Analysis

  • max time kernel
    3s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    19-09-2024 06:35

General

  • Target

    eac5006ccb2f4165858d1a8f5e032fe9_JaffaCakes118.apk

  • Size

    27.5MB

  • MD5

    eac5006ccb2f4165858d1a8f5e032fe9

  • SHA1

    f622f0969131ff8fc7a4be7a8305020b209ec458

  • SHA256

    c88c586dcdd55599725c72630793034aa7aef2ffb33816af0455c35136bc4dbe

  • SHA512

    4c038e22b394b16e5d8296c056e74761199f3a3b98192dea56e134dd2ec03a2a7ed4f229306db381bdffc26e57cd29c8f4422d41bbf24cd3da0a9e435a5c2dee

  • SSDEEP

    786432:7sN3JWnIPgcHEsBSUu3ScpdK5SJU9yKDMfRLR01HqQjcx:7sNZWQVHPbuZ5JU9fmR10Zqscx

Score
1/10

Malware Config

Signatures

Processes

  • yys.qmzj.main
    1⤵
      PID:4247
      • /system/bin/sh -c ps
        2⤵
          PID:4278

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/yys.qmzj.main/.ulibs/decrypt.so

        Filesize

        29KB

        MD5

        d7cb8b5358b1c095511cf9edb1c13354

        SHA1

        2ecc10b8e73597d54bd13b7b2046477f1bd40939

        SHA256

        e551db916184b19a7dbd2393e41b54543cc5eeb10ce3550b5219695ab6126998

        SHA512

        c73123bae60da7a98c56f7209a5b43b3939e774b288790a8392713c1eb6c1ae4902948d2e2faa07648df5d0e9c35753cd6ca4c0f2e9cb67c3fa45eb6d5599cb4

      • /data/data/yys.qmzj.main/.ulibs/libunicomsdk.so

        Filesize

        25KB

        MD5

        6cae1508b702db4ebb19682c7261b4aa

        SHA1

        91eb197382d14418747125763e08c90779e9c887

        SHA256

        4928b78cb26c84674be1eae723fba27e778292a75c22191fd241f9709303b9b3

        SHA512

        45ad054078c1909f32f2ebb124f983546a3ef9bea38919883b884e345a79e0d37d0741553d17770f03e39599eacdd6b05c8a7d4910c48a569b1ba759922dcaa2

      • /data/data/yys.qmzj.main/files/d_data_store.dat

        Filesize

        7KB

        MD5

        9e406ea64e05e082a3e08def2a33737b

        SHA1

        5d9309bbb8d711deb07e84e19a364ad3beeb681f

        SHA256

        70cd13205b06d9133fd3434bb9379a732e267d924190f75cfb6365d2c6884a8c

        SHA512

        fdf4e5d44073dac5f5f6ae6d070a818316beac035520fcf408c27adebecc2f5b515688b73236961706cc87b953715c48952bbf502517a6ceb30e206b4ae49078

      • /data/data/yys.qmzj.main/files/iridver.dat

        Filesize

        8B

        MD5

        d3e9ef05d376c1f40179a9f626317d46

        SHA1

        fb2a001a2ca9dda184772e174a70daaf6536dd89

        SHA256

        a095c373e0b7feda09adc812c081ff421824b98fd07a553ca5ab8c99a6fc52e1

        SHA512

        b9c7e11a9facc1409a72e7a8c3ee2bf2992f5bc9db557de29c6400aa156749b125decf39039101efc6fcad9f3bdc1f7914a155aeb97f5724aa897cc9319c12fc

      • /data/data/yys.qmzj.main/files/libmegbpp_02.02.13_01.so

        Filesize

        571KB

        MD5

        190cd7923a90f56360d54faa3f491748

        SHA1

        4fa3559dca7843ef9e106079871af5275cdba882

        SHA256

        5487244f4993a819f1f541b75b01c0bb45d5e706600300f164e365ddd633cad7

        SHA512

        50be3846133901e166b093aa3c96beba0e82e63336a306f55fd93103a8adbddcb9541706d54d400e218dbb9c1920acb76595412651cc6a278c95ba6c20ac3f0b