Analysis

  • max time kernel
    3s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    16/06/2024, 22:29

General

  • Target
    b5809b75efc6cbab88b055ee9213c823_JaffaCakes118.apk
  • Size 23.6MB
  • Sample240616-2elyesvfpp
  • SHA256 ce5cbb262f0bbed9021cb414d726554ec8d40d0449e7f0913c2a219ae65fdbc3
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.qingshu520.chat
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4268

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1.jar

        • Path /data/data/com.qingshu520.chat/files/beacon/comp/1.jar
        • Size 70KB
        • SHA256 d320347a935fb3a98ac3858cb55a9193965cd5f9b04ad97838fb493c612d1010
        • MD5 SHA1 SHA512 SSDEEP

        21.jar

        • Path /data/data/com.qingshu520.chat/files/beacon/comp/21.jar
        • Size 2KB
        • SHA256 43919275b8694ddc0de13559603d2b8fefaf80aaab7a596d0617e324dac130af
        • MD5 SHA1 SHA512

        9.jar

        • Path /data/data/com.qingshu520.chat/files/beacon/comp/9.jar
        • Size 5KB
        • SHA256 15c5291d63d9425aad8a2374804589ae6a0d377af59319715f35e09bd7fd1674
        • MD5 SHA1 SHA512 SSDEEP

        dso_deps

        • Path /data/data/com.qingshu520.chat/lib-main/dso_deps
        • Size 292B
        • SHA256 ca4a359064d5362e7d789938c9353e8090fb034fa5bf9c17aa66da14b88c42c9
        • MD5 SHA1 SHA512

        dso_manifest

        • Path /data/data/com.qingshu520.chat/lib-main/dso_manifest
        • Size 1KB
        • SHA256 8a1fa67c2104ba0f7ed7bc569f910d53fd28489c8f29429851e9b333099f9a8c
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/data/com.qingshu520.chat/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/data/com.qingshu520.chat/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512

        libBugly.so

        • Path /data/data/com.qingshu520.chat/lib-main/libBugly.so
        • Size 141KB
        • SHA256 64d4362d15c363d281f5569a40c1a8e746b20a5aee08b1d3f6c8618e00252969
        • MD5 SHA1 SHA512 SSDEEP

        libQPlayer.so

        • Path /data/data/com.qingshu520.chat/lib-main/libQPlayer.so
        • Size 390KB
        • SHA256 890fbc8038bdd1189426de5e56cadbe370cfca543d68d7ea19fae08b65ea03dd
        • MD5 SHA1 SHA512 SSDEEP

        libavcodec.so

        • Path /data/data/com.qingshu520.chat/lib-main/libavcodec.so
        • Size 5.7MB
        • SHA256 8b1de1ae8ef2268340ef3c83e9b488247eb29a5314c702e3f5471e7629bf158f
        • MD5 SHA1 SHA512 SSDEEP

        libavformat.so

        • Path /data/data/com.qingshu520.chat/lib-main/libavformat.so
        • Size 1015KB
        • SHA256 49919cb937caf9a9af67b977eb1c1e893ccf145b4bd4878bfc16fbc495314d33
        • MD5 SHA1 SHA512 SSDEEP

        libavutil.so

        • Path /data/data/com.qingshu520.chat/lib-main/libavutil.so
        • Size 249KB
        • SHA256 7df0e3dce972509f75dc569885cb9dae13af1a5f57b5889cdd5782fa8383d33b
        • MD5 SHA1 SHA512 SSDEEP

        libffmpeg_mediametadataretriever_jni.so

        • Path /data/data/com.qingshu520.chat/lib-main/libffmpeg_mediametadataretriever_jni.so
        • Size 49KB
        • SHA256 e539e7b86e7f22700d73055f5df0a96df7094a77a21684f7806eb6d7eb3c789c
        • MD5 SHA1 SHA512 SSDEEP

        liblocSDK7a.so

        • Path /data/data/com.qingshu520.chat/lib-main/liblocSDK7a.so
        • Size 33KB
        • SHA256 c1864e9f029d477609487e27c36a862f306a1077ba1ebbbebb8e88c882616d5e
        • MD5 SHA1 SHA512 SSDEEP

        libonlywechat_plugin.so

        • Path /data/data/com.qingshu520.chat/lib-main/libonlywechat_plugin.so
        • Size 53KB
        • SHA256 82999caf761218fc97717c8d7521381f47fae9028b1f3a7d2204d8e423440388
        • MD5 SHA1 SHA512 SSDEEP

        libqcCodec.so

        • Path /data/data/com.qingshu520.chat/lib-main/libqcCodec.so
        • Size 2.2MB
        • SHA256 8e9f366f4fc61837c3ab4fc26d0e4bf6e572a75f2db517bf284a77e094c732d4
        • MD5 SHA1 SHA512 SSDEEP

        libqcOpenSSL.so

        • Path /data/data/com.qingshu520.chat/lib-main/libqcOpenSSL.so
        • Size 1.9MB
        • SHA256 b769f67db02f5267c373679add48fb6bffea346a549b5d3e846ec012e00a8842
        • MD5 SHA1 SHA512 SSDEEP

        libswscale.so

        • Path /data/data/com.qingshu520.chat/lib-main/libswscale.so
        • Size 317KB
        • SHA256 38ca644a9d568438b5ae4780077d06701873e9f1005f6bf17900fbb7bf1cb80d
        • MD5 SHA1 SHA512 SSDEEP

        libzegoliveroom.so

        • Path /data/data/com.qingshu520.chat/lib-main/libzegoliveroom.so
        • Size 10.4MB
        • SHA256 6758b5da9bfbeb59da5a438c4fd2a5cabf84df17ea6958873e1c7836e3ae42ee
        • MD5 SHA1 SHA512 SSDEEP

        journal.tmp

        • Path /storage/emulated/0/Android/data/com.qingshu520.chat/cache/uil-images/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512