04ab0ae54df7b6be7f7998ce8ad9a58157a7d63dcd234d14a195f0f3d2c254a4

Analysis

max time kernel
7s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
11/06/2024, 00:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

9c67a33c0972bb46e539badd1eb4d40c_JaffaCakes118.apk
Size

17.6MB
MD5

9c67a33c0972bb46e539badd1eb4d40c
SHA1

da68a42d5f43138deed59413a4c098d852a9a6ae
SHA256

04ab0ae54df7b6be7f7998ce8ad9a58157a7d63dcd234d14a195f0f3d2c254a4
SHA512

27521abfe1f8ff9ca8a47f0f3dfafedfb895428f0be2df6c53758b7feb7348e4cc2eea7368fd73e622af68132ca0a851cca4d088d104b44baf55e7ae4e7a0663
SSDEEP

393216:/umLl4pD1cmE9dl27M8Fx6gxmJP57+oXAkkDbyl3h/hldJ0xSSAb:LLepD1cnPmP6bJPYo5kD+lRjrKSSAb

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yz.note

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.yz.note

com.yz.note
1⤵
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4281

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yz.note/cache/Glide/171ccd0a36b357abaea10f10f986ada01f3f491ba8ebab9b8b36ef723fd698b4.0.tmp

Filesize
3KB

MD5
44eba7e67f7c33956e2d9ee80bbed90c

SHA1
db7df298468aa7a27b5246931fe50ad14376e312

SHA256
65cd251b89aa9f905541c13a53d024879d9fa033c18d4181f6caeff397aa4595

SHA512
61acf33a0aa666a0eabeb212311e221daff5aee1024c756f0a4f72aac67d45b15882afbe8ee9f41e8f00b3658c0ea31bd5dd1dd8b729f1b63e2bce5f843a4fac

Download Submit
/data/data/com.yz.note/cache/Glide/3f15bfd89c31f8ed55e5875005db87237eb0d6d7ac531a3a1f08d1a3bdec3e2a.0.tmp

Filesize
5KB

MD5
a6efda7488daac6bc91d0490b9f97207

SHA1
1dd6678d54013cfacdb8a797f9a31bd708f5c281

SHA256
cb8e6137cd8a94701a28b4af8b41705fef48c85220533c0a334248823c75995d

SHA512
79db026ee2e9aaf135c034e5657f3299457fd9834b38677e9135302c60068dbfe383999dab624b35ca6d343d2308087bb292346656a58faf4aa7be6a4c16147d

Download Submit
/data/data/com.yz.note/cache/Glide/journal

Filesize
325B

MD5
5562c56e17cff04d1cf19b82daf1ca31

SHA1
bf0ed5b2dfc798b8388e16ab29322ead7cedfe0f

SHA256
10aa7eeaffaea327a0e7d0b21e8d523b6c1b45a769500b73871db46456972c38

SHA512
48c0a43c968cf0f60d216dd307f7646b8a38d9ec205d71c574a7fea1005e19839be88e72b810aa1a2374418d3fcaadd1660ba0b96cfd55641b63683f0bc603c9

Download Submit
/data/data/com.yz.note/cache/Glide/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.yz.note/databases/note.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.yz.note/databases/note.db-journal

Filesize
512B

MD5
aad3bb712b8ba49a35a4316234b039c3

SHA1
f6b2f119129701f33c3671c1de357f966b9f3506

SHA256
ae6ef09bb4820ad3955717b4cd1166a6ea9213f200e1e6ed9e5a2266521801dc

SHA512
c5ef48c9ac4029a44a8d7e3522d934ea424ae85df75acb8a0cac336400d392a31bff72089018fac8a2bbc9f53abe181992558bebbbc96a7e0fc950e6f08f2b78

Download Submit
/data/data/com.yz.note/databases/note.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.yz.note/databases/note.db-wal

Filesize
181KB

MD5
bd58f299971df4204ef785c2fe3af2c4

SHA1
05e25a0c5a8c65e97d96281e51cf45d47cf8d26c

SHA256
641196a0070672eadfa62107db42ae771b8859023503f38d73c373734c181e7a

SHA512
0982067ea979e4bd0ce314f804af9a3102bcc826aae1f2a98f02b65fa6f0287905f3005399225ffb99549cf149016670a0a0c6913871d33568ce8db0cd641185

Download Submit