d25c188f4a07ee3e3f2cc3d1f0809c2be170554f127d7aa15c5dba77779807a1

Analysis

max time kernel
8s
max time network
156s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
27-09-2024 10:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fa46a05c91784392865041643a5fc35e_JaffaCakes118.apk
Size

6.7MB
MD5

fa46a05c91784392865041643a5fc35e
SHA1

70ac45e8db0c5cfb3fa3e2a6450de80608ae4567
SHA256

d25c188f4a07ee3e3f2cc3d1f0809c2be170554f127d7aa15c5dba77779807a1
SHA512

f7af0137420eb8371691f4e972ae11339429705f770696940d2cc23c1c60acb134b7904cac298d059ea3ed4feca891f8beec5558a9f23b5e90d2931693a17507
SSDEEP

196608:ihj75VDy0QyiHgk9Tfx6Ypft0k4tq9+oauW:25Vj2fcln6+o5W

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.lblm.store
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.lblm.store:pollingService

com.lblm.store
1⤵
- Queries information about running processes on the device
PID:4252
- getprop ro.board.platform
  2⤵
  PID:4320
- getprop ro.mediatek.platform
  2⤵
  PID:4344

com.lblm.store:pollingService
1⤵
- Queries information about running processes on the device
PID:4298

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.lblm.store/databases/lblm_database.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.lblm.store/databases/lblm_database.db-journal

Filesize
512B

MD5
a1f90a0fa57f8fe6b8bc51d68215f5ce

SHA1
4cabf1dcac555ee4bc475e3ad9fde1db467188e5

SHA256
22a04fa9def560f864c87d8f88c07a50ce64b8428a95f05620efec11f2b6172a

SHA512
626295391a6f232597c5f190aafa46c1a5afcb912c0d90d293a58f7f962da3417adb77049d90582e8d5a24c7a3ba729d85a69c112492154d2f64f87fdcf9bd0f

Download Submit
/data/data/com.lblm.store/databases/lblm_database.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.lblm.store/databases/lblm_database.db-wal

Filesize
16KB

MD5
87fb3a3a159b39523429e8f4dee96e3f

SHA1
8f710bbfb20fcc7c8257bd04deb592be10f1e11c

SHA256
8944f961be4a022bd781ec3f9416f96205a97e2d5cbb4c68ccb7e6299d2e9eb5

SHA512
ea2226d0e4a2035c89f9a1b4745643a39e2d64f6d36654f43988dc77d0bcbf0b0bd0771979cf67331331e65204e7fae2178c803110dcb6e9c6ebbfff005544e5

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
6fda633604d27915409a4b38b15ac3c0

SHA1
3ba57df75998b1153336d9bb9f8024a65e34ecc6

SHA256
782637216244fd1928b54429e219a0fcfcbf3cec71bdf1e7090dad23903526a6

SHA512
d834fba682277ef2799a8d26a0fa72abf5acd9298ed480bb77b74c29c72fdce8b868493497cc60a4be674622697af592ee4b86fddff11505c9e9765a28611690

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
135B

MD5
dbef906a1f93afe5b0408333f3b3a52a

SHA1
e1fa2279962909d3f0e210efffb7dc411866aa3a

SHA256
bc958e34c30298186100d63020a3ecbcdeb3c4cc0c2d8e4b1ba468c9a0713f99

SHA512
56b8cb7dd175d82e8c530f04079b619bcb81c492fdd3a12f3d49577d8716001a002d76db87c3e6f16161d027f0bc5b9712a09f7295001a48c3be6339fc707206

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
381B

MD5
dc4b69755529985e0fb6dcbbc1ceb849

SHA1
4e4b4438187c35ad34e06a8a058a5295bf8c5b54

SHA256
0da1685027ae57c065583e1a5b7e0542eb5f7797fdfc9a6de4fcb7f62ae24c6d

SHA512
89286863fb134d554eeabe1b2a8e5b84489ee0f42d747c913e3736965b378035813676a83abe1a4ee86ee66a45c49f4a6dabf40fcdc659e451222af31a157642

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
381B

MD5
f8bf3b02b0035710fb5461f3d467b3aa

SHA1
1623ef5c9c608f248c8ecfc43fc4b18e15ad06fd

SHA256
b4172f9539d90cc0c1d4e28e4d20fa76ccf9fd23a31bd811a5018fc111c3a1ca

SHA512
17f282095daf86502d165c9b7ff97aaeb5dc6a7d4047d663ce43f6b80aa98348185326a848e3686ddf1d02b695025accdb3d30f5594f103154aa8ea029753413

Download Submit
/storage/emulated/0/Android/data/com.lblm.store/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/com.lblm.store/asdklog_s

Filesize
359KB

MD5
4be6dd83423f03759170bf2650a198de

SHA1
855aee51ca35fd4100fa56f6a33849073f14a344

SHA256
52f82dd6d5ef578f4a292fc310eada5760e216b1dca66dd4b97147a4e64a601d

SHA512
eef73e320773dd236ac7faafbc76a4ffbab6be1ce55ead8467ac7d4956badce1a7d06ef161118af4234676ddee677a2ef0bdb88f39f9a0f3028318db799c82e0

Download Submit
/storage/emulated/0/data/.systemid

Filesize
15B

MD5
748d9beeaa1899252a7365b780b95fb0

SHA1
2158cbe9044f2b138df0094615afe6616e526c9d

SHA256
59290d2d5a77605f8140feb82e44e8438115fb2f93dc56ed4c225b88c21baaa8

SHA512
cdeb0c4cebf1cc96ebda6940763a940df76120ee991bc7f003480caf055a970f16e4a19ef2ba2c56fa056d539b981e16542ec7239a7b91dd3828585bc2d1e440

Download Submit
/storage/emulated/0/lanbalanma/database/lblm_database.db-journal

Filesize
512B

MD5
f5e7cfb67f5a3811f4da3a1764e02d2f

SHA1
ddfa52ebf1d862938b6244ac0474799c392c25d6

SHA256
ab83cab1e467c31883c2d69510ab73db8decff72a041ca06b62afcb67147af60

SHA512
ef07d02a6e83586a6d338a6fd168a4d40fbebbc929f4fdd033d8d8206f3a3896163db2020a6bc44efc75646533c37522250804c562387ae15adc7162667ac886

Download Submit
/storage/emulated/0/lanbalanma/database/lblm_database.db-shm

Filesize
28KB

MD5
81eb1cc9e6334df092a40a7ba2b4e71b

SHA1
1bf4ee3e476b12e7ba509bd1868bf606cbf83d7d

SHA256
f5470f3ce7a47da4c52555aac8d4d744d4c3a9802f219afb2d5b310f12ccc054

SHA512
3929802763111859e7866176626908d11616fd1048b54dbf94d542ccda15596b595ccfdefda1805e51829d4420de1c1b2dafed64de98f1f7b45b239591d127a2

Download Submit
/storage/emulated/0/lanbalanma/database/lblm_database.db-wal

Filesize
16KB

MD5
6d0830ae5d313755c473a85c835dd12a

SHA1
24488ba5f01bfd98fc255b140eb58ac204f551ad

SHA256
b7c1ad4f49a4919b03cc1dfa0a803aac25306bb081c1debd0875a792bdf598a2

SHA512
e01179a16d90afadcd33d99fb052a865edc328d1a9716df89cefd02d78789a99eb34cf51a9b709e1f5d7941f8e98e5fe161f09db0de616c8b036c2d09270f4b6

Download Submit