1640a05210c91a513341cef0461396585449f2f3423a9021e755680d99aa78e5

Analysis

max time kernel
125s
max time network
137s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
15/06/2024, 21:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b019e606c66dd3af220d96a0961caa72_JaffaCakes118.apk
Size 7.8MB
Sample240615-zz7dravaje
SHA256 1640a05210c91a513341cef0461396585449f2f3423a9021e755680d99aa78e5
MD5 b019e606c66dd3af220d96a0961caa72
SHA1 2996869847780c2d49fd3269185a3e9133b503f2
SHA512 6d05d21fa749847641c8eca75851ac40e3a258ceda8adcf7bccb6eea28956d09eaf38d125885c2ff5d169a95f1e95b3136ed3517fd1c47c97c122c4472ad6f7a
SSDEEP 196608:f8pweYrTuoSv+kNZzL89F2jsj1JCYB+KEm1EPaBRS:f8pweiarXNZzW2jsZJXB+1oRS
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.hujiang.dict

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.hujiang.dict

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.hujiang.dict

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.hujiang.dict

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.hujiang.dict

com.hujiang.dict
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
- Checks memory information
PID:4456

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

offlinedicts.db

Path /data/user/0/com.hujiang.dict/databases/offlinedicts.db
Size 16KB
SHA256 688a52cb5773c322d6ee43c7f6e17ef031828012ed26dd5852d3d7fd4fab1941
MD5 6466a4c75245ac44a142a2fce31db296
SHA1 3ad234bac59ccad7dabb7944e0cb8c9380886f42
SHA512 c3d1e283f0b1052a1363f948088df3a5472753ba2bd412de54723d915f9f2599abc630779fd045b49e360a93a57be3254c57ef06bbd860e873ff16980a016fb8
SSDEEP 12:TLpEuqoDU5l3KkdcVkTiAWWYdYYgOYcDeRmBEyPbBvOw:TLZqWk6QOnS94GSN
MD5 SHA1 SHA512 SSDEEP

Submit Download

offlinedicts.db-journal

Path /data/user/0/com.hujiang.dict/databases/offlinedicts.db-journal
Size 512B
SHA256 baeea461a895291c821c727a761a1d463225271d35da8a80583c242385b3c275
MD5 e2351751c33bcc411f3b587587cdbafa
SHA1 85de400c1eb63892fba9b7b0a9224cd258c7ca1a
SHA512 0fb07c022f2cc5535cef148ffd0b0a6cb19a30e44ea1e3775e65690711759917ebd967642d7f815e0b253e4554e23977bc30ceb0a1b8b32473a587a90294ebcf
MD5 SHA1 SHA512

Submit Download

offlinedicts.db-journal

Path /data/user/0/com.hujiang.dict/databases/offlinedicts.db-journal
Size 8KB
SHA256 067b4ee8b4b5e3d757dcdc6b6dc40261e37578e1589e1fad5c93de0fe278ae7c
MD5 609497bedfcc02671185851e7941fa10
SHA1 f5c5dfe20bda0c544f9540815919f3e8d506c193
SHA512 eb1aff18cded1817c9c26d11656c7bb20c50d2be80147441472996b160e77feafb09db808aa5427c36383078f825623c251903c39f61b1cbda0b462bfa2dd87f
SSDEEP 6:7+/l9pn1Cpg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK8s:7+tUqLiuWdYRmBEyPbU
MD5 SHA1 SHA512 SSDEEP

Submit Download

offlinedicts.db-journal

Path /data/user/0/com.hujiang.dict/databases/offlinedicts.db-journal
Size 8KB
SHA256 852dc3c7cd5865053cadc1f8c645a77f086ee1338bdc58f7b54c1b6b7645059d
MD5 3e872c772cc618009c021590f370864a
SHA1 6439a2f840ee7fecd78b9356e9fda022ab024221
SHA512 7d9a19312f8fd6847f27709802b5d9d16734a90a4d3514a445e9084194d964e1634285d698dbabe44bd2aba83e0e91c907b7f91e53b9a194dcb87270a8196a04
SSDEEP 6:7+/l9s/gPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKqups//c:7+tS/4qLJdeWRmBEyPbpupsXc
MD5 SHA1 SHA512 SSDEEP

Submit Download

mobclick_agent_cached_com.hujiang.dict

Path /data/user/0/com.hujiang.dict/files/mobclick_agent_cached_com.hujiang.dict
Size 100B
SHA256 f6acc02add36622e57b634e084bcf2d20d9eff09706c64d7276f83fe8f543a9a
MD5 039f0711e95de8bc1c2fa423ad9490e2
SHA1 5aaf8339da189c6d22c90795ee3b08054d6646ec
SHA512 4e004b905f6b51f7bb88445c4af449f6a6146565510961303cf9b8732a82fffb92bc3e562b3ccdaac74e4c6f1db460f32ffcce9da4d2115b37545622bd2445c8
MD5 SHA1 SHA512

Submit Download

DictDatabase

Path /storage/emulated/0/hjapp/HJDict/data/db/DictDatabase
Size 32KB
SHA256 89d4e20827dc24a505e768f8be5873056e4ba3d91c15d612bf3587bed49fbc35
MD5 66ab8d56ccb225b96301902eeee5a276
SHA1 e926bd8fc47571c10a8ced9ab9fb1a4f94d8bda1
SHA512 6cb49680b5cbc400348602efc334d10d109987fe035b129c2bada035df3f85ace31dc09594cdac8482958010bd1f4b8fb08a8c8c6c84e36186c65dcf3dcf990b
SSDEEP 24:TLRMyhi9FgustAMyxpOuTbPMAD/y1uS9wGSZGe:TCrstgPL/69HS
MD5 SHA1 SHA512 SSDEEP

Submit Download

DictDatabase-journal

Path /storage/emulated/0/hjapp/HJDict/data/db/DictDatabase-journal
Size 512B
SHA256 6251c989b5077195538d9b091dc7ec90e648cc44b640055bab417fe7fde3402b
MD5 6f55f656924415ea36636ea9722ba688
SHA1 b7b286971abe73e5303d869b3dec5e88d39ff495
SHA512 0509fb55edcbe2aee39b1aa5a0c7beb686492a48c30b0b2de50cc10bddbc696ddd101f20478d955a2e3dee5bba37e74ae0060f68fb0c94339410cd8a82b64f4e
MD5 SHA1 SHA512

Submit Download

DictDatabase-journal

Path /storage/emulated/0/hjapp/HJDict/data/db/DictDatabase-journal
Size 8KB
SHA256 365a892af3963360b1cc993dd9dd9c070c9ac9719f44340786548aee4535fab7
MD5 dea647fe16930fad55829258c8fa0620
SHA1 9c48668fe32c9ebd89cec75acc75ed7a9367d99d
SHA512 2b039c9f7539332d5630e388441fd4ec59d75db973a892c8e83b738affb3a8028298532f4a17cb1a84dde5d852c11db24effe51ef510d6d1372718978a8481e5
SSDEEP 6:7+/l9An1mUg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKg:7+twqLiuWdYRmBEyPbP
MD5 SHA1 SHA512 SSDEEP

Submit Download

DictDatabase-journal

Path /storage/emulated/0/hjapp/HJDict/data/db/DictDatabase-journal
Size 8KB
SHA256 28e07bea3106b95bb4269eeedd7c4e999ea9d68b90ed03a96eef88b3dcf1916d
MD5 5c1077fd26c91be38f4d90de0234a75d
SHA1 6fa0887716cc2701aee1f69db23445d720cef040
SHA512 c1e78d44c0dbd08d6597cf219ff42fbce021e8301e2d02e7fad82c136d474cd032c9c0041165aabe96a4318d7a52032099131e16f35b28713817feefa9536484
SSDEEP 6:7+/l9NPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKtM/+:7+tnqLJdeWRmBEyPbp+
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads