4befbc31a73490fd62a0e3a627dac2c0c5bcf4fa4bc1a077824757b873db490f

Analysis

max time kernel
122s
max time network
152s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
09-09-2024 20:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d7120e9f07c1851bb370c4c164f8f418_JaffaCakes118.apk
Size

26.0MB
MD5

d7120e9f07c1851bb370c4c164f8f418
SHA1

5e9643be8cc7c610a56bdfaf40389ab3f2175812
SHA256

4befbc31a73490fd62a0e3a627dac2c0c5bcf4fa4bc1a077824757b873db490f
SHA512

9d7766cb700f1b9f6915d391c7f980bb748b42d28ee0ba7ead8aacd7bf44031d1020a708f8d723a4c5f3111d688bd1d54b9d881eb7f3e7e6eb5fddf10a869936
SSDEEP

393216:BcZCZ6PDBbr7l8eATTlz/boGotIrgnkHh+FJhXpZpfV1+oqNPqZSFO:BcZRPlbrieAXVo7WUe8PZZT1+otz

Score

7^/10

banker discovery impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xiaopeng.quantitative

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xiaopeng.quantitative

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.xiaopeng.quantitative

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.xiaopeng.quantitative

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.xiaopeng.quantitative

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xiaopeng.quantitative

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.xiaopeng.quantitative

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.xiaopeng.quantitative

com.xiaopeng.quantitative
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4304
- /data/app/com.xiaopeng.quantitative-BPPA4MVd_0ul8mmGEGsihw==/lib/x86//libweexjsb.so 46 47 1 /data/user/0/com.xiaopeng.quantitative/app_crash/crash_dump.log
  2⤵
  PID:4338

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xiaopeng.quantitative/cache/image_manager_disk_cache/5057081f866c81d5744b78d823a5f139b4a253722fa376f5d98bd2381597c810.0.tmp

Filesize
618B

MD5
0017b953e620cff60016090b81fb3185

SHA1
1d890b1a70031239178c24c104d23f14ebe33e93

SHA256
6ed870843394964bf65dc3384e5c17e7cf9e135c80cb0f36c0a0ef9b3afdb82c

SHA512
124298ae71cd964dc1ad770d5f7657bc6bd8436f4b085ba6f26561009e45bbca01faeaaa34dcf3ab38b4b4a90f60ddf46331e95c218045bc7895c78d62df931a

Download Submit
/data/data/com.xiaopeng.quantitative/cache/image_manager_disk_cache/9aaaa234b199ae5330742d817361c40a39002b5967c74c755b0e21ce6f8cad7a.0.tmp

Filesize
1KB

MD5
fced6c3c93b306a3eb12ccd3675087a6

SHA1
457508f4b9fbb1f00e0bfbe195f5fd5fac86204e

SHA256
6cc26a3d2a7e1dbe4efa62f26d4d156401e5f274ade3414d5c8dd33d2028cd69

SHA512
0e533759996550e66cdb7c952e211a1c7fbe213c953e0caa8f02eb76e4155b76cd57ecd0e01157e9c3f5e1f0c1a37e84067cff3c837c71a588898ad0c9c188da

Download Submit
/data/data/com.xiaopeng.quantitative/cache/image_manager_disk_cache/d8e55d23ee6fde43321daa0d13a4813a16e8425a45f2b0157ea332875fb8a503.0.tmp

Filesize
684B

MD5
4495197c985e67b7a255ac7e32cd9e08

SHA1
46d991d205fadc170592246cfd61a91c03fd003c

SHA256
c297a7152b879b0021e4d0147aa4ebc7e46de01c76becd0e28d1f53f6e2ad7cf

SHA512
5747321405b29f1a6aa7e3cb1bfe4ffbcd1c2f9c7352deefbc56864aa6cf68d696b980315490c8d117f3a82f380852c2c678a7f771dd5b383b99f77ed632f878

Download Submit
/data/data/com.xiaopeng.quantitative/cache/image_manager_disk_cache/fa6588d0949ac9ec988f3f5c7c56246cc173c413b87ec68d97c7f323e2b3592c.0.tmp

Filesize
993B

MD5
30434c3d36afd183af8df5ecf77ca0ec

SHA1
6de5fe6ddedba3cd3aada6bea82e80b180f3816a

SHA256
012248a836f774e22d09df8008cd426ea432fc94cc99a83a583af11776ff22a7

SHA512
04b3c40db15392824f73cd48a67c7396eb5312979b77eaf57a549b23ef11bc7c3393528a027b2a7284c90c49784f26cfd277e1f4e8c070ade92f17f6f9b4b9ad

Download Submit
/data/data/com.xiaopeng.quantitative/cache/image_manager_disk_cache/journal

Filesize
616B

MD5
365cd57cfb38a11e01a3f577cdb0fc36

SHA1
a928816c752e7db9bd17dfd7137dbb2a122407e8

SHA256
1baf888e9a8c8c0297231580b7d0305bfcbd1f9b624b6de2290fa69abf63144f

SHA512
af6df07ad8e057ee4424a6f066f98626d867246845bb3dfddddec3a36f9f61de91688d459d3f661192ba23196c1e3ce7d6955839fb1848e5083dd115550f5ccd

Download Submit
/data/data/com.xiaopeng.quantitative/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.xiaopeng.quantitative/cache/weex/libs/weexjsb/x86/libweexjsb.so

Filesize
6KB

MD5
9bb067cd33b490d30f2c88054c732574

SHA1
d95a11e2be5c7a1fab9820e34cdd9e482523ea86

SHA256
fb993dc086feddf19af9700c7428386e3e4a5c67f273711c371ff4460a830ae9

SHA512
0b721c51332313c50ae466fff1b4bdb48a71791bca67ee83d2882a19e8abb59dc1406ed15d6dabbcd3ba922167fbf68a3828fd82edf4b2270ff0191b8fed0dbc

Download Submit
/data/data/com.xiaopeng.quantitative/databases/DCStorage

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.xiaopeng.quantitative/databases/DCStorage-journal

Filesize
512B

MD5
cf6c2577420b189f5b81ba44abe07755

SHA1
c207957374fed67886de0fd7bc97b68c26694b59

SHA256
049a3118275ef0f8d44ca324da69c4b87a7e4e40988881c1321b279cb6154b9c

SHA512
e4fe52669f291bbe3c4c0dc114ae6c25f5ee915f9c1a0507820d3c664107895ce5663111f30c5db376a839e566f607f3f34095b625f63000558c364464f09c00

Download Submit
/data/data/com.xiaopeng.quantitative/databases/DCStorage-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.xiaopeng.quantitative/databases/DCStorage-wal

Filesize
136KB

MD5
309e374a4f9b04b4c628980d63a6c6b1

SHA1
564bfcdc1517b9108264b6bc072504ea12e5be4b

SHA256
1554cf848a5c3d6ace4cc5129efbed98203547518d9336ad0b62094732777149

SHA512
6a35ca26701ace2848a0d906dcf62a360cf971890ef660d548ee2e6fb880b6f520fd5053a8ffc7c291f814625e63849594ee2d62b9405fba941a15f9ed82a0aa

Download Submit
/data/data/com.xiaopeng.quantitative/files/.imei.txt

Filesize
32B

MD5
363cd82f98d2cea842335ca4c819edd5

SHA1
07ed41a314b746ff93e1425fdba0bfb3868d65c3

SHA256
58c4fc3e4fde449f51ff99bf69d62eaefb7af679a51aebc35b60ffcaae28a1ad

SHA512
5591f36fcaac93c1c3f51e383ecf56af54ce39e4b1058e6d1f46dd508dfe94a6bb85f372986ac6411d70b065a38383533cbda9f25120ebc043b6b9073f7ead67

Download Submit
/data/data/com.xiaopeng.quantitative/files/cnc3ejE6/eje3cnc

Filesize
35B

MD5
762298b93820a5cd8b6d8ec469078f7f

SHA1
d5b02a2ff3b235cd2b61ceff53a1d88b8984477d

SHA256
dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db

SHA512
70f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e

Download Submit
/data/data/com.xiaopeng.quantitative/lib-main/dso_deps

Filesize
316B

MD5
2c8a630f7580c9b03cd9730d96406851

SHA1
05a85ca08cf5c72caf6c1b473d827dae9bea87c0

SHA256
dfd193306e502f875bed1e48f3534d92e223646c452da823f15f185551e14db8

SHA512
dcaa385612e9ab86295739eac13a80cd4f59fb27bf8f6e38bf5554d47c384e7e87bbf15401ddf2669440c2aeb1fe14a6b4175b634338e8b6c9ac545bec96a54d

Download Submit
/data/data/com.xiaopeng.quantitative/lib-main/dso_manifest

Filesize
5B

MD5
c06857e9ea338f3f3a24bb78f8fbdf6f

SHA1
c5a0a2529d2deb60fec041b4fbd722a2ebe31702

SHA256
957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

SHA512
29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

Download Submit
/data/data/com.xiaopeng.quantitative/lib-main/dso_state

Filesize
1B

MD5
93b885adfe0da089cdf634904fd59f71

SHA1
5ba93c9db0cff93f52b521d7420e43f6eda2784f

SHA256
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

SHA512
b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

Download Submit
/data/data/com.xiaopeng.quantitative/lib-main/dso_state

Filesize
1B

MD5
55a54008ad1ba589aa210d2629c1df41

SHA1
bf8b4530d8d246dd74ac53a13471bba17941dff7

SHA256
4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

SHA512
7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

Download Submit
/data/data/com.xiaopeng.quantitative/shared_prefs_ext/test_app

Filesize
29B

MD5
acbaecb03b3b95c360da6867d31769ff

SHA1
d9735b61529c109bc3fe546b4a714750403d4ce8

SHA256
ad025068f5d192a4d69402882ff1757b7e594d774f55b154a10583ed28f118f3

SHA512
56a675cf01edaab699eeb06d511da9d87701de9f52e0cb320c8d51acbcb3db184b36c8c0c3c96701a61a4478c25ad78a4c473f92ec5adb4d024464f976651b18

Download Submit
/storage/emulated/0/Android/data/com.xiaopeng.quantitative/apps/__UNI__19BE1C6/temp/1725977830278

Filesize
736KB

MD5
1764ddf6d93a7dfed239472bb5178240

SHA1
4f8ffc0149e56d50d26389386f8cbe1ac79b4e43

SHA256
7080d39abc7ef6939130482d6a0e2b70feae4b3547e2b7a2c5a8d3d96082d6ab

SHA512
add699ebe3a704f63ddbd339b44c0b4fd3a9bb9e52146ec7baa395b5dbac5420e4e5385e7c40f35900f403f7eabcdd0dd2c0af44a03b1119f4c7965d435d5ac5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads