a00bd86288f6e5e170463603fda33d5d39a4790154728ddac93351e354eddb2d

Analysis

max time kernel
13s
max time network
134s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
13-06-2024 22:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a6efbd9b35ea1efc93d1a6feab192317_JaffaCakes118.apk
Size

29.3MB
MD5

a6efbd9b35ea1efc93d1a6feab192317
SHA1

9aff1bd3ea758be31df270028318736ca4d56256
SHA256

a00bd86288f6e5e170463603fda33d5d39a4790154728ddac93351e354eddb2d
SHA512

e3a63cd562a17dc65211d21f1daee0601c6865e7c3e90486b20ee4389d5fdc62ae055a42fd21878d5754e00be3cf09088a260462611244ccd8168c0ab429c225
SSDEEP

393216:zm8oYX8zwSwECR99IFWDsPOGwROLDW2DxWHLe3hi5n6NyPsnPZqYY0hrWx6QvqRa:a+MzuQ8OO5cxELcARcomWx0PAX

Score

7^/10

discovery persistence

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.mocuz.yushushenghuowang

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.mocuz.yushushenghuowang
Queries information about active data network 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.mocuz.yushushenghuowang

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mocuz.yushushenghuowang
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.mocuz.yushushenghuowang

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.mocuz.yushushenghuowang

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mocuz.yushushenghuowang

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mocuz.yushushenghuowang

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.mocuz.yushushenghuowang

com.mocuz.yushushenghuowang
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4259

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mocuz.yushushenghuowang/app_crashrecord/1004
Filesize
236B

MD5
084300bf741cf07692e5a401eac0ccc0

SHA1
6699c2bd42820b70a42ca7e1d53e4d51fefeb2ad

SHA256
b1a5f34e7abb23a4c018c23621f78b57333e0961174f97de953e2ce869d7fd5d

SHA512
67b664c7ec08e36b95495fc4c217c34d0fe4e519032e2b4053481eeb762704355ac81173034a14f008af8c97e2b684b432023de1e09e7bdcb06e9d4950229d02

Download Submit
/data/data/com.mocuz.yushushenghuowang/app_crashrecord/1004
Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/MessageStore.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/MessageStore.db-journal
Filesize
512B

MD5
5d47d210bd383eea4b1b3e0a24a7125a

SHA1
0d7c1d67c0b1655d42544df06436e995a72b3da4

SHA256
fced00d81559f3131203ed45e94b3155980a0fef5f685ca2c730350651368514

SHA512
063528bba5d198c99c359647a0e57f2b14ca715b144cb67f6051e05169d9694e2ccfdcfc3df7c88a4e76b3c1cddcbb06668f86b18688b07e12ce82680a94929c

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/MessageStore.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/MessageStore.db-wal
Filesize
48KB

MD5
abd018da58871e6e50c48c8b3771ab5d

SHA1
6f147666730bddd78c653fe6e4cf557a6bbb18ee

SHA256
3e06b7b9b79c703235cc1f7f554f8642874a1da447fba949f7d9149cb5898291

SHA512
aff50262001bc7b2a9ca74522013d669e8110b4c4108bfb009240dc18ff3edd1c2bed3c64d7473fca50fb521fcb2e5079924320272e51fa263f066cd072ff0f7

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/MsgLogStore.db-journal
Filesize
512B

MD5
073a57908fe3820ba3130ead89c87163

SHA1
2c9261748b34c2f372ee8158edb5629d49abe97e

SHA256
cd53681e39a009b3a5c842544c907cb2785de673218a9220e3813a10a5b855b2

SHA512
642c2a36ec08c13ef566b83ba4a4b885bcd3161507b3777ba5ee773ca3aa9cb68836be21cca523f24abed6c7292290e79d66de40a83e03fd44056e763fc4949e

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/MsgLogStore.db-wal
Filesize
68KB

MD5
ce3e55a802c92e89882134cfb491ffbe

SHA1
957b499a610039a36af92a9321b27e60481342c8

SHA256
b8bf690b1ee553e55d73097688db93bacbb7b54c50b239eb3b2068139e48a188

SHA512
2609e017faa12668aded903a44165845185f03b5935f93847f2926fd77d40dd8f28b168c8b7dc6112abbd0c0af8c1f87cb5f3ebde32a1bfb6e13c2e1727aab21

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/bugly_db_-journal
Filesize
512B

MD5
6c9c44b6b8f8d93215997ad2154b8f34

SHA1
5f62345e184679c95c59770930e56689851dd0cc

SHA256
e5cc5b77ac2fb66c896a6925a545e7c518745877fce0c4233f6d3a12efda22b4

SHA512
480c3f0bdeea7e1018fc99bd9b94e8e6ea641e70c0deb5b13cd8ad4aef15009b9b1e09397fe99bbc76380c1d779df557d472a9cc940feba27bcb198c1c944974

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/bugly_db_-shm
Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/bugly_db_-wal
Filesize
68KB

MD5
b3ad00f9ec5589d23216b1801bf1a9b8

SHA1
d810a60e6bf3e46a47f40e9f369c158e8acd443f

SHA256
2483b23fb783a49b8526524dd82db478ce7a932a627293d5c3be15687fae5005

SHA512
f6ef7d2ce03c900446a71974afe92bf6a5753c982af85fb5fb12606d082cc355c9dd31a4805e6092a46e8f78062f2a61afbc75b5f5f7cce499a1955db17e603e

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/qianfan1_5.db-journal
Filesize
512B

MD5
3d2401c496f46a3c42d67313889e806f

SHA1
75923caf1cbc2695bca88d1f41768a095dbaddf0

SHA256
7bb752d008ff9e26a1e8699ae974a653bc51db8469fd6dba871598e8e595fe06

SHA512
c1c42599e464ebb7f3186bb142924e8e1abb535a0ede54b2cf2b63a2c7c74d5b372a0a95c8eceed59eba58a55e866ab20838cd8f1f4ac322d663904f2587f154

Download Submit
/data/data/com.mocuz.yushushenghuowang/databases/qianfan1_5.db-wal
Filesize
136KB

MD5
118f985a82bf621951583955d71ff5ed

SHA1
2d0e1f6b41b8de7740eff8a550fbc0cfc1e92f81

SHA256
59128baba8df6d6b6f9eda9c7a70c015d20cd02344282ee3c7eaf171e36849cd

SHA512
301ca1fb5d3186df1cf697e94a17b0394b53650937d3e3e6d4682db9f796fca411157617f3554372732b46648e01b99b2bacb9704681e65c3dda540c175eac79

Download Submit
/data/data/com.mocuz.yushushenghuowang/lib-main/dso_deps
Filesize
324B

MD5
ee880671d43964ac52ae53ca12ede0ff

SHA1
f8a68bbe247dc6752de3fa9ac0e6b7b2e979f4f0

SHA256
0d2b896d100b9eab59c69dbd236487c2788e08eaf9b7a701c232617ff0d61c8e

SHA512
d4b1cfec9969b721ccf0dd3cfd0a8e86800b224d052b14b6f572408dde6fc6c71a388d9e59e80505b6971b5a5f09481b02843e208cb2af007a9574c1c3cfb7c9

Download Submit
/data/data/com.mocuz.yushushenghuowang/lib-main/dso_manifest
Filesize
5B

MD5
c06857e9ea338f3f3a24bb78f8fbdf6f

SHA1
c5a0a2529d2deb60fec041b4fbd722a2ebe31702

SHA256
957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

SHA512
29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

Download Submit
/data/data/com.mocuz.yushushenghuowang/lib-main/dso_state
Filesize
1B

MD5
93b885adfe0da089cdf634904fd59f71

SHA1
5ba93c9db0cff93f52b521d7420e43f6eda2784f

SHA256
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

SHA512
b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

Download Submit
/data/data/com.mocuz.yushushenghuowang/lib-main/dso_state
Filesize
1B

MD5
55a54008ad1ba589aa210d2629c1df41

SHA1
bf8b4530d8d246dd74ac53a13471bba17941dff7

SHA256
4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

SHA512
7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
5f34053cb162307be32f259ef8d08bbc

SHA1
d80795e974c0661ff4a11b65e4f8bef6407664f9

SHA256
a9eeb7c069e023f1d81ff0b27b02691bdc1a4b3d7ac69ed9f801961c7c94eda3

SHA512
a8a5ca9d1c8cd9df655c25ba9479198c1d8a875106d06e4a2a0640ff1139c70fe7cfe36275218e37b8b43223ca505896770627588f4777748f40851e3977fc27

Download Submit
/storage/emulated/0/Android/data/com.mocuz.yushushenghuowang/qianfan#yushulife/core_log/easemob.log
Filesize
785B

MD5
23958b40b83c04e0eca4542f73a82bc5

SHA1
a3ced71d32e63bc7b4bdba6d69ba761919a19977

SHA256
a6db65ca9261b45820f8fd4a74bb1468e7e367abedbcf34157aa624ab2973027

SHA512
404b60f93a61832273559a827bf06f369a67e3121e5e0e041d60cc77f523069319f0476d39f4c3875aac53332c75e750b9655418a14b56caee7af289b20758b7

Download Submit
/storage/emulated/0/Mob/comm/.di
Filesize
57B

MD5
70a42cba408700f9a6c01c7941a8829e

SHA1
eab01cc2c0671538795fb0b1146017dc099d0984

SHA256
499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

SHA512
8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads