b073fa441b0ba4b30ff9186799704e1974f7f20272194c18cc1a60743d345a5c

Analysis

max time kernel
9s
max time network
131s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
15/06/2024, 17:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
af81c8e758fec8a84cbde623084b4275_JaffaCakes118.apk
Size 21.4MB
Sample240615-vr61sssbqq
SHA256 b073fa441b0ba4b30ff9186799704e1974f7f20272194c18cc1a60743d345a5c
MD5 af81c8e758fec8a84cbde623084b4275
SHA1 7c25d982ea7d0eb7d99ee44844f472e3fe11340e
SHA512 4b0410c4faf6a0dc88e3bb48c756e79ecded3bbe2ea36d6fb9e21d966096a553a4aa4f21fe375b7f1fd1a30c8abe7b3da568d1b1fbb24918b0b0674ef4f8db64
SSDEEP 393216:0eMelOh2Z4N9GSJt5gkl61Uwcn9ORhKTgDzUwRnQ7WeAPc80hJsVv9ofe5hH:i2ZqASJtKk81UL9stHUwhA5icDhJsNa6
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.uneed.uneedgame

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.uneed.uneedgame

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.uneed.uneedgame

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.uneed.uneedgame

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.uneed.uneedgame

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.uneed.uneedgame

com.uneed.uneedgame
1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5044

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

rqd_record.eup

Path /data/data/com.uneed.uneedgame/app_bugly/rqd_record.eup
Size 344B
SHA256 a523b74f856c43d4ed4549c6bf9eaa1fec9f772ed2f5014dda5a14689b37a9be
MD5 666b4e849e5698912c4c8411410da647
SHA1 11ddf732a0a89423a69e898f4869c4ca80c78ee9
SHA512 3cb9bcc659092a8494686218a7a093dab49ff606d51937b9d13895a4770342099121277a271d49c3bbcb09e9fc53e878bfe992d5aa3492dc752d34245aa63bb2
MD5 SHA1 SHA512

Submit Download

rqd_record.eup

Path /data/data/com.uneed.uneedgame/app_bugly/rqd_record.eup
Size 1KB
SHA256 7c1ad78460d20582a41ad7080c7e96d50199323fccb60997d53098605b3e05d2
MD5 63727d64500bd83df0c9bae8a65ca260
SHA1 30306346fb71929d74cf614bb13f4dc311709f96
SHA512 bd1fa006489cbf7690b063ef274cbac756fda86e749fdaac600f3591c951b51d38659d8d9e0d704118bae09b39700197789f0ab9f7acc16e9df7d43476177fae
MD5 SHA1 SHA512

Submit Download

tomb_1718471687870.txt

Path /data/data/com.uneed.uneedgame/app_bugly/tomb_1718471687870.txt
Size 56B
SHA256 7fe875398dea7537a57a77c5275cbc8647aaf63ab6fd9148443b65df2e1d0647
MD5 bd0f8f8f3ad93fa07623422ec6e72003
SHA1 c3589295e7a4ddcf35bcd7a2c13bfd381783821a
SHA512 2ec3e073321262b667afbf98fe4e9f51e4c0c58baaad506b120239031f10699d699b94470bef13007bd6199df3d3b03f1eaf147c0cba5178aee7e267072b1c0b
MD5 SHA1 SHA512

Submit Download

bugly_db_legu

Path /data/data/com.uneed.uneedgame/databases/bugly_db_legu
Size 60KB
SHA256 c45b8e0008b9d034cc8f1520dae8f89e74679601e0ddbc94168cbe290c82d745
MD5 d6ddb7a2283b66770d8c8971798e8909
SHA1 1aec1d533717d83da0521b5a050be1aab27da733
SHA512 0253f06688c3679e3ac7d9bb8a2ba0d242e4cc5c778688fac944cd7b1aa2e4a37d749790fd3703d68869db5536113574d60c8c83690c8ca7f0f14840a4b6d93d
SSDEEP 48:TzfrQiw6uMg6/YBg72meposSSx1EGcHKH:/4m7Sx+GkKH
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.uneed.uneedgame/databases/bugly_db_legu-journal
Size 512B
SHA256 da0ef223a37f62f7b0d501b60d2ecc58b0f6938766902c43e1afcccf06708bcf
MD5 65fa3fc93fa64fd38e48f2674903bcae
SHA1 695ae695ca9192c17e5b39f396451e1a64d82315
SHA512 e816e871a9ebfe74e5c3ca336cdd3f6cb1952a10d3d7f6427b6645a4d9f13a38fd38d0f2998d13453d5125b2d369d7488901a00fdd22d2c8d357f8d47e223f4b
MD5 SHA1 SHA512

Submit Download

bugly_db_legu-journal

Path /data/data/com.uneed.uneedgame/databases/bugly_db_legu-journal
Size 8KB
SHA256 50e5d659710bf3fbceed12078c559bbac12820a695e5d3cc622e61ad447c309d
MD5 2ebf0ff773079f418a445a3e03ebcbbe
SHA1 28c9acabe4da2ab966fc1439ae290c5c3217b113
SHA512 1a43daf9a32dd1c8b4192a5189ee8a6d03523c0cb037e4cfa3b842b25cd38f85911865f45430a5bb9c09b98c36e4875ec9da644452b74aad3b5092bf4ec36657
SSDEEP 6:7+/l9yn1tg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK6b:7+tMqLiuWdwRmBEyPb5b
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.uneed.uneedgame/databases/bugly_db_legu-journal
Size 8KB
SHA256 f25bc3d096e8bd2e28d645e045ddc32a7c519025f31695c0cfc5e20bc06933c6
MD5 1df7453bfd27f157fb2d9b49452020cc
SHA1 e7eda991ca227be66449d1d572ceae5de5cce36d
SHA512 f591ad9fd57961271537a2ced00697b2e5d3266292b936595ebb9dd540c29e7d8cf70de04ee57ae347b0546f729e067a1c0b748c3ffa75eae430a57fd39d1270
SSDEEP 6:7+/l9NtmHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKgtM/Vn:7+tLtmvqLJdTRmBEyPbztsVn
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.uneed.uneedgame/databases/bugly_db_legu-journal
Size 8KB
SHA256 a079e1dbb5395a2368f13ad9059ab2382b923c06ba89edca4ced5246307746a4
MD5 451acbccfc9cd17b05017d7046aeba78
SHA1 5e8d478013b87d7b4b49721ba8aa7c8a8f2dab0a
SHA512 84a04a5a97b2d310826d644e5b3449841bb686f8e071c9b72df0a785267f7a35aef8ff78a8f1694a36eb43288f5f2d59906b1f75bc76480a76a666258a6da4fa
SSDEEP 24:7+tUyqLTt/qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSJ:7MUyqDfrQiw6uMg6/YBg72meposSJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.uneed.uneedgame/databases/bugly_db_legu-journal
Size 12KB
SHA256 d96722b4c3c0ec9512e86e36331219b17af4c570a98796de263e09d536427289
MD5 0b16174058b2bc482827bb564c2d4c79
SHA1 e660b79bb57bb82fa80c2b2a3dee0cce191dc100
SHA512 6ed946450111b55bc13edab72ba274ce2a7ae2ba055b12d3a3381d8e25e31ddc97dd82b2a929d6845a6719e657ecd174e91ebb1556f7852bfc08e54572ff6daa
SSDEEP 24:7+t28RqLMvtslqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSN:7Mfq3DfrQiw6uMg6/YBg72meposSN
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/com.uneed.uneedgame/databases/bugly_db_legu-journal
Size 12KB
SHA256 cfdd87f0e26f0e1f0f3d2a706e503fb9a238cd4dc4262984d902f1c7a0664d1b
MD5 75c652a09962a820858f0146014a1d5b
SHA1 6951cd47b582d713574c6a73f38e2f133def00a3
SHA512 cd1b69c2402c47b6e2c208d80227d28270800c064f671d6323eb53bfbe38d69717f9b61f01d630ba3847b40dc9667d46fb808f0b626df8ac12403d64d930b92b
SSDEEP 24:7+tTbfqL1tGqqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSm:7MHqjfrQiw6uMg6/YBg72meposSm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads