Analysis

  • max time kernel
    179s
  • max time network
    182s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    02/06/2024, 11:43

General

  • Target
    8df6193cd8f519b51ecdd42608771a61_JaffaCakes118.apk
  • Size 23.0MB
  • Sample240602-nvv95scf39
  • SHA256 ce5cbffaf03212dbfe30df6979fae0401137cc5fd00f40699b2b65f7c4b1ab01
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 5 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Requests dangerous framework permissions 5 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.xsj.h5sword.aligames
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5157

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        msg_1717328762901

        • Path /data/data/com.xsj.h5sword.aligames/app_xgsdk-data/msg_1717328762901
        • Size 935B
        • SHA256 91d09ed2cec224c6d54361df7d3572d2ee1d79943e31ee530a13e3161d468d54
        • MD5 SHA1 SHA512

        xgsdk-channel-20180607155902.apk

        • Path /data/data/com.xsj.h5sword.aligames/app_xgsdk-pwd/xgsdk-channel-20180607155902.apk
        • Size 20KB
        • SHA256 bb462df16dec44527bbf4b1b4e7f523e818ff2aae27b6b55453bffff11e9e8c3
        • MD5 SHA1 SHA512 SSDEEP

        xgsdk-data-2.0.apk

        • Path /data/data/com.xsj.h5sword.aligames/app_xgsdk-pwd/xgsdk-data-2.0.apk
        • Size 35KB
        • SHA256 9f2f3ad45ed72b8431777b4d1d39a4931f957b62d4ddd75e6c77113b185201e1
        • MD5 SHA1 SHA512 SSDEEP

        xgsdk-channel-20180607155902.apk.cur.prof

        • Path /data/data/com.xsj.h5sword.aligames/app_xgsdk/oat/xgsdk-channel-20180607155902.apk.cur.prof
        • Size 131B
        • SHA256 cb09f70039644279370137201819f64fc444401edab1a3c18fe10eada859f11a
        • MD5 SHA1 SHA512

        xgsdk-data-2.0.apk.cur.prof

        • Path /data/data/com.xsj.h5sword.aligames/app_xgsdk/oat/xgsdk-data-2.0.apk.cur.prof
        • Size 251B
        • SHA256 54fb124b03beb18c836e5ecce7e41d90715bb36cb57d4f373407ed3ac98cd2e5
        • MD5 SHA1 SHA512

        sdk_config.properties

        • Path /data/data/com.xsj.h5sword.aligames/app_xgsdk/sdk_config.properties
        • Size 790B
        • SHA256 6cd406f151481482c37514b6c9b892418825a07f2ed1e74e39eeec7d8edfaff7
        • MD5 SHA1 SHA512

        xgsdk-channel-20180607155902.apk

        • Path /data/data/com.xsj.h5sword.aligames/app_xgsdk/xgsdk-channel-20180607155902.apk
        • Size 20KB
        • SHA256 7b99bd593640bd785e8be52b0a1a373f798d577d5a91b5892201bc7979acd347
        • MD5 SHA1 SHA512 SSDEEP

        xgsdk-data-2.0.apk

        • Path /data/data/com.xsj.h5sword.aligames/app_xgsdk/xgsdk-data-2.0.apk
        • Size 34KB
        • SHA256 8a964d1697cc7281306eac323ba25873406854f0d92bd53cb309b1ad3f0049cb
        • MD5 SHA1 SHA512 SSDEEP

        gamesdk_stat.db

        • Path /data/data/com.xsj.h5sword.aligames/databases/gamesdk_stat.db
        • Size 32KB
        • SHA256 35c98229c7962de0b157e64d1b9741866e2d7256882a212ad26a122d1efc4671
        • MD5 SHA1 SHA512 SSDEEP

        gamesdk_stat.db-journal

        • Path /data/data/com.xsj.h5sword.aligames/databases/gamesdk_stat.db-journal
        • Size 512B
        • SHA256 ca7706321a5414d57c05bdae5bbae40cf0bb072cf8a36493955d8c5357044426
        • MD5 SHA1 SHA512

        gamesdk_stat.db-journal

        • Path /data/data/com.xsj.h5sword.aligames/databases/gamesdk_stat.db-journal
        • Size 8KB
        • SHA256 d2193f66e46c2ee96a18597e590ba7a3462f3cde51170034ecb49bb89c17bb48
        • MD5 SHA1 SHA512 SSDEEP

        gamesdk_stat.db-journal

        • Path /data/data/com.xsj.h5sword.aligames/databases/gamesdk_stat.db-journal
        • Size 8KB
        • SHA256 5847782d9c3332ea925266dca6d650fbb5f0190d47f70de22d3bbfbedf429e37
        • MD5 SHA1 SHA512 SSDEEP

        gamesdk_stat.db-journal

        • Path /data/data/com.xsj.h5sword.aligames/databases/gamesdk_stat.db-journal
        • Size 12KB
        • SHA256 84d049ad78383724c220f560c1be53e026a8741ddfe556d33f3b2d6cb2ceb133
        • MD5 SHA1 SHA512 SSDEEP

        gamesdk_stat.db-journal

        • Path /data/data/com.xsj.h5sword.aligames/databases/gamesdk_stat.db-journal
        • Size 12KB
        • SHA256 a550748d3cded2bf54dde3b2b92a3ebb83f89f03bfe0377d804bf2d5d0adfc37
        • MD5 SHA1 SHA512 SSDEEP

        gamesdk_stat.db-journal

        • Path /data/data/com.xsj.h5sword.aligames/databases/gamesdk_stat.db-journal
        • Size 16KB
        • SHA256 cd2f744a184f61219f341c2a47fe13ad5d950c42d415002dfb5dd6d9f808e0b2
        • MD5 SHA1 SHA512 SSDEEP

        session-CrasheyeSavedData-1-1717328783590.json

        • Path /data/data/com.xsj.h5sword.aligames/files/session-CrasheyeSavedData-1-1717328783590.json
        • Size 531B
        • SHA256 03989ef66dbaae49bc7bbadad67abf5b4c45d692a924adb32daa5905e6aec926
        • MD5 SHA1 SHA512

        ModuleManifest.json

        • Path /data/data/com.xsj.h5sword.aligames/gamesdk_modules/ModuleManifest.json
        • Size 11KB
        • SHA256 1cc1ee016dc2f69cdf1eab26673799ed83376bc47a23ea8a4643e6b4d3b0a87a
        • MD5 SHA1 SHA512 SSDEEP

        libcn.uc.gamesdk.init.apk

        • Path /data/data/com.xsj.h5sword.aligames/gamesdk_modules/cn.uc.gamesdk.init/7.5.2.8/libcn.uc.gamesdk.init.apk
        • Size 143KB
        • SHA256 4206c210a22fb05c48b991ca73b7e1752db3b83cd165620d96c5b9b1005eddef
        • MD5 SHA1 SHA512 SSDEEP

        property

        • Path /data/data/com.xsj.h5sword.aligames/gamesdk_modules/cn.uc.gamesdk.init/7.5.2.8/property
        • Size 78B
        • SHA256 b70ff710e7e25f8c5c3c49394deac5967e8f9aef33d5824077ca1f6bd63980dc
        • MD5 SHA1 SHA512

        property

        • Path /data/data/com.xsj.h5sword.aligames/gamesdk_modules/cn.uc.gamesdk.init/7.5.2.8/property
        • Size 78B
        • SHA256 ed41883bcd71f22bfd4053a35d36b6b318708753b3496da0408f9ed270d290d9
        • MD5 SHA1 SHA512

        signature

        • Path /data/data/com.xsj.h5sword.aligames/gamesdk_modules/cn.uc.gamesdk.init/data/signature
        • Size 95B
        • SHA256 dff9d0a2c290c8fdf1262d5480eaa59a150e785fd8a474003ecd5678baa91afa
        • MD5 SHA1 SHA512

        lib_ucsdk_softlink.so

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/lib/lib_ucsdk_softlink.so
        • Size 13KB
        • SHA256 e17055c0f9ee7dd26d366820e45d510242508a53c5ddaae56e8db58a91cb13a3
        • MD5 SHA1 SHA512 SSDEEP

        lib_ucsdk_xcrypt.so

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/lib/lib_ucsdk_xcrypt.so
        • Size 18KB
        • SHA256 72e171aa8dce74bf8a5b2106184222e54929bc754cea4c77ceacf027a4e822ed
        • MD5 SHA1 SHA512 SSDEEP

        ucsdk.apk.cur.prof

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/lib/oat/ucsdk.apk.cur.prof
        • Size 221B
        • SHA256 951bdd6531e9e6d3b805b31ab2993517a9b52cd559e70dcfd65f39ebd50bffe5
        • MD5 SHA1 SHA512

        ucsdk.apk

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/lib/ucsdk.apk
        • Size 29KB
        • SHA256 b4071a983a0a546aa5685cf0a49dcf941cc2274a5bb673b8688c1fe7c54ce490
        • MD5 SHA1 SHA512 SSDEEP

        stat_64.log

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/logs/log_shell/stat_64.log
        • Size 362B
        • SHA256 b08c419e27eddc82d637ba55bba6ec0f3c029353a04c4fe6a690493e1dbc3d3e
        • MD5 SHA1 SHA512

        stat_64.log

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/logs/log_shell/stat_64.log
        • Size 374B
        • SHA256 325516e921b6866a02cc9c530f37ae685902fd789177ab372063ff386f11a756
        • MD5 SHA1 SHA512

        stat_64.log

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/logs/log_shell/stat_64.log
        • Size 748B
        • SHA256 dea85225fd177141527edfb331091beef20829a64f79c9ad1557502c94606118
        • MD5 SHA1 SHA512

        .verify

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/modules/odex/.verify
        • Size 95B
        • SHA256 0bc69c9e3bd87647314847a6c466cf373b8a740f23f458794f9eaf7abf109928
        • MD5 SHA1 SHA512

        .verify

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/modules/odex/.verify
        • Size 95B
        • SHA256 378adefba010c6ccb4cc215983babccca1531097d5585587ed065c63b54c5ad0
        • MD5 SHA1 SHA512

        .verify

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/modules/update-1/.verify
        • Size 32B
        • SHA256 c84485174b2d4432ba6ccd313b65867b38e316309e51410e589ef0614ad5d5d0
        • MD5 SHA1 SHA512

        cn.uc.gamesdk.loader.apk

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/modules/update-1/cn.uc.gamesdk.loader.apk
        • Size 4.4MB
        • SHA256 7b028cd271441eae195bbe2d762a6f8c5e4f31d71914f972c4ed11293b926e8d
        • MD5 SHA1 SHA512 SSDEEP

        cn.uc.gamesdk.loader.apk.cur.prof

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/modules/update-1/oat/cn.uc.gamesdk.loader.apk.cur.prof
        • Size 972B
        • SHA256 95c3653ef73c433a7b77e69fdc5cf78f0fbf6b1b02cffc5242794fc8bd6169bd
        • MD5 SHA1 SHA512

        version.ini

        • Path /data/data/com.xsj.h5sword.aligames/ucgamesdk/modules/update-1/version.ini
        • Size 11B
        • SHA256 7b79f4f2f33c273da70170f6d328cdf4528326662289c70bd9029bb5503b92bc
        • MD5 SHA1 SHA512

        xgsdk-channel-20180607155902.apk

        • Path /data/user/0/com.xsj.h5sword.aligames/app_xgsdk/xgsdk-channel-20180607155902.apk
        • Size 48KB
        • SHA256 fba9b991832a57565090e23e70df2176f24f5c7433e034228f70024bcea78888
        • MD5 SHA1 SHA512 SSDEEP

        xgsdk-data-2.0.apk

        • Path /data/user/0/com.xsj.h5sword.aligames/app_xgsdk/xgsdk-data-2.0.apk
        • Size 73KB
        • SHA256 6e9185371583b7c35919632037b1aa0d61c1f1c797ea043ace458a4c2c54037f
        • MD5 SHA1 SHA512 SSDEEP

        libcn.uc.gamesdk.init.apk

        • Path /data/user/0/com.xsj.h5sword.aligames/gamesdk_modules/cn.uc.gamesdk.init/7.5.2.8/libcn.uc.gamesdk.init.apk
        • Size 61KB
        • SHA256 c6f095d039203e89706f007ee046d54fcaa3c513da87211b45b2a109281a0ce8
        • MD5 SHA1 SHA512 SSDEEP

        ucsdk.apk

        • Path /data/user/0/com.xsj.h5sword.aligames/ucgamesdk/lib/ucsdk.apk
        • Size 55KB
        • SHA256 4b9ada634b69923299cadcd49c1e6cae19f22ec5de2ef875e0220573e8e23bdf
        • MD5 SHA1 SHA512 SSDEEP

        cn.uc.gamesdk.loader.apk

        • Path /data/user/0/com.xsj.h5sword.aligames/ucgamesdk/modules/stable/cn.uc.gamesdk.loader.apk
        • Size 2.4MB
        • SHA256 6e7d08db870927384b68b37e0f59941b9ed272c47d594fb9acab256d374e2d9d
        • MD5 SHA1 SHA512 SSDEEP

        ContextData.xml

        • Path /storage/emulated/0/.DataStorage/ContextData.xml
        • Size 111B
        • SHA256 97748d31f072554386524cc5423e7391d6d23beb7e7666b81bb3cb8a957de6a8
        • MD5 SHA1 SHA512

        ContextData.xml

        • Path /storage/emulated/0/.DataStorage/ContextData.xml
        • Size 213B
        • SHA256 2934dc755783a13095dbc59e006b025882ec3161f8f106506f95b9a3841c7b72
        • MD5 SHA1 SHA512

        Alvin2.xml

        • Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
        • Size 65B
        • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
        • MD5 SHA1 SHA512

        Alvin2.xml

        • Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
        • Size 111B
        • SHA256 d69944d6c9afceaf85b736c0c28b04161bdc3d77a1e1673ee123275f36582fcf
        • MD5 SHA1 SHA512

        Alvin2.xml

        • Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
        • Size 167B
        • SHA256 562a58eacfc787fd6bce0fa936829b1c9bc6d329b2c841f044c9a3241b927e24
        • MD5 SHA1 SHA512

        tbslog.txt

        • Path /storage/emulated/0/Android/data/com.xsj.h5sword.aligames/files/tbslog/tbslog.txt
        • Size 2KB
        • SHA256 5e6e3f27bb0baa7c1429117a32a9627c7464a7669e15b38b2d7753b200b37231
        • MD5 SHA1 SHA512

        anal_202406021146.loader.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406021146.loader.log
        • Size 224B
        • SHA256 44c0605ecd5fbe92431681e4c663842a3a9e8002ad5e6ada2e08b4b6326de646
        • MD5 SHA1 SHA512

        anal_202406021146.loader.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406021146.loader.log
        • Size 448B
        • SHA256 677c799759b70cc1349fd2e7bdca0ba02ec6d46729459f4f74292036784b7bc7
        • MD5 SHA1 SHA512

        anal_202406021146.loader.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406021146.loader.log
        • Size 714B
        • SHA256 fe6467d131ff1c9b73035a5de34a878095e90bbcad3966f521a8bce361bce545
        • MD5 SHA1 SHA512

        anal_202406021146.ucgamesdk.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406021146.ucgamesdk.log
        • Size 179B
        • SHA256 a0f1bc403cf791524f93e37ce2df45cc589a064943c7c5060b01ce94690ce76f
        • MD5 SHA1 SHA512

        anal_202406021146.ucgamesdk.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406021146.ucgamesdk.log
        • Size 358B
        • SHA256 11bbbedf8ea8ecfd0a2aa35932e438821d21a7511e905ca2772c1f18761ea47c
        • MD5 SHA1 SHA512

        debug_2024060211.loader.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.loader.log
        • Size 138B
        • SHA256 6d65802ef7796f7c8a1a7320d45f69781035d6f256be9750536ccaf7f105a6c4
        • MD5 SHA1 SHA512

        debug_2024060211.loader.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.loader.log
        • Size 231B
        • SHA256 a9abfb4927c3cd983fbe9d350ac90e8e1011e9ab13625ecde131e78027432c2c
        • MD5 SHA1 SHA512

        debug_2024060211.preload.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.preload.log
        • Size 97B
        • SHA256 58833aad0b4efa05aef3f9258044b88aa56436cf4b83458a1c0a7f2abdec661a
        • MD5 SHA1 SHA512

        debug_2024060211.preload.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.preload.log
        • Size 176B
        • SHA256 a85e26603a9d4d0c6ff80bcd02b5deb2c5d40884aa3356bcd7a66f87a5ad3b48
        • MD5 SHA1 SHA512

        debug_2024060211.preload.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.preload.log
        • Size 242B
        • SHA256 29bd74491ae42ed1b399f3be027626b48deb888dd30572f38cf2adf0ee1c8142
        • MD5 SHA1 SHA512

        debug_2024060211.preload.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.preload.log
        • Size 321B
        • SHA256 e570a5e3c4100d7685d0f22c54c5f2eeafed263ff45e81b818a7aa2f90b979bb
        • MD5 SHA1 SHA512

        debug_2024060211.preload.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.preload.log
        • Size 398B
        • SHA256 7e1866a37d9a4e0e707ba374e4a7f19231b5528f6b8a8744c6cfec3162aae8de
        • MD5 SHA1 SHA512

        debug_2024060211.preload.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.preload.log
        • Size 17KB
        • SHA256 085cf84cc51b120177532ded3f274a30d82ab9afd8dd06ca1cc2615b035a1c35
        • MD5 SHA1 SHA512 SSDEEP

        debug_2024060211.ucgamesdk.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024060211.ucgamesdk.log
        • Size 75B
        • SHA256 e7b3af2eb02a9bf8b79bb042e29f40e6d6658ec0a1773edd103745948c421dc0
        • MD5 SHA1 SHA512

        error_202406021146.loader.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/errlog/error_202406021146.loader.log
        • Size 1KB
        • SHA256 e4c25970dff327c3b08e5fcc7596b1e6dffb3c4b74270e7f52be05650e2c9b60
        • MD5 SHA1 SHA512

        warn_2024060211.preload.log

        • Path /storage/emulated/0/ucgamesdk/0/logs/warnlog/warn_2024060211.preload.log
        • Size 159B
        • SHA256 c5768c86100c15889e01e0726d3a114ab34c39765eb2a117f0931c38fbd1567a
        • MD5 SHA1 SHA512