Analysis

  • max time kernel
    177s
  • max time network
    186s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    27/05/2024, 17:11

General

  • Target
    79ddbf56e1558c1b365f7959ceaba816_JaffaCakes118.apk
  • Size 31.4MB
  • Sample240527-vql91abc2w
  • SHA256 f533b8ff4d3ef8deed0233ba49743894c78585abe5b6ea4cb7eba9a2a86fe5ec
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

Processes

  • com.wangyou.GodnessDress.uc
    1⤵
    • Checks CPU information
    • Loads dropped Dex/Jar
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4258

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        core.jar

        • Path /data/data/com.wangyou.GodnessDress.uc/cache/jars/core.jar
        • Size 258KB
        • SHA256 d393578af1f32289aa04228833344dab453c97fe328e78011781e4c7d883645e
        • MD5 SHA1 SHA512 SSDEEP

        entry.xml

        • Path /data/data/com.wangyou.GodnessDress.uc/cache/jars/entry.xml
        • Size 1KB
        • SHA256 9cecfe7347adcdebf7bbc83446120b840ec1eb8b7ba8200605c5a6dcaeb02c1e
        • MD5 SHA1 SHA512

        lib.jar

        • Path /data/data/com.wangyou.GodnessDress.uc/cache/jars/lib.jar
        • Size 123KB
        • SHA256 7366541c781ee7acacb019d5b25f1f4cc0dd61789db9c7803aea8f4fdb4ba2b9
        • MD5 SHA1 SHA512 SSDEEP

        core.jar.cur.prof

        • Path /data/data/com.wangyou.GodnessDress.uc/cache/jars/oat/core.jar.cur.prof
        • Size 492B
        • SHA256 fd778ed7efdc1cff557f2f6332d78d1e8b5f8194dc2de6d2b33e85c4ff222ed1
        • MD5 SHA1 SHA512

        lib.jar.cur.prof

        • Path /data/data/com.wangyou.GodnessDress.uc/cache/jars/oat/lib.jar.cur.prof
        • Size 570B
        • SHA256 c0f2df02cc1b21d3a261f9fd773001de5a9efc93823a6107289ec28a2a860b3d
        • MD5 SHA1 SHA512

        update.jar

        • Path /data/data/com.wangyou.GodnessDress.uc/cache/jars/update.jar
        • Size 13KB
        • SHA256 5f7e051deabeac4117a00a75462c06caef21967bcf06836e2a34c95c57e0d134
        • MD5 SHA1 SHA512 SSDEEP

        mobclick_agent_cached_com.wangyou.GodnessDress.uc

        • Path /data/data/com.wangyou.GodnessDress.uc/files/mobclick_agent_cached_com.wangyou.GodnessDress.uc
        • Size 196B
        • SHA256 91445821e61b54054bda9541c9c7c6906956b03e724a761a38c0221786d7ed36
        • MD5 SHA1 SHA512

        uc_key.txt

        • Path /data/data/com.wangyou.GodnessDress.uc/files/uc_key.txt
        • Size 130B
        • SHA256 c7a2817d8d3fb7d75f641fb7dff8bef9b738e69589282089a6339c70f64d71a4
        • MD5 SHA1 SHA512

        ucgame_private.db

        • Path /data/data/com.wangyou.GodnessDress.uc/ucgamesdk/db/ucgame_private.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        ucgame_private.db-journal

        • Path /data/data/com.wangyou.GodnessDress.uc/ucgamesdk/db/ucgame_private.db-journal
        • Size 512B
        • SHA256 f14e0788039169e54260bc5bbef86f56af9ce3978dec7825f234df0082ee4b0f
        • MD5 SHA1 SHA512

        ucgame_private.db-shm

        • Path /data/data/com.wangyou.GodnessDress.uc/ucgamesdk/db/ucgame_private.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        ucgame_private.db-wal

        • Path /data/data/com.wangyou.GodnessDress.uc/ucgamesdk/db/ucgame_private.db-wal
        • Size 96KB
        • SHA256 64f626d377f035034505578bdc1fdf92989743e9e990431208a3a8988f95694c
        • MD5 SHA1 SHA512 SSDEEP

        ucgame_sdk.db-journal

        • Path /data/data/com.wangyou.GodnessDress.uc/ucgamesdk/db/ucgame_sdk.db-journal
        • Size 512B
        • SHA256 503fe7844baf2c8a740ae8e393545d6ad366f45b40b430d4affb5005e39ad914
        • MD5 SHA1 SHA512

        ucgame_sdk.db-wal

        • Path /data/data/com.wangyou.GodnessDress.uc/ucgamesdk/db/ucgame_sdk.db-wal
        • Size 92KB
        • SHA256 28c5ebc84296eafc7bf381c79cf91e99d94c8c943f07c2d258b81615970310e1
        • MD5 SHA1 SHA512 SSDEEP

        core.jar

        • Path /data/user/0/com.wangyou.GodnessDress.uc/cache/jars/core.jar
        • Size 642KB
        • SHA256 0d16ac862813762191774d3b28195911331ffb7b5c142f8633736fff65b4e093
        • MD5 SHA1 SHA512 SSDEEP

        lib.jar

        • Path /data/user/0/com.wangyou.GodnessDress.uc/cache/jars/lib.jar
        • Size 318KB
        • SHA256 0a5fdedf9bb9422ebad3ea5a5408027b0d066d551c9dabdc23c3216c0b4293fa
        • MD5 SHA1 SHA512 SSDEEP

        update.jar

        • Path /data/user/0/com.wangyou.GodnessDress.uc/cache/jars/update.jar
        • Size 28KB
        • SHA256 eba2c6a1b2946f46b0d0a1896257ded73a5e5c7e284a4c6fbb44215798d21699
        • MD5 SHA1 SHA512 SSDEEP

        trace.log

        • Path /storage/emulated/0/com.wangyou.GodnessDress.uc/Log/trace.log
        • Size 3KB
        • SHA256 0d759498f96829a03c957f6c8ed0471d2b41de958b4729386f0dd193899e89dc
        • MD5 SHA1 SHA512

        config

        • Path /storage/emulated/0/ucgamesdk/544655/config
        • Size 97B
        • SHA256 9ab484cfc7c80ba66be2cf4d8c8027247662cf4be0d732accf28facd0811a303
        • MD5 SHA1 SHA512

        config.properties

        • Path /storage/emulated/0/ucgamesdk/544655/config.properties
        • Size 89B
        • SHA256 0f0e337ea93d7e2d2412b68e993e8104c7d61cd81ccae5aa3cd3634aaa0d1b08
        • MD5 SHA1 SHA512

        debug_2024052717.sdk.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.sdk.log
        • Size 55B
        • SHA256 2833877ed89e96ceb174e9a49c65d7b33145dc3e780aeaea62af1f7440b0842b
        • MD5 SHA1 SHA512

        debug_2024052717.sdk.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.sdk.log
        • Size 122B
        • SHA256 ca029f7557280b987b40280aa64ebd9fd27bf6ef861d81dfe84192acd19d0096
        • MD5 SHA1 SHA512

        debug_2024052717.sdk.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.sdk.log
        • Size 197B
        • SHA256 605db5d5e5b4771e8b92f42d9c9eeaab7ed32f34ea59d4736b5bfcefe08b57a7
        • MD5 SHA1 SHA512

        debug_2024052717.sdk.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.sdk.log
        • Size 264B
        • SHA256 0060b4914eb9773f45980efa132fc5a03280f96beee11ae41b57e2180f730eaa
        • MD5 SHA1 SHA512

        debug_2024052717.sdk.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.sdk.log
        • Size 331B
        • SHA256 c02d50cfbd223e05cccd17f7c135a7c26c3d0612c86ef8bd05952b80c1a612e8
        • MD5 SHA1 SHA512

        debug_2024052717.sdk.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.sdk.log
        • Size 508B
        • SHA256 21619bd6173fa061cd9931dabab9ff41e978b6d9dc860e7b0e5346e86af6d2bf
        • MD5 SHA1 SHA512

        debug_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.update.log
        • Size 82B
        • SHA256 5d595d91a95d311da967d2ef4d40c60b1c9e6dd7258e5d770deb149e2558822c
        • MD5 SHA1 SHA512

        debug_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.update.log
        • Size 176B
        • SHA256 801a92656cc0bfc502486cbf87eb85238e885d1a39d2f9aaf8a0cc4ce7a85e7b
        • MD5 SHA1 SHA512

        debug_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.update.log
        • Size 287B
        • SHA256 c3f9a860f4337133a7b627203ceac33c080aea648ea8566ac999084985dc751f
        • MD5 SHA1 SHA512

        debug_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.update.log
        • Size 385B
        • SHA256 1fdda6be849f56758deb42725b69ba8d3a7f3d69b7dfcb91094491524e7262f5
        • MD5 SHA1 SHA512

        debug_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.update.log
        • Size 462B
        • SHA256 cc04a2663d6b40e7800b5d3b491ee1c48bc6a19211a4dae6230ea4f0f1b08ce5
        • MD5 SHA1 SHA512

        debug_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/debuglog/debug_2024052717.update.log
        • Size 20KB
        • SHA256 006e91771681b7f0f3cbebf7d737acd2db1248e706402e9d59ae5fe782697fff
        • MD5 SHA1 SHA512 SSDEEP

        stat_202405271712.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271712.update.log
        • Size 89B
        • SHA256 7b6c6d93b30e8b41d6f78f5419d9ab6a75a02c9cd3f3ea43fc0fd893e7721dee
        • MD5 SHA1 SHA512

        stat_202405271712.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271712.update.log
        • Size 178B
        • SHA256 645930b4fb1c3164f11ee08eff20aab7b9e842d2fd6d702963ae501f98cfed7d
        • MD5 SHA1 SHA512

        stat_202405271712.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271712.update.log
        • Size 300B
        • SHA256 609434b863300728303224269964c3dfd4bf2e8e08c5a257e57d1ce7529e9540
        • MD5 SHA1 SHA512

        stat_202405271712.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271712.update.log
        • Size 389B
        • SHA256 08df215ca0b0d0d210e80decd82953e899688d9f73062d212835c9322c95d844
        • MD5 SHA1 SHA512

        stat_202405271713.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271713.update.log
        • Size 126B
        • SHA256 689288418cd9e460278726f77247cc0aa60e37c7636fd66e24f2185794840968
        • MD5 SHA1 SHA512

        stat_202405271713.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271713.update.log
        • Size 214B
        • SHA256 d5d680ac3bdb7970a40eeb196a257c92194c7959580179d8ce07364ba0b1edd2
        • MD5 SHA1 SHA512

        stat_202405271714.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271714.update.log
        • Size 125B
        • SHA256 2ed0ddc6dae6c2c66389eb065c7410cbe0f70c72d52d99d88cb8a4bbb1241c8f
        • MD5 SHA1 SHA512

        stat_202405271715.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271715.update.log
        • Size 125B
        • SHA256 830b446898e86ab725da2979b502c814edf6b57749d3db8a9fc911c25d7d53ea
        • MD5 SHA1 SHA512

        stat_202405271715.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/statlog/stat_202405271715.update.log
        • Size 188B
        • SHA256 dfcbc33fbad432040237460ae15acfd162995aabde291eb28e23c88e933e3017
        • MD5 SHA1 SHA512

        update_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/updatelog/update_2024052717.update.log
        • Size 111B
        • SHA256 51e6dad3be1e5029976f4425204b6c0ad3e2a75ed5b331278883f11e6442c57d
        • MD5 SHA1 SHA512

        update_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/updatelog/update_2024052717.update.log
        • Size 222B
        • SHA256 f929a1d31b09cbfd7c886e03ae926c2ee1c3b592218c9089c1d551fd5a2cafed
        • MD5 SHA1 SHA512

        update_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/updatelog/update_2024052717.update.log
        • Size 296B
        • SHA256 cd882a2d36fc88ecce6223dd121c7ce1816f124829e5479ea303aa74b788788f
        • MD5 SHA1 SHA512

        update_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/updatelog/update_2024052717.update.log
        • Size 429B
        • SHA256 b9d413a76dbb6c74000a9098240d7f9d8b5eea27de3f4ce2d6f32c48858709d0
        • MD5 SHA1 SHA512

        warn_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/warnlog/warn_2024052717.update.log
        • Size 111B
        • SHA256 aa89c14e8d87b4ee9d215560d7fc763e2e2820d8cf6a4590148e9455f9b59f41
        • MD5 SHA1 SHA512

        warn_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/warnlog/warn_2024052717.update.log
        • Size 500B
        • SHA256 a79cb0bf6ecd52537271134ea1d3567789264066204e569bc015e61d06fbba33
        • MD5 SHA1 SHA512

        warn_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/warnlog/warn_2024052717.update.log
        • Size 743B
        • SHA256 ed3c63c23f5f468351494dd206996012477f2e7f4b0dfaf54205e470127892ee
        • MD5 SHA1 SHA512

        warn_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/warnlog/warn_2024052717.update.log
        • Size 855B
        • SHA256 e74037b507b3ca09602b38eee8835a2cb609be73e193321e442f61c3ca7c43c4
        • MD5 SHA1 SHA512

        warn_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/warnlog/warn_2024052717.update.log
        • Size 967B
        • SHA256 449af1587039845dffd1e2046b84f5d07f907855bcd76bc6e4d7c6f98ac17b86
        • MD5 SHA1 SHA512

        warn_2024052717.update.log

        • Path /storage/emulated/0/ucgamesdk/544655/logs/warnlog/warn_2024052717.update.log
        • Size 2KB
        • SHA256 27f91c5b82ad077026449f02821a5fe04237ea4cafc757f40c28e4fe57d77daf
        • MD5 SHA1 SHA512

        ucgame_sdk.db-journal

        • Path /storage/emulated/0/ucgamesdk/db/ucgame_sdk.db-journal
        • Size 512B
        • SHA256 f21c52c9df237fd948c7fa6a386ffddaff13977b762312582949bfc8ab8eaf84
        • MD5 SHA1 SHA512

        ucgame_sdk.db-wal

        • Path /storage/emulated/0/ucgamesdk/db/ucgame_sdk.db-wal
        • Size 92KB
        • SHA256 c2d5dbe04608602b9f1737634ba06adc437f635f57fca94ef01574d1ec1f2b6c
        • MD5 SHA1 SHA512 SSDEEP