e830df4a2e4133ca7144fa7b57aef9d56e57a5c5b8a28b17ad5965478771663a

General

Target
9c46c636c7c8c1bb78f5abd7ee7aa0f4_JaffaCakes118.apk
Size 2.6MB
Sample240610-3bg1qsvcmd
SHA256 e830df4a2e4133ca7144fa7b57aef9d56e57a5c5b8a28b17ad5965478771663a
MD5 9c46c636c7c8c1bb78f5abd7ee7aa0f4
SHA1 166728ae1c814d6f1d161f9c6607331760477645
SHA512 5f75da82ee7fcd7e84b8c907231785ee2ef3b688e4f4551af782e6e25bf82f25bb01994e38210950369459073da2a320cdfb7d520953cfeb89f16c5fdb526974
SSDEEP 49152:giOUYetdQf9M4nYp0qfbmXgAAHY4Cpze+bzxAv0F+VNkIsbhZuZv/eSxEkM:g/Mt+f9M4nYp5zDAaY4Cpa+bzuv0wVNO
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.sina.mgp.snake_sinas

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.sina.mgp.snake_sinas

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sina.mgp.snake_sinas

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.sina.mgp.snake_sinas

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.sina.mgp.snake_sinas

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.sina.mgp.snake_sinas

com.sina.mgp.snake_sinas
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5114

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1

T1633

System Checks

1

T1633.001

Credential Access

Discovery

Process Discovery

1

T1424

System Information Discovery

2

T1426

System Network Configuration Discovery

1

T1422

System Network Connections Discovery

2

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

1

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

bugly_db

Path /data/data/com.sina.mgp.snake_sinas/databases/bugly_db
Size 24KB
SHA256 536a633149a1abc0275899dfb8165ea2360ff72839f2a8a273c51e54a5056dc8
MD5 f6e602a98d1534b18e3cf4b009e2b7c2
SHA1 9206b2a3363c329715afcd19cb98c85759ecc36a
SHA512 c84b6297389e455c868c776c338dd51114c66759396047af7808005db36e86943fce1a985d3cb7cdfcfad6258f9c5089836707d54f0433ab0e731f342f60c6d5
SSDEEP 24:TLNoXvp8lBz3k9bKlGSzd1+n0RcBWRBWKm:TWpqzUNtSJ140RcAjm
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db-journal

Path /data/data/com.sina.mgp.snake_sinas/databases/bugly_db-journal
Size 8KB
SHA256 ad951b663baa0ab78c3deaf9d348b33b0448375fae289a1e59da8b87e78420e7
MD5 91976b52e5bc283b0caf848eadac108f
SHA1 75d0bc303cc16eb3a308191e38e5ebdf12e53fc6
SHA512 ad674f2869592df2ec2f6cff4168e2367b1a8f6c8d516cb8ff486b0d8ba5bcff04345fa4c8012938acc3f63b40713874fe859cf21cda3877e1b78e3454546dbc
SSDEEP 12:7+tugqLWbKoXR8Mp43eyNBhl3k9w6K+RmBEyPbDQ:7+tugqLiKoXvp8lBz3k9bKlGSU
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db-journal

Path /data/data/com.sina.mgp.snake_sinas/databases/bugly_db-journal
Size 512B
SHA256 ecedb3421d5efe14f39677125d5938cb146e8f9dad2598b39909c9991af5eb10
MD5 90670d1cb830519ad5fd5c031829d757
SHA1 38e2d9fb0b42ddb2ca5c0d3840a90aea6c9468af
SHA512 03d235a865e0b77a89666dc4c1b28733411a46a6569da4891aec0cead297f98c1f1d2ee43416f6eb45288099a0849d87e50ef1667f5153bf3850b5a1b08b3b12
MD5 SHA1 SHA512

Submit Download

bugly_db-journal

Path /data/data/com.sina.mgp.snake_sinas/databases/bugly_db-journal
Size 8KB
SHA256 c1139ad88faa84ea79a51a36f058ae784f3cfc1de4e784a03f89d425653416b9
MD5 bbb2dedff3acb7199de923367b583a76
SHA1 451a77528ebb452dd3e4bc9ee2e53a44ac0f12a3
SHA512 294af28299f47d5d76b37b44613016f1e270ad0f63bf51bd0ea29bbb64099f0978320085c8f6f415b66dcf78bfbf771a8ecd50409d60a107424fb2f5b953c9a6
SSDEEP 6:7+/l9ohn1QCpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKIl:7+tNCpqLiuWdwRmBEyPbLl
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db-journal

Path /data/data/com.sina.mgp.snake_sinas/databases/bugly_db-journal
Size 8KB
SHA256 a76c4b74fa478d25fa0c7d9d3fb30e081ca1ba254e96ca9a3a6dbfc0c85b23fa
MD5 722dc08a1d49db2559bb0e981fcec6df
SHA1 4562077bdbd75030fc3c2fc88b105e9b00c2dd77
SHA512 c38627ce7ba1ac46b0a53be8f7e3f325256cec45eb2beb0141fcc49d36bd9ee6250bd512ca2d4826bd8b890e5961c3d1231808bd56a2bca179fa67b8e09ec0c2
SSDEEP 6:7+/l9Zuell0FPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKqz/Gt/oe:7+tPiqLJdTRmBEyPbX/G1oe
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db-journal

Path /data/data/com.sina.mgp.snake_sinas/databases/bugly_db-journal
Size 8KB
SHA256 f14b252bfcbb010565b854a2ffd367f1b4b272c110770fb62592d6a4c644bfad
MD5 95da2e94c0d6d5bb340c2e3787b3c230
SHA1 2dfe6d43cd05a6e5ac1db170efd5cc48d1630d60
SHA512 94f49924cb05f78f4cb622bc6df6efe671ae73655280ae6cde7d20aef446f644d874c9ab2636da2956dc760661c9c9dcebd2e11677f82c53c3cc8b25f6229086
SSDEEP 12:7+t5WqL9oXR8Mp43eyNBhl3k9w6K+RmBEyPbSp:7+twqL9oXvp8lBz3k9bKlGSa
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db-journal

Path /data/data/com.sina.mgp.snake_sinas/databases/bugly_db-journal
Size 8KB
SHA256 edf5c79e82b9858b0e0cbd672e9affaa90eb82cfd6c3d40ed78885468881ffe5
MD5 a78e108ee9a3ab08c5c2d29200e8564c
SHA1 8112b551b21c16ada646322fb11f5f48fec57c0e
SHA512 4c9cbcb369dbab8123ea4efcba4f8d7e51c2b399b11ef8f1c3c1494e1bd25ffab0f543982bb0f6292e07a2454b9e453a873b7122127cea4060c529c12c3bed79
SSDEEP 24:7+t7hccBWRBWK+nqLfVoXvp8lBz3k9bKlGSz8:7M7hccAj+nqzqpqzUNtSz8
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads