aa61dd6e3fb3ead0d2a95cc4b7c76e690e9f2d001eb8c2152153a5c110a3303a

Analysis

max time kernel
3s
max time network
139s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
08/09/2024, 11:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

d43b965c9531e3066942f68bbafe4001_JaffaCakes118.apk
Size

7.5MB
MD5

d43b965c9531e3066942f68bbafe4001
SHA1

d4765fc860f0d5a39f374c011d761f1be7ced24c
SHA256

aa61dd6e3fb3ead0d2a95cc4b7c76e690e9f2d001eb8c2152153a5c110a3303a
SHA512

3a20c81854f809008c97cb70547452327e9427c5b6a88696b0af2ffd8706203e9227f5ae1047b881209b9f1c53f00f40ef3f4a2404035e0e70a5e3eb2ef4f599
SSDEEP

196608:qhR8cBE3SSL2ifRrK+HRfRsj/L3p29/QL3p29/2wjDIte:WEC82i5O4R0L30QL302S

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	io.dcloud.iacapp

io.dcloud.iacapp
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4213

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/io.dcloud.iacapp/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/io.dcloud.iacapp/databases/bugly_db_legu-journal

Filesize
512B

MD5
02f63b42919074ccb9d0dc8a78254d27

SHA1
b57dbe2d2943476cf6c6ceceee5b9ccfb7a75138

SHA256
79d8a61cf5b7a4d7fcaecd05a4474d0d6ad2fae7f7c1632e338cd3106677a253

SHA512
53bd58aa462c724d513e8a4840dc4adbc49505ddf2022a52cd0ddab1817641801f4c4a8589580546a652096c717692c6385754651513db50fc67da2a07b4062d

Download Submit
/data/data/io.dcloud.iacapp/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/io.dcloud.iacapp/databases/bugly_db_legu-wal

Filesize
92KB

MD5
ec217d554f3aa9b496fd6df89a17a5f2

SHA1
71ad4417bcea8efc9846edbf39d1cc04fc32ed08

SHA256
1b633f5985cdceefbaf196a2dec6ef2e7df2dfcf7002a01e4bfea70268505ba3

SHA512
1c7667fe4488fc726ba1ae83af2b106fe30b597f72c83bb3bfe2ff455cba77f3874090e3958d36b85267dee6b38dd57cfc6e67ba31cf81aae1f818af7b79dfc2

Download Submit