94c23c6d48f1e07273c5354c1f12b207c74481df3e79d7cae7ec4a8e7ccdb86d

Analysis

max time kernel
132s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
14/06/2024, 12:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a9947aa1da51af85876089302ddabdf9_JaffaCakes118.apk
Size 30.8MB
Sample240614-n7676stdmq
SHA256 94c23c6d48f1e07273c5354c1f12b207c74481df3e79d7cae7ec4a8e7ccdb86d
MD5 a9947aa1da51af85876089302ddabdf9
SHA1 be747f236f75bd7172c99ff6625e4367492c2645
SHA512 e27dad5cc9c5bb0bf545f5414ad72e22e84958e2ef4f46eb67963391361e35a88b5f390e48f3048c776428b34e135053e1e9091ca9cec0962e0313c83e385a5e
SSDEEP 786432:US1q6gWX0vIcyDfBgUGqAMrNx7SYRjwMO1/Mm:SNkmpqA8bhjwMM
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery impact

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.netease.meetingstoneapp
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.netease.meetingstoneapp:core

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.netease.meetingstoneapp
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.netease.meetingstoneapp:core

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.netease.meetingstoneapp
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.netease.meetingstoneapp:core

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.netease.meetingstoneapp
Framework API call	javax.crypto.Cipher.doFinal	com.netease.meetingstoneapp:core

com.netease.meetingstoneapp
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
PID:4303

com.netease.meetingstoneapp:core
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
PID:4342

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

mobidroid.sqlite

Path /data/data/com.netease.meetingstoneapp/databases/mobidroid.sqlite
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

mobidroid.sqlite-journal

Path /data/data/com.netease.meetingstoneapp/databases/mobidroid.sqlite-journal
Size 512B
SHA256 74639b1e595d38132f4dd2dfd4b1a4e091dfdb7cce5c8c0bd9407ef58a0cca6a
MD5 4b4e456aff226b71749b449c5a14febb
SHA1 065ddad359c5ed9d1f31dd0517eb3bc91b85eba8
SHA512 027830885ebd1a695fbd333954a326d6d08a781ef3ed5638396abffa13d40d1ff268096287cdbcec197223ea6477907bd0a42a812bcc9aaeee1c2b4345d8c1e2
MD5 SHA1 SHA512

Submit Download

mobidroid.sqlite-shm

Path /data/data/com.netease.meetingstoneapp/databases/mobidroid.sqlite-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

mobidroid.sqlite-wal

Path /data/data/com.netease.meetingstoneapp/databases/mobidroid.sqlite-wal
Size 84KB
SHA256 3fdd850771d53162eb76d144cce60404289e064e7405230e42d45fcd81cee513
MD5 1360d9f0b55eea035654e2e2d97e6d77
SHA1 4040eb3fb4c5b24f89a1f297e0faf2e2eb5805e4
SHA512 510953d3ed10e8987bb6d3dfe92a93d9eb546bf53e46cbd6f1a2579f24578178d55d3fa249575c5258afc113fec13de362d2cf1d027957e3e7ef7aec5a1c7cb2
SSDEEP 48:4u3zNSP/l36lRxOGZKNhewSP/ywCwQ9NbTLAd/XDnSzOsRfkpLYmAd/XiVe1ltE6:j0P0OGqcPawC1XbAdv+zOrlxAdviEq6
MD5 SHA1 SHA512 SSDEEP

Submit Download

nim_sdk.log

Path /storage/emulated/0/com.netease.meetingstoneapp/nim/log/nim_sdk.log
Size 43B
SHA256 b7cbce29fde0cfc4c996bb0df109c65ebd0689b17c23ee6170791f5c2fe50f3e
MD5 985b30fd8728b6460f012c5bb21f6585
SHA1 24f5774c5ea525255e779799e90ca4969a9d9409
SHA512 0bd64bd6db1b6671fd8dedafaa8dc79a8c2b7094801e337c3a2820a773f8954fc16474d2fb6197a3338dba35d318caacf5120a35efcd10d37c6205ca82f543af
MD5 SHA1 SHA512

Submit Download

nim_sdk.log

Path /storage/emulated/0/com.netease.meetingstoneapp/nim/log/nim_sdk.log
Size 58B
SHA256 9ec35c62f40964192e5cea54b10cfa6d89948081da8e113b0604dd27f08b5227
MD5 2056254d231a1db840aa1096e14e8cd3
SHA1 2b61995a956dce101c16bfa1ae92d44f9aafc7e2
SHA512 260619d492cdb046d56e25e20faa807f56c39a2d2b75078be8cc4a81f7b9c590e8603959210d0521fe2202b17245b0be72ae515349bafcb35dd7730a716e2e7f
MD5 SHA1 SHA512

Submit Download

nim_sdk.log

Path /storage/emulated/0/com.netease.meetingstoneapp/nim/log/nim_sdk.log
Size 157B
SHA256 0f871bc884baf52d186f538917280f80328f60c3a3e80227b0cc22075b13f86a
MD5 2f9f51d66dd6f996d0f9b93884e0cfc0
SHA1 9b727bd77b60917542654b9ae80b48311eeac1c2
SHA512 8e78963c80193d3977848edff7a7dcd52c1ca1eafd937cfa550574fc00ae7a2220ec62d4bbf0fbffd1364b111a91814ef7547a67ede8a717985525d57b2d21f6
MD5 SHA1 SHA512

Submit Download

nim_sdk.log

Path /storage/emulated/0/com.netease.meetingstoneapp/nim/log/nim_sdk.log
Size 95B
SHA256 ec0be7bc957b708e2de833da41bab06905e7783483db9ad0c81c3a81c93a880a
MD5 7c3175cd9bd0959c62a2f6374052caf8
SHA1 dd561d4c0fdfa6f3203b9cd6188cbfa3ff00cbe6
SHA512 02643929e769954af099eacc82d1e3ec5b45200108b57f5301154c754649e91fb7d0c581e9210484d3fd8c9b656f89e9da7293bcda0c2e487167474c61dcb79d
MD5 SHA1 SHA512

Submit Download

nim_sdk.log

Path /storage/emulated/0/com.netease.meetingstoneapp/nim/log/nim_sdk.log
Size 148B
SHA256 2677f8a832a44d2f7b78e2c0f51b9d3a9c83596461a4fa7e22885585a95a5f30
MD5 e6843fdba9409941fe73a6f39569b860
SHA1 3c3dbec13adc05c5a221a049044bc904ec89131d
SHA512 b0987c794fddabf0a6dfc888711b9eeb85cc5443d2985a0d9190afbc4ee3d6061abf31ddc995d44989d5b8511046737fa06c261711e22669ac32cc35fef00ca2
MD5 SHA1 SHA512

Submit Download

nim_sdk.log

Path /storage/emulated/0/com.netease.meetingstoneapp/nim/log/nim_sdk.log
Size 151B
SHA256 f3df6ed26485a402e623dd02859d1755ab50e3d49a5f1c42724b1b629ac06769
MD5 d55b5ea3fe4857af192a9b11533d3b7c
SHA1 de189376133a0926570688bb284b550d9402be87
SHA512 156beb5fddceeefeb63cdeca9616888803e36c6ee59f070debf6ac31a035a2e58ded8c53d97525660b7e4a51f86d323cebf5081a063af1f14aa4c4093660187b
MD5 SHA1 SHA512

Submit Download

nim_sdk.log

Path /storage/emulated/0/com.netease.meetingstoneapp/nim/log/nim_sdk.log
Size 77B
SHA256 92047d0fdeb7aaec168edf38f765d7c08b51954dd667e6bb8cbc992e2963a6cf
MD5 31036919d8d35b5ca36fbb1dc1602e30
SHA1 d2e76a176564cdef1c711cbc8f6f752088e04425
SHA512 bfb01dae988349c172a5539a823234846e0a70e9e927940ae947896c3c226ad0cc804d6a0103529bf4525dc10381cf4002e0bf52031282c82ba7a718b6679bd4
MD5 SHA1 SHA512

Submit Download

nim_sdk.log

Path /storage/emulated/0/com.netease.meetingstoneapp/nim/log/nim_sdk.log
Size 122B
SHA256 32c43982462ad96c134d99f6f929abe4ed0b4cba69f95aadc152adfaac3d673d
MD5 07d45af4d1866e26964121a6c74996c2
SHA1 e5de7c7610f6680410f84cf2ed3fe34c7f8e1e8b
SHA512 dc77c4cfb699c1b5b70c4edb65cd9798c97d192864f741d6e4764ac643d973d1345bade9c17c32406992a1b07c6132ab39443e8f74d144514fd0eeb911344811
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads