Analysis
-
max time kernel
179s -
max time network
178s -
platform
android_x86 -
resource
android-x86-arm-20240603-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system -
submitted
04/06/2024, 05:07
Static task
static1
Behavioral task
behavioral1
Sample
93b41d4261b731ad4a8dbe6ba81b8c5b_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
General
-
Target
93b41d4261b731ad4a8dbe6ba81b8c5b_JaffaCakes118.apk
-
Size
30.5MB
-
MD5
93b41d4261b731ad4a8dbe6ba81b8c5b
-
SHA1
e49d891d9b114bc676473c91f48c041d98eeeaba
-
SHA256
510bb200ab22aef2103be2fb01edd02fe151b337bb0671955d89f25654ebc561
-
SHA512
2e03c2d22be807089c90a66884a268349774f7911ed6b0252d1a9f3e3e2afac5f8607e38ef60132d8a82da074b777e15d585362c942e99ddad0e2c3af4045a59
-
SSDEEP
786432:dq7DI6dARUcxKo4DclHDZvcLmxpT2eO0XEQd51JpzIFC4/K:dqvLyBxK7Dclj90cx2eO0XTdXEgcK
Malware Config
Signatures
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.KingOfTank.caohua -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.KingOfTank.caohua Framework service call android.app.IActivityManager.registerReceiver com.KingOfTank.caohua:bdservice_v1 -
Checks if the internet connection is available 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.KingOfTank.caohua:bdservice_v1 Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.KingOfTank.caohua -
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.KingOfTank.caohua -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.KingOfTank.caohua:bdservice_v1
Processes
-
com.KingOfTank.caohua1⤵
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:4215
-
com.KingOfTank.caohua:bdservice_v11⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4254
-
com.gardenia.components.update.UpdateService1⤵PID:4283
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD56feb522a36d829882f335817e69e87e5
SHA111ae38379168ea3c50512a372b3e673c71bc4151
SHA256f5885242542f26f24177f40097c0e44e7232e67cf417d9399132e46f8ae43fab
SHA51215ee5975698599075550bc9c657b9566be1b30cce1d6e40b507c53aa454e3a1149c7d56db4d83ca337e61709be12301e8823c40e77a1863af900a9535a3f6ad6
-
Filesize
512B
MD5235f5ce05db1e1ddcab0908afd7724d5
SHA1f4d09d06a9292d6071fc7be24389975e2981175a
SHA2563d5d4bc0b172d24cd550a7e5826c95863fc961d13a55a736e140a69da3882054
SHA51213ace4a7024b00691e3bd58ed4ac0383fedc37313d4e109c64fce3bdbe62942fb345f50d9f9a464cc55102f9077b984a7ee9df68f48cb806562e68aca8dc66e0
-
Filesize
32KB
MD5b8c495b21f6abc977caf0871eec6b5c3
SHA1095802d3ff31588230ae1ab7c8db906ae5097ff0
SHA256a8a308b5cea2b38fa33bfe98e86ff0da80545ebc63d2f488b8f0db256e619fef
SHA512e3c988bc029554a818582430bccdc2aa15b2e047360f82d0b2a2029f999dfe0af03f8a6f94626dc05d9392dcba9d70817a397cff89319c4af47eb98997ca93a3
-
Filesize
32KB
MD527adc8bad7f9d90fb00d88eb7ab71391
SHA18b2234b5845000525b476bf4677fefc7186cdf74
SHA25669f5f07503dabb475fa42d3e4f3bf1accdcbe75dc0bee08e8ccea9d127ed9bb2
SHA5121fe23d131a79ecc3614984101c21c2f13853e7093ac4a1f74fe83c7f74e375012a66a0d6ec7e57efdf609686e195c60a88639bd75fac44fa34309282a5a686f3
-
Filesize
84KB
MD5adf886021156ef0cc7d3af96f94471cf
SHA149d46978a6f9698f91aa5e58c233038514c87770
SHA256a91c10a1feb5ba910f02b47490f1ceb9138bec42fe6faafccc42427769241c21
SHA512e1f7af1ebe4b3cf9d8c6089cf46a47eb134e36ae084567c9fed103cb33d8258bf7270db3cf866fb19cd2606a98de3d19ce16079157258503daed760115e35621
-
Filesize
12KB
MD51fc69a55019be475c23b1bcd07b78a0b
SHA1977286af8535d4b63ef67c0a32bb8a69173f8cd6
SHA256b295b1c0a9a75098dee6582824b9379561c24618a68afafa42760e28900aee52
SHA512772f87b728de2300ceea00c8e9b0147f09dac17369a228bb473534d1deb52599062c5d67d27f3b00086d6f19d7cb99a13ef9896e764bbf3113e552539e23325d
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/GetPwsByEmail.html
Filesize8KB
MD51747cf0cecd51b6c8eeaa6960f25961d
SHA14138677a17c59bd0a4aa06edfdaab24201bbf92a
SHA256f6b629d7e68d002270665213094c2f66339dfc2616e1e67bc42a0b6d5e002b78
SHA512f21285ae4d778c6623ea5a6e8dd99dc8057a6677dbeaf3dd04ff166118af964eb00f3eecfc86d6d0421abb4bf21a68ddf188aa07fa799b22e693deca82944f4e
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/GetPwsByMobile.html
Filesize5KB
MD5fec518e88a2845439b70c35c5a9b57ab
SHA12a1cf5410f080b9de8b15d89dc21c55a9d9d1ea4
SHA256bdbd2485bff766aaccd2251f47e95daa7a4d8a192e79ef168ac1263734b1a6df
SHA512880fc545b1d53cf0ef015b1c90e5cc533aae2af7f5d046416c78f9dcdaa6c90b4892505181a4470f2499c37623741910b2624922c8c745123939559abfd339cf
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/GetPwsByQuestion.html
Filesize3KB
MD52a0569c2d3a8fab0735565a3820044ae
SHA132fdc19a85baa686148ec280b569b2bb50e23eb4
SHA2560914a34e563b40c90ae3b0070f79ca485eac121f8cffe8ff985d34bcfcf7986d
SHA5126776240a1a73e3acd62c8369a23c3d350ffb2d29784fa17276879d89a6914010310b7ab0f8185dfc8d7fd1af6bd33751cf929054ffa60dfb86cf698eb2ea6597
-
Filesize
2KB
MD5184c17c8bef84e7ea4d595c21537e927
SHA1c345b65ef6c21c2305461002575add695b9d3e35
SHA25687b4bdd2a5352633b40ff4e98cf8c093c7c49c0a93d9e9f369c0937f159f174b
SHA512997baf3357c359be1e5fc0f85b2dce94bd563f368436bcc988ae03a75d99c821c9241ae8a8713202fb7b01334536d41747114eb85fac886e7892a1c243af495e
-
Filesize
39KB
MD5716b57da30d37a222cbc28087aa1bdd3
SHA1a0f94cc4e39c124b71851d2e3162e28a630392bb
SHA256ef0e71b1df487b0cb00e34ed508882f308b6cf4f76df943cdbc81886b3c35ea5
SHA51234f17b402dd11673002211a28bbfafd57c9e3dd2f686403dd2712e059a3e320c97116bf39b8f7c97a5dc5436ad11c067014bd02518f3c4bb376d8db01b64fd55
-
Filesize
64KB
MD50af5f819e37632255c1b0a9df7096e31
SHA1f2974542365d2f92d06921ffcd19e20a7716e44c
SHA256778a0a6f823895355bdc8649871f1ff07bbc7717f891213ec376285de89fb1ff
SHA5129019a31fa6c000bd77d5209b69347c9cd033a79f93898a6649c471963a2c2305060ce61401633259a45f5a755ec23a4827eb4efa3102b6e80231ae208f0bc50b
-
Filesize
14KB
MD53a2aea1c62d578dd395444ec5fe0335b
SHA135f0f09b06c632b0eac926ec89bef7309583bcaa
SHA2566f9a49ab32419e70dbce9b93c74617f898a6248b8a85d0d2e78b514a5e4350ba
SHA51243efbef921f0ba4636e8b818f3c3973415cfe05ea63547502342ec1fd47877e497ebaecde175b0dd2504b6c23155e9d6aef385dd400e9a99dd77f2c35feca313
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/img/error_bb.png
Filesize22KB
MD5b9c56696cd8d138dfdcb079b6eba983d
SHA15ac29265f5e1d5b33bf889fa3c670950ac9efa84
SHA256d52a1d9bffdcbceaf8263217b96f94a1f54a757a7e3077f04c6c84166686fdba
SHA512022202cea4983c1b458fa4429469834d05d0b61ddd81a5acb7e8023ff93af452743522a84fd1553742ec1708ee385879d0bd1b7b8e39e2ae122232c6fd50cc98
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/img/loadingBar.gif
Filesize38KB
MD53bd33344433d9e28d4e5e7e245ea8f2b
SHA18439b250db0d19bcee28e538e7e2fd11f1b100cd
SHA256286519962754361f3809c1377e68d48ec6f70e53730903bf89cc2c06f129725e
SHA5126588b5a816235e5a7be008bc18c4183fc2a7f6c527e72d64f763e59dd19ea6b5d7e616ea65bc460b755fa90fda7bfb433532a4b8e7ea038d2a5621f75d4e34ef
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/img/right_arrow.png
Filesize194KB
MD5047276ed2f4c7bfa5d61d66c414aadfe
SHA1f3355bcabd44cde46ce49f022eed6bbf6f19921e
SHA2569212914796c220cbcf0d65af55f3bf7ef28ce4d2c2b4f998e7aaf5b230a92283
SHA512b4d068a8a419d562478d9add9684c9e20f1805d4c55f458c9cdb29ef860cb233339c0940a9d7e19ff9d047c0a58e73c9949d9a7737f8eadb81f9dff0a912b09b
-
Filesize
53B
MD552008e80bff35a4bcbbea78bf4e9178f
SHA16bbc500df291d135ecbf6b77b674178d238bc3fa
SHA25660bd388268565cd8616f21a94f4a565dc4e24f34432bac1e32b2f0a08e5b9a5c
SHA512a5b2eee72a4448fb1f5d7fc5708906792051c17a5095866284a6807aa85e24bfb50b4b6dc167e19891df73a26050efd6fc927c1a75d58fa0cd15b12d265f366e
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/js/jquery-2.1.1.min.js
Filesize82KB
MD56631a779321bc03f4a5281d3ff526254
SHA15be8bf17be5085d803dfcbe59f8d6e584b516679
SHA256797e79e220fdb3c48f6df26b879543102479491611940c8acc81a905da5c6858
SHA512ae9633aee19d0e53648a7fb1be53752d48d58fde56e927e30022ee1b0130846a7a22b0e1ff2f732cc025827a90bbbe9d2680e1a37bec3414183454cd3e25269c
-
Filesize
3KB
MD5781382202f4646294470e3096c521df1
SHA1b5f4c784d53b2dcaeb7b40936d67cec582ded960
SHA25612eeb0ac1b4a57dfd1264778ac741387ac604b7657c41b8c02a1ddcd1a51a900
SHA5121cd948eb6768a6261c40f94640fb14053ec65e0203638f621c63913437bad6546a79908b3b1c5026863858768def66ca058561ae6949e2698613188c3e436224
-
Filesize
29B
MD5b788d4239ccde9fb19e939c3664dc84e
SHA14a72004a3a65f3cfd216265dac91993c201ce8dd
SHA2562d8d7de35b37cbe06cab5127cf8ee246fe9f1ee699483e93f286953d85486832
SHA51282caaa16daf3f052504a8364caa723a3ee1a2b183b85533e8901d8e7d768b4b5c718e2a0180af68fcceae01509307cd6805bc466ec3bda44dce88d6a6c732643
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/plugin/jquery.idcode/jquery.idcode.css
Filesize1KB
MD50983bf87a977a2c07ea2fda44b949b69
SHA1c4ccb0486b4b61cf6947c5e3848fb5eb3fd4fca1
SHA256daf1c7551dc4f9fdeeb54836e3334aaa2faf455f2e0a2100ae57b36fdcccd30a
SHA51248ac0598000d78ca30e577b387f2442ea4297ffb000d9074f66f75b3d875645a4eabd10617bce550cb5611026cf47cd48c43c3c4855dc2f2b69d4c90220c3995
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/plugin/jquery.idcode/jquery.idcode.js
Filesize4KB
MD550b87507f0cef512e78bd75408e604f6
SHA1c611472a99d2a20543d3fc7ce9423145cce5ee87
SHA256965c688f241e4fda52b7fb4352a42953a96440b0030b56dc933e3480da88e094
SHA51294c4f7298257a5c43879fbfd6ff6c2b869a86028ae9326c6dffc52f50b97831d1357d4a9aaac901c00b82eb971a9379741abe63293d2d35a5de38bedd5979bdd
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/plugin/jquery.idcode/version.txt
Filesize34B
MD518c7eb81de924acd8ec1fc94e8acd4eb
SHA1e54e488a734579b7cd257f05eec0e29789665c8d
SHA256097dc176a494b3531973813fd1282f38873c4b46206b24335e59707f807c2205
SHA5125bf267fc4659756d659a8a9afc0ffa13b5ef54e96a0c0bc6d6817c8119724cdc7192bfe877496c40732eefa5d0b9f7b43c1e9faa53ec61eb35266158c0fcbfe9
-
/storage/emulated/0/Android/data/com.KingOfTank.caohua/cache/CaoHuaSDK/Html/2005012/plugin/version.txt
Filesize13B
MD5316a9e840871dcd1e4a0dda0bc77da18
SHA1bb1fa30c4d3efeb828fae4543468750a35ba50b4
SHA25645bd3b31542ba1328f8ab64c78a58c538c26e0e669b8ce916ed3728936737b4a
SHA5124d652c5d22c78690a034dfd20b99e67d7558fd3048a6e866dd3e32c53b6ae8731893c9b7105f0d80366bdebc6e80b21a21f792dbe80fdfebed3b8b7d812581ab
-
Filesize
134B
MD5973db1192014a33b674a35ea0a0eb7ed
SHA115a2f65138ab886901c3470d03a293650e24160c
SHA25648804f9791d15c957d34f9527e4b23f074e2bd4a2ed5a1e49a7a822d71dc17e4
SHA512209489f093130c0e321cf69e5fb55441732e44b6b6055807bc3a881e4011788aaa5e3a2ae7fb7dbe1bbbac518c7e4e905cd40d35720269bd1914ab396bee4f96
-
/storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat_4.5.5.db
Filesize48KB
MD52c3dfb75c002854b72c0bea1187809a9
SHA13f930851c68ac0a90f3f0ac58b9fc75b4907c497
SHA2564c350639fa0083e844ba413360fd4b0930d167e1104cc2b3070f12034b4ef566
SHA5123e672593f1045a98b8913994747e0fd0c8c3005208320b22a8d7ce03c42d4cc83544c70c859b22eaaad0df66a165fc9eda8beed53f74757b6d956ceaa0745506
-
/storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat_4.5.5.db
Filesize24KB
MD5e551877fdc1d12b4eeaff10586d4f4d8
SHA11835b1790a8ecad8ee19fb71a8fbb3790c482902
SHA2567adf39fb2bf50e81a98c8d0400a1b0f242867f48d6101516f7b4078b5d9ad032
SHA512b54180f9ba5e12082e679eba86e9eb516f8bb7471bac571f423de04ac82ee58bf34aca69af8e688a66324343b4735a9dfbd2950c2be735b73fac0332574e03f9
-
/storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat_4.5.5.db-journal
Filesize512B
MD56b8843093a103ed59d5b2a642a53fdbb
SHA1f44a7c4ce00a9e2f54c5ddb9ec01b1403225fd8e
SHA256322c5722cfdafe5afff2d2e2a2e94a006d07781cf50f3600d7dbab113a907ca8
SHA5124a2b430e74ebacbe09ab0931f1bf11bd181efe56f2da27f6ff296223b5ae2b1de994b91c0506e1e85b9e56dff548463214a6983463ec262f255676b412f62737
-
/storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat_4.5.5.db-shm
Filesize32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
713B
MD582465d487144c61b177a450dc8134d08
SHA1ada5d1a31536fe87220e6b1c78a05bd63a0340cf
SHA256f6aaad205b6d0b4b959d86aa088df831e25c3341eba269cc8e573a88d5b43333
SHA512b892b3352b9062f217077e737013a85f3cd089731ff9b013ab7f013d7cb087ddb6211f3fa086144e18d7b240c5035002ca2dc32a1015d68516e5726062dab9e4
-
Filesize
822B
MD5d0d75c448e78046ab1b35053fa4f7ad8
SHA1ca72483cc1a9f6ce88407598b5a2e592a1b71a51
SHA256261a44e89d00275173129fc3b53ca3ce5e1d101c7f4f9507a2258aee9568a8f8
SHA512cbeb0f1eeb07a8861649d693ffd15bc773eaed161736391e30bc46c9650d3862fb9b36021a672cd5cdbf6d69cecd60eb7cdedde9e22ad2902174831d6e193dec
-
Filesize
3.8MB
MD58e6cfe94172ac67b8f216baa023bd7a5
SHA1c5e4f11e2f1d0b84e5f268a7ebfd28b54dc6bcdc
SHA25605d71b179ef97b82cf1bb91cef290c600a510f77f39b4964359e3ef88378c79d
SHA512339e0ecb4b05d41ff9785f810f060993d36650f1e942f1a9077dd56889ff7702469f831543be3daeb72c1362d1f554deef9d67a9e3ac3eae62557aa1c069e3f0
-
Filesize
324B
MD50b32434a8d56d79174aa8de5ba6dc26f
SHA1692c6556849416f3395d89147636bcb6ace43e5f
SHA256e2f0343d1d5e37b11d9ac7219c3ffb6840de78380e84de024335b78768c59af8
SHA5123ea7eaa0f980bc38d354b9d9d54f2fca2c5dd0288d311c8a22eb264c60f1cde3aae766ab832fe71d74af7f7f488c516603e729496dc27428d76bea66497a98ad
-
Filesize
324B
MD5f05fdb05e16add84e0f1caf868b5afa5
SHA187ff91992c673cd32d67488f3c0a1cbf759f337e
SHA25667747809c381936b3bb6724c4040fd75c2f0085913af46a6727ba6d0c6eb0adb
SHA51205417dbd121f46d1beaecac99046baa0496f5f81a37dd33e9d921b8d63c8f67c5b4f22fdcd5e7c7dd97c31d4a95e8ddb4d61f0b093f1ae2e4b08364fef4472fe
-
Filesize
413B
MD5f952793a23bf89d63c1fad7795f00d16
SHA1e13eb18bd7636933acf3a62a74cbf919dee89b00
SHA2567aafd08278efa070c79c81b2b60624d7bb5ba3a034aba4624f60b31fbe76b3de
SHA51276a5835ec4c59e5aec7fd211e51001ba5040ee88bb03591000c9e7f48626502b29354aea4339098305a647d1fbd8bf48394cfdf8323fea61536b6656e0355aec
-
Filesize
17KB
MD58da4aff2ad4b8a084de84f0627f874c5
SHA107c73520357772382494bde602c9b3ccb779c25d
SHA2567535e59a18f4984827fb9cb7d13047a44d722ddfe23a7c7ab9ae727ad8f86e44
SHA51211723d27b3b3f76e35575cd837cbbe41069fcdb1effada5b8f4e33abafa9247d1fb9edcf4bdaac16a4699a204eaea8d285b1e90102cf0d30e3d541943d26a09e