Analysis

  • max time kernel
    126s
  • max time network
    180s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240603-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
  • submitted
    06-06-2024 02:39

General

  • Target

    99d2c029c018e5bb8ca76a7c01692b92_JaffaCakes118.apk

  • Size

    4.2MB

  • MD5

    99d2c029c018e5bb8ca76a7c01692b92

  • SHA1

    56c9f869255eb777609a6bd1e2032a4bba3619bc

  • SHA256

    50506cf771853f33a540bc6dd947f494409f656d8e10363562b0b9fd2c01e791

  • SHA512

    6ec1fd2cdd042a96f843bcc13ec3249951aa9cff37ae94199eb2db801f55047f90b3fcabe9ea5d8aa81de73fe95001a47cb4aad8d6856482d6709fbeb65bf2bb

  • SSDEEP

    98304:giZF5lhzfGl8jLMg27EHQM8Q661jiYesOnkoTsdGBC9joh0X:zZF5f+l8fhS61WtkoT6Bh

Malware Config

Signatures

Processes

  • com.netease.ic
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4544

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.netease.ic/databases/cc/cc.db

    Filesize

    36KB

    MD5

    4cfe777c9f6e7859f5efe2197401d8e5

    SHA1

    bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a

    SHA256

    c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231

    SHA512

    6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

  • /data/data/com.netease.ic/databases/cc/cc.db

    Filesize

    36KB

    MD5

    86752a4be6564d8370f2f0e403995003

    SHA1

    29f7d50675f6e59f3b808eb6dcc8619384412115

    SHA256

    50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c

    SHA512

    79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    6a3e31b3686323bf2e73a2f0de04b4e6

    SHA1

    94a4721cee31e86b4df170eecf478b5e9b93472c

    SHA256

    7c196453a2f818d23533bf468f938fbfdddc508821a66a2c30e8c43c7dd0d558

    SHA512

    27ff85aef47ade6f760130ec3f4959d473edeb26755fb564e13120b1c1225c58ca4b5aa7a8523111b6e4e50119090d10a4ac534be171333d2960e9fb27eead85

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    7700ddddebf68b9bde5ed1b087f30f61

    SHA1

    9bf01f268aa685b63cfd2cffbf62c9ee86d519aa

    SHA256

    093502287dcdf9c56d2b3086514693ae31bca13af19f80ada409561f975b15a7

    SHA512

    87915ffe2c60e315424676f83e526808a4ac359e048c7f820ac9ee8ccf9becc073d374bbff4230d26527a735f690bd4c110b7c6829c68c64f504e382d7354476

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    944fe872aadfd559204bc44f6cfe13d3

    SHA1

    080a77250d6cc3147dc944d3e35867d9bb0a5922

    SHA256

    0b8961bb7235309ffa011ccf29f70c28bb99e3066195d0403a01c2d04e7b8ebb

    SHA512

    8b829d83d36b72b6111cc030269c91d158681cbb6aa3992e4bd73e4a6c18514bd28ca5fc1bc831f1d58887c193dead250be77b24f640f5ad1bbf42ea05ceb5e8

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    8cf627fa33646e1f11b7fed0b401eec1

    SHA1

    1393d4266e65e98e0d0f0af56c05d54a0b886173

    SHA256

    6aba83b53faf1fc4f81066dd543920b580ba49be5b94949a32b8c8c28c06952f

    SHA512

    28ff6e86188747132623bb6d8fbb76f25861cb51df8f867e22424f9e38906177f1c942fa137cc0f51844cf52d9bebc78c73c205e56c0834b8eefdd492543973c

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    44cc2b82f39c94fed8d278f81a44bd83

    SHA1

    2c7f363ecda2c2d400fc38830c50f0b407c05d74

    SHA256

    aedb7318421b9fa1500f053a639e4e73de24db6fcab94d57781a9d87ae613381

    SHA512

    dc1e06f72d106be8d84c4a6ef70d6db934ccf0983ead9c05f96a48dd3651ad77b9de6d58e051b11fb347d5872ce97f68120bebd217a222da0b8f353ad88013c9

  • /data/data/com.netease.ic/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    9a4e3b8adcf857cf6c75bfb55177f8ce

    SHA1

    1f7e595fa9928bcf005d9a5d6d9978ef7486ef3d

    SHA256

    8671240a7173aba5fb4f5e8c595f75945f53517d27fd766de04d0af35ad4301c

    SHA512

    0fe271f5f8dc62073b888d80022b5baee0616246b5289159ded079f21d0eea6554969b9982c0dc9e1566dd43c6b5add063e02a6184f2e4ef03f34d90187cf738

  • /data/data/com.netease.ic/databases/ua.db

    Filesize

    32KB

    MD5

    9ead698f5dd4e6515a1d13e86fc049dc

    SHA1

    92346c01904c1c2c1f6d2a01ec8148c27def2d99

    SHA256

    ec0214918bef4f6b0a920844bdc3c66056a5d2b669a90cbac3b0a31d975a3daa

    SHA512

    25fe8ba8a6f77c964ca361ee326312d802d77baccf87bbcac2b88da081ba1c6ecd92bb88b95023b5fa6dbadfd512ed42625445d0744ddb059ea6b5115b37b993

  • /data/data/com.netease.ic/databases/ua.db

    Filesize

    32KB

    MD5

    4cac7d31fb94d5c9581893537f64c5ed

    SHA1

    96bef3288546196ac3058b5eeddbe9da1d999fe5

    SHA256

    d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5

    SHA512

    0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747

  • /data/data/com.netease.ic/databases/ua.db

    Filesize

    16KB

    MD5

    01ba2ce29dc181a278cac02d77102107

    SHA1

    d2308004953e43d503b407f4a7d2913b1cfab480

    SHA256

    44e632bd42513fa9a827123bb089c18d747c91d9ca47b300272972146ff06efd

    SHA512

    ecd4a1900714818bf8c9218453717c0dc31554c56b47cbe919da9cbcba9928e70caf8b39b47216048112287d3c9f6e88c1d25c385035aade3e5d465817f81081

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    512B

    MD5

    79b40a445f57610c54699be0d8107bde

    SHA1

    7ea38f44bb0b6f86c957b78ab78946ac20fd5d40

    SHA256

    41e2d310e9f55de559c1f839322a3cd01a77f82fdb3345fff83eaea7292c08e8

    SHA512

    6beb1b21d59c68c36d04f5d1758bf144e1309e33fd0b172d02ab906477cbdc8327cf0a9c28aab8ee98933a0c75c30c2bebb0a3f2e177ac5f47acc86253c334ba

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    8KB

    MD5

    06decca3f3fc8b8799d89c349c46e949

    SHA1

    25f3a1b8641340b3184a56c394007c5648203d5a

    SHA256

    e06c96de40347a998bc9586f9f3a9d7eb54fa10fdae707cb69a69f3eea96d569

    SHA512

    fb0a9d0ab964c609ffce1fc55d8b28e9af2f3aca4ca4f3b4bc819db9a11f67db733aa1fa2db03f497e792e619cd60a612b50a80895fd9635dcf0689f6188e8b2

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    8KB

    MD5

    66ecf390ad43580cf8b782a0ca1de496

    SHA1

    b910bf0bfd41d26c37144d86965dc0ed16443beb

    SHA256

    4ea3f10af525a99c59b4cdb07f67c69fd394b17f9ec4c84202869c2d6f59ea3c

    SHA512

    534d755ae1fd4c5dd45d37fb7fe0d3d1911587159b30a08e58a220d438e373ccb104ed56a67fa31405df29e15cf94be8e97c88e43516bb463b9df01a26522e9e

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    16KB

    MD5

    dc64857612c228f5eb8f6ca4b5d894f0

    SHA1

    ac09ca54e3fa890a69383f355cfb1f1348c9cd48

    SHA256

    fbb6da60958331103bf4dabd9287b16538ef64855e607604af4aa2e5ff926f5a

    SHA512

    a57b9f83ef110bd67546ee45ada8ef0607cb9d7ced913d35d73d81fb6702223840786c025953b2a126f3d7559e2648fbf250f792e3fcba80b010155c4a208d79

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    12KB

    MD5

    5b5a051843481049d5bd60eac7b59405

    SHA1

    c531788985fda7f431571ded7d85d76c834fe180

    SHA256

    72737675c0c3343104b6512b6d4326a3624719a31ead8ee0ef04ec2e2503f0af

    SHA512

    1596096b78ac38671402a1a5662060557ed914755004c2e12732badba89ad72c4936c8674a43aa98a1775ee1c1c9baa8ea636fc61e45b3ece68df885e7374433

  • /data/data/com.netease.ic/databases/ua.db-journal

    Filesize

    8KB

    MD5

    617c2a369230c6d84b8e7a31f87eea66

    SHA1

    cbc936c1c7a80a9780c79adb056f276e90e2bb14

    SHA256

    a04afca7a6125e08491a7bbf741911c36d1c2f37420710efa43211df34516cc3

    SHA512

    29cb244697104e55a11a95e443e6f6dd5f92b82de25a97b9fab8d0a0035f9648ff814523e94a0c1b611cd74f70f792ea7a13c9026f075c9656c7a5cfb7708e3c

  • /data/user/0/com.netease.ic/app_crashrecord/1002

    Filesize

    224B

    MD5

    6468d445fb3d674005164028ed6a41e9

    SHA1

    182de36fe7011a74597b11632858aa45c7d38ca7

    SHA256

    0d6002284270274bef018aadff252901b55c6348f3abc0fc57ec013b1b86328a

    SHA512

    f8cbe125bf19148bfba31c7fc6935f3edc8b209d9d8d86194b3a50a38892cf433bdc15858e11f3d2bd16f16bec05a87b1030e16f7b17e916657024d788bbd96d

  • /data/user/0/com.netease.ic/app_crashrecord/1004

    Filesize

    224B

    MD5

    4d791b08bb0637a6a966969f7080e17a

    SHA1

    be0a087b66ac2010aec7f83e8618b6b41d449044

    SHA256

    31635c9ba5ff1d77cbb0df3f678b9fb4f625200649beb0efffe1c847d8a72e86

    SHA512

    6b363c1ed911619ec57bf6611a550ceba1c356d5c14261312e098a368e6ef9446dee679e3f4ab53345b811a43e816851684ad357a7c39066f64909b67e87da28

  • /data/user/0/com.netease.ic/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/user/0/com.netease.ic/databases/bugly_db_

    Filesize

    52KB

    MD5

    013d184948d089fe609b7a3f6f6223c0

    SHA1

    b78612403f64dd3b1c44cee151bdfb5d0111428b

    SHA256

    4e933855518c7f68ef4cc75d34dfb266e2e33feb56cfeb508cd89af78a1dbc1f

    SHA512

    72aab99d88cb391f95101a32e07642f24b4cec42a3924e4f72647fcfbe49f1dd4cd01bb6c702c8150168ebfd4f117954760c54c432303a4621612b7ff93c2fab

  • /data/user/0/com.netease.ic/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    0ba9b70696bec641eafcca685d5521a2

    SHA1

    0dc5d2b7c5283b0693f59f06b38bfd2d7ba49202

    SHA256

    48b73462f02f4d70b164721a34fdb9fd18ffee0231ebc19d8d460c5ca09d10c2

    SHA512

    db80f4f149106d11278b3639f3893e46eaec9cc4195c98535ea9681eb87b8edab6e4cfcb4b6978946bcc560ffde12e92a2d5f704d36ac7d0f4d545e2d1cb5db7

  • /data/user/0/com.netease.ic/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    1bbd66d92d2c25e5030f66204be0cb90

    SHA1

    5a3480f53188e2350273b42ea6d44b64a7266a09

    SHA256

    54c308a8a2ba080069924a0734604635dc5d1bb3c56dc8640dfff30ac7faa71c

    SHA512

    f98878cf9b220327daf4786110301e5a8eaef4b224dc69f6825e09ea7d21c0b9c0796eb30a62ce6f19f6ceeb8d7d5accc077fba9583578ededadff1100f68db1

  • /data/user/0/com.netease.ic/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    efc3421caf3b58e238fc8001fa65af9f

    SHA1

    0fbafc5dd1b097520db148496a2ded226e5456e8

    SHA256

    d5bc965f527ed3c7a5aeff3ddc5d1d554ed54c51a66dee7032557f4558aef222

    SHA512

    7cb56840cf32c0770d0734fcd55e967bc6c0f1b220d95f0f46da8e715ef829cab7ebe31dcd8ef853c80a569330e40fb22437a3588d8b0d6dfabbc15a008ebd0e

  • /data/user/0/com.netease.ic/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    1ed284910a73c07609542b19449f7fff

    SHA1

    137104f8135460c1a2320bff8307369c5d348535

    SHA256

    bc3b85cd0de46fc6ce796307036409c6b571cc1c57b314629ced099452ca9b34

    SHA512

    77e815378b58cce57e35d066cb652230ace7987022e6c7e14f623aa9fa4b893e4bad2de2b9b519821ec80bf762c35283791945f20e7f18a0f9efb58c8c5e41d2

  • /data/user/0/com.netease.ic/databases/bugly_db_-journal

    Filesize

    12KB

    MD5

    d042338168c0e658aecd6cea5861c23a

    SHA1

    e202a119ffd4581af6c491bf089cb41c75d2ca68

    SHA256

    00c3f59d3f70f278916cef2c2567e3be53a99e3517bc5398146d3a85dc482229

    SHA512

    0abbfb87a856f6247e2fbcd9a50a37eb92c235c438fc2ef5b0326043fd39bfa6ad1aac12d8eaffded22712b3e94cef6c6a904d6753eb738cfcaaeda35f4392ca

  • /data/user/0/com.netease.ic/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    dbce135487da0c17d2fbc5d4dcf6cf55

    SHA1

    9f4a9b1deb85c22374f74109955e4a25f82ae9b4

    SHA256

    c6a4d327464199d90b13ac6507899c8dad0e1bc137ed34fdb204074fd6be039e

    SHA512

    e971094308ad2eeb995e4c0b5a6b48a71052b98f0646ea2d365f7b9b3bd0ac683bf2568d98b30b2980fade59c7efbc1bd254e6cc138bad59851c379122f5302f

  • /data/user/0/com.netease.ic/files/.imprint

    Filesize

    938B

    MD5

    daf500e0e8c07041e11476b9f259d738

    SHA1

    cdb2f9f316bb9789def3372c89854c33a784a375

    SHA256

    abc2c180333dbe62a6db801a5d65e31c0fa1a0795a874ff3eb6fd8c5bf143e83

    SHA512

    db75659c31076b9d02ca5a51cd66c8d49ca7368f93c8fce870540e5486147107de3be1bfa5b81e03415fe93ff0d8b6a2bca7cae52414c13044f801b0d8e9e8b7

  • /data/user/0/com.netease.ic/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    b5e6836e8d65c8cc28cf6dfda06259c0

    SHA1

    18d70067cba8ed09e6a5eb2565b56ffde7d28a7d

    SHA256

    0e089e9662f12cffe3b6f7e350899ef6ca9cf9133d2008effd3075b18d2be187

    SHA512

    25678045359995edc8b9191cc7d7b4b215a50985dda8f98d9d231e3abd1c98c914e1bf6f59cd4537bc1898cb1cbcbcfd1448782bd89ae6eb4e0f38a0077cc001

  • /data/user/0/com.netease.ic/files/exid.dat

    Filesize

    61B

    MD5

    41bbc0164d1b3c2e2b523e15c5113558

    SHA1

    9f3a78ba3d1d60319c31c670fdd876c43970b485

    SHA256

    eac351a9e2a5d08e17294ba4e4961fd38cb264a773efa95753a5dd2bcbb47313

    SHA512

    830ba9e35bfb5f9622c5ba7800a0d101586aef2a90e2e8ea36a8098dbfcf60d97b6c861cc6449e831cb7eff461a63ca905e6dae96b02ddb1255e27675e6db59e

  • /data/user/0/com.netease.ic/files/umeng_it.cache

    Filesize

    433B

    MD5

    712a91e4f6251d8978f4ffd4bda4c430

    SHA1

    f38b8dd658e1de2a798f526798121d410f7f6cd5

    SHA256

    bd285ee7c6d288c21d5535f03da922a88170f4584c05adbef2ad558c021cf1ac

    SHA512

    6ac89e438a4ec6ef0b400a42dab1132365fd175d805e288feebb5ad8f2732cc4ae673571ea2c761691e98f5b8f38f8ea8ac4d02b699840be92d294934426aedb

  • /data/user/0/com.netease.ic/files/umeng_it.cache

    Filesize

    220B

    MD5

    ee78dd04b6c8eec552ab5908abc15953

    SHA1

    24b3514080181aac8217bc4cff979104ab267a00

    SHA256

    fd83c5c92f04c50622de173b704373b3136e324f4ac03524ffc6fa37093f6f9a

    SHA512

    aee9f9fc8ce6554450a5e104d3b090cbff7c2e806a615f1f8d5e90658a4b19c3496f9d163e2418d67d1ac93f5976b03ef44bc6b62ec0c5836d7b8fa69388762a

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    e752fba7e2823c261817f29a3430b6d5

    SHA1

    cbd43e57b13dc9578afe9c53bac992088fdb603f

    SHA256

    7686749e577895872f5c28463cf6ab71e479ca5a65ca4d5afb17805d7bc3e274

    SHA512

    240054d7997f0ae824385e3941217753fb40afd250db899c833947cbf34b73e02502abf68f8db191c017d409bf16d877662809d7332ec9c7b7bfce9c4cda2493

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    213B

    MD5

    d91f967b35c7585eb0c77666e29097e1

    SHA1

    25ac3a50cb44f64b487a8f7da3518a9b5b6297e5

    SHA256

    bf55a9dd3862b2fdb674e2e44c6171320280c1773370065131f837146d573b1c

    SHA512

    b0c9cefdbcee827ea91eef793739cf0f882b69bacc95eea68ecc41ac91f1997d3c488de9cbec7390e40ce5d421377a1494a36cfe98b06395cab9c71492372343

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    8364daf9e8b2b994abf6cd8b9adcaafd

    SHA1

    d6ba16c7228300093299101fad6a0404b06aeca5

    SHA256

    91a3b688bb202ac8a70badde92a86c8b83ad48163e379fee19a5ae2cbea9d406

    SHA512

    36da2e55fd3db6b3abbd11a207190a3abcdd3c4304d6daeebff5b38fe671718ed377d122b8329cd0fc7aa44718ebeb9e4de9b5f2473ec06d57903a795135a12a

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    b139ae4d8e8298d0dd7cca4b69544306

    SHA1

    1804a28c4a0817a26002191f1adca4bc63c01b52

    SHA256

    8241e1c3f492d9731f69f8359591f50ac18d513a87242875950c059d41e1c16d

    SHA512

    4ea5607724ce6b69b77fe1af3f05327b436a44a54a613ea09c267c2f3f63961fb2745643d548482c5b00d518c4564f8451f14a82251151d3453ac3c264912d21