fe27e14865a14f34bb284aaf66b64be5ebcb1d6c386f4a1685500383b26c37d9

Analysis

max time kernel
3s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
17-06-2024 11:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b84ce030d8c998ea2a1db8a7af54c01a_JaffaCakes118.apk
Size

20.9MB
MD5

b84ce030d8c998ea2a1db8a7af54c01a
SHA1

d3d8dd46be434fb4d7d78118ae1462332ff00690
SHA256

fe27e14865a14f34bb284aaf66b64be5ebcb1d6c386f4a1685500383b26c37d9
SHA512

caa26780f4e7280dae3b3f20dcd75c3cae8ba971cfe0bd94b82724a4eac75bde62ae7e206bfb1df6155685e2df70c558008fdbfc9f2bc869afe8e77c63e695cc
SSDEEP

393216:KAk4q3W+pbDdSfyxQJjKrysoIJHRj51Y7D5KTM6/kMPT+ibrnBD8wbqGF:KAk4Mp9g3u/Rj5aaHPTDXnrbq0

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mentuo

com.mentuo
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4170

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mentuo/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.mentuo/databases/bugly_db_legu-journal

Filesize
512B

MD5
558dea83c94699282ea6912e3cc5193c

SHA1
1ea5b53c02028f90c41d539a466e5df6a3daef76

SHA256
b88dff65f9d38a2b76d91e4df0e36708d186e3fdc82b852fdec79fd85512ca44

SHA512
1bdef42564ef094d950ae131d3a40040c00718571178e9248cd1bb4af9ead09a02123e5c58c6669de36b32bdb3cf94c1d6554dca755d18f820a5376675b757ab

Download Submit
/data/data/com.mentuo/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.mentuo/databases/bugly_db_legu-wal

Filesize
92KB

MD5
80a0eaa99002111ed01037833889751f

SHA1
789f5c694e9e1094ea943a2e68aa140f690031a0

SHA256
5305cd663cfdb16c39eb261c50cbb95a5f2c1a067d0cba0513d2796b86e48734

SHA512
36412b0ce6f9014445a410dabd45eeac15daf12aa1a21100d2930e19606f63fdf305b7513e5099b235c7fcbbd6cf18d6c265823b825b236770c383f4e2214b7e

Download Submit