Analysis

  • max time kernel
    109s
  • max time network
    185s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    30/05/2024, 03:49

General

  • Target
    82f369b371b6307d02f81955f8b21c2b_JaffaCakes118.apk
  • Size 12.3MB
  • Sample240530-edcl2add5w
  • SHA256 1f5cd350cdafa79b97f092e61f446167f7c779863b8c3ac58e7115e02700ec76
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.sogou.androidtool
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks CPU information
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4619

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MessageStore.db

        • Path /data/user/0/com.sogou.androidtool/databases/MessageStore.db
        • Size 36KB
        • SHA256 a953ef381606a6d98d98f3278e94fc1d5b58a0778f8ea3e305111586b759c14a
        • MD5 SHA1 SHA512 SSDEEP

        MessageStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MessageStore.db-journal
        • Size 512B
        • SHA256 5a42a43f1f25395756fae795668bf4fde4c8b0d13fcd00ec270a50ffd3dc3c09
        • MD5 SHA1 SHA512

        MessageStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MessageStore.db-journal
        • Size 8KB
        • SHA256 5367c9916faf7d1c660f164861ddc93681adca9ab253300713e3379dfa2cf308
        • MD5 SHA1 SHA512 SSDEEP

        MessageStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MessageStore.db-journal
        • Size 8KB
        • SHA256 9e2552484325a7167a4fbce60b1e9dbaa547f5be9552b820477c53db16ea516e
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db

        • Path /data/user/0/com.sogou.androidtool/databases/MsgLogStore.db
        • Size 56KB
        • SHA256 4087524ad761d0669a39007849311b2b0a32c1a62d0a7ff04d4a77d702bfe27e
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MsgLogStore.db-journal
        • Size 512B
        • SHA256 09d44937b76546c963886b96cce2055b3d09a93952b7115a25274d8333460862
        • MD5 SHA1 SHA512

        MsgLogStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MsgLogStore.db-journal
        • Size 8KB
        • SHA256 329c6d890a37a79fcdc96a66c80024cc5cffe3d22c50cf1ba98d202e31074b98
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MsgLogStore.db-journal
        • Size 8KB
        • SHA256 02c4230917ed97b921d8ec54e5eec7dea54cae2cf3df303ac4cee395a52a8fa0
        • MD5 SHA1 SHA512 SSDEEP

        account.db

        • Path /data/user/0/com.sogou.androidtool/databases/account.db
        • Size 36KB
        • SHA256 fce3e49a589b7ccea3410cf02efbc775d988ce63ca66a48bd5bca193bd8a8add
        • MD5 SHA1 SHA512 SSDEEP

        account.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/account.db-journal
        • Size 512B
        • SHA256 6d33ca2c12ae5e03da2179447bead84df5953145401d3a12a9f371076bf0eb71
        • MD5 SHA1 SHA512

        account.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/account.db-journal
        • Size 8KB
        • SHA256 da57ca77a7ee82473fbcfebc8ceb36c05431d565b5229e485a63c22768c0da31
        • MD5 SHA1 SHA512 SSDEEP

        account.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/account.db-journal
        • Size 8KB
        • SHA256 596f2488e013183c9ae519cce6ca9fcaa03535ad770217b781aa96ea5785acf8
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db

        • Path /data/user/0/com.sogou.androidtool/databases/androidtool.db
        • Size 40KB
        • SHA256 aca8749a0a2a7a876efc293bbbc761873732bdaff57f5f88d54cd3a84b13cf4e
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/androidtool.db-journal
        • Size 512B
        • SHA256 424ae02e6845b9713407c9fb7076df7faea8eebad7d9d460541c6a97cf4e0d43
        • MD5 SHA1 SHA512

        androidtool.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/androidtool.db-journal
        • Size 8KB
        • SHA256 21e067055162dde357cca410ac12f7a58eee2760f07b3580ef8c8c067978ce5c
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/androidtool.db-journal
        • Size 8KB
        • SHA256 fd84adc3988f4a9737c4c3eb1fe4dca8422c89d7f2cd6af5b97d27127a2fb0f7
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_
        • Size 60KB
        • SHA256 933ec1d0c7905c1b17d196ffb27d32b2b9136dd81664798a1269b7073baa1924
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 512B
        • SHA256 84ae611c8ce64ee5dea4370c0d1e6ed682427e8910cee50395a39f98047b2a16
        • MD5 SHA1 SHA512

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 b4398ef0f4aee50d4210eebe47fc3e7da3ec905cdddd330976bd84a8c2abd665
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 376cc69e41853c631209ca46398ef4316be972bd247a1415221f4f9e434c9102
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 e6c2048a8b6a1d4b5fbf156da2d9bee4421dd0161f70bb1602ad827e31572383
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 96503090146313d55e7548a42954638b2b1b5e12b4c7d5e0d901291230f95c49
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 2be0013917349e94b168b815f8b713a549b4e071658718c0b79407714d5d3098
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db

        • Path /data/user/0/com.sogou.androidtool/databases/downloads_classic.db
        • Size 28KB
        • SHA256 da2f435b4c4f110c3974ce7676538bb251adbe5f3110e300e4a9203155632015
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/downloads_classic.db-journal
        • Size 512B
        • SHA256 755c44791256a03d7a36e9f72613b0baef00be6776e5c77036a3329f6b5a8045
        • MD5 SHA1 SHA512

        downloads_classic.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/downloads_classic.db-journal
        • Size 8KB
        • SHA256 e0014825b8228fc1f0507c4caf10e7bc2b4d2f3af2b35c4a805e05ffbaae228a
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/downloads_classic.db-journal
        • Size 8KB
        • SHA256 b3ebd8eddafa5950b622194378ed0e2ecd2a2f346c95c0b99485d3191a3b5bde
        • MD5 SHA1 SHA512 SSDEEP

        pb_db

        • Path /data/user/0/com.sogou.androidtool/databases/pb_db
        • Size 20KB
        • SHA256 94b10ffe36c04d98bda139042e929f1cebe0d1bfc3f21d19470ac5e12622e8c2
        • MD5 SHA1 SHA512 SSDEEP

        pb_db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/pb_db-journal
        • Size 512B
        • SHA256 0e0d95679b3f85b4dbefc515473be54f4f10e45b419615ab2381292c585d4203
        • MD5 SHA1 SHA512

        pb_db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/pb_db-journal
        • Size 8KB
        • SHA256 4540b17f2da16774a6cb495744465bfac52f792a3a184cf9e80053f5ed054fe7
        • MD5 SHA1 SHA512 SSDEEP

        pb_db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/pb_db-journal
        • Size 8KB
        • SHA256 c771103647aa3349bf6cdb5043cebd89db9980987d2a6275ef54d15b784416d7
        • MD5 SHA1 SHA512 SSDEEP

        unupdateapp_v2.db

        • Path /data/user/0/com.sogou.androidtool/databases/unupdateapp_v2.db
        • Size 16KB
        • SHA256 c591383b0a5aed5fc73f97565eaceefceea39f218facb436d0073a30b8d46db8
        • MD5 SHA1 SHA512 SSDEEP

        unupdateapp_v2.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/unupdateapp_v2.db-journal
        • Size 512B
        • SHA256 25c4f11d3f9fc2606683e2691bc4669668f001059c7777a03aeee35a71763d27
        • MD5 SHA1 SHA512

        unupdateapp_v2.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/unupdateapp_v2.db-journal
        • Size 8KB
        • SHA256 0a895075e607db0a38533dc8de9bcfb6378c7a485b5035a4d877a7a3690fa1ae
        • MD5 SHA1 SHA512 SSDEEP

        unupdateapp_v2.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/unupdateapp_v2.db-journal
        • Size 8KB
        • SHA256 8ba415721731c41b873b9f38692453dc3afe897dec5e78665d2f7d42a3d916c0
        • MD5 SHA1 SHA512 SSDEEP