Analysis
-
max time kernel
135s -
max time network
134s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system -
submitted
19-09-2024 05:22
Static task
static1
Behavioral task
behavioral1
Sample
eaa99c3fa9bd2dc29631a79210bcff78_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
General
-
Target
eaa99c3fa9bd2dc29631a79210bcff78_JaffaCakes118.apk
-
Size
13.3MB
-
MD5
eaa99c3fa9bd2dc29631a79210bcff78
-
SHA1
e081467a27d96fc6fecf2258da2f343280a15513
-
SHA256
89aeff7205e2a924ac6ec4cfb2bf506dcd85bcf8db23032f191bd2fd4bc93b0c
-
SHA512
7fa9815b77543766cbd8dad35ac44567eff08d72236438851cafd0f5764867e5ba2adb3e887393ad830989dae9228c3fe277fcc1b8392a9e4b5b01e14e4f5dc5
-
SSDEEP
196608:ImhvXcH+666lPBIz9oi7jFeFl4f0L4boxDK53RgL2QSGvw+UXkMMG+nvQAi7:7v/6l5cy+Lf0L4bohmhgL2QSG4X64T7
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.gao7.android.weixin Framework service call android.app.IActivityManager.getRunningAppProcesses com.gao7.android.weixin:pushservice -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
flow ioc 18 alog.umeng.com -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.gao7.android.weixin Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.gao7.android.weixin:pushservice -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.gao7.android.weixin
Processes
-
com.gao7.android.weixin1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Checks CPU information
PID:4364
-
com.gao7.android.weixin:pushservice1⤵
- Queries information about running processes on the device
- Queries information about active data network
PID:4425
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD52ca5f906649e568b68bd5f9f78cd3344
SHA189616b673601278cbff05920a0366d2aa92029e5
SHA256cb0fe902c954fb2683ea4f6b64942bf88b78fec67a474b2ce9276bc1f9718e9e
SHA5129380930e4e8ef480190a31198a873814a5dcde32f70ac33af02f62207764aca1a6360eaf3eeb9e9214d5a515900d3030bacecc130b5a71970cc31d9306d85aae
-
Filesize
512B
MD5b9da3b826cad9ad1e2cd9a05b326cf72
SHA157a2f9a3f1862c38aaf9642ff5d4eb455a37c561
SHA2566d337426a7bc6c6ba2b31f1567d68d433568ce5c35bd2268c048b3c049997e67
SHA512946d2497e467d1d1cf83258bdfb54e76185367e655dd3e3f6cc0d1cd6a059bdf8aede35372963beb960717074613203015235c2ce97ebaab3b12a0bc719ff319
-
Filesize
8KB
MD591aeca7113462d7fbb14e6f747c347e5
SHA1062bf619c0871d75f22fdab4095e504810b60176
SHA256e332ebb7a2811e93ca5472eb38ff501d5541c070071d3dbdf111b0ae7159c450
SHA512f773003d0cec38dc6796727f6b57353305b107f7458deb2c81a0ef6088686a758e25c95c5f409d00c193ac9b9d33929fbe62da706bec9af59eb001745b29d607
-
Filesize
8KB
MD5f062bd6051bc0baa5c31ef7b2b05c694
SHA149310d21a97df6495fd0bec56159a19550753c44
SHA256ef3c49c098753d03d267d1638f5643df88564e2496ae59f3928cbc95a284f0cd
SHA512ff6d4d02c52c3ac35d9224945c5276662b6b31c66f6aa7beb9ae8681217a78e0f1b6fd04927ec8558129da86d9866c754b5caf2a34221c8c43edce331503ec38
-
Filesize
16KB
MD5e64937f5a763b7b8a1bd501e2cdda7cd
SHA1e9f7574722fa055cba6700fb8c6d3ea986b5ee16
SHA2563586d6f89a0d319efe44d978f5bc9a1ba3e6d179d5780a2be88f4e38db20db57
SHA5120bb2a1eddad8e7ce54d5d34f6778f0dc780b03d70f3ff1fdf006f56a2ebce5b0124d4ae5880c7272c177c84369f32f134de74c82f3f54b1b60120fab06421f5a
-
Filesize
2KB
MD583a8277f9f8470136b1e0ddf6b7c8f7b
SHA11e91f044cef3057f933e9fe2499b8cb2e865cb12
SHA256b305874ff4d7919fb1526a1f088a1d662a370e61a506519530534eee9443847b
SHA51238140b5cbe6518701ff752db7045ed77fc3fbd984bc9e34d83ef1a7399a846093261df781d1bc93a2770da49ecc3d5c54e1a0b5cae3223e004805838093a43de
-
Filesize
8KB
MD538bedd9b63d87ac7ed9675de6ecd036c
SHA1bd27e31f7d7e3bd857655760c1ea44f9752abe2d
SHA2560df54b5d2b9bdce8003b375de5191920aec7ca5b0b90015eb7ff0d9ff9d549d4
SHA5123c2f4626856dee8459652d991851a6c8d316859c59cb18f98530d8949f313025ffb684630b428b97c5ad4a7628eca82a23895efc6e18c4271b31b8bab65d168d
-
Filesize
8KB
MD57d2a24f74873f7a0c12d0f2b63b36dbd
SHA1ea4359800a4a9faa1c496940c5c0307fe98f60c3
SHA256049c338d8c026567bc17bf7323ad2cfc380e4b9d8dc5ce303d599532350dff3b
SHA5125fd086e0ca3eaef3deec729990b2323e1f65ae9f4c3772ee232521ae99e8afb46d615ad060ec4c23ad8e508a04a5e41ff4ef08f9b736ba7b9d58e9c3f076852c
-
Filesize
16KB
MD566275cef421323d3471c75c43debc09f
SHA1110ffaa6af3c7db711b7ac2d5a483f4a7bf8b521
SHA256858e56c2cb59563d45ccf30e79588a6c05afd4a20cfcd1da0a3275ffc0af2e38
SHA512c5823c296e19b15fec25c501ea063ca05dfad0551477d077c19daa3ca39184f75d2e83b4170f2ad191398076ae4d422c2d501bc99ecf8d6e88eb4628fd30935a
-
Filesize
512B
MD5b54e6bb609d822b36fdf60852197a4c1
SHA13eba3cb96617c133223d9a0b040dd4ee40cf00b4
SHA2567e4f12ad441fc003754b48e72aaef2db2ddfb13d9cae392bb5955c1b2170c026
SHA51214b241bc67109b4c9071a37b77373b729188ff0403ba96094b87944a6930deb46753f8a72ba15cf608227930d35a16572da948a2ddc65398965f73edf174379b
-
Filesize
8KB
MD51a3409cedeb9a6068024c65794223115
SHA11616a0ca48ca6a4c71617abd3f91457c4e0619e4
SHA256d972bba2bbbd5deda94af2b9faa627a6bb38a2b8e8dcce9111ba641f8f6a9776
SHA512940d13d15004fe27e69fed0f3a03c67de0d996142278d952523d128fdee92e2ef829ab448a1db08838cb032461f9469f64d7172d97a1dcdd4b2b89eaf64aad7d
-
Filesize
8KB
MD5c53084deb2415e5885bed7e53000790c
SHA1ef1a1d47eb7553a69982083ce76f678982d94873
SHA25685ad5864e4218bcf8d4665a01368990164c099f6079cf02d844a2d99de098ddc
SHA512792f7ed86968b41c46bcd7bde1b40d7998b2c328258432a8f1008cd06c737c4c6e897d7051fb35d72f0e2c4d0f786c6d17d5b660b4bd52b1f95d4e4dfaa4dec3
-
Filesize
16KB
MD5bd8a329f716aaf38afa96fcba5205571
SHA1e0a507e03ee32ca4a808c97fe6b90fd7c818ea33
SHA25644dcb660b8c1fb9594dcdbdd89ca530bf54c14702ee1fb810b99999cd22f4815
SHA512a48f96112b0f4fd0377a315a6b0845a9adf5d7d6f3d6decec29d34ce0e5a6d246f3944833bb933fd740e597d145bf350620361dd56168ebee5cb31c92b3e414d
-
Filesize
512B
MD5088e395087fa8086b56931710aa59471
SHA114d31f4159fb340e7a65c3327683677e5a9b8b3e
SHA25660d2fd2cfc361ec7fe991fc65d5177cd28f88bf6acf51d2ab9bb743710a98d7f
SHA512f1ef356121ddb25f2024e1406660a79e6a8d8bcf33ea3f70084d571e877d072a730552d9ea587c1e724182a5f15347455b49f56f233ed86adba9afcda83ab044
-
Filesize
8KB
MD54ac6b468d3d5245a776182384426af64
SHA1b3a3019420bced9d571bfcbfa30a3a97aefe2580
SHA256b105459f2a626d6f6e1f378996df4bd2e45e3e340e41a5c132d59a016a4eef41
SHA512a6c801b62e6b9f5fa02f16d7be23ab4e54cfe979b46283006f9957453e2b5d76fed052a24e163e7a60581d1028a1844fc86fed5372756d0339cc3fb2c244a13c
-
Filesize
8KB
MD516f9102ed6079c4e83dc8ea7135e03d2
SHA10213ec99ca63652af75793ca6562561c76ae6c52
SHA2561f1a2f57871b7ceab7b84ab4a9df7c733f5bf0ede360bd24f477edce308bbe41
SHA512e8eb62a2b46c526150a26481bde0904234d2f9adcae0c7b32136502b4dd960a78376988034469a5fe9a5f92fe0668b72d3ed2a62fd3c7cb2a9c9b68587769f8f
-
Filesize
16KB
MD5abdcaed28a98df09ddc3535da31ccee6
SHA1ac75326e82f1e6f42a574d25a95244f71e9bbbc1
SHA2565fb5dc7e5cf97fd925e41bdb23d51434f82088c97e75aef4338d2e862514988f
SHA5122db7db55bd9b238e2c8166e1045d55c346a685be38cd5fd5f31cf0316b70b5ee014e71833a77bbb1a8269e215ee63072b8f6038505d6a1524bafe6ffa0f090a9
-
Filesize
1KB
MD53ded1162d3a4685e117a3f5dbe30b7aa
SHA174914e7bdcfdef4e266db6ddbf5585dde62d45e7
SHA2567606f8b04781a1204fd1c027cfe46cac20625a0871ea6a900e32c58b648db4cf
SHA5128d9f4f33dc73be2ebe0b507fa7387ec862abb1cc853ffcacc011d421013fed8e1f5f556fe355f4411d1e8f84d8ebc9b9c291021a7dd2c7718371840265c880a2
-
Filesize
8KB
MD52f2ff240954aa55bfc46209179fc79bd
SHA1f0942f0d21cfa60f0509a9159294934c28dca7dd
SHA2560a59f6ec1b29567923b08371257cba0dc58295f42b931a53eb9c0fca77894533
SHA512f4d0832087d5dcbdd657b824632cd136f11df67d8607fca421d7f5f0e37c5aea9565780091f699ddc744c5c12b35811bf2acd60a16c9f9a05e1160458c31a827
-
Filesize
8KB
MD5870f93dcd313585f9d27b629cbc744a7
SHA14e0fb9593ac65b1da959c3a9096a1ee5b903b12a
SHA256d3104724f0ebb4529c68ff221f57c9bf642b0218b3db6d7a68100ae96d30a65f
SHA512fed22702d44a841d2fbba5eb07dc16703c927403545a7f71f7a81c3676e786ed0f268c7c3c8d28b3aea8ea3c20c0b864ec139214db9c12b28c8b9a354d11df6f
-
Filesize
12KB
MD56d527da87c4c692e2091d953eacc7523
SHA11ff367e91ec7428668218c1bdc0dcb49541f40b8
SHA256b78ed93c9a3f339ca2eeb511aa6d79e594931a0279815b239f7065dcb5f810fe
SHA5125402292ce8d85214e91e24be0c314b41a9846e9dee8ad6ea405553bb04c2597084829a99cad810e6ca327f6fcb80bc99bd42c95f2f6a247d681eb19444d362b0
-
Filesize
512B
MD5b3ba1796cb5085c20a612ecc29d2589d
SHA1aa9bb4fa2b03da555ed27ceb0ded9dc3ee414402
SHA25606f2a86652987c0d23b35d8235e31d0e793f3e1c15fdd15e56d34fe0d5d4f906
SHA512cf9f0d0ccdbf78f31ba71790ac897be16c14bf96790c55be7d8e2cea02984974f0fedea42a43e457e428c9b0a74537635ea2ed47d2261d9dc1b6141f500d1ab3
-
Filesize
8KB
MD583901324431caebaaf1cba2a9fc65237
SHA1b03ab48a868e552bd131054dceb9548671615037
SHA256705fabb09a952e94a2efb2cd5822cc790646df3fed806789cd586b18a3fe22cc
SHA512d9fd0ef7aea28ab002e4774df4928cd75c039e2c3b935cf5d500449edb54eba1ab5f30fe7259e501fc0d9b17be4707c86572fb7c0ec6f98847c91027d7db37d9
-
Filesize
4KB
MD564b10a7885a5443886a49c90a8289139
SHA1d464074145808e5ac3f6880dd21bfbb98a7e0e85
SHA256df5456fffd59fe0f9000b0fe268aea5e4fb805ff8b3faf3652f689d2a5e7046e
SHA512b22d48788b56923919a1861e2f879d057c88c25c4effad32c9b407b9733d0d880d2eafdc2781f514dbcded63f7b71fb71d879f7088fb9544f5f6d6b8bc5092a1
-
Filesize
545B
MD542586f5069d05ed115150b89b4a98192
SHA159b41fa39585c19c6849f320e40af7450523aead
SHA2565c6a174735ea26c687d2c9eb1b08fd79a4eadb97934db644203e99c59a9bf0aa
