5232a7cf86a7aa1d725ea6196d21465e741ceff08361c45c8e84a8e86501cf19

Analysis

max time kernel
10s
max time network
151s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
16/06/2024, 02:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b15f71847345007106a531ce4fadb1dc_JaffaCakes118.apk
Size 10.1MB
Sample240616-c5n32aweld
SHA256 5232a7cf86a7aa1d725ea6196d21465e741ceff08361c45c8e84a8e86501cf19
MD5 b15f71847345007106a531ce4fadb1dc
SHA1 0c410399ade2fda7cd11925c6474269636fd73e5
SHA512 deeb31f867244c124ec65570cdee23a466d0cfd666047e5e3510cf69fd1f7fc186997db49e27d00484a9747c53dc8763371551306e4bbbbee60d53acb53a65e5
SSDEEP 196608:uVhVC5rXG5Wr1cWr5L8Yez3/VkVw29Cn33WCn33s1SlFn24Wb1VcAAefRgwy:uvSr25WaWr5L8FT+9C3mC3cElF2vn1fC
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/net.novel.yehuo/mix.dex	5101	net.novel.yehuo
/data/data/net.novel.yehuo/mix.dex	5101	net.novel.yehuo

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	net.novel.yehuo

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	net.novel.yehuo

net.novel.yehuo
1⤵
- Loads dropped Dex/Jar
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:5101

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

rqd_record.eup

Path /data/data/net.novel.yehuo/app_bugly/rqd_record.eup
Size 352B
SHA256 215e5e5ea50fed53d2d6e3a4a26823b216e6a0c9b3478d87d225e3c13a43fac5
MD5 908fbd34a9d650bbaa738621b6dbcab2
SHA1 3320e31db8f12cc1dc1ce7d5d60b5453459e8a83
SHA512 fc41af524904a94731ac5e0898cd6854fa568f69d6ef7bc7592a4684a3e735d87a5c2332ae46408ba9f7f0ab3a3ebbb1036180efb64258e1c110a383e2b4ca0f
MD5 SHA1 SHA512

Submit Download

rqd_record.eup

Path /data/data/net.novel.yehuo/app_bugly/rqd_record.eup
Size 1KB
SHA256 43ed8cbcb7cff2cd077f9c0794f922f0f97f9dcabc2698e635f9cd73c817a1c8
MD5 7f21e811e069b226a2f135bba679a244
SHA1 3c05a53186708afd8c288dc3225a84a15eea14b2
SHA512 5ace7754797ac5e320763b66ff620bb62c04fc1a7efb029991524dd81ef0894d1829984abd8ea6588cc1b0dfd1c67de130c6ade3098c143e0667c853051605f3
MD5 SHA1 SHA512

Submit Download

tomb_1718505604972.txt

Path /data/data/net.novel.yehuo/app_bugly/tomb_1718505604972.txt
Size 19KB
SHA256 a98ee0ee084e8322a6287f80d75192142815b9145088f0b77764d18cd48f9b03
MD5 2cd7378c944269730ac34d527271f779
SHA1 c43086286f61d10b364a3b92ad0bc3b7c03d6cbd
SHA512 4363d9b0b6c2f9698161607a81ee8cacccfe3a0994b0610adc814d1f8eb059957db9f177d7bb9ba42ff7166947576012e577f00721e5c74d45ea151ad8ff6331
SSDEEP 192:B5GOHK+w+vcQ7lIy3F0sp0Tv9D2So8vgWCl5oD0xxY9HPUumem7U:JHK+w63qSo93lvgWgwHPPmem7U
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu

Path /data/data/net.novel.yehuo/databases/bugly_db_legu
Size 60KB
SHA256 9fd7cf365be7e7b27e6d8f0dd6b3e08248637f68a6967b5a06b8a55c0bd4fed8
MD5 2bee4dd0108bdc1f3dbda4e4f33c16d3
SHA1 6792df221e2966470f3aea980d38a817739af205
SHA512 224fd47e7dbd915b7e94e48b4560d6815bb28c7320f7d170e6adf183215fc5b66ad069660074056155be6f6c04b0b1ad5418b24f8b361b5f599ba00d7e9a71bb
SSDEEP 24:TLmt+qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGS6/ieuvL1KyRSf+wbxsKOUx:TzfrQiw6uMg6/YBg72meposSMWBYfO
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/net.novel.yehuo/databases/bugly_db_legu-journal
Size 12KB
SHA256 96a331b1e8fa68ca7058df403c58f953ee8a09a297eeb9a5ac037fc05fb37d10
MD5 be1c0165e7d32e6aeaf90afa8dc43977
SHA1 6c80ea9691cc9181e92b28d8f08a1919757f744d
SHA512 1ba30c90229acd9ab0521af637ec0f8881db786cbd97cb2200f7da92b6213fa34ccc75617016cbdd58df1142763e16e71857c70d2796ccbbcf9e416cf0f6e0ff
SSDEEP 24:7+tBQj6SyqL1tGqqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSu:7MWiqjfrQiw6uMg6/YBg72meposSu
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/net.novel.yehuo/databases/bugly_db_legu-journal
Size 512B
SHA256 12f075bb788c6dee5b6f570ffc77038c152aa91231abd406a9a87c25c30f2e40
MD5 ebab9bdb5fceb4614fded7136477a143
SHA1 b2740dfe8cfc1ccee4f8bf4942d3a2f79c523f0e
SHA512 77468ed02753f5949297863ca6f64893f77603ad5489f609d7a7f7ab08a159f31144b2a4c2d391080cbc82ff89fc1b2507b741eb23fb2a9a83dfcc01c7f7b073
MD5 SHA1 SHA512

Submit Download

bugly_db_legu-journal

Path /data/data/net.novel.yehuo/databases/bugly_db_legu-journal
Size 8KB
SHA256 77c4bbba5e29591f37c93af40102c636ad9362405270e46fc3c75db157cde620
MD5 dce356f267d5258ae13885b31b6c3577
SHA1 ff59346aa2cc0089b0a943db4a9e9ecce79bda3e
SHA512 2f91da482e5097dc9f668fbdd40e088e8036e5cc52f25e690a626f14aaeabe86446fb8ad20735215fa3de1b6a10a79f37b694b3353ba263e8c9a79b157098f5e
SSDEEP 6:7+/l9En1Tg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKsS0:7+tcqLiuWdwRmBEyPbO0
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/net.novel.yehuo/databases/bugly_db_legu-journal
Size 8KB
SHA256 d835a075c1a5b026596a9e5cfd6cf536b629677e8bf876138402d337adb1a3ef
MD5 4a96896c679292f9de5f2c031d588ea9
SHA1 88fe61ccdb9d8b3260ed99b43ce86cbbf478f7b0
SHA512 1c37cb4db14e4504369170ee4f1b3df803aef4d73a9f3d0bbb52339327b84a813b8c2b1b0dd5223c122a8de0202c2f819fbcb48f0bc332237e22c437063b85d6
SSDEEP 6:7+/l9QH/GPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK+E/C/IHn:7+tiH/6qLJdTRmBEyPbPEq6n
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/net.novel.yehuo/databases/bugly_db_legu-journal
Size 8KB
SHA256 5e7c11d63cfca0f3a233caec1ffdd5e9cf1e05795cb924996e7e49d06233ff6e
MD5 8e9fe1559554982b45db9b96d4b464f7
SHA1 4833277a1ca669b5374d8eb916d1d51ccfa9bc6f
SHA512 3ae902c5735148b9037f918e0bf38b6dae7eeab4dfe89d5b0560f2813df7603e533fa6f14ca01cceb6b7596f659685b66906f0489957dab7f4cd50c614717135
SSDEEP 24:7+taWqLTt/qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSA:7MNqDfrQiw6uMg6/YBg72meposSA
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/data/net.novel.yehuo/databases/bugly_db_legu-journal
Size 12KB
SHA256 59d6fb3b3a6a683af91ee013d881833c56ec105465c5a47d2fab51eea2ae35dc
MD5 189eadbd0ef6612bf96934db0b3a694b
SHA1 15ee2292d35fe3f88acbc31f3726b0923619f1e2
SHA512 d37822e671029886a3324d374edbfeb188a9615567183cb6c5b0e484df98d1914dc1dbd600c8268025e1d33aeadcc30c3a6aef2f4274ee5938800936a3f86c91
SSDEEP 24:7+twqLMvtslqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGS7:7Mwq3DfrQiw6uMg6/YBg72meposS7
MD5 SHA1 SHA512 SSDEEP

Submit Download

mix.dex

Path /data/data/net.novel.yehuo/mix.dex
Size 292B
SHA256 4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615
MD5 63f77f99bd2c2b772a479923bde11974
SHA1 c7632e7d301e4463fafce85f84e9c3d7da3fdbbe
SHA512 3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads