Overview

overview

8

Static

static

6

ad329b9318...18.apk

android-9-x86

8

ad329b9318...18.apk

android-11-x64

8

Analysis

  • max time kernel
    175s
  • max time network
    183s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    15/06/2024, 06:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ad329b9318df653d2f255a2c4bb0074f_JaffaCakes118.apk
  • Size 5.3MB
  • Sample240615-hexv5svemr
  • SHA256 dca5b6cbbb051f3581a390a1d5f7ece82c3816d5b9ab44640f7ca87514c037c6
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    evasion
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.leyuz.bbs.leyuapp
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4647
  • com.leyuz.bbs.leyuapp:watch
    1⤵
    • Queries information about running processes on the device
    • Schedules tasks to execute at a specified time
    PID:4753

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        download_upload
        • Path /data/user/0/com.leyuz.bbs.leyuapp/app_tbs/core_private/download_upload
        • Size 84B
        • SHA256 a11e84143c9394e588e42e350ee089c962882fdba71d26b2229085de70b0a3ad
        • MD5 SHA1 SHA512
        Submit Download

        download_upload
        • Path /data/user/0/com.leyuz.bbs.leyuapp/app_tbs/core_private/download_upload
        • Size 84B
        • SHA256 13cb1608ec2c9a64f649cd9ba728c150e38e0b45a033964b6bf9a9b80d36231e
        • MD5 SHA1 SHA512
        Submit Download

        download_upload
        • Path /data/user/0/com.leyuz.bbs.leyuapp/app_tbs/core_private/download_upload
        • Size 11KB
        • SHA256 28c000d0077d789703e543eb46483f5b70e07936a33ac31850ac4c268131510d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        download_upload
        • Path /data/user/0/com.leyuz.bbs.leyuapp/app_tbs/core_private/download_upload
        • Size 84B
        • SHA256 d6323a432a6618c509d730c0a86668a0025400391c101b29245e2ed08df78978
        • MD5 SHA1 SHA512
        Submit Download

        download_upload
        • Path /data/user/0/com.leyuz.bbs.leyuapp/app_tbs/core_private/download_upload
        • Size 20KB
        • SHA256 4d93db507ccc9d9a893d42b06b81178e6cda1ae901cd4345e3d54c9333bbca62
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        download_upload
        • Path /data/user/0/com.leyuz.bbs.leyuapp/app_tbs/core_private/download_upload
        • Size 84B
        • SHA256 85f458fa002f6b8d374960500bfff226ac2ef5b4cf1608451badb45819e5e3f8
        • MD5 SHA1 SHA512
        Submit Download

        0ec3dc80f1364ba6b580b9ca495dac38.0.tmp
        • Path /data/user/0/com.leyuz.bbs.leyuapp/cache/picasso-cache/0ec3dc80f1364ba6b580b9ca495dac38.0.tmp
        • Size 4KB
        • SHA256 ac1740d16308720307bb3b8a4ab744851aa9f9055195668a8d5756f41e8e5ef2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        0ec3dc80f1364ba6b580b9ca495dac38.1.tmp
        • Path /data/user/0/com.leyuz.bbs.leyuapp/cache/picasso-cache/0ec3dc80f1364ba6b580b9ca495dac38.1.tmp
        • Size 80KB
        • SHA256 6f825c64f0e0e8c5ab99958e2d4f7f3191cd36a578acf01101344785062f5e9f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        4f46faa6953c095346c90137c7f617c4.0.tmp
        • Path /data/user/0/com.leyuz.bbs.leyuapp/cache/picasso-cache/4f46faa6953c095346c90137c7f617c4.0.tmp
        • Size 4KB
        • SHA256 eddf754b27a0cb5bb768b635eb78b07dfb72f3c899b9a577257b9817a6644f2a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        4f46faa6953c095346c90137c7f617c4.1.tmp
        • Path /data/user/0/com.leyuz.bbs.leyuapp/cache/picasso-cache/4f46faa6953c095346c90137c7f617c4.1.tmp
        • Size 94KB
        • SHA256 ee91f80763013e60cc401e7eedbc9ddfb676f6b7f6dd1b0f20edf765a1bc47e9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        f7c14c13b1aa35b4fa1ffc619b0b3f69.0.tmp
        • Path /data/user/0/com.leyuz.bbs.leyuapp/cache/picasso-cache/f7c14c13b1aa35b4fa1ffc619b0b3f69.0.tmp
        • Size 4KB
        • SHA256 944e8b5a9b67ddc9ea157fc217c832de0e1c8d87b9ccc1a4a6c4042911866d93
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        f7c14c13b1aa35b4fa1ffc619b0b3f69.1.tmp
        • Path /data/user/0/com.leyuz.bbs.leyuapp/cache/picasso-cache/f7c14c13b1aa35b4fa1ffc619b0b3f69.1.tmp
        • Size 136KB
        • SHA256 e6b40afa79b8bcc3dccea7baaa9440fa6e07b6d0bd315e1d5fc7c213e8cefb03
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/cache/picasso-cache/journal
        • Size 304B
        • SHA256 241ebb3acc742aea32d8fb5a155441da77bc43fff1c652b59c02f8cd7cd16dfc
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/user/0/com.leyuz.bbs.leyuapp/cache/picasso-cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        okgo.db
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/okgo.db
        • Size 44KB
        • SHA256 a4eb5099db0a8ad4f343e4d1a746d70171e0836755c06957ad52528261bb7415
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        okgo.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/okgo.db-journal
        • Size 8KB
        • SHA256 28ea9660946988e0287f69c42a8badb299cec126ea0b1e08c51100dc210dcd9a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        okgo.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/okgo.db-journal
        • Size 8KB
        • SHA256 c4b14d1062f88daf2fc5a690dda98f862449783d3ef541892b1503cdd19b5aad
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        okgo.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/okgo.db-journal
        • Size 12KB
        • SHA256 b6c576c4f9ea3257b641b86c980f61a09ef0d2de96a5191eaec07d36f93684ac
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        okgo.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/okgo.db-journal
        • Size 12KB
        • SHA256 42e760d328f71190fa8940adc4f0b0e403e4c2a1240758e728bdac33f1012e24
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        okgo.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/okgo.db-journal
        • Size 12KB
        • SHA256 88be2d95db48f99c7a0145ca38af79b7e044cc3cd83c73880dd5ee33baa0d998
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        okgo.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/okgo.db-journal
        • Size 512B
        • SHA256 3f1dc6ce5ab52135ba09a1c79c145ab7ddba07821940e3a92594e6b0715c0e3d
        • MD5 SHA1 SHA512
        Submit Download

        ua.db
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/ua.db
        • Size 36KB
        • SHA256 1fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/ua.db
        • Size 24KB
        • SHA256 a1500ba61bfa72f3229d3a285ac633cd52fb4fef46a0490541a4041613cdb38c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/ua.db-journal
        • Size 512B
        • SHA256 6cbcc7b55da9ef8bbe2401156c776ae05af9c49b824350a4856df9a59264217d
        • MD5 SHA1 SHA512
        Submit Download

        ua.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/ua.db-journal
        • Size 8KB
        • SHA256 422ad453d5cdba786b6d2f7c7e756fbc70cdd25b336153bb9a866dfd7946124c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/ua.db-journal
        • Size 8KB
        • SHA256 6a9c1cd4e8f37b3f9ac97af9aebe46536dba7c63a89808fb93336e1f0cddf5f0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db-journal
        • Path /data/user/0/com.leyuz.bbs.leyuapp/databases/ua.db-journal
        • Size 16KB
        • SHA256 3133fc2a4a4d42612b261569afdaa5cac82e30ef38e036a95725220db6089bed
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        a==7.5.4&&4.7.3_1718433593906_envelope.log
        • Path /data/user/0/com.leyuz.bbs.leyuapp/files/.envelope/a==7.5.4&&4.7.3_1718433593906_envelope.log
        • Size 1KB
        • SHA256 427f17850beb470ade1f9068793277f111b760e8ea927f6bb8be31cbd2d915f3
        • MD5 SHA1 SHA512
        Submit Download

        i==1.2.0&&4.7.3_1718433591720_envelope.log
        • Path /data/user/0/com.leyuz.bbs.leyuapp/files/.envelope/i==1.2.0&&4.7.3_1718433591720_envelope.log
        • Size 2KB
        • SHA256 19b131b97a9c9440f3bbf9c69a71e0f18f6dbe0145355b7150b3b8a1fbe7cae2
        • MD5 SHA1 SHA512
        Submit Download

        exchangeIdentity.json
        • Path /data/user/0/com.leyuz.bbs.leyuapp/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 409b1a7c002f198e7ab6661c97466d6ac51dad19ab154e9999de80c3e497fe34
        • MD5 SHA1 SHA512
        Submit Download

        exid.dat
        • Path /data/user/0/com.leyuz.bbs.leyuapp/files/exid.dat
        • Size 58B
        • SHA256 edc994bfe2234bbc7aa6918369c0b251ecde3efa57ad39163a5baea492fac1ee
        • MD5 SHA1 SHA512
        Submit Download

        dW1weF9pbnRlcm5hbF8xNzE4NDMzNTkwNjAx

        • Path /data/user/0/com.leyuz.bbs.leyuapp/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4NDMzNTkwNjAx
        • Size 1KB
        • SHA256 744f9641387fbc0b31271cced8616f13df405c6c493df9a386dd73d9884fcbae
        • MD5 SHA1 SHA512
        Submit Download

        umeng_it.cache
        • Path /data/user/0/com.leyuz.bbs.leyuapp/files/umeng_it.cache
        • Size 350B
        • SHA256 d59a746a29582198836b30ce45fc438d62816b3c2e8d0c64440266b9b8e7dd27
        • MD5 SHA1 SHA512
        Submit Download

        tbslog.txt (deleted)
        • Path /storage/emulated/0/Android/data/com.leyuz.bbs.leyuapp/files/tbslog/tbslog.txt (deleted)
        • Size 9KB
        • SHA256 8539da3f84b0c6b79cadaa817e96898bcc1d743856e5d8fe84d0a198b9927a5c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download