1a86a85cf278d89cff6b23e6b1756a6750eb704e78361ac1fd0e1ee882790421

Analysis

max time kernel
9s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240611.1-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
submitted
15/06/2024, 03:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
accad0b127f72249c1dc305d580be25d_JaffaCakes118.apk
Size 23.0MB
Sample240615-ecs8dssarr
SHA256 1a86a85cf278d89cff6b23e6b1756a6750eb704e78361ac1fd0e1ee882790421
MD5 accad0b127f72249c1dc305d580be25d
SHA1 4131e8c11d13492169869ce39f37b5c27eacfc6b
SHA512 ff76e8c6b28f454623f427f43d1605f899d9864c9e7f57995468aeab3f6c8074257c218246e9b5f7688479b4cf79396533fea7efb020fd0ca18af010355387ec
SSDEEP 393216:G1Hkk7cYHxORsYFy9B3Iyt1U0giR/3LMJLcNZzK7cATr4dN+vzuERbxxr70:sET6xOrA9B4QFQeJ8x6+6Oxl0
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.dashan.dashanWater/mix.dex	4325	com.dashan.dashanWater

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.dashan.dashanWater

com.dashan.dashanWater
1⤵
- Loads dropped Dex/Jar
- Checks memory information
PID:4325

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

mix.dex

Path /data/data/com.dashan.dashanWater/mix.dex
Size 292B
SHA256 4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615
MD5 63f77f99bd2c2b772a479923bde11974
SHA1 c7632e7d301e4463fafce85f84e9c3d7da3fdbbe
SHA512 3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c
MD5 SHA1 SHA512

Submit Download

rqd_record.eup

Path /data/user/0/com.dashan.dashanWater/app_bugly/rqd_record.eup
Size 355B
SHA256 a5b996c272910273749866b800023d8d510a671c5b8e8fc4915bc627497b3189
MD5 60766207bc99823aef94ca70562a87a5
SHA1 a7554c675b9721c3d87720d503dafc0eb2ee723b
SHA512 4e775082bbbd3b108a9f04ab22603c96225d22fbb36917d6dffb6d80dffb4b1909e8faf4c0d313fcbd0b234bf67028d2e4a2a6409fdb433444bd0971c06caf67
MD5 SHA1 SHA512

Submit Download

rqd_record.eup

Path /data/user/0/com.dashan.dashanWater/app_bugly/rqd_record.eup
Size 1KB
SHA256 b6d1f558445ee24e8f981f83a414aef0b3a5d23ba2db82ad87ffb6199d8318b6
MD5 43316fcecffded7e8d554db5deed211e
SHA1 a17e68120b4761fbeaf71c28baa454beb5468718
SHA512 1bdcce76074ee3e19ade085fb0571f139c80855a95dd989096754271684f7aad2e41583af5d626fcc67f6e06f5df8bd374e6b454a7f0ecbab9ee5b1355d772b5
MD5 SHA1 SHA512

Submit Download

tomb_1718423305534.txt

Path /data/user/0/com.dashan.dashanWater/app_bugly/tomb_1718423305534.txt
Size 56B
SHA256 7fe875398dea7537a57a77c5275cbc8647aaf63ab6fd9148443b65df2e1d0647
MD5 bd0f8f8f3ad93fa07623422ec6e72003
SHA1 c3589295e7a4ddcf35bcd7a2c13bfd381783821a
SHA512 2ec3e073321262b667afbf98fe4e9f51e4c0c58baaad506b120239031f10699d699b94470bef13007bd6199df3d3b03f1eaf147c0cba5178aee7e267072b1c0b
MD5 SHA1 SHA512