SHA5120b7c4ddedd5c7bf8f1969ecf7b04e204f7ee9a3c9ca1df331759f6d7ec5fd0b40fbc954a8eb3f5d5578bfb3a4c73ad6812fa2cba196ed5b5492c9961e65cf561
-
Filesize
162B
MD54dad851c365e96614eb3caf1bc93c749
SHA16e6799ded77d73c1fb8d564799c1ddecf54fb428
SHA256266b471b07b6089fd56d49dbbf3a53be2d92e42cac3ddecd9cbb9fc83d471981
SHA512d78f7eb9b513cceb7ebe5881b73005b288ff38bdea8b2c57d63a2a580df0d331d2d475f2eae9665552fba3d975198fe75c2c6397bb008274f419d7dd7ca68a79
-
Filesize
245B
MD55a3d6d00bfc5e0d60b01e1a6639b91ac
SHA14c5513bce72491da308e7e6faf276ead9bc0ae52
SHA256b4ad423c0eb90384c0e167dc274e7762645f78ca1ebd005dc67da23d444e2489
SHA512bfc1b006cd0191b6d649f92eee711fb6604e6c7572399982845f6f94d2da0abcd3c57680a99a53ff496524cd7dba6fddf20decb242a2f94543c3684061ad266f
-
Filesize
20KB
MD5d0cc1858710bd452077c06eba8d88481
SHA1b310279b98dfa9c16f8cc56fc725335865b65369
SHA256a0170b7ba7ac0dedc1057a9bc6bdc021d0b0500d3e4d88d8cda1d028a3fec4d7
SHA512568bd0fb3d2c5b3d5b881729ffdb54352efdf4d3b4de2218547ac8d03dffa9ae818ae18ea704f07d19640a33183a4f6416b2683d44da4e34582e0a7c2553dd95
-
Filesize
8KB
MD5f7731c26075da4d761e96768b61eeda0
SHA1987efc30b7b4ee05a97161806ec1cbe4652bcd9b
SHA25663d31e89905b6176894cbb6852d68d251e14effdb5d01cadf54dd446bc1277a4
SHA512c2d69bc35d88b4c7bb0cc9449f3835d38d9f11e0aecf0bc73cff6d4e8868eead98532f667e88ffd80be3d81be9f179339dbe155413bf4611032fbaf93618ef29
-
Filesize
91KB
MD5cfa9051cc0b05eb519f1e16b2a6645d7
SHA1149b5180cb9de3f646fc26802440a6ac6e758d40
SHA256f23d4b309b72743aa8afe1f8c98a25b3ee31246fa572c66d9d8cb1982cae4fbc
SHA5124e2a15148d477cf00587b04602cb8207beaf22b98cae8581fb244d2a74da9f6e8e042769747f43598a13c596e35bc902287dd00c8b61780115b28e4defec3be6
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/cache/download/tpdownload.db-journal (deleted)
Filesize2KB
MD530cca7796924ecc9fc8e39586053625b
SHA1bb6ae840962d48b02fefd09d849deb09971e688e
SHA25616112ac8ec819a44813d0a270934a6cedf67439d93f7e173006db614f09368c0
SHA5125b32876a2ce0ad4cc4921b2e1ecf3f3c159b8f3547211ff95e90415b9019c3d9ee442250f1d3c68a218eaa1fa3f8208c28c387e73eff3e58deda2a84526d973f
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/article_template.html (deleted)
Filesize2KB
MD52a6e9c0be33a9ca1fbab8edd67ff5ea7
SHA1499f0a2658fd412fa0450bcfdb8fdf6691b67446
SHA256135542938ab440ec16258d1fb52197e0a7aaef19d67e6bca7dbd71a20f8afc06
SHA512a9d5d198eb1039af4844b1370c569aa4d8a7bc4d7cb480814ee6f90cb9ec59f007af25e644cd516cda1cb34709ae4f639b300afe73c14a40105c8107d0f1a865
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/article_template_night.html (deleted)
Filesize1KB
MD552b521518cd8d47ad1f53194c65d1f11
SHA1085bb8cc266e740f484b126d32d0ca71c62d6d5f
SHA25612cc9a0cb50af0fb427fac03fd0ba786ca89a4d2f386328e5d9805eb0835cd1f
SHA512e29968c1949a7b0ea193e791c72f0d5bec4f4cc66ddfb38a6e5e5396473fc1c32a833be0b0f24152f830d746ca4e9058f4447d20f4dc89596a137abadfb24c7a
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/assets/default/detail.css (deleted)
Filesize1KB
MD523e755d06ad9a8d39db60de636d8dee8
SHA1073dfeefd1ed17ecad4a7ad0e57bfd17c79f50c4
SHA25671095df7c88bcf3e3b408f8b46820fe6bd2603bf287d0ad05c4268e58a4e9e42
SHA51234078f4d2ec7923f997511738050412ab4bbc5c695b47034e212f7ac9debcc15d52c6cd9f76aa0f0223dcabebba3161a198794a44d0064d2b5e300ec2093aa92
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/assets/default/web_default.png (deleted)
Filesize834B
MD556a26b3846ca68147bb81032b7a8d514
SHA1b5b4eb427d5e14b1a4047d5aededda1130d0fc37
SHA25636a66f2d597cd0cdbe6503f15d044360de66e79e0f20f0bab1a4ef900f7efc69
SHA51202bdf7eb1f2116ad674efdf404181053b38bdf7c51f5b21953fb53f2b2d7bc5f9ce6b3586529ceadd2803d355ab87e82a0616e5aca63a1e5322479e2a14e660e
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/assets/default/web_loading.gif (deleted)
Filesize3KB
MD50af3b47ba680f1109065ddfad019f5b3
SHA18d7c06bc3c4abe7df7bc97218b8ef811a5616472
SHA2565b9d8499f7d12df7bb6d4e363ca2cd2dba92f4367e664da359fc7a09cf932ba4
SHA51209c6dbaf9e0a84e6d443dc126d772fbe725a31f82b4f27815e8cc3e47eb887b1525d338c9e9881bc68cdf84481eb08afaca30f87b40644342cbf05ac93699b57
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/assets/default/web_to_load.png (deleted)
Filesize1KB
MD5f167db5f91c4b6e2119a1476e1493e11
SHA1ccb08c0f4010d994857ff72b5d94eedcfb256eba
SHA256247e57e4e5bbc239c946b015d4640f59182c92779337e6ec1cdd0b5a77358ae8
SHA51230b7857e5d02c66a123c83ac62909cfd8c4fd64e8107592b5baeb3ef7fdbff47229fcd338ad06d795fed5179577b9702cc2609b2b417eed24eea2ddb69ea4a05
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/assets/js/article_template_common.js (deleted)
Filesize4KB
MD5a7200babd49cb43daeb68fd569cd0ef0
SHA1709e123938d4873731fb841858c69ff6ad568eb3
SHA256ecb75841357abf7c1c2a1ff11cfbfede269a1fbde1b3f469bd26aec45b07c42e
SHA5123277f0ce2a98c79f5c23aed3194d12ae0a9dbb4ea6ad1a63211b953a0c5961018476cc58c19526cb97701c5ba98fa21a004f8d4def316285c29bab03ebef27d8
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/assets/night/web_default.png (deleted)
Filesize920B
MD530a9535c40a7bce522ee4a329b0105be
SHA1791f4cb327f83a72219ae2875d332849016e97c8
SHA25636f3205d5d41573b6e69bbb9eaa7015e336abb6e1fbb1775875df2fd500c6c79
SHA512c3fbe7f8239a3b57d3d73d357ac7e671cb45bdddc7fcb69bd451166c6175e19ddd2438cb9755c1e65ca660a47fae822eaf2e799ba55f229cce01e0f5d4128fd3
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/assets/night/web_loading.gif (deleted)
Filesize3KB
MD56758d2dc4c6dce0441982efe227541fe
SHA18a6e259dcd3245ad4716402a91272860617dcdd7
SHA256705c0a47ae29bb5b56e175f24d4443e885a387bed6a59432c9aa82862f47d7a2
SHA51274b372dc2f1b5b80609d91f5fd4b0fdd98c44423fad7f541d561b4326ff12f0636b863537fa13243c95181417e986e78e3b9d3f9aea1092bdadcc1793ff3b6e9
-
/storage/emulated/0/Android/data/com.gao7.android.weixin/files/Download/html/assets/night/web_to_load.png
Filesize1KB
MD5d318b6d965212b5562ae36c87cbb981e
SHA1aaa0cb4a4b326f94b319b6be00808cb12834808c
SHA256a4eaae40f19bc948b70f658cae0e64a308a8d1c45382a24ffa506d9d5960dc42
SHA512f0561a875478142e586e098836d137327b11ddf39a868ddb37189711892072ea69081746085cd4dd93f3e6b0c8500b3f1a34a8319c842e58c08eb0a38c5d5ea7