09d1bf465ab9dbebbd1cd3485b1b8b2db1a3027a057011d9a1449cdd90827106

Analysis

max time kernel
11s
max time network
131s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
27/05/2024, 18:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7a039a9205213a5be84e2cf9f65641dd_JaffaCakes118.apk
Size 6.2MB
Sample240527-wl6zaade76
SHA256 09d1bf465ab9dbebbd1cd3485b1b8b2db1a3027a057011d9a1449cdd90827106
MD5 7a039a9205213a5be84e2cf9f65641dd
SHA1 a1c48bb849156256d5d4635e276840296a259cc7
SHA512 d6a31253e06d7f0b660826b7a45672d08abe54d4ae7d07e6e7db64ab51aee7d5cc028501bc7c3f0a6addc1ec8f98c9778b363bf9d38e97e9340980c549a044e9
SSDEEP 196608:mlYGQOeVrRwRj1xFCGWW5dgvRxSgw+Wm4:mC6eVrRwRj1xMI5cxt4
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.baidu.netdisk_ss

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.baidu.netdisk_ss

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.baidu.netdisk_ss
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
PID:5183

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

account.db

Path /data/data/com.baidu.netdisk_ss/databases/account.db
Size 24KB
SHA256 c6b23986876d5b9d5324c4e14c3248ad6f9f54649dff3746c1c3a9c866ce1c44
MD5 cc41e1db205a332181128dfb20d26d13
SHA1 d4f12a2172d130d40f3f5537dcf244c06721bc3c
SHA512 30776f5642bbec034b2f4d88ca7ce75e8a02be73bc31900765ec4305bac0e167ece14d1e78ede14f0fa0d64b22370dbcecd253cadd28d4e38e049c22137dafdf
SSDEEP 24:TLA1la4FqBd7oEIIdpajeKk08NaAmYsGSzI:Tkba447ofWgenbax0S
MD5 SHA1 SHA512 SSDEEP

Submit Download

account.db-journal

Path /data/data/com.baidu.netdisk_ss/databases/account.db-journal
Size 512B
SHA256 5018548080478fa207623851acbccdd888d9e186f961d7ea73c6c7965826ee8a
MD5 e4251938cbde5d83a4043f011357d9b1
SHA1 39d794ba0d5bdcac1f8790f603a5b7447ccbd3d1
SHA512 2d842477c60456c3ff82bc05b0d8e22d1e338a2739dc9b90ab6489c0144d3934782e2fd9e9bd5380338ea1b0a4eb7af78fc66028bf5ebc9ebdc4b5b44a0b9292
MD5 SHA1 SHA512

Submit Download

account.db-journal

Path /data/data/com.baidu.netdisk_ss/databases/account.db-journal
Size 8KB
SHA256 e4039b2ac0c49356a29a3ad76c184570e44e4d47157241d7d6ee71e80b7d3608
MD5 0b3a657cf518e21a49eaf934775d50de
SHA1 3a7e8fa6775d3ed8f26e7837261a2dc8a6486c9b
SHA512 0fcc0e6fd6c14eeb94b847e2e7d777b66c9daf4d592a858c6140a3cae361623c33c9925fd305fbf906beb97d1ac9f7f7c3eaf992c39ba9f25e84c14f5ae6f4b1
SSDEEP 6:7+/l9mhn1dvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKuB:7+t8lqLiuWdwRmBEyPbfB
MD5 SHA1 SHA512 SSDEEP

Submit Download

account.db-journal

Path /data/data/com.baidu.netdisk_ss/databases/account.db-journal
Size 8KB
SHA256 a35dd529f2366ff20b8a289ed2cf0f278cfe0854d33f8cd8ffc46f5742ad3a13
MD5 d75d285f4076f56a73c2eabd45c3f828
SHA1 ceb7ea554a03163bccdcc9f471fe28468260df08
SHA512 2c75b678d97e7df863e3d9ac8674f6f67c96145a7750e8c62b62559a20a7432567e20422721373c5dedf0d99e1e9154feda74c82ad35673b0ca80f6ee141c4f4
SSDEEP 6:7+/l9ZPPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK9vM/Wn:7+tjqLJdTRmBEyPbY0W
MD5 SHA1 SHA512 SSDEEP

Submit Download

accountinfo.db

Path /data/data/com.baidu.netdisk_ss/databases/accountinfo.db
Size 16KB
SHA256 37fb197f14baac0a479a9f0758211df6698cbd22b10fbf66824fc938b68ad420
MD5 1f75438162f0c2f3de9202a826f2a379
SHA1 20a9a0ef5ded8700f53ebc1b24860d7798c41d94
SHA512 5d30a3798b131523f71d7dcbfa5f5799aba6d8ecac2a2fffcb2336b7cbc38efaad378cddd546c6355c7f1486b52056fe6993253404356ebe2e539c358712defd
SSDEEP 6:l9bNFlqalu8O64yXQMF4gLuOzwibWKxgiwERX4PBX4ogLugMBX4suuK0DqiOw:TLpu8O6PvFUOzwwRmBEyPbBvOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

accountinfo.db-journal

Path /data/data/com.baidu.netdisk_ss/databases/accountinfo.db-journal
Size 512B
SHA256 12c7059039209787694edc39a7c969d56a105c885b966d83c49ab97541e1d284
MD5 7434117a75344be4e2c60195319d53b9
SHA1 d278507ae37849778556a958f21a2b42d989ef05
SHA512 6d25f194664510be84de2512cf1aefd1d23d554fa64630795025973f9a98a01b75a7a1a16cf1cebd5d0f8b1fb4524adb98bda524dcf1e5050c6890f71b49fa25
MD5 SHA1 SHA512

Submit Download

accountinfo.db-journal

Path /data/data/com.baidu.netdisk_ss/databases/accountinfo.db-journal
Size 8KB
SHA256 b8eede7dda6b8f7f8f358350834041104e7b5f4e679af1b63b5b610dd3163b63
MD5 326171320f23598f331828e6a6d91f77
SHA1 c24bac460822d307922f9a2bcda4082e6c71936d
SHA512 11a33b293f3fe995b081ef16d929fb1905f75fbe0e5bbce0b6d9f13a8aca5dd12a7fa8359d0ed9c1d44749982ba0383f602096cf1a6c9f0edeb88ae298e2749d
SSDEEP 6:7+/l9fcHn1uWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKOPX:7+t9TWqLiuWdwRmBEyPb9X
MD5 SHA1 SHA512 SSDEEP

Submit Download

accountinfo.db-journal

Path /data/data/com.baidu.netdisk_ss/databases/accountinfo.db-journal
Size 8KB
SHA256 32981570893d82d0d2e9bdf6adef831af0c0e2369af430c4a810aa37f8fb4f09
MD5 534969ad9ad4949f5e5ae896a398895b
SHA1 12ec2adf00b7586b6c56bb44114afdf58b5037b3
SHA512 842fffc6d7dec062c78edab5e9d23c7ccc4d6ed86242d3e79dd81d813e986090c53ab2bdbc25039c4c0499e23372a58d1df2c3c5aa266ce712fffd011a37b840
SSDEEP 6:7+/l974S/gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKgH5nM/H:7+tZxwqLJdTRmBEyPbAH
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads