Analysis
-
max time kernel
156s -
max time network
185s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
14-06-2024 00:01
Static task
static1
Behavioral task
behavioral1
Sample
a738fb2fc1c01bf18c6c2475d1eea406_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
General
-
Target
a738fb2fc1c01bf18c6c2475d1eea406_JaffaCakes118.apk
-
Size
10.1MB
-
MD5
a738fb2fc1c01bf18c6c2475d1eea406
-
SHA1
5df8da98a5f06d9bed82cafc0f1661b4c1619b8f
-
SHA256
10fae2fbf207797112d6ed28688dcc4494e668860af7e23890d07eb1040166af
-
SHA512
7d444f80d948213b09ad452f6167b1e9b4f1352e068efde4d49c3bc2264ece351c8c2ff634bb57ec779fba497db393787757150a311287959ebe6d7cf6037425
-
SSDEEP
196608:vBUjHOGKV7f96VnRhvHyWQR4/2m6+kplOamPM3:+7MVx0nDy9mX6+krkY
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.tencent.qqmusiccom.tencent.qqmusic:QQPlayerServicecom.tencent.qqmusic:litedescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqmusic Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqmusic:QQPlayerService Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqmusic:lite -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Acquires the wake lock 1 IoCs
Processes:
com.tencent.qqmusic:QQPlayerServicedescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.qqmusic:QQPlayerService -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.tencent.qqmusic:QQPlayerServicedescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.tencent.qqmusic:QQPlayerService -
Queries information about active data network 1 TTPs 3 IoCs
Processes:
com.tencent.qqmusiccom.tencent.qqmusic:QQPlayerServicecom.tencent.qqmusic:litedescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqmusic Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqmusic:QQPlayerService Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqmusic:lite -
Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.tencent.qqmusiccom.tencent.qqmusic:QQPlayerServicecom.tencent.qqmusic:litedescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqmusic Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqmusic:QQPlayerService Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqmusic:lite -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.tencent.qqmusic:litedescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.tencent.qqmusic:lite -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
Processes:
com.tencent.qqmusic:litecom.tencent.qqmusiccom.tencent.qqmusic:QQPlayerServicedescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqmusic:lite Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqmusic Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqmusic:QQPlayerService -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs
Processes:
