Analysis

  • max time kernel
    109s
  • max time network
    186s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    13/06/2024, 14:47

General

  • Target
    a619a6b6165715489a5a29f058759335_JaffaCakes118.apk
  • Size 8.3MB
  • Sample240613-r56emstbla
  • SHA256 c05d526dc0c628d79c5b330e3194569dc8136d32ba99d76f1ec8bd76723d6b5d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.sogou.androidtool
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4473

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MessageStore.db

        • Path /data/user/0/com.sogou.androidtool/databases/MessageStore.db
        • Size 36KB
        • SHA256 a953ef381606a6d98d98f3278e94fc1d5b58a0778f8ea3e305111586b759c14a
        • MD5 SHA1 SHA512 SSDEEP

        MessageStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MessageStore.db-journal
        • Size 512B
        • SHA256 64bd5d717850fbf89fab2290fd1baa05eb11bd2dca53a4889e6110a0dadf64bb
        • MD5 SHA1 SHA512

        MessageStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MessageStore.db-journal
        • Size 8KB
        • SHA256 2efd5066ea7b54e7cbfe58a765618da46cf605724b8dc7f020af4473b5b8cb43
        • MD5 SHA1 SHA512 SSDEEP

        MessageStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MessageStore.db-journal
        • Size 8KB
        • SHA256 b540006c938b34d6dfa51f46e828933fe596a63799a51c2b27a922f61a70e5c3
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db

        • Path /data/user/0/com.sogou.androidtool/databases/MsgLogStore.db
        • Size 56KB
        • SHA256 e05b9921e91a945de71be9b409212c88b46dd7f9393b19053516bffd0c649b00
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MsgLogStore.db-journal
        • Size 512B
        • SHA256 f706575cc53dcdcf21ea28c2097d98b361e45a34acf24139d6ae8cf592981b64
        • MD5 SHA1 SHA512

        MsgLogStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MsgLogStore.db-journal
        • Size 8KB
        • SHA256 33473213d6df94364140a5affd476275be2cb4cba595089c1e0f2416210ced76
        • MD5 SHA1 SHA512 SSDEEP

        MsgLogStore.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/MsgLogStore.db-journal
        • Size 8KB
        • SHA256 df321bc26b2af9e05d00ae9e011e6f6ebd1516cac99cd3c962a85e2ca0b5b7ee
        • MD5 SHA1 SHA512 SSDEEP

        account.db

        • Path /data/user/0/com.sogou.androidtool/databases/account.db
        • Size 36KB
        • SHA256 fce3e49a589b7ccea3410cf02efbc775d988ce63ca66a48bd5bca193bd8a8add
        • MD5 SHA1 SHA512 SSDEEP

        account.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/account.db-journal
        • Size 512B
        • SHA256 ebca8425c5b4529b68cc98af37f413b8f765ec45818b7200e1c7041f4048915d
        • MD5 SHA1 SHA512

        account.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/account.db-journal
        • Size 8KB
        • SHA256 d77a8e2cc8873fdda64b2cfd6dd96cc5bf46f6a876d09a0d0f2734a947bb42da
        • MD5 SHA1 SHA512 SSDEEP

        account.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/account.db-journal
        • Size 8KB
        • SHA256 8f5ba80539005b27f8ca660c065414abafb238f48bde3def52a61a1d0ad26bf6
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db

        • Path /data/user/0/com.sogou.androidtool/databases/androidtool.db
        • Size 40KB
        • SHA256 aca8749a0a2a7a876efc293bbbc761873732bdaff57f5f88d54cd3a84b13cf4e
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/androidtool.db-journal
        • Size 512B
        • SHA256 e679145cdd223be851ee88f3c5130b2f30dffda9ed7b5a73559b7b968d5cee06
        • MD5 SHA1 SHA512

        androidtool.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/androidtool.db-journal
        • Size 8KB
        • SHA256 4d13fa9b2f277be6e66d8ec61b2c48fede00f896f372e6a9ab8b98aed84592e8
        • MD5 SHA1 SHA512 SSDEEP

        androidtool.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/androidtool.db-journal
        • Size 8KB
        • SHA256 b76619c001b9d811cf0918e60b06c2ab2a6baacf697f58fa30b85bb986d81759
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_
        • Size 60KB
        • SHA256 a83c0aa3c3c3cceec355fae16d6ffeb91616ab0c34dc3cc91768296805153d79
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 512B
        • SHA256 f566843a84fe03e15f2239d1021443c0cc36fb04878f348d1e3d826e9fac5c6f
        • MD5 SHA1 SHA512

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 39e7e3c274909d05e62582d3441a37ad84a46251b956747d7f7a8b913208be3f
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 8KB
        • SHA256 6b826e86951b9952e3bd84f6dd38d77dca25aec55de0d938f9993d6734ad56b7
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 577c62313c5bbdfe8b8fe5dd5a585ddd20403515e6d29ecaf62627b687bb712e
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 48731767fc9917231c00c731116b3946f51452f8a9a47a4889c2a3ff8d84fe3d
        • MD5 SHA1 SHA512 SSDEEP

        bugly_db_-journal

        • Path /data/user/0/com.sogou.androidtool/databases/bugly_db_-journal
        • Size 12KB
        • SHA256 6d07e2cf253245b2944ef446f50b4210d6f52113611228cd58c4de5d388d3a78
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db

        • Path /data/user/0/com.sogou.androidtool/databases/downloads_classic.db
        • Size 28KB
        • SHA256 da2f435b4c4f110c3974ce7676538bb251adbe5f3110e300e4a9203155632015
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/downloads_classic.db-journal
        • Size 512B
        • SHA256 c202b49703e92e4e07a34e8366eca848c6f76e298fcb596b1ebd596617de24de
        • MD5 SHA1 SHA512

        downloads_classic.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/downloads_classic.db-journal
        • Size 8KB
        • SHA256 7263decdad2d27b6d6fa6cb1c269f6ee3ed0c443b22eac41f96ca32555feb2e5
        • MD5 SHA1 SHA512 SSDEEP

        downloads_classic.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/downloads_classic.db-journal
        • Size 8KB
        • SHA256 5b3e0015a12452a04c4cdf2076a09f0f8609542aec0d78052c72a685e698671c
        • MD5 SHA1 SHA512 SSDEEP

        unupdateapp_v2.db

        • Path /data/user/0/com.sogou.androidtool/databases/unupdateapp_v2.db
        • Size 16KB
        • SHA256 c591383b0a5aed5fc73f97565eaceefceea39f218facb436d0073a30b8d46db8
        • MD5 SHA1 SHA512 SSDEEP

        unupdateapp_v2.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/unupdateapp_v2.db-journal
        • Size 512B
        • SHA256 59f361919672557ac714a39a2614b02f314c930a5c698944c1dfee6f7d4edb09
        • MD5 SHA1 SHA512

        unupdateapp_v2.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/unupdateapp_v2.db-journal
        • Size 8KB
        • SHA256 768afe5c9b7d40f828b12fb979280c85ed87be709ab57447099a3b0bcd49e6e4
        • MD5 SHA1 SHA512 SSDEEP

        unupdateapp_v2.db-journal

        • Path /data/user/0/com.sogou.androidtool/databases/unupdateapp_v2.db-journal
        • Size 8KB
        • SHA256 1b0024bbbdbb7c607d340a1cfc01fdadd6fadd2be0ae3d1d56a78487ebf6a1a3
        • MD5 SHA1 SHA512 SSDEEP