b5d6ac009b3a09d36bbb2c9ad6ca3eb9880

Download Submit
/data/user/0/com.sunshine.gamebox/databases/okdownload-breakpoint.db
Filesize
36KB

MD5
0e60c251fa77752b029d4dedb90a9cb8

SHA1
556ce17dc2ce1763c1e7d507f671a9b79ffcf664

SHA256
f4a4f8d3e92ce7e4444330ff504a8899fc75623bec034de3b9b3abe0689d5994

SHA512
93d9b2805c45cb528585eeca159b61d3dd29537c4294cfea937c537ba9d0f6837d42bf0e75e92bf6a538f4a2535e308e1a385c83f35d216b34f27c9e43025ae1

Download Submit
/data/user/0/com.sunshine.gamebox/databases/okdownload-breakpoint.db-journal
Filesize
512B

MD5
e7f51a0b112dd7c421b404bbb4db43d1

SHA1
a6ce232a118dec11eefafaff2412dc94f976ff3d

SHA256
054de215ecf546860923dfd7fe92815f78a160a5cde24f414f501f4a72fb1a67

SHA512
70881e80e6aae30ea58c291d9463f98a6d888fd58ee0876cc88b3dfad95520fc359db54c1a0299404c0bdbad84823d2feaf8f666f73f894624f6a87bd83540e9

Download Submit
/data/user/0/com.sunshine.gamebox/databases/okdownload-breakpoint.db-journal
Filesize
8KB

MD5
8d17c3e3c4c98e50325480da01513a5c

SHA1
9be3fb0db4358bebc57d4f3e21076abb56a19197

SHA256
bf365f85f8174c2830f4e62d84250d2d145c6060c041f875b039df6332c4b9b5

SHA512
57483e91d6755b93a547fc3ea51eb3ee5a8dd70ef0a9f15e6677ff9592e8023990f8182083e14cc42a05627029483b04d184b089ed67ffd7d948a2c41285db49

Download Submit
/data/user/0/com.sunshine.gamebox/databases/okdownload-breakpoint.db-journal
Filesize
8KB

MD5
11ec4d32435dd8ffcd798cfe09221bfc

SHA1
6e12b063b282402d93c3bc27d546e671f6590fee

SHA256
1c2b627507413020dc181cb78f51544b07754e061aab081b2c6db911eb4e7935

SHA512
340a30169a262d7f55860340a46541fc08d5779aaec7e6488cc935197b0e384ed865e103f707f47dad1b32372e2cfa0156c7561a6bb891ecc859355e0144870f

Download Submit
/data/user/0/com.sunshine.gamebox/files/libcuid.so
Filesize
109B

MD5
63038999a0028da5cb3b3fe1b04f761d

SHA1
a16a6fb60b69b807cb6ecc9c826657af98404fc5

SHA256
2faa36aea8cfdf100cb451288d19c14c5b23db7f35bf21d1da35754ef5119c2f

SHA512
141a907f156385449ed5bbae7d7071c7dc892f84a8efbc7932526b31c675aba8dddbcb972b650ba6e60477eeced0b8ddb56a6e79bf93a71474c725b49e39a641

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
20KB

MD5
1c8872cc763afb2f791a9347e8dc895b

SHA1
92d9e156ea2640bdaf7e883cb8e4e11264e381ab

SHA256
72d1e0672f5346f5904aaa5cb09085dc2b71bc594034760bce25fe973fccb80e

SHA512
58327074c8b6442221caf181c2f979714d98240c4a8e43ea41b10eb11f67d3941731ad0ac0a6edfe49f2fab2081f4e8cfbb22ffc2652648ecc594054c15d8e00

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
24KB

MD5
915b14670a6e358714ac6afe9458360d

SHA1
a80bce9280db4aa28fa17f27bebdc9c1075ca964

SHA256
03024cb648aea2f615db16ad719bb230e4f7ae7b54c47dac309089821c45fd28

SHA512
ca97b5a8f52446894d36feae7d8d3a76e0d361b914027705ee564ab7b4855faa7faac702ee3d1542a9c2c253cf60fc6e0c1fc517f998b1b92559c36a6170180a

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
24KB

MD5
0027de144c4fc50b9b40e24b02781e40

SHA1
81c0608280997ec5633441d75275a8b7184d5030

SHA256
f4e62835fa95147aeee55a4c47bc3acf92764217bcb37cce40b6d623e218ac06

SHA512
8890e72a17082985470f8d4462da137b3d3653ca3cd01735a91dfb20a1fa0d7831d2d1c75fb6324b64061ddbceed7ff336eb6a902eb42407d707282034cbd9c0

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
24KB

MD5
f624a89361ac654768aece4c8fe29a11

SHA1
1a4ce836d3acc9cbae3d13071717d6e3289d39df

SHA256
4638130fe4d93d60c1552a1c7a7c8a74d50b510936fc725cad7c664bd168c3e1

SHA512
546ead2213d66f6ffe2318c6826da71e01cc6c14fdb7662379a113e12420ebc98a0a9e94c0ee9b5f3c139ea358ab21aad73cd79c5351b377f7c440117b3bb3f2

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
32KB

MD5
80d2941947c28ddab66460c4c77bead6

SHA1
09ee78a74750d7da412efb0f041dea3f8bdd592e

SHA256
2e521949abf72e1376a6932a07fe3fa5c622bf33c5bea7451e0f1904f05b0e16

SHA512
eda731237d65a0cc4f9a608c9b43414e83267f51f453a5e10a7c4d150f3dbde5331560518f8c6e5d827d6f8615624906f19114a9fb9463c37b66ba217af36b87

Download Submit
/storage/emulated/0/backups/system/.confd-journal
Filesize
512B

MD5
ad8029864fbc0615efad1b33fe7cdde2

SHA1
946298bc068631730e9ed5947bdc30f780b45673

SHA256
a9eaefbfd40b385614eb1fd928bb0f4eb126e928cf2e8f7b08a4110283dad7c5

SHA512
fc7eb4c1d5b2a17047d54f14254344aaba3f70ecd9828f412d4acff3e675f646d37fee6025386a135334541119192a953e478e8e55b8474d00163a225cd5dc04

Download Submit
/storage/emulated/0/backups/system/.confd-journal
Filesize
8KB

MD5
ff43a164f11b8c470ebae5a3d15b56c3

SHA1
4bcd38e835e6a8b789f45b75defda13e9d19da87

SHA256
71155f897c1785333ff0cdc60d85ccdfe66b3ec54c3526451f7443cffebb1da8

SHA512
54e65d79b21631e0835b6c50ce05989f5a476a9e9e418f987587e7a4373e7aab8ca062c076f4707d22dfa28b1574a3a34458677a78ce58faf82cefbd4b27f6f9

Download Submit
/storage/emulated/0/backups/system/.confd-journal
Filesize
4KB

MD5
b79f24954c17fc2d858dc6b627ca173b

SHA1
8c77a60cdac9f2621e098772d09d023af27ac02e

SHA256
8e324d21723b572952542bcd9a4016b2d606e50ebbff71a1c1c8e90e5eefd4d6

SHA512
47e93af5cadcfbe5959dbd6a8df056488aedf850ebdc2449c0d9e032f20448d18cf646d8aea0a247898fd7a9acdec368a74206848aae5a5462165535daa520a1

Download Submit
/storage/emulated/0/backups/system/.confd-journal
Filesize
8KB

MD5
f6484635bb5af989358201cb573cd801

SHA1
4ca0d531b72c81c325e8d96a145248bb9c1b0cb7

SHA256
c6dfbacdaf11d2cb135420424157b6db564eb1b8b7fe3373b95235de9be6d897

SHA512
38ac7d4f4f0d3e4340e8066e3c1d4d99577abd2e1e6c19bbe5c9ac9675bf289d0acb758c67d2d9a173aa1adf71673fa314482e3c6669230fadb9b229ecf89ec4

Download Submit
/storage/emulated/0/backups/system/.confd-journal
Filesize
8KB

MD5
0752af527057de247bc03d2692ed6d3e

SHA1
b728dffe5f223d1376e24e0ad0b04e2b892ca6f3

SHA256
decfa270b51989d47810e9b9beccc49c10140d4d28720109a8ffe2c468bee081

SHA512
6156082990eaf6ad738d77c185821410857ba2dc82677db1f9e21f434d5213fe6e2f4e66c3094d92479de2dab86eb42999ca010d63279c62a6b5eec9220a663b

Download Submit
/storage/emulated/0/backups/system/.confd-journal
Filesize
12KB

MD5
46b3f1d93dc7f1b5ce9c360c98b36a89

SHA1
e2a07e51a53cf3fd9a021d4866ad50b40d1f0bcf

SHA256
fd24562c34376e834d8b557a6e8164dd91325499e32d621be87214376d8d9e21

SHA512
e0825bdbca77836225fe91a8eada17b6f796b571882002386f5d6328e38d9a416fa809e49102db80dbc50a69cf97bf949ba0aa656459330819f7f274cdf22c76

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
25B

MD5
6da224303b66d07e720b76b93586c96c

SHA1
424465d4a318b109cf6879aded6e1932b10f2b3b

SHA256
f1711993d2471e1af275d2b7a7fa0e1a8b4ffe4f3ee0feba8dcca477199b643c

SHA512
484072684ba942aca3dd58b0ccd1c5f7eba1838cdf594eb103281297a588e4f581f7ded9ade2b8b25f84a504fb9f766ce9c9982f9c2b9495d8d01269d67f2529

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
55B

MD5
2213f24369b63755ae1a1ab41bedc286

SHA1
a1ae0971be227109d338f9717d4f7860aeee67fc

SHA256
c6e8a0d1c76e9859f68154dcbde6d2e82755baa3e9ff2f6d506c5fb03e051b10

SHA512
2ba03925a4e6dbbdeaa1cba40056304ea913343783cecf309e8849bf0d57e9322beb212f0cae046cd9a8b595a1de7c38557ebd651127eda23b9cdcae85111c58

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
84B

MD5
bf3428357bf5b61ea260cd0246ec7df0

SHA1
6d693a2b57c2430eb41d34a2a8b60b5f60d57dbf

SHA256
70bdb2be5dc32dccb9fb1c0192b66d0cf91b0514e4d4fe9ebd189afd25233f20

SHA512
83ae4359cc075a5164478280c4501acbd90db06d31ebca522faa280284a674883c431ce8c687b6ba8570c0741e8a074863cb9ae015e0ff723a6c21503d6530d6

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
114B

MD5
cebb5cedd4ee43c068e77c43986ae175

SHA1
5caf0f8417a24dbad9dd07ca7fe2fed5fbd15fdf

SHA256
38729fce1fe6b33f82d4cfc630dc34aaa865fc2cb681a2c7364431d7094559c2

SHA512
5961870d535817b08c024ea9c397ce26eb9cc26051de0519ffdff371deb907e575d1eee0ad13380ee2b603ae9142e563ed2a01e91a7d3a48c5165e0c45db0518

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
138B

MD5
b0cccb841187c19f54e31d0499996aef

SHA1
88cbd44f7435258011bc77d0a41ac6b09f447eba

SHA256
d0f81bafe7350fb6ea47886b31f0826dd025defcdfc1e3a68a6642fb28da18d3

SHA512
2e788b8e0e28484c3da99c677f9d7829ffc6367b02b417536ca5d62f1aa0869c1036a8e977d5089453b1ae7172cfe1df22035b3753180886646f2dee29ab5d38

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads