2e6dd4aca45a51a647afb5067417a2a8af33aaff358e1424ee238e9dd88ea99e

Analysis

max time kernel
124s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
03/06/2024, 12:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

91cef55690b10c75ff32d8eff4010f51_JaffaCakes118.apk
Size

8.1MB
MD5

91cef55690b10c75ff32d8eff4010f51
SHA1

c773a9a4190113779d8dd69a4e5f3a406e34df65
SHA256

2e6dd4aca45a51a647afb5067417a2a8af33aaff358e1424ee238e9dd88ea99e
SHA512

26e3cd278c562496755218a3d215a7d3c79ec9a61ba2a62f05098f6b74eeffe7daf40cd718cd7a6333ef0188af1fc2b48a952b2d9dbcc66c65dcc4921ff6db20
SSDEEP

196608:Q1fQsoJaXRmnL0LJ6NSbZKqGIcgiG+ciIqkDi+0POI8xTP:QOsoJaXR0L01GgAqEgitIqkD0mIO

Score

7^/10

discovery persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.hpplay.happycast

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.hpplay.happycast

com.hpplay.happycast
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4287
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4355

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.hpplay.happycast/app_crashrecord/1004

Filesize
230B

MD5
8380ed83f9106365a58ddce2a3ddfd60

SHA1
6818d9506f7095b3a18197991c4221cbf47dde88

SHA256
4ee137f3ea1137d21402c46af07dda4de219ee3045bd06ed9618e5aefea3fe80

SHA512
7160cee991563b6ae2b07a380b172539624278e7a729bfb41868f8c1e0a5e632f03e4fe407d68e87662179f770b43b61284a0ab42b74312c9538f1bd9267a603

Download Submit
/data/data/com.hpplay.happycast/app_crashrecord/1004

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.hpplay.happycast/databases/bugly_db_

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.hpplay.happycast/databases/bugly_db_-journal

Filesize
512B

MD5
bad1fe654c977704b1307303dce12460

SHA1
21d8fdd6fc09be9112bac3d9814595899a731574

SHA256
ace4f729c0aa954bcb5d85fca610e49fccd6f0a9a73af3971a5a8196002c4776

SHA512
4fa0c5aa2c5e79e51ffeb05a975f0e244b901c79426aa066328a2847dfcdc393798450d769aff961868167ec681e5e81dc9597dd350416edab6ae4c0b6a1195c

Download Submit
/data/data/com.hpplay.happycast/databases/bugly_db_-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.hpplay.happycast/databases/bugly_db_-wal

Filesize
76KB

MD5
16cd27ad67f8d371ac4d3beb2a70cfbc

SHA1
f5446c289323a3941caeb135aad51800b06790db

SHA256
e18daeddef8f6b417403d1fb636e477f26597cd6d26ee23de2404850dd6f52dc

SHA512
4bf26f54c73893d2a3be55944239bf8d15251ab21e164293b81a83079843dec7497003bea488862a44d86dd322801ae50271d85caa8ea91db13467a6cd9d9be5

Download Submit
/data/data/com.hpplay.happycast/files/sobot_chat_log/sobot_chat_20240603_log.txt

Filesize
201B

MD5
2605ab0e75d1a0b81f910babd07af931

SHA1
3a7e5439718b7b107a6cafc41c7a990fd326f71b

SHA256
8594586d93ac49ddc3d372e679761a9fa7f75ee0e28d27184610fb88daccebba

SHA512
86cae1fdb19a9733ab970d4a749ad983413ca5718bcf794b4c4d1390736358c9d4616a0752d60ba9a32c43ea0da9107c274762b73eb8ec58a3971d8a5ffbaed2

Download Submit