ca38b445fc53b98e8e3acb3002bef13ea2f663db30f1f994ef833f65764418c2

Analysis

max time kernel
8s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
04/06/2024, 17:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
95b4f4e6c826cb3f0fe4248d08ea931f_JaffaCakes118.apk
Size 10.2MB
Sample240604-v6aadaeg52
SHA256 ca38b445fc53b98e8e3acb3002bef13ea2f663db30f1f994ef833f65764418c2
MD5 95b4f4e6c826cb3f0fe4248d08ea931f
SHA1 4cf641c23e8bcc37acb262ad12ca7a4aa78d80d0
SHA512 554166ba040405cf5b54d7e51dbce7e66d8cb2af5498b6a2c32020df9ea2670a59a18e6ae9d1a95f6292363c89c8d25a8944edc9ef702999b5c108d8fdff3d39
SSDEEP 196608:KeZtCtj3S+RpCt77/+RpCt77Omqz3ws+8l5STUyckZZE9sjZNw7VfOnO6WvL:l2t++47/+47Oh3ws+elycOEGqMOJ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery impact persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yxxinglin.xzid13408

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.yxxinglin.xzid13408

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.yxxinglin.xzid13408

com.yxxinglin.xzid13408
1⤵
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4307

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

1004

Path /data/data/com.yxxinglin.xzid13408/app_crashrecord/1004
Size 232B
SHA256 484a3f344f2436f4975c1b5fa8f4ae72a4527ad2843b1d4e210c53a020a30e87
MD5 044061044734cffa97d16a521dcf7eab
SHA1 ca28e5aa9ad0721c0c4be17a410345ce55814f9f
SHA512 47cca1c7a85b50f450eb4a1126476581326b047027b07aaa79ed75afc100e8c10121d5a51e6974f67a6d6fa22314a5d6daa5683700fd106db00fc55a7e3e6637
MD5 SHA1 SHA512

Submit Download

1004

Path /data/data/com.yxxinglin.xzid13408/app_crashrecord/1004
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

bugly_db_

Path /data/data/com.yxxinglin.xzid13408/databases/bugly_db_
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

bugly_db_-journal

Path /data/data/com.yxxinglin.xzid13408/databases/bugly_db_-journal
Size 512B
SHA256 1bdd2c3ac7bdff16eae059f0059abf43ca21b0e48a61d9b0fe311000854c4b74
MD5 3df3bbb4e3355ef206b5e7199dcf3cce
SHA1 89d7b85d8d6b5052172d4e4f0b30919e17514ad9
SHA512 a9316069e7a1ab44fa120dfe77040b5af701ee378b9cf16017cb9d8b05ab5754a2f5a242b1fa5ceba9bcd646484225dc192484f7ae34ae0a7bbcf811c718b913
MD5 SHA1 SHA512

Submit Download

bugly_db_-shm

Path /data/data/com.yxxinglin.xzid13408/databases/bugly_db_-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-wal

Path /data/data/com.yxxinglin.xzid13408/databases/bugly_db_-wal
Size 72KB
SHA256 728441e54f49d17cd1c7ec163f4266569c8f2c766bf4ff5ef685d7464a180510
MD5 8dd400a91e1df6a37b32fbfa609c8959
SHA1 05cf5807004112d7e198a3eb0dccd1a9c9365410
SHA512 1d28d9c9364198bdd26a799a18256995743f2e757db488886fbc944a6377449adf084474025ccd25f071e3a411ec09a9e633266a52a7b458d9d17a0e7a324efc
SSDEEP 48:VzNSP/AW85WuAriStwwuMN5meposSP/Dt8t6WxCiaKtp6dt6WxCiaK3:R0P653AzwPho6s3aKtw/6s3aK3
MD5 SHA1 SHA512 SSDEEP

Submit Download

ucsdk.apk

Path /data/data/com.yxxinglin.xzid13408/ucgamesdk/lib/ucsdk.apk
Size 37KB
SHA256 8ad31017a72b5afd54856038d992514ffe66e56b508f34897992426344f7a46a
MD5 1e5d2ae8f1e890c4182fd46f6a84f932
SHA1 7f86c7f330038b2fb2289723b483c4077edacc3d
SHA512 d08231273c8c4338917a73ceb8fa963246feaa47eb028e6faf25dffcee42fb0c7efa7e4067b96bd7427abb83bc63a0ecb6c29368167ba129e403c8bb0c4ff15e
SSDEEP 768:1MV1jZsxScAGt1Iz+2+mfoNtr9MbUPEETVKZKGefwB29qAdOKd4:2VpaxScAYIzNfatGnEIEGHg9qAQKd4
MD5 SHA1 SHA512 SSDEEP

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 d65457bdae2ca6d30826e6640456c27c34d59b9d9f824415fea6419a5fdce1ca
MD5 185e1660432517b4812035791ae3d8f8
SHA1 2dffbde748f4c8008954654a2b4cdb480a0a1e7d
SHA512 96d576523707108f0e690066b77eeb2bbc9f7d0e000f8d75a887f4135a776599ed4f4590993d2003faa57aeacd2df92d1696ca3e5d47168976568b12c5cd05b0
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 a5150bff0a750c7247d0b4bdfffafdcf1aa4d77370920769fc457a16bc6c1df3
MD5 c7d8c4a2312b76c89bb619c814f7ba95
SHA1 a0ab5b2faa7dfd8378c097a53b7371d7d9dbc54e
SHA512 5f68c137af5a4871d1cd622c9d0076f0e3279afec283814e12db0c45b8f7cc4fe53bf72736154a20be529649d0dbc0cdd618d128a9a9f6355b9bbe89d6eace57
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 167B
SHA256 b14985fa2071ca7af8aab264d2eb551ca0704246431eee30ec64eb05ab73c2c8
MD5 277133ec60e9bb0415aa4562d93a3c6a
SHA1 a943700a1ab4c635a3f905f5c67c9236dc78a5a1
SHA512 e0ddf189df0e6301ad77fc15041c23797eb4e8472684be47e92832bd9800c2ffec1846e3e3d7b049299222abf74614b084ab16e48def2ab567af9ed03dfc43a5
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads