59379aa4dd91a4b346a125561ef27ccdc8a12e8a1a88cf88c7746f9ed37e559c

Analysis

max time kernel
4s
max time network
136s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
06/06/2024, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
99f7fa8e3e29edf07399d68e31fe1136_JaffaCakes118.apk
Size 30.8MB
Sample240606-e68j6shf56
SHA256 59379aa4dd91a4b346a125561ef27ccdc8a12e8a1a88cf88c7746f9ed37e559c
MD5 99f7fa8e3e29edf07399d68e31fe1136
SHA1 194dac31c5df728461d97c652c22733b76fe639f
SHA512 8d2e36447fea4ca676b1abdccbe41ff38e3b39f0324e6a051865da8fcfc37ea4b79cce4554d1763cd3bada7279645b059b7097d554a2e699f212d43d7065dd39
SSDEEP 393216:uKfOhKeiMyW7iKJ70Y+x/CK2IulFlmPVuhx2sUBIKz1Epg0UNZVEEh8xkVZukD29:uWOhKd07iKh/+xaFPUG2sXg0UN3EPxFd
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery impact

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.sg.dljz.qihu

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sg.dljz.qihu

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.sg.dljz.qihu

com.sg.dljz.qihu
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4573

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

talkingdata_app.db

Path /data/user/0/com.sg.dljz.qihu/databases/talkingdata_app.db
Size 12KB
SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
MD5 171aedf968e17a2744d2585715606cb9
SHA1 bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA512 78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b
SSDEEP 6:l9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdeWRmBEyPbsOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

talkingdata_app.db-journal

Path /data/user/0/com.sg.dljz.qihu/databases/talkingdata_app.db-journal
Size 512B
SHA256 8d86f38b0a69bc18a8f42087f4ca3d94e93fbc05817c8b9983cb5550be66edf1
MD5 97153f8ddfaf4fc28522bace084595cf
SHA1 c3724c8a05e21bb25145e3c99231967582f6d269
SHA512 270cd95c25a3733686f2de2e05f45b62339256f9f782fa35f7818f4d918e6a3b70ad6e0d588422285d7159ba76ddf3635fc83151570d8e90fcc6d1d891274fd4
MD5 SHA1 SHA512

Submit Download

talkingdata_app.db-journal

Path /data/user/0/com.sg.dljz.qihu/databases/talkingdata_app.db-journal
Size 8KB
SHA256 b0407677e74dc6258b024d9366adaacaa1604679a5054e1713ffcf655f55f554
MD5 361548c420bf4dfcf7956414dcd6d82e
SHA1 e2a35b77d6821e0cca87ac5b89755314465a8db1
SHA512 8d85e56b26dae1687d98908f1746e30046045bb0f9fb2c276c967a817870eb430a5d8931b4d4c97435ce3b5fcbdf068bd085387bcfb32a56b104512dbbd8d0b0
SSDEEP 6:FlmHn1NlkWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKXE:fSkWqLiuWdYRmBEyPbeE
MD5 SHA1 SHA512 SSDEEP

Submit Download

talkingdata_app.db-journal

Path /data/user/0/com.sg.dljz.qihu/databases/talkingdata_app.db-journal
Size 8KB
SHA256 ddc33ed2f2e2f3efb392657616cef6c6769141317ee3e716cb2a674c315df99a
MD5 38f2a586bcb989ab87d3806c7e580fa9
SHA1 274cb1cb3a3003974e820bb50eacf02af7751afe
SHA512 7a90918b09fce698fa9dcc5593c25e16b2e0006d0e0552086c9ddc2cc6d29364b82246c07ebb8be80b4be72cee28e65ab429e5bf686d80bcdd6c9964c5e5852c
SSDEEP 6:OOPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKwPyK//:OiqLJdeWRmBEyPbpyq
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/user/0/com.sg.dljz.qihu/files/TDtcagent.db
Size 32KB
SHA256 1cc267e936cb60a6f6504af5440c5b6381769a5c9f98eeb1791b958ab286997c
MD5 a449420e195e611cd13ded3556005b0b
SHA1 e0294f326d26e0fa7076ca9b502a8233b13b90e5
SHA512 4b5708d2e26a6171ac03834181be5ab094d462c107b80da57e43215a6a149bc7c893abd8c0f4d70b7b7810a1a6fe0d454c1649b2b040d24ad99d1f957e684874
SSDEEP 48:T3xeYTDHY8qlBaUd/gpTSWCAPXAD5D878H0lcbP3av932vxm:Ntg8ql8Ud/gpWWQ5D878jz3av9325m
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.sg.dljz.qihu/files/TDtcagent.db-journal
Size 512B
SHA256 7649bb6698d952ed2f1a779b339042657deee68c2f943d4f04fbb46f2ca8bc14
MD5 718427326255de0308c4adff034dc702
SHA1 48414e871218db232e1d38860024b9984ffb450d
SHA512 d1f786d9c9cb38daf07ed728ba9fe0aa2ceb31100a8151e9f78d75a05a92d43fc918616d517d4a900f01a35caa01ac13267a03a36983f039128ff99fdf86f806
MD5 SHA1 SHA512

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.sg.dljz.qihu/files/TDtcagent.db-journal
Size 8KB
SHA256 3081433ed328ed0986b45a5c8175582abfaca404bc3277f792414b8e72f2e0bb
MD5 9646312081d6453064e55feec229aa78
SHA1 e572f72a9c668cc6ddc7f417a0ef07f619b2f410
SHA512 28cc83ecdd9ef6b86320dd914723420be517f71b4b66d41d17a229b4bcad6847a1702868bcd5e3ee06e20e52244dde30e1c02a48ea4a32332023b358c5032779
SSDEEP 6:7+/l9Xl4n1/Rg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKyn:7+tL4qLiuWdYRmBEyPbR
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.sg.dljz.qihu/files/TDtcagent.db-journal
Size 4KB
SHA256 9d009112960e8d5a47098589e651c982c94ae15174cb5c28117f6391e0dce029
MD5 e7b8e5fdb18cff96b386569ace6369c4
SHA1 a64c67e6b923553ddfdf9c87a45bb6eea0267012
SHA512 b7efab4fa6367a3f3681913fcab6c1a338e8bd2f02af406739c38c6c419a41350317ee30f8a07b80149af5163c0e777d446a6cdd725622509dc3d6561f0c2e27
SSDEEP 6:7+/lX4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK6wn:7+tgqLJdeWRmBEyPb2n
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.sg.dljz.qihu/files/TDtcagent.db-journal
Size 8KB
SHA256 6a039b8fcfcc3a74ace2620c01e164bdc5ba230f4495a77106da13688251e0ef
MD5 5f2489a4c5c539ee8b4db1506e3a5445
SHA1 6826f7cf9aa30d9c3f0e4dca4dc4213735b35e88
SHA512 f981e31c26dd68a03790d04a64127141f06377dfd0cce5995e5a15d26a7abdbdbda9e482a5457b94820da8d1ea460e07e88e8256436b0ac292f1aa9e7dc3f0a7
SSDEEP 6:7+/l9QTvmHPg9bNFlqhrb/kPlOERX4PBX4ogLugMBX4suuKmYs//+t:7+tDvqLmORmBEyPbXtX+t
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.sg.dljz.qihu/files/TDtcagent.db-journal
Size 8KB
SHA256 bacceef612b127868bf2b739afedcd06deb7ecdabd7cba5c8db1909a7525bf36
MD5 0440b5ef025ef1c21d935c8baf68773d
SHA1 7bea21de6dfd86528f37dcc0551b21899426cf55
SHA512 68ac9825805cfe12ca4039b950414492c84a3dd56f44ef8bd627029e9d8d751dafb2ddc7b813c4e3d8f113a7b8e8f00973f01802ea93389132c86bfa682b9c19
SSDEEP 12:7+tAZnqLyT9QyNTSFby/8UxF9/gpvRmBEyPbP9AF:7+tANqLyT7l8Uxz/gpEGSP9i
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/user/0/com.sg.dljz.qihu/files/TDtcagent.db-journal
Size 12KB
SHA256 7ee62ac9c8e60bedd1811dca2ec48aefa3b94904ac59f5c660f4618e29275d8c
MD5 a2dfef6ae5efd69bc07240442a182e28
SHA1 79c3db95d7bdda4f3981ff89218afa298b53e1ad
SHA512 9c28b9384f347cd6f3a73622681da7b813d05386cdf59f5f8fc11c5b8ac71a42f5a2a3c98bf809d142b218d750f326551ffac70dec082a26358986e9fa1fe597
SSDEEP 24:7+t8g3gpqLD3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGS6:7MZQpqHxeYTDHY8qlBaUd/gpTS6
MD5 SHA1 SHA512 SSDEEP

Submit Download

talkingdata_app_process_preferences_file

Path /data/user/0/com.sg.dljz.qihu/files/talkingdata_app_process_preferences_file
Size 21B
SHA256 f365ca78857c65a36a924e4093d46fcda6e077775c44c80c1654b299fe4a29a8
MD5 3247b42797bcd9ab724dd3c5bd9efd26
SHA1 72f33e6d44dee5e48f3b3098e39578b959102065
SHA512 15ffff3ec9b2499019cd0edd7bf87ba3b839bee2dbfbf8dc0925908aaeb778b021d488ff2f5338826dd06b45a7c767080c9a2757805cbb802b10435e8253959f
MD5 SHA1 SHA512

Submit Download

talkingdata_app_version_preferences_file

Path /data/user/0/com.sg.dljz.qihu/files/talkingdata_app_version_preferences_file
Size 2B
SHA256 5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e64244ca
MD5 4e732ced3463d06de0ca9a15b6153677
SHA1 887309d048beef83ad3eabf2a79a64a389ab1c9f
SHA512 e053886e1b797bc5a80f932302f0201265a599d82e2502d41941d6e652614ef88fa058e009094d26655f880200df12c2100f690254fd1e5bae75d7441763cd33
MD5 SHA1 SHA512

Submit Download

.tcookieid

Path /storage/emulated/0/.tcookieid
Size 33B
SHA256 ee12eda2105858efd514ae313dd41cfa2f7aab6d7e0d940f1010288f226c4a51
MD5 32ddf62cf383b0d592b9b9a1a1880763
SHA1 e2d721a4b68988e661544c252ab8c260e99d9c9b
SHA512 abf487e4e4619ed0d3d8b10708aa34071459db42d611e3543876136184c971222bec5ade924f4b3e916b3fe3c885540c06ed8c2b5a3aac6a9c0d3739bfb3df54
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads