92bbb8c79ee7b636dd2b691635db8a67e04f695259469bf7373e5194bf6d27df

Analysis

max time kernel
138s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
12/06/2024, 12:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a0bcff985c99dcee51476fad9cc71879_JaffaCakes118.apk
Size 17.8MB
Sample240612-p45evavhra
SHA256 92bbb8c79ee7b636dd2b691635db8a67e04f695259469bf7373e5194bf6d27df
MD5 a0bcff985c99dcee51476fad9cc71879
SHA1 ecbe683ea356165bfaf679ce0a3b96327fdbea56
SHA512 84683a45d3984466ec30c55a9038a751dd95cf7ab5ab27a1e35624de16276eaffcfdf98b380d217e10158796b55c43d0ecaa3656eadd399d412e0efcbe4d12a4
SSDEEP 393216:dZ0EUudPlUuFnGNEeLe3388qVrON8Z9iv1wRBLBMPfgFdlkZRh:K+muFGun7o9eGBlMPUdlkfh
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.jinanyouxi2.game

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jinanyouxi2.game

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.jinanyouxi2.game

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.jinanyouxi2.game

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.jinanyouxi2.game
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
PID:4219

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

UserDefault.xml

Path /data/data/com.jinanyouxi2.game/UserDefault.xml
Size 101B
SHA256 277cb1f2497aa348135d70b6177df00afb355c8df7e505c205cea4981cc20d02
MD5 fc51528b9a1037d18cf03f8b2fd3f4c0
SHA1 cc6bdde213d17f29b7d9468b3000554eb6e39c3d
SHA512 590b6553356c8a45894b2f2c2717f36cd42fece6d4f32667e7b4273146c59ce40b055008af04bf99ecb7df6ed5b5587d3ff72413c4ef305eb89066cfd123a204
MD5 SHA1 SHA512

Submit Download

UserDefault.xml

Path /data/data/com.jinanyouxi2.game/UserDefault.xml
Size 129B
SHA256 114f44f4587cf00746516abb5b4c813de22e70eb8553d1366cc4154aa698028d
MD5 24c67c9e788772c72a6e79cf0319fc2f
SHA1 db24658332c9338280f4444dcc685788a76883a4
SHA512 b70c5631d61145caa94563d045de73d2e26e2811d89a257e00b7b87d39747988bf3698565a8632fc94000ff0dc4cc288eafaaff87c192f24213a8309424a67fa
MD5 SHA1 SHA512

Submit Download

UserDefault.xml

Path /data/data/com.jinanyouxi2.game/UserDefault.xml
Size 159B
SHA256 a95aca4bb633060cbd56c696b2d68bcc8d79e74808d1fd576e6ece1030437f43
MD5 a28b23cda6f5183abed2e13e5713aba1
SHA1 9ebc9d145c30830126c450b855b804eb491607f1
SHA512 76c1208e10a3787a5323da9cbe2cd89daba330ae5c2127c40a4ed3ec8fdc2d8ff3d0b470f56b164b63bc148e437e48dab20d492984ef760420c7110eccc63ebd
MD5 SHA1 SHA512

Submit Download

UserDefault.xml

Path /data/data/com.jinanyouxi2.game/UserDefault.xml
Size 185B
SHA256 49bc35a5068a5fef19f1da636afb5503ad86719ef1df2c6a8c12743462129982
MD5 eabc5911075708e6b4b6a94f9bec34f9
SHA1 fd9e2b147effe850677f7fa8486aaa174141894a
SHA512 db664873b33436a7f995cbbb00caef01f1b460dfb34964ed590a0ef9b343565c0d537cf24fa00c584948bc2fd0a412ad91531ee373fa7715bac363331c094a8d
MD5 SHA1 SHA512

Submit Download

UserDefault.xml

Path /data/data/com.jinanyouxi2.game/UserDefault.xml
Size 3KB
SHA256 75bfcb66976a5459cd2590c96ae9a1e4fc44f732938cdc196d38e139df476ad4
MD5 58efac8b4a2e1738cd14c09157bb9eca
SHA1 07169d87859f3957ab280055a4325a1b1137f895
SHA512 9f8a0458b9dafb5f2f88b6ad1988e6c7524a0334541a8576a1b57cf112965ef61e31f2049a3ac19beb86f6d60ef55c5a371c64449a12aba5949875e0704b5b4e
MD5 SHA1 SHA512

Submit Download

UserDefault.xml

Path /data/data/com.jinanyouxi2.game/UserDefault.xml
Size 41B
SHA256 8d5bfd20db452314b315192d7160e28bce53c777c98a31aa6df7c93345a692eb
MD5 4a8226e4211ccb4cb79f54d4ee35a55a
SHA1 7144e993ff784e4458c4d53d6f9f29930cf13fb8
SHA512 7d7480da93b3363306438c7cc08fb913e29098eb19c4f6ac40ac5282329ecd8eae77fed695822955183a4b7084d18da89c2c937af5fcdf43b3f1bd7854cc7041
MD5 SHA1 SHA512

Submit Download

SDKSST-journal

Path /data/data/com.jinanyouxi2.game/databases/SDKSST-journal
Size 512B
SHA256 d6ceed986dc49d75f1d6336bc3dacb8ba9cc8b259f397c85be430979da72a527
MD5 e9178b5b493fbaa3a8ce558a37d298ed
SHA1 462f0f8e5eb9e6620831553aae9e6b885b61bfc3
SHA512 58d8800d26c28a6868f4cb3f439f1f56b3d97577e64c96cc99db06a9fe065589537fed7c3617794615824e15af798fc31dde6645568a6ed67d11b9e908a0fb65
MD5 SHA1 SHA512

Submit Download

SDKSST-wal

Path /data/data/com.jinanyouxi2.game/databases/SDKSST-wal
Size 32KB
SHA256 ac6ce7f6650f006aa9d2240c17962c2f615776c821e8a192f3291d16dd0d076c
MD5 ff7e78963f742a27d35d30d4463cb122
SHA1 bf84f51ca0713cf1bda90c20a9df5258b938b3bd
SHA512 0b8f5f94c9cd8820ec7d5c747d1e5fcdae75544ebb561e623f943123f758740d5712d215a692cc1acf99221d8931e3f86d19189e6df32dbf06939b8044b0c355
SSDEEP 48:QByzNSP/ce/9SCAKkAWH3A4llk3g8PnAc3qtGhLTSP/I:QBC0PNFuDC4mhKPg
MD5 SHA1 SHA512 SSDEEP

Submit Download

mj_db

Path /data/data/com.jinanyouxi2.game/databases/mj_db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

mj_db-journal

Path /data/data/com.jinanyouxi2.game/databases/mj_db-journal
Size 512B
SHA256 817a44114fab0182fa5d2f44ce2dcb37fca4bd9f5a40e0d3d9298bd98d06200b
MD5 7b20bb7e160a477dfa8e5f2650c3e50c
SHA1 f286178afd706d8eadcd1fc98cfdc41bbafaace0
SHA512 91d5e5c3621e78e3abcccbf4130f3f74616a4b7a0ea714bf48917bceeea3b9bc800d9b3f0a35c2e29dd9818c0332823f2c7ead915dfb3cd7a5260d7a5e123cf6
MD5 SHA1 SHA512

Submit Download

mj_db-shm

Path /data/data/com.jinanyouxi2.game/databases/mj_db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

mj_db-wal

Path /data/data/com.jinanyouxi2.game/databases/mj_db-wal
Size 32KB
SHA256 feb9e33dca41502728758bd74bd75c9795747f498af1c755bd1cabbcb29781b2
MD5 6d45ebf2423b04abbd578d1e99af97e3
SHA1 127564436b98daf0389f2a662e522cb4adb2f980
SHA512 4b5c454607830c90496f18f3dbb3780d4ae73f39efe97236f0315b866aac45afc3244b7eb1067ed2952d45b81899ab89c03406322953bd1dda4d81a4f0ea01d1
SSDEEP 24:K5uZzSQzyGSP/zVuy7jezi+uGSP/ztuq:7Z2QzNSP/RuzzrBSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

gaClientId

Path /data/data/com.jinanyouxi2.game/files/gaClientId
Size 15B
SHA256 5731c9954a05c2cecbb66d5174f929418abf3056fc7e55d28ce09ef2b245d16d
MD5 719ee992602a2c7ea3cbc5f882f2d675
SHA1 35bec8d316e237d048a3f6fe337db9909d7bd8ee
SHA512 59fcdf967f51d7506aad0dc3af7a9b977dbdf8c50a54e267095d050381484d8eb7075ee8e7ebeeb3b6a79611836e2f338c1f18b293bead58f21bd0a3a44a6705
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads