2f41f926b8ffe98171b3e7b89d858d46be122d0d538a01fd8b2fe879b568935d

Analysis

max time kernel
7s
max time network
158s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
13-06-2024 13:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a5e4a64775645d427914dc8d265d8287_JaffaCakes118.apk
Size

11.2MB
MD5

a5e4a64775645d427914dc8d265d8287
SHA1

c947d5ed86fb33162e23343fb62b2a9c9f45a5e7
SHA256

2f41f926b8ffe98171b3e7b89d858d46be122d0d538a01fd8b2fe879b568935d
SHA512

19ecf29e1979e815027287c442b46a76f742325a546e013db0ad92efa7c3964b7ed418e18c7d156f7172b23425755d40f084befac262b8275a7effd4c3ad3127
SSDEEP

196608:+vNJ0TWrASng30OZMlNJInbirOePvVYpSEwXu3zeR0x4cgoHoBxCtiWdmCtiqKBg:+v9gwJInWrOempSEwMeqUctiWZti8

Score

7^/10

discovery persistence

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.hlwm.yourong

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.hlwm.yourong
Queries information about active data network 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.hlwm.yourong

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.hlwm.yourong
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.hlwm.yourong

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.hlwm.yourong
Reads information about phone network operator. 1 TTPs
discovery

T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.hlwm.yourong

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.hlwm.yourong

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.hlwm.yourong

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.hlwm.yourong

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.hlwm.yourong

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.hlwm.yourong

com.hlwm.yourong
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.hlwm.yourong/cache/picasso-cache/journal.tmp
Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.hlwm.yourong/databases/arad.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.hlwm.yourong/databases/arad.db-journal
Filesize
512B

MD5
6c78e7688061ad0db035c3d3e43fc1fb

SHA1
772273edb03d8fa2923dcf4f10c2586ec722d329

SHA256
ff379d9b10e52e5946da0419d3a97ccc2057cb71202993191a385c07d13e4263

SHA512
d19f74cd720b3d9988c894db696cbee3be6bca870bd73ff9b1eb6d0c629430f4fcc82d8312b59433478a1ad27f8c143837b7c76845ce34769f81a0d0d51901c5

Download Submit
/data/data/com.hlwm.yourong/databases/arad.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.hlwm.yourong/databases/arad.db-wal
Filesize
20KB

MD5
b8a4b4ab8a3fa1c7c8c4224475ed3cf4

SHA1
086cc76ccaec6c7d181e9a7f3967010e5595f80a

SHA256
4ca3305c312014e1a714ec9edbac25db2e7544f4df260e6943d1d3d72f94aef6

SHA512
935794c1b9bfeb8c0cb6f81ccaafde32692fc7849911ea73febe9b6ea1f24e707fd0c17443a78a08e90f831e1abc3ad8672706d76d9db5b12fa6cef172ee9a13

Download Submit
/data/data/com.hlwm.yourong/files/CMRequire.dat
Filesize
1KB

MD5
25e57636aee83606d202f04f26c2913b

SHA1
1ef0ade456ba38aa31584d0fbce647d0ba74b399

SHA256
89c56da41f0046c9e733fed330d2636d623510c217f72c2d025df3343dc66783

SHA512
3a8d294b8be98abe4d18116cbf7c16d44a541d1d20dd4dfbbbf3bbd8cb7997abcbaf51790bbc1978135d888c4e89868a9a2575d9cfed65a331969de77ba07326

Download Submit
/data/data/com.hlwm.yourong/files/VerDatset.dat
Filesize
172B

MD5
caaa975d7bf4952bd5dd695ade33f1da

SHA1
119373fbb2db036712df72ec9b26c0c2840dfbb1

SHA256
d0f94264a6b5c355dbf5c0516202c732bcae471a2401542b2ca43307727a0d02

SHA512
db2acdecd236eab67cb67151032f53e51c9c04e754f3c21d74e05cacb1ea5edecbbccbd66ee760624b9cac97b8dd77f568324e8abc2b9c16aa73131db81c8b06

Download Submit
/data/data/com.hlwm.yourong/files/cfg/a/ResPack.rs
Filesize
525KB

MD5
0357e8edde36315c0e0a4f5385de625f

SHA1
2e6c6f15010e88dac5078f34e31a8ddf5e032f2f

SHA256
44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d

SHA512
497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

Download Submit
/data/data/com.hlwm.yourong/files/cfg/a/mapstyle.sty
Filesize
248KB

MD5
46a9f9a5221dbe4ff71bfcd2ee045c5c

SHA1
915cb3bc2f0096dede38afc1cd7f09c8782360a9

SHA256
ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9

SHA512
185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

Download Submit
/data/data/com.hlwm.yourong/files/cfg/a/satellitestyle.sty
Filesize
166KB

MD5
3f1348cd6165c9a66a9892565c917ca1

SHA1
96f0c939438c494cf3fd89246d458e92c0c7203b

SHA256
5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a

SHA512
405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

Download Submit
/data/data/com.hlwm.yourong/files/cfg/a/trafficstyle.sty
Filesize
4KB

MD5
6a86f30539dfc9332cd235fc48fcb62c

SHA1
5c202003f6346edb85175b8df7c460793f5512c6

SHA256
34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f

SHA512
f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

Download Submit
/data/data/com.hlwm.yourong/files/cfg/h/DVDirectory.cfg
Filesize
69KB

MD5
4e9eab735928758b860e48b2f9befd7b

SHA1
7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569

SHA256
1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4

SHA512
c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

Download Submit
/data/data/com.hlwm.yourong/files/cfg/h/DVHotMap.cfg
Filesize
10KB

MD5
c16f5ca1517683c46e02a6b71aab3c00

SHA1
2d09a048d1b8d556d89d4d723947e9e234b5e59b

SHA256
13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

SHA512
a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

Download Submit
/data/data/com.hlwm.yourong/files/cfg/h/DVHotcity.cfg
Filesize
1KB

MD5
883c30365d5d377966125dd0c079debd

SHA1
d296ec1e3f4badb6e3e6166c1473fb55d4265761

SHA256
50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa

SHA512
00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

Download Submit
/data/data/com.hlwm.yourong/files/cfg/h/DVVersion.cfg
Filesize
86B

MD5
298924848d2517a508f43ff0cc51bd3b

SHA1
b9fcde7b86653ead6deb57280a6049cf87745710

SHA256
0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b

SHA512
63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

Download Submit
/data/data/com.hlwm.yourong/files/cfg/l/DVDirectory.cfg
Filesize
69KB

MD5
65685a117c72fe8fbf5a92b07073c99e

SHA1
b115b527f74e4c291edcaab19b316a446aca8f5b

SHA256
19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

SHA512
e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

Download Submit
/data/data/com.hlwm.yourong/files/cfg/l/DVHotMap.cfg
Filesize
10KB

MD5
cc3fad9057e0940ad4d4c7ad27922023

SHA1
403cbbcd7b819733b5caf49ed2a58d654441e99d

SHA256
f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

SHA512
ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

Download Submit
/data/data/com.hlwm.yourong/files/cfg/l/DVHotcity.cfg
Filesize
1KB

MD5
1c6abcbbd253448057930ad1cc59ac75

SHA1
a5845d1c4bc87b8b4785b456d76edcb8309eda4e

SHA256
a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

SHA512
71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

Download Submit
/data/data/com.hlwm.yourong/files/cfg/l/DVVersion.cfg
Filesize
127B

MD5
d54b7b380a5ff46c78283013a07d8e0f

SHA1
f697c5f7028ba2679a96d6bc5291c38ff96d7982

SHA256
c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

SHA512
ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

Download Submit
/data/data/com.hlwm.yourong/files/ver.dat
Filesize
6B

MD5
8e31aa8d6b61e8b044ac3346e87098d6

SHA1
70e4050667039f00eb5231bd731b9f3cb5daf00b

SHA256
d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b

SHA512
2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads