Analysis
- max time kernel
3s - max time network
131s - platform
android_x86 - resource
android-x86-arm-20240611.1-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system - submitted
16/06/2024, 22:29
Static task
static1
Behavioral task
behavioral1
Sample
b5809b75efc6cbab88b055ee9213c823_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
b5809b75efc6cbab88b055ee9213c823_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral3
Sample
1.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
1.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
1.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral6
Sample
21.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral7
Sample
21.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral8
Sample
21.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral9
Sample
9.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral10
Sample
9.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral11
Sample
9.apk
Resource
android-x64-arm64-20240611.1-en
General
- Target b5809b75efc6cbab88b055ee9213c823_JaffaCakes118.apk
- Size 23.6MB
- Sample240616-2elyesvfpp
- SHA256 ce5cbb262f0bbed9021cb414d726554ec8d40d0449e7f0913c2a219ae65fdbc3
- MD5 b5809b75efc6cbab88b055ee9213c823
- SHA1 33d8f5015937a2fa363a7b4f3a7af6a32e3b5c4e
- SHA512 e4ee155f7cd9802a4f0792524708922703554cf11c95c5205362b1aec523ed340664f5a3a5200be3ba08cbe4d1139582a79265e328e64171b04d5753e203fcc0
- SSDEEP 393216:SZQFcqutlgCjMCtV6fDJbgJ01roqzzp5Vy9Dhm+tnKPlU2RxET74CVeIhMg2G8Ef:acb+l/MsAfFb2kr52hvtKCuETJVeQMFe
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.qingshu520.chat - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.qingshu520.chat
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.qingshu520.chat/files/beacon/comp/1.jar
- Size 70KB
- SHA256 d320347a935fb3a98ac3858cb55a9193965cd5f9b04ad97838fb493c612d1010
- MD5 fbc9ad99563091d07cfdfaed823bcf3b
- SHA1 906f5b3e984ddec5208bd01468901cd0262cc1e9
- SHA512 ea259833bf55b9174f55b84ab62aa9a586287e0c1375f266668519d8ee273c7fb5c7419cdaaedcf1ea40c758531a65353d5c2a3083858d7c65f553b1f80149c0
- SSDEEP 1536:G/r4GPUEMPWEX/TnT6X+VVjPoyWtJvndg94iB9e/euL8y+pl+CJhOw9jYx9PvP7m:uhJDEvbTBDjATtJvnmCiS/eNPpJnYDPK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/files/beacon/comp/21.jar
- Size 2KB
- SHA256 43919275b8694ddc0de13559603d2b8fefaf80aaab7a596d0617e324dac130af
- MD5 81b45de6a47986d607e660539f02e21f
- SHA1 d2f1961e00bc48dfcbbf76a3d5648544e5812afb
- SHA512 7e99792b4d6e6f0f35b4966a934942a1658c6eb27341905cda65adfc5d8aa496c33229f3bfdfeb7fb8a047e603bcf5463efa34c233800df723b26943f7c28466
- MD5 SHA1 SHA512
- Path /data/data/com.qingshu520.chat/files/beacon/comp/9.jar
- Size 5KB
- SHA256 15c5291d63d9425aad8a2374804589ae6a0d377af59319715f35e09bd7fd1674
- MD5 07e7f8974d3ebde93b2d85aca8d96470
- SHA1 72afb51e234cb6f6b99c50739b2b73d0182d78e9
- SHA512 cab58123d458d3b37880569b5e6b40dfd711a4ce259a17292a02935c885866e440704f8075cc2485108c425b79ff7fd032fd7bae6f09264fa5ec9de204a61a54
- SSDEEP 96:V6EGSIRn2mSbFEYot7BvfZQ0ITJzeUWwuN9GxZJ3qbbjPHpEwPF8L8Tj+pu4:8EGSqZSbFEYotJ+0I1zHWxD2ZJaPjxEj
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/dso_deps
- Size 292B
- SHA256 ca4a359064d5362e7d789938c9353e8090fb034fa5bf9c17aa66da14b88c42c9
- MD5 f271df5d6af842dd0025c9a42b5bbf21
- SHA1 477ec29a6b349703cfb8c914dda071c4225020ac
- SHA512 76cfa53d6f7100c0c8faef7c8bc4e779954e278953529a829e4a0b703e84f1d2d2d41d5d6579175883571d148afb880dfb114332bc27cf908a375b826f7e0e4d
- MD5 SHA1 SHA512
- Path /data/data/com.qingshu520.chat/lib-main/dso_manifest
- Size 1KB
- SHA256 8a1fa67c2104ba0f7ed7bc569f910d53fd28489c8f29429851e9b333099f9a8c
- MD5 06b50feb94e67fc95a15c43131e5e6f4
- SHA1 e1bca937c4c0014fcb0b6d7edf62f2937cd808a4
- SHA512 18cbfb6dbde03cc0f30ea2cd8c70cccd0334cba513e8a22aed3e20877cae07620e921326e388ba054fadede36330c34cabbc2c73d11d27c62905a49f7badf301
- MD5 SHA1 SHA512
- Path /data/data/com.qingshu520.chat/lib-main/dso_state
- Size 1B
- SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
- MD5 93b885adfe0da089cdf634904fd59f71
- SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
- SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
- MD5 SHA1 SHA512
- Path /data/data/com.qingshu520.chat/lib-main/dso_state
- Size 1B
- SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
- MD5 55a54008ad1ba589aa210d2629c1df41
- SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
- SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
- MD5 SHA1 SHA512
- Path /data/data/com.qingshu520.chat/lib-main/libBugly.so
- Size 141KB
- SHA256 64d4362d15c363d281f5569a40c1a8e746b20a5aee08b1d3f6c8618e00252969
- MD5 1c70f8fafd4617a603b00eac5233dd3c
- SHA1 b30e472514367b91518b3304971a6c9b87c289c5
- SHA512 75c7438e8d7464b9cde1dc6b79c62f40ec8b906875adc8321ced86447eba698ff38aef62c7cf225efa89d01639cee7a9475c2b3f97c8ace6dd091ac65950a96b
- SSDEEP 3072:VUsQQ53u6ur8KasFyuspYsaCH+yZ0Bq7Ufq:CsQQ53cvYKcgfq
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libQPlayer.so
- Size 390KB
- SHA256 890fbc8038bdd1189426de5e56cadbe370cfca543d68d7ea19fae08b65ea03dd
- MD5 ecc7dca4bf1fb69309c3a5ab01721022
- SHA1 b2955bfd302705b1dcd1a3c8602c58ad10fe8503
- SHA512 341264cfea2f03a17819df82efe6f19b7a6e7df7d5c52f909a786fe69c7772e4b1b9684ee280068a863c4995255d91564514688f958b144b21b74ec05435289a
- SSDEEP 6144:r4gxhcBLw4JAu6dYMF19t4pmEFE8D0IlbTqeqRFKZVQBrvqS79STt8nVRlrKj:r4gryLw4JAuqYMF1b4pmkEZ2U
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libavcodec.so
- Size 5.7MB
- SHA256 8b1de1ae8ef2268340ef3c83e9b488247eb29a5314c702e3f5471e7629bf158f
- MD5 9f1223502338f1680c1b9f887de91ae2
- SHA1 cd928cfc805ae47e510e641b3d342b9b632fde63
- SHA512 58305b78cbf813db3de601ed87b68383fc7ae6c61d91440eb200612fdb6d2c1be9c680ac516dab310a8fbc714ba8e3aa436a23bcbdffe8288d10cd945ccd7888
- SSDEEP 98304:Mds7tBhzLiGYbjswdALCeM1OKLxHJ2o1pPXh/:Md5h0wWCekOo1pPx/
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libavformat.so
- Size 1015KB
- SHA256 49919cb937caf9a9af67b977eb1c1e893ccf145b4bd4878bfc16fbc495314d33
- MD5 95858ce09859ded9b9d77665e25d1b49
- SHA1 1e9f87e50c902d7b37fcd4e5457f9efcd7608899
- SHA512 509b469ff86d21fefa579008e4a73cd295956060a22f07b5991440d8ab2d43db9667a61065d81ebeb1f96ef3c100231604568802bd625124d7c981f512558450
- SSDEEP 24576:yYNDMDMO5bDPjbc00uMD8IEJd9MCvCy2r8VY:7xKHyYIEtu
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libavutil.so
- Size 249KB
- SHA256 7df0e3dce972509f75dc569885cb9dae13af1a5f57b5889cdd5782fa8383d33b
- MD5 6d89546b9b4f21907169272d34301ddb
- SHA1 3bece0f6d4ed1340a0204a66b4c7ac7340c62206
- SHA512 82d8341a10f65c69d0f00ae057a7787d929fafb3ee8e9c73d5e4e4e4ba2535faab82d9d0aad1f3ab74ecb6a89f8e12a2f87dd1feb19fe8741873ca2e55cad315
- SSDEEP 6144:aGhB/ASxqZROpcVuF1t0DGoF0RYAy0oCJdtVnHB5f9PTt:rhB/AEpP4DZNAyGFZ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libffmpeg_mediametadataretriever_jni.so
- Size 49KB
- SHA256 e539e7b86e7f22700d73055f5df0a96df7094a77a21684f7806eb6d7eb3c789c
- MD5 1cd16ba815473fa7a3f3b0dd7739ce1e
- SHA1 7d511f9d6860e519ae3b7cc6d471925394f3c088
- SHA512 daf8aaba8e2277d269b257b0b7980aa7e3286425aed5c6cfe5b9b0a8a7dff694f98955a5a38aa469066a55e036f06790414ef755c18a132919840bc63f11cc67
- SSDEEP 768:YcJA0vcVnBWm7Up5t0ilvhg/mQNHX17yYmq+0XqbZfng7Qfr5zpr9rR:VA0ABW0a/0iPQtl7ywXqbtg7QzhR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/liblocSDK7a.so
- Size 33KB
- SHA256 c1864e9f029d477609487e27c36a862f306a1077ba1ebbbebb8e88c882616d5e
- MD5 3a334bd0ee8562fe5ea137979c3da025
- SHA1 3ed0d42733657f26a39ef39cc9f653b3ba448e10
- SHA512 feae0f3633d84bffa6ba21214de2cdb2d9b0c0b41943625171e40c06883926df01c68655e0b2495f863d8e65a4dd383b82f506d0de0f0ba4ea4a87193c27747b
- SSDEEP 768:32TF03u+JtbOmIOqi/R7mDoeaZZ9JmU2W:SF0FOW7x1ZZzmb
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libonlywechat_plugin.so
- Size 53KB
- SHA256 82999caf761218fc97717c8d7521381f47fae9028b1f3a7d2204d8e423440388
- MD5 3d7b0b2ac561f3d9f2e8b3658ef00a47
- SHA1 726c6e3fe35c75596cca114499d0300267f5dc1e
- SHA512 bd79c5c11e65ce6c59021e216cb22e84cd1960c442b42089564eaa0579ca3e7f499d31def43993436bb2d17a4ce010f1420ce5051cacc92fcdfec9f0af9e2bd9
- SSDEEP 1536:Kt4Gmg9uxbADZX3V6JL7S/K9B4BEvCZ79RTt8nTRMGrM:Glmg9u1ADZkJHS/UB4BEvCZ79RTt8nTf
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libqcCodec.so
- Size 2.2MB
- SHA256 8e9f366f4fc61837c3ab4fc26d0e4bf6e572a75f2db517bf284a77e094c732d4
- MD5 78fb6510a4efbdfe4941c4460b26258f
- SHA1 5a2f409bde21dd5296ceb698019521b81286be44
- SHA512 5b36a4d3a2cc3012c81131a137d3c7685be3045485be806ba8253de8372ace113f61c353ba184e5979126c0b636ebfdc7e3a7a783815fc0b855b772e4d72b048
- SSDEEP 24576:7N2cLdHLOOYN+SdvWXERTWShjMtgZ/anNGRV6WFrNgM7SgiUsn68SDUtBY7Tb7ra:sWURiSgx1WUtBETbna
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libqcOpenSSL.so
- Size 1.9MB
- SHA256 b769f67db02f5267c373679add48fb6bffea346a549b5d3e846ec012e00a8842
- MD5 965a504dada68cd8fb606841c6e3b4e6
- SHA1 9c1594233c1f56d54b891649d6df54f3873e45f9
- SHA512 b65e7e8a91347542a8e25db3b1aba3eec7ec5f55cb18175725556bb9c4311f1af101af96c7f5c92d72292b6a9a1a3a04f8bdce34858d500307c59d7c93b12285
- SSDEEP 49152:Wv3upJkJCPwM2jnGduAamem4MbtFP7FLC6:Wv3upJkJCPwM2TGd1aolthFW6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libswscale.so
- Size 317KB
- SHA256 38ca644a9d568438b5ae4780077d06701873e9f1005f6bf17900fbb7bf1cb80d
- MD5 b6482b64907448b8959ddfa4191de569
- SHA1 4fb7ea8ffdef2cfe056b855786be94e303462c23
- SHA512 3c256a9d25963b97c481170f9ec4e32c3fd05419bde3a83aa86180a402377877821c1137033ccf580c65f6f0e9fc2a481a8750d53b1ead3f2ef51f8056365cd5
- SSDEEP 6144:sYleEnYuVvUIrb9UcRg3gL1k0fvol6CxuQ24sg:sYle0jvL/Rg3Afvoljd24/
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qingshu520.chat/lib-main/libzegoliveroom.so
- Size 10.4MB
- SHA256 6758b5da9bfbeb59da5a438c4fd2a5cabf84df17ea6958873e1c7836e3ae42ee
- MD5 2cd9651b15743d5a8e87921d166d2d6b
- SHA1 ccece75bbab051aa88b62b5cf6c078d3c19f6781
- SHA512 e80921c7cbf26b8cce0a01872d7c01e67c316166913a1d7e2c2fbb6182d5aaf970e4e82ab2d7804a3a13ff78a80de19e2813ee251355f164ea971d2b024f6c25
- SSDEEP 196608:jrbSv3upJl+CPwfoO0fuD5lUi3DZTZDAtgJEc/h:jiv3upJl+CPw9guD/l3DpZk+JEY
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/com.qingshu520.chat/cache/uil-images/journal.tmp
- Size 31B
- SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
- MD5 8c92de9ce46d41a22f3b20f77404cc1d
- SHA1 8671a6dca00edb72be47363a7071be65cf270373
- SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
- MD5 SHA1 SHA512