Overview

overview

8

Static

static

6

bc72cc8212...18.apk

android-9-x86

7

bc72cc8212...18.apk

android-11-x64

8

Analysis

  • max time kernel
    176s
  • max time network
    185s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    18/06/2024, 14:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    bc72cc8212f463c7992b0430f0419f2b_JaffaCakes118.apk
  • Size 18.0MB
  • Sample240618-rxzxwssapp
  • SHA256 cb7826ae840a17e011e87e79cbccfba66e9d1ff20aca1c8aec9c2a60e63b5ca7
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
collectiondiscoveryevasionimpact

Malware Config

Signatures

Processes

  • com.xgbuy.xg
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4462
  • com.xgbuy.xg:pushcore
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4528

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ua.db
        • Path /data/data/com.xgbuy.xg/databases/ua.db
        • Size 36KB
        • SHA256 1fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db
        • Path /data/data/com.xgbuy.xg/databases/ua.db
        • Size 24KB
        • SHA256 317539b36fd7afb67bcf8f784b665b9de2a9bea8c5b40c1831c8b691818e27a1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db
        • Path /data/data/com.xgbuy.xg/databases/ua.db
        • Size 16KB
        • SHA256 6fb3b741841ca486284db92957b22a0364b0bb0a16c5ac93ca37b35e9c71d384
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db
        • Path /data/data/com.xgbuy.xg/databases/ua.db
        • Size 16KB
        • SHA256 bf685ab3f3a6e4cdd15576b51b9ef560c319452cc557a0c29c77be0417d7b65f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db-journal
        • Path /data/data/com.xgbuy.xg/databases/ua.db-journal
        • Size 512B
        • SHA256 ec1a63ae18c757c6b0ad39bef75d32a16219e208cb54837adad3ef742b17d49d
        • MD5 SHA1 SHA512
        Submit Download

        ua.db-journal
        • Path /data/data/com.xgbuy.xg/databases/ua.db-journal
        • Size 8KB
        • SHA256 34c7397077103b8c7f46a75de928d17869a7b8f3089ce16c205a0dc462f2a4da
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db-journal
        • Path /data/data/com.xgbuy.xg/databases/ua.db-journal
        • Size 8KB
        • SHA256 e7d561fc3c61984c176f365e2c524fe887d95a4078b8d32048ab2290bda684a7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db-journal
        • Path /data/data/com.xgbuy.xg/databases/ua.db-journal
        • Size 16KB
        • SHA256 978a506602f524968d49329d687c1c29c4fb59986bed0eea488e7ec462950310
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db-journal
        • Path /data/data/com.xgbuy.xg/databases/ua.db-journal
        • Size 8KB
        • SHA256 7d0436dc6461d6f8468742b5d64c3030df69b898ed7e3b9097d2afb2af3ff520
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ua.db-journal
        • Path /data/data/com.xgbuy.xg/databases/ua.db-journal
        • Size 8KB
        • SHA256 8d4a064988ba9c583504e9e8d0922a16cd29316d9a49d7e233c42b04177a603d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libjiagu.so
        • Path /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        • Size 486KB
        • SHA256 c8d37512f73bef5a1c1b060676cdc6d508a8d8dd36f2438f5d6353c9b8524bef
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        [email protected]
        • Path /data/user/0/com.xgbuy.xg/[email protected]
        • Size 6.6MB
        • SHA256 fd4c1d3b24b0138f6f355235f35815ff43de7e73e5029854ac0581f6d5b4cb45
        • MD5 SHA1 SHA512 SSDEEP
        Download

        [email protected]!classes2.dex
        • Path /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex
        • Size 6.5MB
        • SHA256 920b1975141f98268ddde30a18db00a3c92776c8472763640b06009b90ccf039
        • MD5 SHA1 SHA512 SSDEEP
        Download

        [email protected]!classes3.dex
        • Path /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex
        • Size 2.1MB
        • SHA256 3798ad86a5974af83d89bc71f1737c1747ca4561beb07f74a214675efab02629
        • MD5 SHA1 SHA512 SSDEEP
        Download

        8629d67571a4b27d4ec7af580cf1e40900ac4eace93076b6c452f349c85d1b5b.0.tmp
        • Path /data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/8629d67571a4b27d4ec7af580cf1e40900ac4eace93076b6c452f349c85d1b5b.0.tmp
        • Size 106KB
        • SHA256 57c17ee898ccd959646b900c6d4f21645a96ae816134de1d067ad1c776940935
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        journal
        • Path /data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/journal
        • Size 180B
        • SHA256 ea9fada0aa0710ecbfd3754498ea65e9addcc3fd3aafbc49b87d558816f076b2
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        Reyun.db
        • Path /data/user/0/com.xgbuy.xg/databases/Reyun.db
        • Size 20KB
        • SHA256 430daf219825a14032fd4bcddf238bad4d9050a9bc8019d7a43b21bd7f609396
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Reyun.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal
        • Size 512B
        • SHA256 a4a2fa0098f68076f6c020af44151fb4d0a56518e69496a513e93f252d1278d3
        • MD5 SHA1 SHA512
        Submit Download

        Reyun.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal
        • Size 8KB
        • SHA256 06b078e68cc580f038498e122811d9c30459b996109574020fe811dc0b0cbb34
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Reyun.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal
        • Size 4KB
        • SHA256 bdd8ea4f57de629d7fefed758706ac161a3864c1943cd88e7d0fc820d69dd1e3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Reyun.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal
        • Size 8KB
        • SHA256 532a6975e3953708097a16525c5f6104f0fcafb19c9f6d747d76d7ad831f04a9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Reyun.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal
        • Size 12KB
        • SHA256 6579d9ed92e3cc15683610cb415ccbeadfd61e58eac5f1c882763545dae37f85
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ThrowalbeLog.db
        • Path /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db
        • Size 36KB
        • SHA256 8111125d701d6358e89890fbd5d8f32b2c282abd262efd6c53a743e201453ea1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ThrowalbeLog.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal
        • Size 512B
        • SHA256 062c9f1b6b0abc7e52f1a9817d7fa8a35c913538a17fb1171cb708e3fadcf551
        • MD5 SHA1 SHA512
        Submit Download

        ThrowalbeLog.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal
        • Size 8KB
        • SHA256 97ef796af6c77605c89c9b031ecca3b8ed89cda4181e7f115169026ce24b9e3e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ThrowalbeLog.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal
        • Size 8KB
        • SHA256 3bc8ea80d71283be37de7b3054b462b0428b85d1212771b59059bf2e705f9f98
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ThrowalbeLog.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal
        • Size 12KB
        • SHA256 730e0f8ae98c0c44abc1c0df271b073358124e25f9cfa484aa22566939f57eb1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ThrowalbeLog.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal
        • Size 12KB
        • SHA256 cce006d45e440903fd0478a1791d9012a18c1ed0fd126852cd265f2b87243f37
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ThrowalbeLog.db-journal
        • Path /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal
        • Size 16KB
        • SHA256 43d360c81165ba2ee780744f1e08eaa474e6da2f42604af3bf3ddc49e363e6af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        je_1000_ISME9754_guest16976206535944337347283361730490840289
        • Path /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest16976206535944337347283361730490840289
        • Size 28KB
        • SHA256 511d9685329325d20f4a78df20933572af89341cf6b6f65b536e1c4fedd289ce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        je_1000_ISME9754_guest16976206535944337347283361730490840289-journal
        • Path /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest16976206535944337347283361730490840289-journal
        • Size 512B
        • SHA256 16165629163c532a7687f04edf4edf1759490b97515f3c75f41f2773a589c344
        • MD5 SHA1 SHA512
        Submit Download

        je_1000_ISME9754_guest16976206535944337347283361730490840289-journal
        • Path /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest16976206535944337347283361730490840289-journal
        • Size 8KB
        • SHA256 381c5fd6bab5822f431fcfa2c835c85fb3eb0fe19f7972b387de9d39c2b0020e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        je_1000_ISME9754_guest16976206535944337347283361730490840289-journal
        • Path /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest16976206535944337347283361730490840289-journal
        • Size 8KB
        • SHA256 5a555ca02a79356dddbe9272a84d4e3f8898ff59a63ec748ac64c634d15911cc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        je_1000_ISME9754_guest16976206535944337347283361730490840289-journal
        • Path /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest16976206535944337347283361730490840289-journal
        • Size 12KB
        • SHA256 1d58c55b0ec26b3f76e3bb9bb1576bf9b31ef7fb49857ba897e7664c675fb8d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xinggou
        • Path /data/user/0/com.xgbuy.xg/databases/xinggou
        • Size 44KB
        • SHA256 afae33aa9f17ba323576e9a6e716496a3317cd85271dd5f4b38f7803188ab9c8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xinggou-journal
        • Path /data/user/0/com.xgbuy.xg/databases/xinggou-journal
        • Size 512B
        • SHA256 00876ec86dad056ab4624ebd3b5312ec059c0a71668bbf81a20ffd7cdee62c2c
        • MD5 SHA1 SHA512
        Submit Download

        xinggou-journal
        • Path /data/user/0/com.xgbuy.xg/databases/xinggou-journal
        • Size 8KB
        • SHA256 b45e140170b58567c38dc99f8d24abcfaa7f0ae246721690b0a9ec748f3b9b6c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xinggou-journal
        • Path /data/user/0/com.xgbuy.xg/databases/xinggou-journal
        • Size 8KB
        • SHA256 5a4d0a93daa41f80be09b205ca54994523ba46198c6035e9bd8d486010d9d334
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xinggou-journal
        • Path /data/user/0/com.xgbuy.xg/databases/xinggou-journal
        • Size 8KB
        • SHA256 912fceaa9abfcaa7e1e231bc695cfe9460d6b399fb4d1cfc39df52caa62b200a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xinggou-journal
        • Path /data/user/0/com.xgbuy.xg/databases/xinggou-journal
        • Size 8KB
        • SHA256 fd5f899b09d9aa2aacafe0376966bde9242446c4f76a1c3ff346e8f4e36f0dfa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xinggou-journal
        • Path /data/user/0/com.xgbuy.xg/databases/xinggou-journal
        • Size 8KB
        • SHA256 7a1bc3fd11578c7cbcafe86cb44681912642a428f02b216c847808cdf601fcee
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        a==7.5.3&&2.6.0_1718721339829_envelope.log
        • Path /data/user/0/com.xgbuy.xg/files/.envelope/a==7.5.3&&2.6.0_1718721339829_envelope.log
        • Size 1KB
        • SHA256 85a763d4c9049b848ecb5ce4d4f095724c333b0c596c1ba439f2c58b1e1b69de
        • MD5 SHA1 SHA512
        Submit Download

        i==1.2.0&&2.6.0_1718721337192_envelope.log
        • Path /data/user/0/com.xgbuy.xg/files/.envelope/i==1.2.0&&2.6.0_1718721337192_envelope.log
        • Size 2KB
        • SHA256 14820d9cc05b1802f185ff7627ee020916e0704e82132622a5298df9d1fa4674
        • MD5 SHA1 SHA512
        Submit Download

        .jg.ac
        • Path /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d
        • MD5 SHA1 SHA512
        Submit Download

        .jg.ac
        • Path /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6
        • MD5 SHA1 SHA512
        Submit Download

        .jg.di
        • Path /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 cc071ad4db4e1cfd0725b6c75ef78dff1bc6a3b54bef7bc148b8d2a0b9ddd8f0
        • MD5 SHA1 SHA512
        Submit Download

        .jg.di
        • Path /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 5f263b2199b8d15eab87de54d23a5d2c34f08f9b17d2eed78c6b16930c81f65a
        • MD5 SHA1 SHA512
        Submit Download

        .jg.ic
        • Path /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ic
        • Size 40B
        • SHA256 3ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152
        • MD5 SHA1 SHA512
        Submit Download

        .jg.rd
        • Path /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.rd
        • Size 32B
        • SHA256 77b8a926e64d8810db71b3d51f4cf37b68037d0d91e5ea2940872775e8442a23
        • MD5 SHA1 SHA512
        Submit Download

        .jg.ri
        • Path /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 89ff256cc5792d3f31b0ed8523fb045d19e0548ae212df71bec9fd9321117177
        • MD5 SHA1 SHA512
        Submit Download

        .jiagu.lock
        • Path /data/user/0/com.xgbuy.xg/files/.jiagu.lock
        • Size 27B
        • SHA256 cd06bd48f01384fdd02e5a5ea740a5bb3d32ee08fab401526caabc1095ee10fc
        • MD5 SHA1 SHA512
        Submit Download

        exchangeIdentity.json
        • Path /data/user/0/com.xgbuy.xg/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 8063580a3c599da085fe3f566bd4aa5d799b3b6a6a5dfdac4c5078c07f540e2a
        • MD5 SHA1 SHA512
        Submit Download

        mob_commons_1
        • Path /data/user/0/com.xgbuy.xg/files/Mob/mob_commons_1
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512
        Submit Download

        share_sdk_1
        • Path /data/user/0/com.xgbuy.xg/files/Mob/share_sdk_1
        • Size 23B
        • SHA256 65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
        • MD5 SHA1 SHA512
        Submit Download

        exid.dat
        • Path /data/user/0/com.xgbuy.xg/files/exid.dat
        • Size 73B
        • SHA256 b8dbcfbb7108827e6035150ae0c79eb8c8ae4409c77f239e86deaa002dee7ba0
        • MD5 SHA1 SHA512
        Submit Download

        jpush_stat_cache.json
        • Path /data/user/0/com.xgbuy.xg/files/jpush_stat_cache.json
        • Size 119B
        • SHA256 ac937356481f7188b91be726e4d81d52715e25bbe27f94d6e9bd15a557cac78a
        • MD5 SHA1 SHA512
        Submit Download

        8095c764-d4a3-4832-987f-6fa32c1ce61f
        • Path /data/user/0/com.xgbuy.xg/files/jpush_stat_history/active_user/nowrap/8095c764-d4a3-4832-987f-6fa32c1ce61f
        • Size 159B
        • SHA256 d47b5f2bb657e80089d596602b1eae83b4a44a7f8bb48959e5a132041314c92f
        • MD5 SHA1 SHA512
        Submit Download

        ab6f0104-fe44-4163-9e02-b672ec6f6bfb
        • Path /data/user/0/com.xgbuy.xg/files/jpush_stat_history_pushcore/normal/nowrap/ab6f0104-fe44-4163-9e02-b672ec6f6bfb
        • Size 187B
        • SHA256 1a87ae3f6c6e51538fee660c13c4dc039946cc6fc36da2944889a32a7c1de874
        • MD5 SHA1 SHA512
        Submit Download

        dW1weF9pbnRlcm5hbF8xNzE4NzIxMzM1NTU0

        • Path /data/user/0/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4NzIxMzM1NTU0
        • Size 1KB
        • SHA256 5f8a020f0dff7dff18439680a0ce3daf9da28663130318c98ffaa8d00eb9d993
        • MD5 SHA1 SHA512
        Submit Download

        dW1weF9pbnRlcm5hbF8xNzE4NzIxMzY1ODY5

        • Path /data/user/0/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4NzIxMzY1ODY5
        • Size 1KB
        • SHA256 86eb53601485e10b852577ee9bbe20f420bbe0588684b16e29280948df96c269
        • MD5 SHA1 SHA512
        Submit Download

        umeng_it.cache
        • Path /data/user/0/com.xgbuy.xg/files/umeng_it.cache
        • Size 350B
        • SHA256 957e6c62fe18df189e9e4dc69a7899f48200ccc2d5ef1d7e9ee3934857a49716
        • MD5 SHA1 SHA512
        Submit Download

        .deviceId
        • Path /storage/emulated/0/360/.deviceId
        • Size 48B
        • SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
        • MD5 SHA1 SHA512
        Submit Download

        .iddata
        • Path /storage/emulated/0/360/.iddata
        • Size 32B
        • SHA256 accc1ff30559f080e4662a82c4dcdc499d3cf9ea4b2894870ce89046dbe73372
        • MD5 SHA1 SHA512
        Submit Download

        .slw
        • Path /storage/emulated/0/Mob/.slw
        • Size 66B
        • SHA256 079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0
        • MD5 SHA1 SHA512
        Submit Download

        .push_deviceid
        • Path /storage/emulated/0/data/.push_deviceid
        • Size 32B
        • SHA256 1f1cafe66205a39e85b06263308eb6c3096f408193a3b83796c424ab0585a230
        • MD5 SHA1 SHA512
        Submit Download