com.tencent.qqmusiccom.tencent.qqmusic:QQPlayerServicecom.tencent.qqmusic:litedescription ioc process Framework API call javax.crypto.Cipher.doFinal com.tencent.qqmusic Framework API call javax.crypto.Cipher.doFinal com.tencent.qqmusic:QQPlayerService Framework API call javax.crypto.Cipher.doFinal com.tencent.qqmusic:lite -
Checks CPU information 2 TTPs 2 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.tencent.qqmusic1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
-
com.tencent.qqmusic:QQPlayerService1⤵
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.tencent.qqmusic:lite1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.tencent.qqmusic/databases/QQMusicFilesize
88KB
MD5e2b1496a586d72f8e807b0985b8cf81b
SHA1b6b90f7a13a5350cbef31354115342247b40f5a3
SHA256fb0d64d6b3bafc9ad254feb68b2248e157239703bcdde694b0531f5c0dfe5219
SHA5120d30ae39b74fcd33f80a1ab0166bd657ef40109e3f58fad324019e2861b462f685e40fec57e4696705494a119cef70252f0bcc041daffff6434e3b5bff9b04df
-
/data/data/com.tencent.qqmusic/databases/QQMusic-journalFilesize
36KB
MD52ec15f54647f88f102d6f66ff168a5d3
SHA1bc2a369de293f6fa9180d990f0724aca328ea603
SHA256d963ce6a60503d3d206efd4e43e6b6fc35179fbebfc5d445edacd81cda670fc7
SHA512bfff6eec402a9a134acd5b2809e667a3821f22c3d8f8bb8f9620e39154a2535ff6c987905858a3c5e4ba4aa8bce6c3cf5789b4959d94c2361cf186485e68c1e3
-
/data/data/com.tencent.qqmusic/databases/QQMusic-shmFilesize
32KB
MD5b9eee62a5d6bf6c7fc39feaceeccd0a2
SHA14543ca14c5a839b7c55032a3fc3e97234c751a01
SHA2562b1b9289702113e48870140108b98f7d3733ac37086e706b8d21470c8c82bbab
SHA51262c6c9561e9792e65e391bafbca42722e220bce2c563992df72d8d985285741abe2eee2d6c046b1c016523195d5f9fbc19731ee6cf98a0fbc845002e9f8446a4
-
/data/data/com.tencent.qqmusic/databases/QQMusic-walFilesize
100KB
MD58bb3fe16b55b566932c164ce1f64147c
SHA141b6d8dafa4a9e34f35a253d9e8f614d44e13dbe
SHA2569bbeda3381a50b3a1661178deae7835c6e50effa232ae68d1a1d0935b9c65e21
SHA512766f5a466ec58503298f8f26184f4b89392fe3849b04383df29543bd4985394a209ecf29fd44ddff3c2c13373535588980f98caaf752f69415dd63779b119eaf
-
/data/data/com.tencent.qqmusic/databases/QQMusic-walFilesize
20KB
MD5b24fe1125c105ab68fe3bd959fa6701e
SHA16d306ad3c818917f3b273c59015c78842f88ff88
SHA256f26b94a0eb455c7be9af8b29691ab14a4b37c4be5bc3cbc18abcdbe92252c228
SHA51241b6af7200331d12ccf596094ebb02136fa08594fd22e29beb2e5d0634d4ad8a9e204fe5d143a0a703daaab4dd19f851c54b26740aafd0c447337d8e93d72f4f
-
/data/data/com.tencent.qqmusic/databases/eup_dbFilesize
36KB
MD5576795343720fdd2812add03ca1c9b8a
SHA1673f1cabfe81bf66ed6b6325c921ea12bb4af9f1
SHA256cfdb7551bd1a2453b4f1b0ad2d9b37de20ecb6b571e8ebdc3839d6ee3e54a550
SHA512f05cea23da33215f0e45a5f1e926b111a189acfa803ebb66b36b99cab3a3ff788f09df072b6a455e8cc0f1f13dee1e3d38836b11542f27627f2f1e638c07dfd0
-
/data/data/com.tencent.qqmusic/databases/eup_dbFilesize
44KB
MD5136df4eca388a20532783a916c1169ab
SHA1f8606b4f62b5f754dcbffd4906d4e1525036d84e
SHA2562bad76967fde4214dc07fe1a96ca04868ac5bcf418c0cfea403ef12e99fa28d0
SHA51222b8a823aecd3534cf04e6d6b7d840a97312afa2816ba0723263af8ba30385097da87620291d7064f5aefebcc9f569be54e13ff92a836e7edbb7e95c8881339b
-
/data/data/com.tencent.qqmusic/databases/eup_dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.tencent.qqmusic/databases/eup_dbFilesize
32KB
MD5040394fe11420bc51e9a47750faaeb76
SHA1e01d0491769b52b1042b280613cb3a5748a254c0
SHA2566fff61304c4c669d39f7e57359187367722a407157e0e9939756aa1d407b3e40
SHA512a718b90f272bb329cbf9c1b688baf30b1511dc8edff59590436d082646a161560e66878f02c2852ee64dbd229e1dfbfe8c8a814684359ae7421b595cc4c1e27a
-
/data/data/com.tencent.qqmusic/databases/eup_dbFilesize
36KB
MD5fdbc603cdddcef519c144002b710dca5
SHA15a6f1ed19643e616f5d29cf7e27564bc28edaad2
SHA25683be22ac5f8293872bec9bf421b13ee9b74462ce66cdd9014778ee8f9fa7a8b4
SHA5123ea670bf5fc9ba6f70929fd7a59173500fb4d9b23ee272fa8bb3405d55a31830a24fdd36e03b3c9f622aeb7296a217ca20ce5169dd21c16cb123847ef6e17649
-
/data/data/com.tencent.qqmusic/databases/eup_dbFilesize
44KB
MD5e26745010cfe495b5973d7ccbc911845
SHA1d076ae084fd1b8c031b5dbeb067f329241dc1411
SHA25666396e5b8d67926caeff719746ac3c4a6518ed5f9d571abf01197f4af8e1b750
SHA51220dc17763fce458b222dd286d9e0292684b4afa6a398ed1c0e6de9def8cfcc4213a7a3cefb70b2757de3f01b88efd4fd818ca5982a738a4004452c0b390c7fce
-
/data/data/com.tencent.qqmusic/databases/eup_dbFilesize
16KB
MD58ae383a3109716c77f58f992104166c1
SHA1974e6e3546f8a4e87dbab854cc97380f0c1b3c22
SHA2561f0fc2a65b63d7723a5d9393dc24b52039bc7368016c7da76fd4f17422e12fdc
SHA512d53d2e4ec61baedcff1488e34c7c6319583de09444949b7df207280ecc4e80b55664a15b8e5fe6f24383bebab2a24d32eda9f2a3d3c2da96201d8fc63566113e
-
/data/data/com.tencent.qqmusic/databases/eup_dbFilesize
88KB
MD52e091aab8124fce7d30a40e6cf7186b1
SHA1e87a78c2e096e6f95822822e4248a362cf0958d8
SHA256d9e2c6db9ed6078d5102e6fccc86e169cd96b46c937e35dee4f4b108ef79e26b
SHA5120b6e8e3a20bcaa0d720d54d2c4d8c564ed906028f260b4c2ca4490108b22d75df91b9922275f162a4ee893e218d47df8aa95848493fff4218172a6bf9473aee0
-
/data/data/com.tencent.qqmusic/databases/eup_db-journalFilesize
512B
MD53b4738b146155dc0d1688c6179e1db6d
SHA17f9f48a1f75d85b674348f4bf6aedae2c10b1f68
SHA2560f5d9b3db2bae25362f52e8c005592ed691551bae300ddbdd8c3e938f5046290
SHA5123a026f60de1cf0891a9c11300a272676f8ddf4d20b484e08cced2f9709e6700c44bfec7588a4d91a5aecd3e6a6210ba89c5d89ddb512767467d82054e8812c7f
-
/data/data/com.tencent.qqmusic/databases/eup_db-shmFilesize
36KB
MD5dd48fcb4e9ffdd75a311dbba478ca604
SHA182318ede64c71d799617a5263c0d59c4642e8d2c
SHA25614b65d25628306daeab186d35e0bd473c832b7193fa5dbdc4b641b4f86afc900
SHA51284d4bdcf0faaa2a992dd5bf80eac5bf760a12e68116579c8f034b2516b703970e482442dfc1adb03eafe25cbaa7b1e888269df04c077045349df2108fbdbfa9f
-
/data/data/com.tencent.qqmusic/databases/eup_db-shmFilesize
32KB
MD521830b00a929c1a9fd9ff3ecd9e9b134
SHA163f26f6a7646e905d5671b3faad9702268ab2a12
SHA2563fad2e665e0878d6953359d6e52104b5d5ecde89317c7c8bd01c8d6c36467d40
SHA512d7e2ab9aabacdbfcc8adc66ffebd6c0b14aed87a9f3b9bea53c239e19d83286445b1584e1b40a2e93147ea778440480461fc59e72be938e338aad2a122ffb79d
-
/data/data/com.tencent.qqmusic/databases/eup_db-shmFilesize
36KB
MD53f1fabe3955bb49095df84eb8851085d
SHA17b8993baddeacb98f5468890da127df073a1140b
SHA2561b9a889376fd3ea9a1ce0b30cc4f2f592f1a8f8f06f2a15afe43c72702486e0d
SHA512adde45c892553b10e1c06eff7ec09e129a7809f4e115795bd00ebaedd8ff536dc8d37c3d87cd58052ee9ecd843e08ac75005e27234b77a0bfcce27a525e7d779
-
/data/data/com.tencent.qqmusic/databases/eup_db-walFilesize
32KB
MD5079cf0501981e7c6a32ffe09bf7f5610
SHA14c355c11f52623264a645131a81e3f67cf93fd29
SHA2561740062794ee255a712123ff393e847a55820d6919ce892ec281107d9a040793
SHA5129badc8453e7d9d775faa95c397dc0f35e20e823dfef886aeb49d70e03431dd94d1c5eca74d6af20fcc71a07424952c4cc7c5597960e7dc87cf1f7d6abbe2cc64
-
/data/data/com.tencent.qqmusic/databases/eup_db-walFilesize
40KB
MD5d20b7b572d4be10131c118f58139e0ee
SHA1308d1822fe7ae3b95b4c0418c16520676705f07b
SHA256aed380e78441d706e69dae5807f9f2516dae20581d00ffadde94cd5800404b29
SHA512d57ec1250986a022c87856c8304b1a4e3288b1cf394a1dec57b436a8a23a1898dffe7f8e17329d777035cf91bbe58a0460dba9e646ef6316d66939947ef2bc01
-
/data/data/com.tencent.qqmusic/databases/eup_db-walFilesize
4KB
MD590fb15363c6951dbbd3132fc78f3bbe8
SHA142f2d9f0657c0cf360c3233d7689a9c193869fe8
SHA256b18123e6df6df52e4e3688381881aff173c23198108432a967f953030fb951ae
SHA512a92342807ac4c7d95be01c6e2fa1b9f902f0816762e08afc0783ed084c59e3121d3c8342e9e912f161b64c4ecac1782bfbcc69bd519ce7f3c274899d094948c9
-
/data/data/com.tencent.qqmusic/databases/eup_db-walFilesize
32KB
MD55d139ca11b1e3f94367f728b23f5a7ac
SHA1b1aa741c2959cc64e72f1ee7ff30700e0ac2cfd5
SHA2567148efec1396e36f4140d76cca00008f49aa512b5634c84a1d04270f67616d33
SHA51252b8a5ad985e4202965bf09f0f997eea78d470161004db0bc21a4035981f1e7c04a8d898159e1ebcce312b6a184487eea6669101ca15700e5f071424732915d6
-
/data/data/com.tencent.qqmusic/databases/eup_db-walFilesize
100KB
MD58f6fc7383bc08bb615ef84a78c3754e2
SHA1dcc689f3caff99a3cad4f68ef5f44df1fbf06772
SHA25684382bace53652cd930c25c32979971872417b3e1dcb6a646eb290ce537cfd48
SHA512d195688f6dc2a84270aa7064300d7191325775897184ee71555ac30f7656ffdc1eecc23c336c6aa8748d9ce5ddb3efffc6168599d190b933d92fe214070d42b5
-
/data/data/com.tencent.qqmusic/databases/eup_db-walFilesize
56KB
MD53021fc5311900e046ee789c75021f9f4
SHA124d468105bf3c7a42b95295541bcddfc4d251cbe
SHA256df74fb39538560c1cce7e3f60883b5bc914289b85d2634da1e6fd3c8e55e86bc
SHA5126f5342107be8954be9551676e4580581d13bbb4149a9e513a74865607765743d18c4f932bdd34ec1f9b58f78feab8f46de1332b27f4a287d7a096131174b06f1
-
/data/data/com.tencent.qqmusic/databases/eup_db-walFilesize
4KB
MD57d291f95b56efeefcea71984cab538b0
SHA170c18867f7ffbec13d6d7006d678abd583ed79a0
SHA25644fa19b8657b5d58f34344bc9f4eed3cffd005e9de6babeaa11a4ad597e6bbe0
SHA512d5fcded1a148034eebce2afaeee30a0aeb2f59b227c5785dcfbd914799bb6be6cbeb89484f4918afc70ecf01c1d12d9d084fd44bc363cf5df3987a2d07eca690
-
/data/data/com.tencent.qqmusic/databases/localalbum/local_dir.db-journalFilesize
512B
MD5e4fee49c39aa7075f754aa93c96d9123
SHA157d1f566c1d178d62348ba2fbd7fedd15f3c927c
SHA2569f4534932d315fe65ca48c43e30028679421f8abae844bfedf4e41fa6fb2c070
SHA5128d8bee4def8b29c81b4d7c74da8e4b37414071f0fbfc864efb55cc1768811112fb11d5e1f4344b7f23ee851eb6a9bcbe4ef4ddea972cd1edfba3c0d9200bf26d
-
/data/data/com.tencent.qqmusic/databases/localalbum/local_dir.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.tencent.qqmusic/databases/localalbum/local_dir.db-walFilesize
60KB
MD5c74802a4debe17a0884d07694d87e26f
SHA1a54b69a462d9e0774394cecdca72fdc90047994d
SHA2561ed9af9bbad7912fb06aa14d3ab4d9342f4a0abc7dd0fcc6b4edf295be36694e
SHA512975828e9311a9b45dfb74e145e0a7d9f1415a800a0ac11593f9bfc2bfa0388d6309b1c86e66b17db891bba014bcef2e35a82a48a91cf3804adcc685e9fbbbe7b
-
/storage/emulated/0/qqmusic/log/com.tencent.qqmusic_QQPlayerService.log.20240614Filesize
67KB
MD5e6faeba5313ab6547a080a44b8824429
SHA13f7e648772e979df03ba77c5c577846661e72eb1
SHA2568b8e2e9939896c1c008315bc3d2ff0ac09742e3f2d3695fbf2aa8ceb59dfc652
SHA5128fdc348fd3dcda9226a0225e7b556a7d25d215cf80be653a2da3fc714d40dc7762658dffca66d230bcc4422ee9bad581286342a10797939b8e4da02f86795d4b
-
/storage/emulated/0/qqmusic/playLogFilesize
16KB
MD5383b581d6493e6a74a366573fdd902c7
SHA138d05092f8bc3d5f68ecc90dd9ecb61166da4bfd
SHA256c60fed4466a64cccda7b5087deabd5d3ed52f49ff2a00600a296646fb8b62e8f
SHA5124212fb07b646b841fb7c9e9e9558c3d30013d71a381558f2a794a0fce5fabc2b2f3ba03237f5741d9a92b636752fc38e6feae2ec613e24e8100f6a6cbf17a793
-
/storage/emulated/0/qqmusic/playLogFilesize
384B
MD51e59fa480f051eb232cf5a106f2bd2cf
SHA14a38f5ff3bc03a24b73e8b175ea77b185114575d
SHA256249f5d661440ed9a11a2164593ec53c5a43adac54de5b113ba69b251752bb8e7
SHA51216a3077663c5801d86d3797f4121ae618d796a287c1966c5e12ba65da153bcdfc10b79835a2f75f54d60f09976505b50e3295044bd47a6e5d1e517e6ffc614f3
-
/storage/emulated/0/qqmusic/qmSfileFilesize
45B
MD5cf389b1abfef1d76e5b178cb101d0656
SHA1e530f98a203fb05cd3009f9dd6d73332d876fae9
SHA25611f6267d4e27667be1c2946442af24abfe755214d4d9e93029f3bbe0a5e67115
SHA5120c3a052788e978b4ab49f1aac5c5272a319efb98c3b3ec8427b98416f537b3b7133216ac1697994a269b003eb62e4461f8c8fc4f49678334ab560f3848ac2325