Submit Download

bugly_db_legu

Path /data/user/0/com.dashan.dashanWater/databases/bugly_db_legu
Size 60KB
SHA256 14aa71fd21d8ab3aecdedd4ceed7731714cf07fc668ceb469b5f2543cb8ad168
MD5 8a5414a28c1b0124541d2162f5ec8b0e
SHA1 b35f45da99b3115824f3d3ea82a022c6c7b738ee
SHA512 4eba855ceb9c5942365286c410d83a36382e4ad98a4b2265219c42dfe116a1fb000dcbbfdf1e096e0e0b041af23a28ed6f6d1fc2b2588ecd136ad9d606be9040
SSDEEP 48:T0frQiw6uMg6/YBg72meposS9wuirK2zc:S4m7OumK2I
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/com.dashan.dashanWater/databases/bugly_db_legu-journal
Size 12KB
SHA256 e0d0def214163dbf7284f1f2e887cabca9de0e9fa189b22426c9fab262785c96
MD5 abaec766782dd275573c40c72e6e0202
SHA1 c54551b756bfa75f90c3536051c36f0323c7c0c4
SHA512 3f258969cc0c97ab18be19f375c00fdbd8601f548e4c7155f581737d05c6a2a35a7a155fa4da01d296758083eae4864ba015bad2ecec062a42e2efb9c54c6bec
SSDEEP 24:7+t/oUcHiAvqL1tZAqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSqO:7M/aHtqNifrQiw6uMg6/YBg72meposS1
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/com.dashan.dashanWater/databases/bugly_db_legu-journal
Size 512B
SHA256 def0ef0474059c7d8878ed91fc86bd7971be5654ed178cae41689bdfa4b6e313
MD5 7384d632a8d2869645f626aeebde37eb
SHA1 ef341835d0f011fc061fce9f1ad60f7c75a0a5a4
SHA512 1373e4dc23a38d5a2a5fba7b63962a7f7d028fcdf0a65efb94d14f5dbbe8ac8f9c8d352f5fa2f53728840dd1228a9b16735175f10433c10c19a65adfeb0e5cc5
MD5 SHA1 SHA512

Submit Download

bugly_db_legu-journal

Path /data/user/0/com.dashan.dashanWater/databases/bugly_db_legu-journal
Size 8KB
SHA256 f78cf15536cd563c1932b80aa241668b76e50c9fcb566b279dab9dfd9001cf04
MD5 da5077b9f9ff01c51a4ff077a84ad3e7
SHA1 3072790b4742f939b33b9f2c0ca9b1d32639bb7c
SHA512 8181fe6e9567b3d4139fea3b354f341fc2e9bfdea14517f16deb344451ab2806649242e25c62c148ee36632063b9bbd146a7f2cf6c501e9b1799f186e02cdb67
SSDEEP 6:7+/l9Ean10Jvg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKp:7+tMvqLiuWd7RmBEyPbi
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/com.dashan.dashanWater/databases/bugly_db_legu-journal
Size 8KB
SHA256 42f7ffeee52450d54882ef078211c11874515020c8e9d5703c84cae0d0074ee6
MD5 04292589c60110ccf1f47d7b7ff28a5a
SHA1 735175f4bdbf7b395089799c765b81bfe61391e3
SHA512 2e32a8cbc93531dd3812fb22d26442fa4fae25406a122ff3a24c3c5b1dad75d01f6f4c3d64b751589412e2670ed11250e2a167172785b7b478c4059db5e35ef6
SSDEEP 6:7+/l9mwPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKs/I:7+tcIqLJdKBRmBEyPb/I
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/com.dashan.dashanWater/databases/bugly_db_legu-journal
Size 8KB
SHA256 21b40950e4babbb9c875a3781d5f0ac2c4bbd0bf829acbbce93b672b7289037d
MD5 5378f5ca866ae5737ec6ab9d1f606d9b
SHA1 c93df3fa39525ff7986585429ffba960e0f344ee
SHA512 070c038fb794ca193014b7d15963e98a2cd659ac87a171acc0ac2a2f661a9e1fda1daa5e981ef239738b7b1e445c00d53b2f059ea2435f523626d8d55942610b
SSDEEP 24:7+tFqLTtcqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSL:7MFqEfrQiw6uMg6/YBg72meposSL
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/com.dashan.dashanWater/databases/bugly_db_legu-journal
Size 12KB
SHA256 8139ab27492ee41a4480d77194c256ea6d6c8d16211a48493c51b591d6169ca7
MD5 666a66c64c995f790c10ce12f756e8f9
SHA1 a472561b1cbbf6bd8f32fc0db9c16d057433de78
SHA512 b1e3df94994f29c88e50313e93fc8d7ffc3aa2298feb7ac867b96b1a2cbb43a122c6294bc31e49330ecee466e5e791bd88cea9ed06c1bbd2e5cd50175702c2bf
SSDEEP 24:7+t1qLMvtzqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSG:7M1qUfrQiw6uMg6/YBg72meposSG
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads