cc54a71a073f3d3977087473d672b0f7b14a74b5ca5dfb8f8f39d51885f5ccab

Analysis

max time kernel
123s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
09/10/2024, 07:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2d2952c399c0605dba2d52e03c8cb742_JaffaCakes118.apk
Size 1.7MB
Sample241009-h8ml9stdmj
SHA256 cc54a71a073f3d3977087473d672b0f7b14a74b5ca5dfb8f8f39d51885f5ccab
MD5 2d2952c399c0605dba2d52e03c8cb742
SHA1 eddda87caceaf753042f5c4c6e4ad98428fb524f
SHA512 47e782522e014cc1afae8ae46ab20d7f091064f9e79f58440a7779889efe23120adfff49073780471a682a0ae47801701ff3e833ec55c67566b2132991a8089d
SSDEEP 49152:vNOKuZIkDsqKwwMmYmQkeGdov+1BZAiWa2kXop2T:veeqKwwJdQHGdovqBga2kYp2T
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery persistence ransomware

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	android.process.dhome

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	android.process.dhome

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Changes the wallpaper (common with ransomware activity) 1 IoCs

ransomware

description	ioc	Process
Framework service call	android.app.IWallpaperManager.setWallpaper	android.process.dhome

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	android.process.dhome

android.process.dhome
1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Changes the wallpaper (common with ransomware activity)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4925

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Ddesktop.db

Path /data/data/com.guiji.launcher/databases/Ddesktop.db
Size 20KB
SHA256 cfc0ddb5f435ac4dbbb1f3225730869428698d3865c4fc3f57bd4680bf872b8d
MD5 cc5fc5e7ab8d8b23faa7a92084088be3
SHA1 d347c8eed74e50af03ac1990ec54c960709e8120
SHA512 9485e50297003f6435ebbe5ce7e52936874aba0abb6f50dac45d994121ae2aaef4e02d00e413e97e971165590651274251bb4efa1a0e1559fbeb31678adbda17
SSDEEP 12:TLmNmyNTSFbyUiNUIoIw7W2SrRmBEyPbAVOwG:TLYfmGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

Ddesktop.db-journal

Path /data/data/com.guiji.launcher/databases/Ddesktop.db-journal
Size 512B
SHA256 ab72ec2acc2121619bd55e94d2f285bb164796d0f707fac58229d7dc268ba7e3
MD5 e937516f1b045a4e6df0e3b5fc5d527c
SHA1 7f75142c1bbc0668c46889a6cf5a768603122c0e
SHA512 3f4f5551d4701eafe7bd1466c2a12dba8cf4a2003499a99bc649e8c996cbc93b5945a3516e7d1bdb0d92e66fdc7f8dce36d8bd6196b9ae6a8cc9f258bcf40c11
MD5 SHA1 SHA512

Submit Download

Ddesktop.db-journal

Path /data/data/com.guiji.launcher/databases/Ddesktop.db-journal
Size 8KB
SHA256 5d1a4c65a630b76885964f24452cb2e9b61cb17d3a7c17b886c0cab43f6870a8
MD5 a9c3c5aec28893f15df32af8392d2d76
SHA1 6ef48afc9d7dd4f6ca4bf2a469e4f810bfc9c167
SHA512 bf2eb4ea39c4c5a771f3c39b007fa8202cfef4a6e405bf471e1807a52c592dd1142c5389e86f184b59d8725367c744e21d345fffd825d49bc74387f3f0fc9069
SSDEEP 6:7+/l9GHn1cWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKsTT:7+tBWqLiuWdwRmBEyPbvf
MD5 SHA1 SHA512 SSDEEP

Submit Download

Ddesktop.db-journal

Path /data/data/com.guiji.launcher/databases/Ddesktop.db-journal
Size 8KB
SHA256 388573cdb47c666da98b6501bfeb8da54714bcb27a9f9a640f0bff3d4b17c900
MD5 11a77a7491f62e1c63d24bbcd4da421d
SHA1 2aa72abaa6d84cc6fabe93e07026f116e9721c6b
SHA512 228eefb3589d63054a2b5c4e5ade3c6cf98a09d6a3b2e7b057e8d598f188927e962df6d9eff48a4f12f36da43910e4cf003991cd8e4a7a13e4014c16f10ff658
SSDEEP 6:7+/l9rkKPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKwQ9s//47:7+tJDqLJdTRmBEyPbi9s47
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db

Path /data/data/com.guiji.launcher/databases/launcher.db
Size 20KB
SHA256 30236de92a84955098bf66425a0f38d7d7af559346a7627d4e8338231d90625d
MD5 e00e8880bae5c0fbb47bd0d8c3bab900
SHA1 ddd225db8bb4900603aad0bab84fa054379e90f4
SHA512 b13958dd3da0c76d094f6a30ee5a46b894bcb1224f12d60c7b56336a84df63de85319bf408c2858c61e26f25755959ac56076b5e5e73374c4bcdc76bea90f5ac
SSDEEP 24:TLCE//P2vigqVIvi+QzumeJdqVX1GSEOvNvyB/jmcAvNvyB/jiHUfvNvyB/jac:TuE/WqVWt9JdqVASJliyNliG0fliu
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.guiji.launcher/databases/launcher.db-journal
Size 512B
SHA256 852ca9661e752c114e035326d93b574351042fafbb9ce28e8bb13e6ff39df6d5
MD5 4d69a87a3594a0773ca78eb743df2228
SHA1 9c4c8cfa73bf2e1f7f53dbafa10b56b5754fcb07
SHA512 0695f901959fa69396bb29117d478b176c7c42e546a0ad4c52850e1f58b65081df6dccf8334e96e218a3a3e349aeb5f7dedcd753471552d1d8a46a213cde69d9
MD5 SHA1 SHA512

Submit Download

launcher.db-journal

Path /data/data/com.guiji.launcher/databases/launcher.db-journal
Size 8KB
SHA256 a14f3546686ff8181b6b2c0c6d7fd16c90828f92d69ff4ed4054d70dcea75674
MD5 6f87ace183eba91bde9ae07fedf6cf1d
SHA1 24055027ee0db155ad818a234beb29aeaed56e25
SHA512 031505d03a0fda2084a3448128d26e09ef734512420cc8049530bae3757a922bfbf4d5f740925719e4177dd2ca5e96119b459ca8556c2d75cc672b5bbe3f22a1
SSDEEP 6:7+/l9ZLn1Gg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKAo:7+tkqLiuWdwRmBEyPbQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.guiji.launcher/databases/launcher.db-journal
Size 8KB
SHA256 4d2de828c157b156d1314d1b295bf0b7cf5a9afe26d285b482bea4d7e46eab18
MD5 1ff6d5dba89c71fd5dd3480cfc01a5dd
SHA1 97025ecd8fc802bfeb3040ae9d1e2f91a1bc46ce
SHA512 ccde7eaf2025b0907b723904837d2650c732fd88df34cadb0c499f29ef8ba1b56783429001fb2ac50521a1e44a4a3de80bb00b6b04098daf90a91e0046f2a44d
SSDEEP 6:7+/l9jOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKZslvM/7:7+tMqLJdTRmBEyPbQEvs7
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.preferences

Path /data/data/com.guiji.launcher/files/launcher.preferences
Size 15B
SHA256 9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3
MD5 8045cecd3d5a4c893e3a75d47b17121e
SHA1 61f08d6c53ae857cfd4be1bf607a6c80e5e78b23
SHA512 70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099
MD5 SHA1 SHA512

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 93KB
SHA256 381e4b6ee30671bfc014f3474ce141a986ce1511f4706a7d9026196707b090fa
MD5 1700fc73c93f1e0ae41f1fb55a5d8bb0
SHA1 28011f05229be5ef13feadb266310486f4315a1e
SHA512 b00774e6083134a54dc2007cc8eb7bfa8438e1efeaa48194e41fdcaa5c574afbbda90e7117cc084a9154008404c54140d1418c4b5b9e0256942160fe6538adf4
SSDEEP 1536:p0wgSJ96P8gnQgr3HPYLtepwKrWUjpFzyXI2ErZIWzU41jflfkIkq/gURIAKv:3gqYfnQOYGbpF2l0U41tcIZ/1RIhv
MD5 SHA1 SHA512 SSDEEP

Submit Download

02181251198733467183.dd

Path /storage/emulated/0/Ddesktop/assets/02181251198733467183.dd
Size 437KB
SHA256 4a122c4c71d17f43d9223dd6159fcba08e97ebb079878a0f62f8dfc108393fa4
MD5 631a1f311f5e0161f07c3f3f217f4b13
SHA1 4718dad42bd4d3b6cd845125ce9c45444fd66fa3
SHA512 95fe5cda279ef7e739995ac281bacaee046e9370a191e9bbe4984d69d927cbd1cfd2b444a1ffb0888b7946983beb777204c77d0f6e1d56f5ed5d21fa988afff4
SSDEEP 12288:2RjEGZ25WWqrRV3yDBglikfQnL1UARqJlDzLW:2hEGZpr/CA+RqJlvLW
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads