Analysis
-
max time kernel
170s -
max time network
141s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
16/06/2024, 23:43
Static task
static1
Behavioral task
behavioral1
Sample
b5cc3358aa306721d31ab014314ae810_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
763.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral3
Sample
763.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral4
Sample
763.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral5
Sample
QRomCommand.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral6
Sample
QRomCommand.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral7
Sample
QRomCommand.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral8
Sample
lock.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral9
Sample
lock.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral10
Sample
lock.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
763.apk
-
Size
1.7MB
-
MD5
772c92fcb8c3e2cea804b30d9fa62f46
-
SHA1
7e4d1f0930ad1501291c48e46548f738f586af87
-
SHA256
e54d9a6e8283faa78c280c5402184e1a8a946f21c94addf7207ea28106acb357
-
SHA512
449ce40f29ba1e762e9dca388ed069fd58824f38312801994a4ecef598a20b79a5d32aee3457b1adb2c508a42dcf63112a9b762974938ae24d4fc6cb71819739
-
SSDEEP
24576:e1WF31lj+6o7zYIdD1X+9lviaIhvcVIWaVMO8afflG7D0HS0c1A/zbNIgqta9JrL:o0c7z/DU9lv3IhvO5tGNGMjcy9I7wj
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qlauncher.theme763 -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qlauncher.theme763 -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qlauncher.theme763 -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.tencent.qlauncher.theme763 -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.tencent.qlauncher.theme763 -
Checks CPU information 2 TTPs 2 IoCs
description ioc Process File opened for read /proc/cpuinfo /system/bin/cat /proc/cpuinfo File opened for read /proc/cpuinfo /system/bin/cat /proc/cpuinfo -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.tencent.qlauncher.theme763
Processes
-
com.tencent.qlauncher.theme7631⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4198 -
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵PID:4428
-
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
PID:4447
-
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
PID:4466
-
-
/system/bin/sh -c getprop ro.build.fingerprint2⤵PID:4484
-
-
getprop ro.build.fingerprint2⤵PID:4484
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
MD5ab80ef7491624bc62f79fcda9feff943
SHA149bbe355e914a048701882da64871473e800ad43
SHA256ff42b55b6ec01939a1bd7055f56e9278052ccc588b08b43b2057861c4a71ace4
SHA5126d345aa99e5742832aa495181a4dbef90aa1ed30698e802b53f0d400d7593a5cb13ba863b341445dc65339db5792dcdae494c1041e215240bbba80c204aaf7e5
-
Filesize
20KB
MD5d05267d376450865f922caedaf5d4cfd
SHA199e65704b4b3eea5f4acd760ea75b0370048f8e0
SHA256a22a0fa4e07f1c81389b62e7cbb0b7853c128f274a6ca9841035f6ec4ec75167
SHA5124eb5331885daca4048708a6d75e2f4912c1e4e1e975c5f64f2d97c3f4da9c29c5affc335d180031b94f644403107e2d9eac34a47f607f83c705e989dda1a3a20
-
Filesize
20KB
MD52dc35a4ee27225990c5d48b49c2d5418
SHA1841da6f4e10fedfc6c2a18fa98e57620a0873669
SHA25675cd23d5bae5cd87a0d4ab170d00afc4bd1a167023268e8d125598f21c28f81c
SHA512a48b8016f0f7b47e42e136c3f8138bdfcf24d06eb556968cd3cb761141b6b5b39abca99bba7248086c47ef137e215e686226cb6891fecef7b6cad2125bf3efaa
-
Filesize
20KB
MD5eecc7b8c0894a12cfdd60d3906254c0d
SHA172d2e0f1c6fb16abd605382276d14f2d36f16f6e
SHA256f78d440c4be37749da39fcc5ca750c37ea759bcf497d95b9db42f1aa6f6ad864
SHA51250fe5bb70b57cf6a5cb27ca9f6db07cc0d0ea67f626d21890434b225de59ee4b5165d9d8710867e994415d8eb85fa3da0c3f55db5d2dca0757268a920751a710
-
Filesize
20KB
MD533f567b50559eb266d3b2f782fa5384d
SHA184432abe935ec93230402dd8b7844917e1694967
SHA25607d0428b813a62fdb391742382358a7c7d1fd38c204f68e11154d85b72948bdd
SHA51254bded4545ace11af6bfbf58f8a44865226ca525ffee1ecaca90ed794a661c5e32cea0781b4b28823aa7ea66134a8b903dbcc871d3a21618bad647fe440e922b
-
Filesize
20KB
MD55b5e7d48c164a0d4699edc90084d67fd
SHA17a990a56529d6811be7786f0c2872759b6ccf292
SHA2568e35c408b58807fd1ed4fce0f36d8f64f27ed8de5ca37f57d371e80b8d3dec2e
SHA512a160012a1b3586f921bef44c7dfd5909b8a83854dd3250a73e6457024ae85ab5818ce5665435f642da6f0d6d384649fa87bfd442b8975e8f0dfbd99709b2b58e
-
Filesize
512B
MD57aabfdc6360dc148395c13e0335032ed
SHA1513b6fd00412d5c3ce84dec99cfee88e37f9ba5d
SHA25636a2432da7168d642d497229c7cbc045b6143d3f40a4344c88a5d15cb3df72b6
SHA5122183204aaec72da3a3f8e854a214e3fb159e0a546870db38b379c3309c0ac1dc53184848fd934f9ba0e6f137e43d2f607e3f9b4923426ff25cdb3adf8151fe07
-
Filesize
52KB
MD52681641b65633e40794f80a236e54929
SHA1b8d39a6369213b69a729e373a0cfbe67b5c654e0
SHA256b3037390a5c4a652fa6a5cc9dca613819e76902fa98c99df09a5a43d9b50bbb2
SHA512f547ee0f8e1f4797acd85ec9f299b656b44cb131b75dea7401634d3ebdc33e9cc3e758af39ec5f2776304e1e30bc550729cc73c5b64af11059fd4e39cd9bb55f
-
Filesize
16KB
MD5df1da9922f467a757a594727cd3b1c41
SHA10909e808ed402eb4e36f34d456838c9c84165e92
SHA2565456622d427a926fb525b79ed5733a81c772b0b3671422284b16cea1d2e891ca
SHA512a1bac120e6507061b03fc27a5e60023bb280af3d2777d1b27209485387f874359301cec067b4f5341c2adbdc0d67f67e8c9a74e4fb10fb20b6b6acd7434c48cc
-
Filesize
16KB
MD579c4ca785bedd7416167025e0c5c45d4
SHA107fefbfdfa98b04975eee6ed4d618265dc2704fa
SHA256a9d90cb593046761fd256f8e2b5483132f9cbdd7a1e0ec1ab95ff4aa9261eafb
SHA5129da216ad6679b7681884638ad00730d7b0604178e12e923be5bf9cf7907c168f0f6e08b5c39e9002219be8b310c93e3c69077240b94bcf356f7267a19aeb26a5
-
Filesize
8KB
MD51f41967a6564c117d7a736beb9d1b86a
SHA13ed79b8a694311ac5ca2e1ee13c4fa54309008a2
SHA2569b6d9d35290da9c153fac3a410bb4fc27f45fd328186a1304071ac7f3b0142c7
SHA51220cf99e27019f345d66408f1c2d8e956a72762a6fccd24a8514a40c3aaf4c9f1081257eda2dd97f6a5f1523908c02404a4a20382bfd0bd035c0ad003206fc93d
-
Filesize
12KB
MD54e509c2e05b32ac7167ca8b27933db58
SHA1c1efcff1a7e8a22347d295d612e7e9640fc10494
SHA25633d72760f0ddc09818c280a7cc2be9738a215c039d0d2e874e4d13397db96d2d
SHA5121ca861de34b701844bcaf057756edcffbc188c20f2bfb7f2ffebf62424e746e083703baf552e72177ada910198992cb24572fcb732e38d92eb63a47d9a7a49e6
-
Filesize
16KB
MD53a6c54784ee2e1c6e5c2ad767d17db19
SHA1a7cfff1edd8be7a4531749f5abe08e4a70fcd0a7
SHA25653266acda06efe253d793f5c0da98f780d0b7ef129427bb9b425086b014c0671
SHA512a3e7b58ffe25e358512321286193dfba0a12f67e6e9c922c7ea918beec15947b6a0737550054a73b026a32c39a0ac7418200051af25be51bb9ac169b52f99bd4
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5035a3c0c0682f7e17e85126dc7b420c5
SHA16fc1c8bef072dfdda0ae0dc962c7501056544879
SHA2560c383585939550fd452f411c7d110a5df1f759354be45f5720e8a6825f64cbf6
SHA512e08cfb090e067cca5f7cb2d8f44879f8a83bc841c20a5b8b3fb91173d31e20090316aa3c1eb72251fa593749dd664bb63178715ce7783edecd9df7cd20ab49be
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
32KB
MD50e59bca574a3b011c7e4c8f05d85ef74
SHA1daf54a563f3efdf871c2224ec79dc7e6fe7e5b9a
SHA25646a8be22067cd14e07b1de0705ba5e03fece655192ee7dafabe75b3e0a84041f
SHA51208bdc0d0f38bd780fd18057a18822503023541b4ef4c099b60a905c04ca8cda550fc98e66b5c72f149de60d3ecf1219533e8639178d36f6d5a19bd5146b841ff
-
Filesize
36KB
MD5e864f53714a3b762fdb36d1836e9e8dc
SHA1d5c1ea37d0acd2241cbbfbc64f8a8c288247536f
SHA256de0d19986f7f6239887ed4bc2846eef1d397ce264cb80407bdfd6cac263c9c09
SHA512b56ee1c12403e8133cc333fc661ecedeb2b4e2f8bf424331ff71d849bb50ee9c8c2bcb2c11db2476177e3e1007cb87b4ed8c494dacf8c79523bf7fc52c251b95
-
Filesize
16KB
MD58b7b1d42449d9104b6260f28d2b0f378
SHA105938af0270cba1ded6bc0e39238bac8054fba4c
SHA2565e6c9ebc3ce07157a460d98054b191d92597114d822e28a49b5f5a7dd57eb262
SHA5121ec6640606869299da66665f0c356cb957489126bda937d44bbff018fa8d4b4cc81576721192094d1dee1526684a62dc1ea8fe5d0c395b3ea7159730a32f70c8
-
Filesize
16KB
MD51291a91b1eab4f20b07da28150c33fab
SHA1345f05cc6c6b86d5ed1841ab617d3a061c22462e
SHA256878c9a4913e77748f803c0a6aaed421a71b1e9362f0b39387cc5c78c32d532d8
SHA51288dd026d6d81dfa064da619c0ed376df17af3d2257180ac94b6dd6e3b280d07ec07bf73ec1dc72660f3b4309d835b22ffa19222baa8e86665f6fbeedda6bef5a
-
Filesize
44KB
MD5800649944c2a42e6ec82a4a342627f96
SHA1a6655b36d9c7b24c0aea9a12b1bb68fea792441a
SHA2564d273038fede535f0bd73630f20a1b3b51a1d3f74c93f2bc688d48b99543c844
SHA5122d39e27a67e6f3a47a1a8a269fd524e1b4ce3edfca5352bebe0a03e1fa086d4a43c52e9a61d798aa1d7dc66fbc651a1a801339914fe5d34416a129cfe6e2c5a7
-
Filesize
44KB
MD5de957925c83c672b347ab724debf7b0e
SHA1e844a834716bf61471c802be3e4ce3b12fe5ee0b
SHA256d4f5427deb31aa8b0ccf0a397547247a1c834520b7337f7e0109a68021449a9f
SHA51223460d92cfd18eabd245aa25f3120d9067d8f0510ea8b3ef1ce46c44d00846ae6b65132a64f8d0391ab66ee9f9133b56420ed99dbc0abacb51bd26741933d4d6
-
Filesize
44KB
MD5ea25a44c5f7c3d2763b0cec8ea033906
SHA1d4fd1e205f7ea89a879d8ac5bd8b0251da78f8a3
SHA256f0319d89aea03a0cc6295b5a43c784cc4f91954e141c520c2b9e8070f9171837
SHA5128f13640208499d841e6c0007909d2bab4f14e33ba20cc6e6440c429a7245bf352cc3fe9bd0538033668348415fbc20c9807fcee7201dba48e1070f56ab859cdd
-
Filesize
512B
MD504cdb237e772d64319be7301aa182bc1
SHA1466530c252c2b4776ff7d082bd1448caa11cd1bf
SHA256d28668d06754d57d84e62f276fa6fa48af02a694bde1533b79c0ebcfaf59abcc
SHA512e9e612cbb581f87d16b2a432a4a2fc6a11af40b8278a6dba96e74eec8490af1ab25029d5f6d2c703cc94b9d2cd48741c36e22c581ba831c603683f601a78782e
-
Filesize
4KB
MD5d51e00b16472918f72636a88eeab1017
SHA1a7f59a572d0214f0432f92a66a2a079c36bf1171
SHA256d84f67a32915ce9f28145afe692e708108559fb841009fd6c170c1bac5499928
SHA512f21fe75f3b969f8cb747f887cbb455c519638be8eb7b111d8f18f7272fc2675d2dfea342f0b58557dc23a1e7298aff0a3c3c41bdcdcef0600bd7fa2c544568c6
-
Filesize
4KB
MD5e09081a489ff056188d8156c9d6ee0f7
SHA156fc179dcc16db1d7e22eea77f03b2d6b3232b78
SHA2563ee0daf05c827d0e8620c9e533b5bb819cfc409d517226b70785aaa7d4397c3f
SHA5128390914e451aa2d24573f1e1971954458e2f1219c84d69fbf82cd61fe509219c818898e96ebcee9b599e6ccca4f3ee0bdfd2672863234d545a95c9c4bf6d24e4
-
Filesize
8KB
MD59d583d48f56c56f7b2a465dbb04ca31f
SHA163673ad74de43e4cc682419b27fb9ab67fd0bf90
SHA25625f364fdb86dfd5b8b3dffda75a056f22d4345452c256ff0ac1a6e9e8e339409
SHA51252e79d20973ec466ac10e0d107d9cf38104fc11a8ef6d3a2ad4b0296c39f4ac2ecaf5294ed4bde293ac4d713fcfa1c06bf95f7adce29fb94e2cb704020407a2a
-
Filesize
8KB
MD5a6d5380af2a600dda75f4247735b7838
SHA18ca09308416ef50cfa76545b73a8d4a0d4d7039d
SHA2569e5dc65a12dd0aeaaab77ff867a1dfb15e6276d2c4b840f35830b9a50b281eaf
SHA51250bee1ebc6a696885de3a134321707394646e51088c1f740eb017091e717edc219f8be2e8d513d95aba8c9f8fcef160c1610cac9e7d24855f22b6e9f824af1a5
-
Filesize
8KB
MD5119449dc580ca7b4fc74771116e467fc
SHA1334ad6f5016def2defe58b5dc1b51d6203ae0052
SHA25647b83063f11dbc421e10877c2b89732b94eaff98b9c28768dc0130b6a1c8cc5e
SHA51274fc4df98d325e5d44a18e2445206eb4ae7132336b6fd4a7b26c45472403c76ad5e0583b2e2bcf2bb22c64fef1ab1ef0d87ddbef3ebfa751332dfeb19fc7697f
-
Filesize
56KB
MD5db6c851fa38a8f8f74daa54ee070e910
SHA15bd0947a48274ec08defae871c042c61466a385b
SHA256e819d054283baacc93e4fff28087a859b7db70307c17208d5156e21eb4f0b65b
SHA51202af823350ad15cb1a729e4bc9bb8309fa23604e0c2d1f3c206266e69c0418fac9628b816cbeec19f18d59416d2481c38eed58c3d0c3fde8f712f9dde5401adf
-
Filesize
512B
MD51c886f14d639642cd056980a967b9543
SHA184370ead911e8617b831035aa54dd6041a1e5895
SHA25672bc02a2835c813a5a56f153bcbaa10e10acac6fa2176c50ca81bdb291ab4486
SHA512458c689ceceae3387b00a5ad5226b548b441c0de0892d0116f23f8a75bf337078f2c8936c25ce50c096e22d3d8470f9ed12af54db5fd2396678e96647d51ba5c
-
Filesize
32KB
MD51cbb5c829e391118f3005a5868f1812a
SHA16e1c9c8d8bdd5bfafeb52e5ae2db9a79f13d9848
SHA25618528b3933bf451a0bdbcf2744b6c5c4483d0151817a182324400b98012483b7
SHA5127c7ed2b86b50ad17925091b9215af92c5aed292105e8d41bfe1e6489dac4f84d1161987b7dd5e5efe2593d309716dad0e4d1d72de6297b9a0771ff5aedec5af2