67f99570ae87a3d310d45a357f707a0bab9a79a62679862b96bd66a40241e33b

Analysis

max time kernel
177s
max time network
188s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
03/06/2024, 14:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
922a37516ae0eb9721f30e26dc03f304_JaffaCakes118.apk
Size 30.9MB
Sample240603-r6ptaabc28
SHA256 67f99570ae87a3d310d45a357f707a0bab9a79a62679862b96bd66a40241e33b
MD5 922a37516ae0eb9721f30e26dc03f304
SHA1 fd7c59ca87c6b12f8a7864bc9c2f0347c14058aa
SHA512 3b1357c0ded3c303d0dcdd6b9cea8c4fc2777b640c91c3626c19ef4d766f3ec6cd5e95bf76db20019c57f4c63b0edf1bc0cace349d6554f5182b1a5e7d03a952
SSDEEP 786432:dF1mKrjlJXPGCFHEHHvfS3vVjwfix/cvObSY/DjJoXYh97h8:dnm8jXGCNAKv9wqx/cU/OXYG
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery impact

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baofeie.app

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baofeie.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.baofeie.app

com.baofeie.app
1⤵
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4575

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

RKStorage

Path /data/user/0/com.baofeie.app/databases/RKStorage
Size 20KB
SHA256 704233dafba4656ab33283b8f1952ad2b2ce981f2bf829242922f863b1e4dee2
MD5 3ddc5b2a7d44d9c06e094caa8d5e327d
SHA1 56e0ea45f4e0f5faa10eb0f0c3a85fa25a3f762c
SHA512 384a847e8ca16deaff15c83fd8991eed83250e8e9144ca380ae85c6462e059b2db63142e9b6cbba31003321ebabfa2e9c978f2490098b0cb798a4f38b3d8b76b
SSDEEP 12:TLm8qRVcMEPVcMEeF8cMEg4sOscMEdcMEmRmBEyPbAVOw:TLrYcFPVcF5cFG5cFdcF9GSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

RKStorage-journal

Path /data/user/0/com.baofeie.app/databases/RKStorage-journal
Size 512B
SHA256 2dad24a40bb947d6057956a7953fbe97f72d33fa07f7c75fe4be04ee32298ff0
MD5 fd710c07c4be33acd124cf5bb8be16f5
SHA1 2118d55a60fd0238be4031788e81359d084f774c
SHA512 aeddbcbd2ea04ec654dbd3a29f64fb9855b1e43f52767946913c214fa5610a0260fa84cbdebf27cca63dfa7bc0d236f68e1677d9cd54d60a2e2967beb0ea077c
MD5 SHA1 SHA512

Submit Download

RKStorage-journal

Path /data/user/0/com.baofeie.app/databases/RKStorage-journal
Size 8KB
SHA256 a9bb051cc04b2077313acb897e8e7d300cde3e52403ca955d95e203b741f11b1
MD5 1d32398920a65e185a28485e36e333d6
SHA1 cb9e93bec2a08b112db29878d37f3d029ad5a7c5
SHA512 5e8909f78f3d6a32fd36f91e97937688d060748160376a012fba993c1b7ce52d77b5a8c368a085e3363297c08e2c0597354cc66a19061263342f889a821531b6
SSDEEP 6:7+/l9vblFn15Wg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK0Y:7+tNfWqLiuWdYRmBEyPby
MD5 SHA1 SHA512 SSDEEP

Submit Download

RKStorage-journal

Path /data/user/0/com.baofeie.app/databases/RKStorage-journal
Size 8KB
SHA256 cd3524c7f14580d14a08f1442e6fa41a121ffc3b8c4e6a9503fc1033b8aa5e95
MD5 d47bf9abb3e4220c1c98e84c571dfadc
SHA1 4ed3d8fa704c1d2bcb6ea01d64e1465b77ed0282
SHA512 f4b41ec3e9aa248a3d528e06059b3eb283f41acf7776fc94c9870232630620cd25caef7b38f77d0e15cdfbc7f7aa3f940b4d400dae73f0d51c95cf5c131adb4a
SSDEEP 6:7+/l9CP8FPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKjGt/un:7+tM0BqLJdeWRmBEyPbwSu
MD5 SHA1 SHA512 SSDEEP

Submit Download

f35131ca-8497-433b-bd27-be753bbf8104

Path /data/user/0/com.baofeie.app/files/jpush_stat_history/active_user/nowrap/f35131ca-8497-433b-bd27-be753bbf8104
Size 159B
SHA256 12b2473085eaa86b2c2ccfcef6d9a3995cddf5ada60ee91eddeaa2164bd4c479
MD5 6de4ad66a523e55c5f0db4bb4393249c
SHA1 0cebf8d768bcf25cfc99c14284224291098f7ee9
SHA512 1faf104f60f73615e9c961702327905b6bbc96d690640f40336aa6dccbe33af9adbbd4e349831c7a6469d8e161c6c809e660aacec807966b3a312e744df8ce73
MD5 SHA1 SHA512

Submit Download

57412643-50bf-473d-8b04-5ff18958dacc

Path /data/user/0/com.baofeie.app/files/jpush_stat_history/normal/nowrap/57412643-50bf-473d-8b04-5ff18958dacc
Size 187B
SHA256 63697dee26a2616fad2ff17955a04d358ba260ab9ec8d48809507f5d4e9efeeb
MD5 dfa75fc6f942b1808ca01ddfc0ee7d3a
SHA1 afa55cd54ac02b8f192503e5c059d90c9f18ba0a
SHA512 b43b350a5dfe9dc31cc121faa4de6c16434ab25f970e1cbc52fa61645d36ef8dbe4a3f41037888543ef4cfae281c2b543990bd97b40bdc7a2e1ebd5b35923d22
MD5 SHA1 SHA512

Submit Download

dso_deps

Path /data/user/0/com.baofeie.app/lib-main/dso_deps
Size 384B
SHA256 3a56bc007dac31ba065d0fece245edebed2a771ae94fe621507cda8201d61653
MD5 b29e292f89a8c2ecf434441760200160
SHA1 66e1437e084939284c79a3e46b163f495331dfb4
SHA512 42955dc7c677f058821903446a767ea12ea0e3044c6227286bae7f36e0d0d184243a6b18ff857d0f951163ecc177898cb62ebaee4c6b2a305617aac0f7a422a9
MD5 SHA1 SHA512

Submit Download

dso_manifest

Path /data/user/0/com.baofeie.app/lib-main/dso_manifest
Size 277B
SHA256 741934b4467410a52cdd20761f27c8c4e6e7e0c98056072eaa664c28b5ffa6d4
MD5 a84fd487a6ecb12876689e3b4b0c8799
SHA1 f4805492ef309df9df5bbdbd94fbf62336edcf21
SHA512 eceee8e87d1bbdf8223216dc373b8376256823d063223ea541694e06d918764034b0e892d8199cff70c902fa4dae925bf129178a255307f07f37429f167555dc
MD5 SHA1 SHA512

Submit Download

dso_state

Path /data/user/0/com.baofeie.app/lib-main/dso_state
Size 1B
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
MD5 SHA1 SHA512

Submit Download

dso_state

Path /data/user/0/com.baofeie.app/lib-main/dso_state
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

libYTFaceReflect.so

Path /data/user/0/com.baofeie.app/lib-main/libYTFaceReflect.so
Size 1.9MB
SHA256 0de47efbf2a182fd9ba99f3fdf98a3c841f1b8232c7e321bda658de95ef146be
MD5 6b3d0121b3ae4eb770f20107b6968072
SHA1 2e6baeb85f79dce5098cfa280e2f78c474dc7cac
SHA512 38304865de2b87e312d45f791befd79780806c753dd2050f9ae18d946c0df43fda4277e23c5de32903fe9a5e71b039f0039b37d1ee8177d33dbf2a7eab8c8411
SSDEEP 49152:FQAhw6PhLf/kEdL4/JwFuoKOhaGlRvaU2IH4uXBbiEwkpOwfMqgJaJql:FQAhw6Plf/kEd7ClQ4uXBbF
MD5 SHA1 SHA512 SSDEEP

Submit Download

libweffmpeg.so

Path /data/user/0/com.baofeie.app/lib-main/libweffmpeg.so
Size 5KB
SHA256 42ded6c4cd21b9ce1882a36efd9962baaa2b28e5b0d941979cb266e9fd2fe3ea
MD5 5b7f865bbe6744b7f1e72b9503a629bd
SHA1 729279a5f1012bc945454bf1839b42e7a7d4346a
SHA512 64f7545b263eb3fcd9ce5143b3115b6715506b304a950f535777b3b7cdbe5ba43c170bfa7142bb252bf26eabb3b04dae3667923b3d2ae4a5e5598438e025e652
SSDEEP 96:HLtGx4TlBPPzgdRaQWFQjsDVGQ+TwPzxHpCn75uq:ZGiBPPzgCQaieMQ7P9U7
MD5 SHA1 SHA512 SSDEEP

Submit Download

libweyuv.so

Path /data/user/0/com.baofeie.app/lib-main/libweyuv.so
Size 169KB
SHA256 e43d263f6f3eee3287123de30421c37cdaf00ce1173d326023461d40ecb205ad
MD5 90a4b2cc72e6795a590ea19b9d7be6c0
SHA1 3732f26e8d2bcb00dc101f1f620362c8534d747b
SHA512 8cbd3fd6ecdeb4db265446ee339d58cf8ee02c90848c6415611dfe7d68dc264525822747d04f70e87f1e1db05a68ea3ad999703a121b9f6b571a066d2982456e
SSDEEP 3072:mwDssHjkqt2VFbeH9D+1XOOCz/HD4UERo5RIuApQ6zqZIwhCrd/vcF:9syjkqt2VZo9D+1XOOQCm5Ge6+ItWF
MD5 SHA1 SHA512 SSDEEP

Submit Download

.push_deviceid

Path /storage/emulated/0/data/.push_deviceid
Size 32B
SHA256 636f2589f9f6836e7e6adf62b4021b5c0d8feae0ab669a6b920122c6f35ff798
MD5 7a1c2eef3fb5d9b696adc7c0023356c0
SHA1 8b9f23444c38f847a853d58b29a447ee4e2c14ef
SHA512 edae3b49dbc033afbcf906d9f6ebca65588e76fe9cafa1a2e4032337a644e398300a8b9dc169cd8cda715b365f6dead67d3e0b4b552f7068dc4242e2b99dad93
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads