Overview

overview

7

Static

static

6

ad0b9de5a6...18.apk

android-9-x86

7

ad0b9de5a6...18.apk

android-10-x64

7

ad0b9de5a6...18.apk

android-11-x64

7

gdtadv2.apk

android-9-x86

Analysis

  • max time kernel
    154s
  • max time network
    180s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    15/06/2024, 05:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ad0b9de5a653c9a6b6c0a65d260d2077_JaffaCakes118.apk
  • Size 19.0MB
  • Sample240615-ge513stfqq
  • SHA256 a26ea1ab394843e1a5ccb1558bf9eb94c65312cb38e49633195258a32f55a0bc
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
bankerdiscoveryevasionimpact

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.xinmang.guitar.tuner
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4435

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        gdt_plugin.jar
        • Path /data/user/0/com.xinmang.guitar.tuner/app_e_qq_com_plugin/gdt_plugin.jar
        • Size 393KB
        • SHA256 9597de7943e30d0ed1d6a128b18111585ce0dd36af66502638d57b470fbbb6f3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        gdt_plugin.jar
        • Path /data/user/0/com.xinmang.guitar.tuner/app_e_qq_com_plugin/gdt_plugin.jar
        • Size 668KB
        • SHA256 63f00b1eb4717724421886628e1e1d86256d4d1a4f0384c1aa7e8c9074bd78f6
        • MD5 SHA1 SHA512 SSDEEP
        Download

        gdt_plugin.jar.sig
        • Path /data/user/0/com.xinmang.guitar.tuner/app_e_qq_com_plugin/gdt_plugin.jar.sig
        • Size 180B
        • SHA256 9bb6aa039d8d357c21d7357782f47bf9871619c77fa8e524a93be24e3051ada9
        • MD5 SHA1 SHA512
        Submit Download

        update_lc
        • Path /data/user/0/com.xinmang.guitar.tuner/app_e_qq_com_plugin/update_lc
        • Size 4B
        • SHA256 0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f
        • MD5 SHA1 SHA512
        Submit Download

        update_lc
        • Path /data/user/0/com.xinmang.guitar.tuner/app_e_qq_com_plugin/update_lc
        • Size 1B
        • SHA256 bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/user/0/com.xinmang.guitar.tuner/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 36db564020fb3bd2346d078ff2eaee051ba27d0df44c5405f2d17cb8558d7f10
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7909d411f7b4982dc6d0d06917288ac2c4ebde71557679c9974aba34fbb15ca4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ea16d964bb4e3d73ff28c56b2a4a0a3f6f198b6493a11ee02e8dd13aa40ce938
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 163b1ae43cff02f2a9b9256b0020cf0e1a28e1b15126ea6c01fe76ecd2e3e06a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 29c0c087cfafd2c9161f2663c7e7b72ce67af5f6d64ee41d681c1fbe57e22c44
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d2bb9b5cf4af88d1a76f49eb03eccb718be9621d30b093fbad69f503ad74605b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 03b327186a5f524c7d9468f01211d2cf3403c70355148ae069f5cbf225a56e63
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9a0307262c68f4072aa5c8a4291638139dbc912950636a010c413f084dc765c8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 1b96c44ed61e514fa0fb265511799118892772a9a5931e0b536b676176f39e67
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b5282f795d598588f1eac0468d2e064be8eeb85998fdfa940fc0c9e112ee15b2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 0ed356db09ec8658d5abc989d3de6dee71ba7e57e7f8cd52e3686b3cff94bab6
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.xinmang.guitar.tuner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 61622f9c12650b9491b36d588367ab17016fdcfb38a210fb5be237d31dbeadbf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcuid.so
        • Path /data/user/0/com.xinmang.guitar.tuner/files/libcuid.so
        • Size 109B
        • SHA256 1f19819aab6f8535567aaf2a9fe358145510939bf57c8034ece2b0de5fb5852b
        • MD5 SHA1 SHA512
        Submit Download

        com.google.InstanceId.properties
        • Path /data/user/0/com.xinmang.guitar.tuner/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 b78f86c124f21b19e8935e1ea90681f496a7ead1b6e208d3ebb550e1f4277dfc
        • MD5 SHA1 SHA512
        Submit Download

        .confd
        • Path /storage/emulated/0/backups/system/.confd
        • Size 20KB
        • SHA256 72d1e0672f5346f5904aaa5cb09085dc2b71bc594034760bce25fe973fccb80e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd
        • Path /storage/emulated/0/backups/system/.confd
        • Size 24KB
        • SHA256 03024cb648aea2f615db16ad719bb230e4f7ae7b54c47dac309089821c45fd28
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd
        • Path /storage/emulated/0/backups/system/.confd
        • Size 24KB
        • SHA256 2e2fba33bb2397431514ff4323fc8330851bcdc6d97694bbd5772e4df2b70270
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd
        • Path /storage/emulated/0/backups/system/.confd
        • Size 24KB
        • SHA256 4ec24b379c31e6c91759316bc43a90363f7a8c76fc58a4dfe4629a7c8a7bfa3d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd
        • Path /storage/emulated/0/backups/system/.confd
        • Size 32KB
        • SHA256 5f23b2370ec9431207a618f22e8245f3a71d9bb4a8af77d18dc952b4459ea4b8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd-journal
        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 512B
        • SHA256 768742c26fd9e5a2439866afea072812791ef12f343c28b5cd36c5c4c24e8f5c
        • MD5 SHA1 SHA512
        Submit Download

        .confd-journal
        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 8KB
        • SHA256 68ab83d7801ad3632abb2dffe5f1ddba2a0e30eabab4271e02a015f64d36daa3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd-journal
        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 4KB
        • SHA256 1849fbfe54ceab4058d241675c2859efd046b6752bd364fcc568200833ff8ba2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd-journal
        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 8KB
        • SHA256 c9fe9477bec5c83057c92eb8e5c46c44b819346970ede1e38e9bcea8fb47cc0f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd-journal
        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 8KB
        • SHA256 876cd820d34467102beef90714464057fa41999d2635e724d37c3fa293605602
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .confd-journal
        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 12KB
        • SHA256 b41641a8e4aa846a7a15ac4032c5c23f47b700f554a1e72f31dd0ec247579db4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .timestamp
        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 25B
        • SHA256 cfcc3e498cc185695b40b061752004944c894f81d580c77454b0ab8fd97645fa
        • MD5 SHA1 SHA512
        Submit Download

        .timestamp
        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 55B
        • SHA256 ed37b991054bd45793ad80bd5f53d4736f19a47a3bd81ff62276b3bc1147d8d0
        • MD5 SHA1 SHA512
        Submit Download

        .timestamp
        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 84B
        • SHA256 23cc3e64c35eb0946d7b729e0ba1e333a815318011932da9a1457ff4edbf9cbf
        • MD5 SHA1 SHA512
        Submit Download

        .timestamp
        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 114B
        • SHA256 9495755eb4a120cb0d4246ba38ce7e4ba616ff9efe94a36fa32e3194e6d357e9
        • MD5 SHA1 SHA512
        Submit Download

        .timestamp
        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 138B
        • SHA256 4315622559aa3e1437e3623a91f1e8f0cc593221de70147ef9c31f49d6568d0f
        • MD5 SHA1 SHA512
        Submit Download