Analysis

  • max time kernel
    4s
  • max time network
    183s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    12-06-2024 09:22

General

  • Target

    a02a0521554e6a3e2f600e85cd7240af_JaffaCakes118.apk

  • Size

    5.2MB

  • MD5

    a02a0521554e6a3e2f600e85cd7240af

  • SHA1

    a3c7566e8d4fa523b134fb0dfe4b511341aa1d7f

  • SHA256

    3cab376c6efa6caccae51b5a2c9f9d9d451dc9360b046cce2354b43fb96fd234

  • SHA512

    ff683e071700e1b8dde0b0052efe4a473c654d27df3efe662b88831d9bfdcf10ab89ccf4c90117cfc10aee3784b2d6efbe66611569eeca5adbcb7d7bddef9557

  • SSDEEP

    98304:oKE8xEiBFyXEiBo0bbEiBhSDmaEiB1cQEiBHqXLerM2kYXIthY+03LDumYOmeJwR:ok6iBQUiBv4iBemDiBKtiBHq7pL0EW7S

Malware Config

Signatures

Processes

  • ky.bai.woxi
    1⤵
    • Requests cell location
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4171

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ky.bai.woxi/databases/rep.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/ky.bai.woxi/databases/rep.db-journal

    Filesize

    512B

    MD5

    dc7c57fc027f3ffba3316ecfdfa5e692

    SHA1

    79c23da7f7043cd82979a4f07cd41ed32df4aab2

    SHA256

    338cc22ec0c313177ff111e2cdd468532bb940e1ac4d6bcce0505daa5bc4babe

    SHA512

    548a485248340d65aa5a14f0392da98f5f408d797fff3e08b82a5d8377ffc00c134cceb1f104daaf8cd1d262b4578e0469fbd5d0fd5c0036847e34bb5447a916

  • /data/data/ky.bai.woxi/databases/rep.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/ky.bai.woxi/databases/rep.db-wal

    Filesize

    36KB

    MD5

    6c79fc87670c0d8007df638bbeaabbde

    SHA1

    cdbe39650940e11c60f0ebe8a38aa4973910b1bf

    SHA256

    9e4b2157c4ef5f5caf9618c2958a1f1b63318fd45189bc9975a5d94646266f66

    SHA512

    e2396d799259c559aee27a43d1bb610988aab98c7c9aae3b88860a6ebb845a0db626014ff892be5d519641dea03174e4c70c5e45879fb7ef5230a175e1db19f9