cc54a71a073f3d3977087473d672b0f7b14a74b5ca5dfb8f8f39d51885f5ccab

Analysis

max time kernel
123s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
09/10/2024, 07:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2d2952c399c0605dba2d52e03c8cb742_JaffaCakes118.apk
Size 1.7MB
Sample241009-h8ml9stdmj
SHA256 cc54a71a073f3d3977087473d672b0f7b14a74b5ca5dfb8f8f39d51885f5ccab
MD5 2d2952c399c0605dba2d52e03c8cb742
SHA1 eddda87caceaf753042f5c4c6e4ad98428fb524f
SHA512 47e782522e014cc1afae8ae46ab20d7f091064f9e79f58440a7779889efe23120adfff49073780471a682a0ae47801701ff3e833ec55c67566b2132991a8089d
SSDEEP 49152:vNOKuZIkDsqKwwMmYmQkeGdov+1BZAiWa2kXop2T:veeqKwwJdQHGdovqBga2kYp2T
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery persistence ransomware

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	android.process.dhome

Changes the wallpaper (common with ransomware activity) 1 IoCs

ransomware

description	ioc	Process
Framework service call	android.app.IWallpaperManager.setWallpaper	android.process.dhome

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	android.process.dhome

android.process.dhome
1⤵
- Queries information about active data network
- Changes the wallpaper (common with ransomware activity)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4247

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Ddesktop.db

Path /data/data/com.guiji.launcher/databases/Ddesktop.db
Size 20KB
SHA256 4633b82425e8a5391a9242a1def7c9e52100f076442bd320d6abc4541db72d78
MD5 165d7426d5aed6087d823926bcb1aca2
SHA1 4e2df0811e8dc848e0a34e590f7c9d0f2326618a
SHA512 ed458bcf05d37513383e479dccec0ac7f035fe8b5ef56f3b35cab58ec98370be8329cfb79571ea9d151bccf1dfbda5b563794c6b6167a057970eaed586002481
SSDEEP 12:TDWmyNTSFbyUiNUIoIw7W2SrRmBEyPbAVOwG:TKfmGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

Ddesktop.db-journal

Path /data/data/com.guiji.launcher/databases/Ddesktop.db-journal
Size 512B
SHA256 5965372c5ad16a19e54849fdd640f94af75e2b6b7c699da833a565009be099af
MD5 ef4a5c962d06f24347e5026c65bd1507
SHA1 efcadaaabaf9f262822557f687dbf152468555e8
SHA512 e524b0e60703078184452ab0577eeee66c2490872f1f8aedd99c213bfdaa09915ebc5850702cfcfb6d222589c2b96bd1949f718d3c8d3b4152d35d0a83f2b42e
MD5 SHA1 SHA512

Submit Download

Ddesktop.db-shm

Path /data/data/com.guiji.launcher/databases/Ddesktop.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

Ddesktop.db-wal

Path /data/data/com.guiji.launcher/databases/Ddesktop.db-wal
Size 32KB
SHA256 ed6fd71b528072103144c98b0448dca0e5a802c72907b6dfc07796a751779f15
MD5 838b9d7764b117a86c930e7494adb607
SHA1 296a38dc5812873adce9901bfe65c7e48f88d6bf
SHA512 3bf19b0fd37b90307205e919a40317d751b14aea7cf031f43f81b99e9466d32d1bfcd8e231dc45dbbea8d290ee106449ab9f6bba99b1e679b9ae1548ce22b9f6
SSDEEP 12:KsZTuxbNqzdTRmBEyPbP/e1fGdYSWOwClvGbDWmyNTSFbyUiNUIoIw7W2SrRmBEf:K4ixpqzyGSP/eFGGOGbKfmGSP/edZ6
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db

Path /data/data/com.guiji.launcher/databases/launcher.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

launcher.db-journal

Path /data/data/com.guiji.launcher/databases/launcher.db-journal
Size 512B
SHA256 a2e84c820eee5aad13585439d67b4046b1ebd5fc65ebb86b0c9d0d17e9f0ea0a
MD5 e849a335ed66f61af212f6384226f835
SHA1 e0c16a24d4292a8e691b4479f92147e275f9815c
SHA512 059ab0e1e3ddb306801d750ba2d659c46609521d1101fa1bf009d23126847df84e185c1e6c5cc697eb277028f968452a352406afe9a79c132cdf4108d1fcca39
MD5 SHA1 SHA512

Submit Download

launcher.db-wal

Path /data/data/com.guiji.launcher/databases/launcher.db-wal
Size 32KB
SHA256 9df7c9d36be2b62de55ef6e8db607b216acd6955ddac062c8f71a9a73f177627
MD5 57bfb4d9bb50d191d59a42e64bd3f7fc
SHA1 6737b99fa8a82de387fad3206336c17f72f062b9
SHA512 2c8f0fdb96eaa47f5f64012ff0a078dc2eb8c784caa3a033f1d856b1b9850419ec06eee9d99e227231b2ecb08c84b43233311f89e3c1205ca2136080c14dc4e7
SSDEEP 48:9Q5zNSP/E34lSvF/WqVWt9JdqVASP/E/UliyNliG0fliuZ3:9QN0P834lm1E9CP8/Ryq7su9
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.preferences

Path /data/data/com.guiji.launcher/files/launcher.preferences
Size 15B
SHA256 9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3
MD5 8045cecd3d5a4c893e3a75d47b17121e
SHA1 61f08d6c53ae857cfd4be1bf607a6c80e5e78b23
SHA512 70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099
MD5 SHA1 SHA512

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 94KB
SHA256 8a1fe51a1055f3ba13bfa2cdb20f7a3b798659784f9a4144b49d4a76d9d87c55
MD5 0033067381c4c1db4d8868f1792f3245
SHA1 3a998be22767138a12e84f2eb4493eb0bcb24d2d
SHA512 f75961239bb8f1a36aad84047d59547ac9e256d9b96ed0856c8e929ac82f9454c0e3de42532880c286867c5ff092c9339c904f6d1ee9c58b37571468d6b8182b
SSDEEP 1536:v2WLksvjsh45PCBcMHH5lMSpXZQyQvzaJTtNkF9Jk8xKIv8T70+qbHm:Ouk4W45aBcMHPU7raJTc3JfKK8To+qbG
MD5 SHA1 SHA512 SSDEEP

Submit Download

02181251198733467183.dd

Path /storage/emulated/0/Ddesktop/assets/02181251198733467183.dd
Size 437KB
SHA256 4a122c4c71d17f43d9223dd6159fcba08e97ebb079878a0f62f8dfc108393fa4
MD5 631a1f311f5e0161f07c3f3f217f4b13
SHA1 4718dad42bd4d3b6cd845125ce9c45444fd66fa3
SHA512 95fe5cda279ef7e739995ac281bacaee046e9370a191e9bbe4984d69d927cbd1cfd2b444a1ffb0888b7946983beb777204c77d0f6e1d56f5ed5d21fa988afff4
SSDEEP 12288:2RjEGZ25WWqrRV3yDBglikfQnL1UARqJlDzLW:2hEGZpr/CA+RqJlvLW
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads