Analysis

  • max time kernel
    129s
  • max time network
    184s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    06/06/2024, 02:39

General

  • Target

    99d2c029c018e5bb8ca76a7c01692b92_JaffaCakes118.apk

  • Size

    4.2MB

  • MD5

    99d2c029c018e5bb8ca76a7c01692b92

  • SHA1

    56c9f869255eb777609a6bd1e2032a4bba3619bc

  • SHA256

    50506cf771853f33a540bc6dd947f494409f656d8e10363562b0b9fd2c01e791

  • SHA512

    6ec1fd2cdd042a96f843bcc13ec3249951aa9cff37ae94199eb2db801f55047f90b3fcabe9ea5d8aa81de73fe95001a47cb4aad8d6856482d6709fbeb65bf2bb

  • SSDEEP

    98304:giZF5lhzfGl8jLMg27EHQM8Q661jiYesOnkoTsdGBC9joh0X:zZF5f+l8fhS61WtkoT6Bh

Malware Config

Signatures

Processes

  • com.netease.ic
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5220

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.netease.ic/app_crashrecord/1002

    Filesize

    224B

    MD5

    a24f1cc303c49b39a940b78a330a29be

    SHA1

    7e4701573989cb3a33a8508431d289368ca292a3

    SHA256

    48b5a43cd4389edcccdcf4361b7e4d6700113c1da83c6f7453c3a7bacfd0b503

    SHA512

    1614338fbb190dd9db56c970ebeea5f15ab43143bc0c7103631eb0b822f8323f3c5d1819ce488e7bc652e4a7bae1e0d53a78b9098f313f805be30c7b9d1ba16e

  • /data/data/com.netease.ic/app_crashrecord/1004

    Filesize

    224B

    MD5

    fc9d5e702530d0deb077413af6946aec

    SHA1

    73710c915207e891c63cd24c36f20b119ea71a00

    SHA256

    a18fdf94f14c4f2ce9ab8d2032f1fcb7c4a4e2b9d7b1c4f71cd3ce1934fe4a9f

    SHA512

    6ca490c6235d186e142471141e97df192fc5603654d0704f1e0103056a2dd441af8808a80a58d9940d510a7d8845b3929004d127d543034d575e1b2d170ef14f

  • /data/data/com.netease.ic/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.netease.ic/databases/bugly_db_

    Filesize

    52KB

    MD5

    c0affdfebc250f6e1ca4fe14a979041e

    SHA1

    2fc7425b8fb89a87ade9a76c6b47dfd7a3d1e5f2

    SHA256

    f01cf2d37321bd4d0fbce700bb1ed5afe702a2e67ef502b5b714827ea322c4a7

    SHA512

    656d8c30f59414032b052a3e5949c57fb6c9751e0ed5f9c7586a80e047f79c7e3f08915e7d71b5ba8f93519149741cb6722375d0b67c6792e37d06a60a8fa586

  • /data/data/com.netease.ic/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    2ff5c391bab40c6d5cff6f5bba2440ef

    SHA1

    ac8f56b2f0af5e993d0b34a54a028858f19d7647

    SHA256

    4a4f826d2f93ca4c48adc181b4f163a58f2fcf0b20e8abcbbe080581f54eb488

    SHA512

    1aa26cbc2d69373e63cf315155027f205b6c1bb003e81b4ba046b2cd20c0303dd9611113235eba4bdcc23f394b434b28485df4d4a81b36871be5dd28fedd732b

  • /data/data/com.netease.ic/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    4a8bc9ff585faa7f52efb655b1e48d83

    SHA1

    efe42d75b5de08d4d9a3f139992bf06b3364d88c

    SHA256

    03939c4d6225a249f1625b59bb1e179d150dd506784c6be5d234da6c89ec6208

    SHA512

    58de9393f673a8774f026671a86727b64f7bd9b5625639acb998f43852c46aa1255b5e6f0e5794e2785a4be834135a555bb3ff819ca897549b532da5a79a600c

  • /data/data/com.netease.ic/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    4c98e3f2a074420cc3ad56cbd44ddaa8

    SHA1

    cfe1a9763f5b658c8981c91287c2e142fac3afd0

    SHA256

    8fe6b0429a535a10335d85879e53c6cef15aacb8faf6b2c379bb8144d96b80a9

    SHA512

    609fd63422c8ba995c9973314d43d97aa3ddeb4ed46429c6f9840ed3a96b844f6e7405b9d720aa7050c8a99765005e5a2f11bf8a711a7917a13e2b1f39358bdc

  • /data/data/com.netease.ic/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    10c24303dded875965ed04e736516a9f

    SHA1

    60b2fa1f39b6e0a302c820721bb1ad0a50ee407f

    SHA256

    5ff708d6e257c7375f8c692309aea0f872366e02864e4dd8e2cced910691e67d

    SHA512

    61d57e2b9e826c8bb7384e0d0b49bf8490d06535e23779cf3a169857597505d7c8418009c492625898674c122450c500e3f8db236f00d8e2390cd19bc35a0dab

  • /data/data/com.netease.ic/databases/bugly_db_-journal

    Filesize

    12KB

    MD5

    a5f13f6bc6d75a685257af697ed9fb8b

    SHA1

    9fefb3591e4fe5c2f99cd3144da0591e4c1f9711

    SHA256

    44497dfbcf02600156793b66a27579be95276f46d791181ba59743d062b9e543

    SHA512

    d6453eb34c408d048c0fbe366b94542aa5c610fabd9af2485e862cfae62b348cacead9c30b4ae0826944a779f0e9f1f128fb694a6534607a5f4b0b935740fa9e

  • /data/data/com.netease.ic/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    a21da4497ad49073874a7f25105d2625

    SHA1

    f2052739f2d34f6d3393bd6eb5dbaa207903c4b9

    SHA256

    cbedd441fbf5ef712e7a2e4107816e422d46f42df95df9086068a49a86685d02

    SHA512

    8734b26eaef8ea1e89de1c39fd471564ebf6df023225b9409ada00588270efedcaa4ce8dbef33ba96484a3e1a6b4662c28cae6b5292eb520413b3c7bf9ae62d5

  • /data/data/com.netease.ic/databases/cc/cc.db

    Filesize

    36KB

    MD5

    0908e924aa236931dc7166fef6e00862

    SHA1

    7782648d6d8f6e835bd47058d4852932c096a467

    SHA256

    38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

    SHA512

    3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

  • /data/data/com.netease.ic/databases/cc/cc.db

    Filesize

    36KB

    MD5

    67c12933d1e0e63d9801a6aa43092ce7

    SHA1

    b6936908554e4a1986b8eb08289e2d3545e8ff74

    SHA256

    abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

    SHA512

    db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    bd5ebb8870f15da0c70b2cd429d6f2b2

    SHA1

    972f3094e92e5da747a419edfbe009bb5acc5ebe

    SHA256

    77dfe2c038e084da2d17920960cf975f25fbab5334a5c419cdb79c5509194a6d

    SHA512

    66415e9d60adb1bc1c3175a0f892f55beab7fa70114cc085075a018577c2038dc9fdf524efa1187dbd3fb55d3744976440c6d822c132c6078f9da7c23ed6e9c7

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    22794a4700c9d25506e8e21802e4d11b

    SHA1

    915e19f9abba9cdec63add69de34ab5509d1af38

    SHA256

    00ee9c4372dae808070b03ca577086b1b2fdf8bae40c7ed15a8356bc48e802f7

    SHA512

    8f44acdfb9435239d668cb492ace8d8ab06194fba78d5e345c154133daf45096f03f8ce345a7d2ae2df08c50d61840014fbd9d6e68e644dd8a3baa122c3b2f93

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    8acb9fd18fd7ab5e3800d531940fb2ef

    SHA1

    01a241835f29be256cc453e3b372009f48413cc8

    SHA256

    b2fbf41dc03bc99db3fb5d54f5e608ec023de43a902badb8116891d0b4ee38c9

    SHA512

    b28eb03f8808333a5e6ceae31ebbfe1531e40b6739123f9e392f517441f2c361019b8fe30d7a3be2b576c0280151938f683c8b10b3d566ebb9817427cd3049dc

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    54f02c96555628dd2ae0ad53fe066e65

    SHA1

    bef63501b21c788de64bc5d820c8087547c64e64

    SHA256

    07ef03d3459c53716c977ad6defb25429a522544a97aedfadee2554ae8e94214

    SHA512

    4ee17ffc3dfe1b9b7246ea12f0f33f2edab8c3f01c94fc23445b4483c9e99d29316c4cb64bca7b421a01df00b5c694bee89e8c0f35ab2f9802c8b6f06052f4dd

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    209a2cfa08ed09c971b421d59dfb86fe

    SHA1

    2a231a7d9739625d2126d27a1758bd1fdfb4909f

    SHA256

    abd00d4d4564f938cc47060310776a6d7d91035b670e6de712270aae415bc96f

    SHA512

    047a319dd496f70e62f51145ab863eeec942cb8dd700d904f5ba9fed507ada0df0488b7061f73b70ed2a885fb5a7f34b214b4546cf87dea84b42a212feaf2578

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    821b74fc55ac10e7344815b14bab46e6

    SHA1

    79f311be4d4ef66f029812747c65a8727f9ae379

    SHA256

    f6a34407429a498b71ea5271b48d8c9a41c28d1970329bb4fe4db48d43ef6f0c

    SHA512

    8aa221f451cbec42bf2038404b81ee3c689ebc60145a031f3dd673ba2e67e6e4061c6660abefe8bd170fe716907104890ad1ac838f60cb91d98c3a3de23a1a67

  • /data/data/com.netease.ic/databases/ua.db

    Filesize

    32KB

    MD5

    8643476a608fa8133f678d43527aa8fd

    SHA1

    4ac41ac15951160161b2ee2c252fba1f784f4253

    SHA256

    a5480790c4a570651e76977506dd05dca5b6aaa51f407845df64891f95d23d84

    SHA512

    d69f7dcdc712cf97e5d190826e534cb55f8b527681fc7c6063a64950859f8acc1e6b1258bfb1c8662af99de0a0d6edb2f0f2e050391ad270f339dc21d35ec15f

  • /data/data/com.netease.ic/databases/ua.db

    Filesize

    32KB

    MD5

    38564ad4c73e5619bc2264b0c44997a5

    SHA1

    e55f6fe1b20347ad4cd58d77af0b0feb149f63d0

    SHA256

    1820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8

    SHA512

    30d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d

  • /data/data/com.netease.ic/databases/ua.db

    Filesize

    16KB

    MD5

    212af7b762eedf10380b906328a11193

    SHA1

    6ac74dff3f850c67eeff8e33abea665e5d54f039

    SHA256

    0d6b9c399bae2beb9f27a704ea59ce4fac031a41de2e59498101866326d61cbb

    SHA512

    61258f38f7164fea60cd8f4213ed79cc96b152c958aac628f145cdd2adf845fb356c605671fbc575fa448dee43166372c1dca190ccd24e95b7218ddcf6be7350

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    512B

    MD5

    3074fe4e61be5a92d427f325d1cb74c5

    SHA1

    2161572f3e0d5912a45f09e4835317d8597db84e

    SHA256

    e7082147f4270849e3f2564a45da9e1fadf0920471e0de69825e14ed471b8c3c

    SHA512

    ca5a1609fbcd95f5f2fc839ce1d4db4ef1ed68356202a0373528593fe1c33223d4132bfddc8a3dee68d7b0746e1c09c023452b2bce8e949f9f6c4e307fd2cc29

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    8KB

    MD5

    ea015f6f9420e947af35e94604c6bb1b

    SHA1

    598848adb2dc1abc6612a33e27743a19f4b12588

    SHA256

    a91daed9654b009d1b2d1b5c389ee339c06039183aebd793f65afbbee4f0bd19

    SHA512

    950d1f3f1cbd464da9a4ce609bab8dd0c426277fc7980dbcb7e08ba1b1f65796a25a496fc08074047e9376d1fe949182010da1e4820e15912cae3a6d7f4b0ff1

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    8KB

    MD5

    df108bb8e7eb727948038e1b6b3b4b01

    SHA1

    5d4c09095105977ecce74ac469e3211d9aafed07

    SHA256

    1996db587e61cd898fe6c1ddc280d0c0dbd58c0401c6b03de9b3215de01a41ca

    SHA512

    d97d0a7084aa25891837b61a6db2114d478e7077e264ed9bbe9dacf4ea7a4aa30dd35e504dea4473e2d55d622f8548a8c9b16e06eeb8c35ffc295f820043e06c

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    16KB

    MD5

    8076f6b320d7a78b2b03a197f685b378

    SHA1

    f984b7a84e67bb7f9a759617f06df0f357d49639

    SHA256

    664032c8473517e2a4e830c72379cfbbbff0d81f7eceaddf341b7f0b720cafad

    SHA512

    ac3f711f64f9becbcc3878c270113b8ea8d78ffc64e8d3d1f72d878d5731fead9d31437541e3d659bbcc05e161ec67b59327a29cae1256c62c3de99cef94463c

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    12KB

    MD5

    5d6706c68fc980bac751d1f6e88232ae

    SHA1

    a035cb30cfb9ed23c2a3f42b20a7518ab1557b93

    SHA256

    db3e239157011b8f35a8e7d9f0ed1b789850133c304a38a7c1c6366fdcdac7e3

    SHA512

    5f4d40fd682ad2211814ef43c222655de0422c361eac9cb14e1e9069508ab8f0bb120fb881ad9775be4e930c8e3b642ed1cd98a841750ffc56641d3a7d280c94

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    8KB

    MD5

    e2abe6809ccc2708e96eb27a98f8b68d

    SHA1

    4bcba3043d11e067028602822167d4c9bf6521f1

    SHA256

    c0bf87e3943be2180a1283d3c8f46cbcb83262e168a75941d9be8a400c3482f8

    SHA512

    fbf13b4d7825bc088d2293c5c1682706bd3c124fbfa5a8fbd9f9780ccb141a01bc9563e91a20ca5e63ffb5bc1169449babb6a9e96bb76c6266b4216c037b5d2e

  • /data/data/com.netease.ic/files/.imprint

    Filesize

    938B

    MD5

    8207ad80f63e35e035bc0bc8544a2466

    SHA1

    e3bab4e7c2994e81bd3fa58bb67e3849dff50cbc

    SHA256

    623fff635768f8f9d3a1eb549ed7996c0d48e0afe1a19f018f7a3f503375bf16

    SHA512

    38f417fb6977d1f49ea96f54bd44f7f1ad75278183fa4faf28df9c6d7d18cc344c7c3469c41082bb57ddba81bc7b942b1d3e1917eff53c740f3bfd991e0a2096

  • /data/data/com.netease.ic/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    825b3fb1fc63ec4eff767ae7b076ca65

    SHA1

    07c8b3ef274a1baf0844d3d281ca920a85f67a5f

    SHA256

    962c5eb2eccadd23aa69b38d363e5b1b8b2244e0ca20dd9c93068b71b1b7e35f

    SHA512

    a0859b990fad00b874960d984f3520e0c87c396c0ad9d2517c326b3d6a08e74edf435f093ce5a97d4193333fb6d152c091271c15df76e49a7a2c8867b7229e3a

  • /data/data/com.netease.ic/files/exid.dat

    Filesize

    61B

    MD5

    41bbc0164d1b3c2e2b523e15c5113558

    SHA1

    9f3a78ba3d1d60319c31c670fdd876c43970b485

    SHA256

    eac351a9e2a5d08e17294ba4e4961fd38cb264a773efa95753a5dd2bcbb47313

    SHA512

    830ba9e35bfb5f9622c5ba7800a0d101586aef2a90e2e8ea36a8098dbfcf60d97b6c861cc6449e831cb7eff461a63ca905e6dae96b02ddb1255e27675e6db59e

  • /data/data/com.netease.ic/files/umeng_it.cache

    Filesize

    433B

    MD5

    cbc1ea2eb480defe5393283eca08285f

    SHA1

    47cbd5682ae837f74ccc61f5a6f67f5e296f0fcf

    SHA256

    818a7969ba62626e5f2dc160c0b59988b1679cf59e8ec69781c756accf4ca203

    SHA512

    282874e8a93455a4a824ff7ee957afe3625cefc638f9ca6222152d6b9b4237e9a772bf01962b9ebcc593ba2ffe408fa593309ad74499badd56f1c4fe16497167

  • /data/data/com.netease.ic/files/umeng_it.cache

    Filesize

    220B

    MD5

    45ba9252862d2706a6bccd0073048929

    SHA1

    4289bb0f5f7490398bc9909211f91a89db215738

    SHA256

    17e5658e716eca1664daba77b371dadc0a58ef7c465d4c4de993dbdbc6efa558

    SHA512

    0339a405a60e88b2e812aaa7fc59a461e674c9c68becec3d3e75049d00ffed2706f44926a9979dad718f24e131d14432a05317fe903dcf48750104f1467a1662

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    135c96429f1cda07299fb2879c6a2e7b

    SHA1

    e32d9f27bd4abf0b1c6a8d697fdfa1827c63a111

    SHA256

    776310903decab129ca9027931d23c46514b1ca3dfc7ac61d58ae31e9901551c

    SHA512

    943e12f7e99411136daa130ebd376342d9087b5f25690a14ddc7204d4cb75d6cd0e276f4c822bb32d46725393c647c00769a78200587acf90094c4815560e472

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    213B

    MD5

    e3edf3ab9af730a3071798d3477370e5

    SHA1

    c116393d6a3dab4b59d6fc7d5ae40b0ff59c5248

    SHA256

    3b0284d3cfff1d6f3ce9fe080e9810eec30a2e26882f5653bdd7ea1d631f27d0

    SHA512

    9be6bc9e1cf3d007617501851ac85b2d0ddd1bcf096c0ec6142bea100b9349e542e456f3a55b54c7d10d26c88016e9177991732670dcbb181f80d249af0d34a6

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    d561d447315b28e246eefb77bfb32a38

    SHA1

    1c445a68d19018ca55c5240f18b701fd30e89b50

    SHA256

    f50f66cff8f232423472fc46a83c3d7be6bfe47833715117450fd0f4fe7c9b92

    SHA512

    10e79ea2337536aa68efdec63ce0d17e1d72b23120e9ef57bfe7aff4a0b96f5869aeb41fe0b871194c9c22fbcb5d8973021f6dc04c4051e4a80a0aebd3e6ab46

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    911431f4d9cfabcaa1397c5f1c346765

    SHA1

    78baaf7ffe88dfe4b9c1384d83d9f8e76aee25e6

    SHA256

    74e73a0d3cec90b789f9426b2b3f9a3426c99425b12a7f1c5e8a4989a623d623

    SHA512

    ba92613e764ee1176dc7db262e781b29ce9edaebab54c09554c458ab53e2ebd33c7b99092e4507c306d1dcdff1424921e463028acedbb3f81a39d25e31f247da