e542f150c7eaf25c2adfb9ae27a7f76056cba91f0ba5886d0c2ba5f24cd7768a

Analysis

max time kernel
3s
max time network
131s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
05/06/2024, 17:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
98d91d4e761d8bbc987a924b5d4b728e_JaffaCakes118.apk
Size 14.6MB
Sample240605-wjmgvsde41
SHA256 e542f150c7eaf25c2adfb9ae27a7f76056cba91f0ba5886d0c2ba5f24cd7768a
MD5 98d91d4e761d8bbc987a924b5d4b728e
SHA1 b65459dc9caa57ec173a59708110f7db4d469fa9
SHA512 d0bdfab887a236202b3e0c99ca71a49be3cd385095b6e5c1a14d9434c866c4722eb91fd82a6e44c5e99a254b4b658e3e4f374da568ed112e328411cba5f91748
SSDEEP 393216:LoRir8Ef0x07KvKZPSS7m61p96/kTwT+ibjn+Rupo3AY:kR88H0ey3bYGwTD3n+Ua33
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.application.sven.huinews

com.application.sven.huinews
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5217

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bugly_db_legu

Path /data/data/com.application.sven.huinews/databases/bugly_db_legu
Size 60KB
SHA256 5b74eb68abe04f3ff58299875007a0c9505c1c6620095d11279690666abbe654
MD5 4e633c0a86f6e92bf829d6a852367cee
SHA1 2163fc3d08a4ab7087678cd06d374da31f3d4d4a
SHA512 ac00fff478a5228f57b25e5e67da9528461a781c0f960af61ab6568792bfd0a3caef7053b888b9437e12a416b3fead98d6486cbb46413a49f69541597b1fac81
SSDEEP 24:TLmt+qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGS6+l5hDyjkxyRSfMKNKQQQ:TzfrQiw6uMg6/YBg72meposSmUMK
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.application.sven.huinews/databases/bugly_db_legu-journal
Size 12KB
SHA256 94e8eb158a041dc0c733cdb9ebd1272ca6ddb567c9dd76f553cce93dbec46c70
MD5 2da575ae9861ddac54f4d769bfed25aa
SHA1 5c6266fee5a498da1dbed9eb69d26a7fa10c93a3
SHA512 bb5b6aecfebb0167941b28cf5fe92f6cb00fd2f83941a8c63caaf6b994e9d2c19bb9ba3eb73de6222fa5ad3c62a7e970584c42384bae7b6a4db21c836ba2006b
SSDEEP 24:7+tCPqL1tGqqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSV:7MkqjfrQiw6uMg6/YBg72meposSV
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.application.sven.huinews/databases/bugly_db_legu-journal
Size 512B
SHA256 40679a137c34083aeb47ae53b7054498dedac070749ff22bf8a6cd6bbf70aa19
MD5 ec7eb26de001eaf9e11e7c492cbe8566
SHA1 745c688a136e9d172d04211276700a1c79b1c170
SHA512 fac4423de17f6be6eb9061442ada37b0ab5fee93b0a5c857b4718587903c7037e3557e4b5fb8526a59ab08337b09cd9509a43d888883b9f64030231249d30e10
MD5 SHA1 SHA512

Submit Download

bugly_db_legu-journal

Path /data/data/com.application.sven.huinews/databases/bugly_db_legu-journal
Size 8KB
SHA256 4f946dafa93a56b75f20fb27f328ad1e19df162de3af08b73ed237b65a9d60c4
MD5 8150362ccba34f0a5572ca369808db73
SHA1 c5d6b6dd418b6c7ff39f7d86a053aed643b80eda
SHA512 bd49c9869716d98f2fb78570d445d1ea7783f3ec817e53354f7fc0b67b16d70b6c2cd382b8fbc36b08550c39f3cd5bb280a7172853f5ca511696329f9e41f934
SSDEEP 6:7+/l9LztmHn1N/kWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKmD:7+tjmr/nqLiuWdwRmBEyPbFD
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.application.sven.huinews/databases/bugly_db_legu-journal
Size 8KB
SHA256 a4186e2fef2dc1959d292e651ebeb8b5aff31a039d92c4a1f4e7c44ae5b39820
MD5 14102389e08f4a78411af8c96458ca92
SHA1 5c6ca425a684df7665aad2a0d419c0b36d5262e8
SHA512 b4ba65eea0fa8f606ce66070cd70d3a30a66045b6bc0623ecca7d8e22598f44ff5feaf941743077122d911b9858b0ebe825fd62f984bcd10f81f5d4969d902c6
SSDEEP 6:7+/l9muMgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKbtM/ern:7+tgOqLJdTRmBEyPbYqin
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.application.sven.huinews/databases/bugly_db_legu-journal
Size 8KB
SHA256 7e5d3917ab0080f369eacc994c60d3c70e75b842476fa9ecaa34ea7a539f0a23
MD5 c279a7481c58275043753d852cc006b8
SHA1 088d882a77aaa63af85487282b520c1e0758191b
SHA512 62e5e75aa7282583a8aa7e901314d4afcd3b3df81a115161f92b2277fb2537566fe38a9644c9e634749113cfd7e7a5436cdd28bf8dd5222c3c6e8c86824c3e25
SSDEEP 24:7+tpqLTt/qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSl:7MpqDfrQiw6uMg6/YBg72meposSl
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.application.sven.huinews/databases/bugly_db_legu-journal
Size 12KB
SHA256 5ae1647614c11c48b95cf477ba0ed6479c3accc054657319cd96409590dd72a0
MD5 926825033cace55e1fdbf0a5b0c18c8d
SHA1 65375463bbf2c4f46a2249fb8cf85c785b3ccbda
SHA512 9fd62674a99a5ae6b15923f774e0f90dcf55c7e4871fabdaf6d6a62d1652e5bd0b8e1af01f1b1b5b40ece8abf8abd01db5c4e9a8bdd94d3364c87eed9685e2e6
SSDEEP 24:7+tnRqLMvtslqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSBK:7MnRq3DfrQiw6uMg6/YBg72meposS8
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads