Analysis

  • max time kernel
    144s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    15/10/2024, 23:43

General

  • Target

    4a864138295774262f5075a9afb8c1a3_JaffaCakes118.apk

  • Size

    187KB

  • MD5

    4a864138295774262f5075a9afb8c1a3

  • SHA1

    0ff1c3bdac72eee7144d60d68522fba7acb52cd3

  • SHA256

    c5e0fa3a4fb92d9875f30b137abd841ac546127fc22098c1fec8481415a0deb4

  • SHA512

    f9736a110d5bdafbf1c8d8413bbda246580b461e945f803254dc2ed8f765653a62875622c4c9d9534a8358415730e30980c5eb4675a2dd85146f5beff3c51b91

  • SSDEEP

    3072:RiuijdGa366TJrKNwrpx8OM3bozCVxemAoyvMk5+j2dvtluD5Z+JsfAUU:R053jTJrHrpn8Vx1dy0eFlEOWvU

Malware Config

Signatures

Processes

  • com.baidu.eddw.tencent
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4929

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.baidu.eddw.tencent/databases/cc/cc.db

          Filesize

          36KB

          MD5

          67c12933d1e0e63d9801a6aa43092ce7

          SHA1

          b6936908554e4a1986b8eb08289e2d3545e8ff74

          SHA256

          abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

          SHA512

          db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

        • /data/data/com.baidu.eddw.tencent/databases/cc/cc.db

          Filesize

          36KB

          MD5

          0908e924aa236931dc7166fef6e00862

          SHA1

          7782648d6d8f6e835bd47058d4852932c096a467

          SHA256

          38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

          SHA512

          3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

        • /data/data/com.baidu.eddw.tencent/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          ab41e62288ed77a08a495bfd937b9f4a

          SHA1

          a05844e4dfbd6bbc06a825d425330b4e46eff6cf

          SHA256

          38458f4b3fcd1461b1728f5b59d899a885c93e1a3d2f8ef830bb4e59ec42f796

          SHA512

          e4c3d3b94370b64cabd1314f8f35f3e498d6f4b6483154ff7ad451eb8abcb3216821c406c991afab8d65e943cd897f251b5a3747a27e8033aaafe17f5e4818d7

        • /data/data/com.baidu.eddw.tencent/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          3d74cb168f8fb8af0d5dc58ac184da9f

          SHA1

          3b0b1fb5404d25ec3d91e9c18e7344c0e2b48974

          SHA256

          8284aa75006fa073156d3ee83da4f37cd53eea8bddc3c8321f5b7d9755c1de55

          SHA512

          610096709a03743419e567113f5d3630a3d866ac92e74d72c33afc39b0af530a8c021f31378b93228aec5dfd196cc695514e7b204cded5ff9713f5025876d9c9

        • /data/data/com.baidu.eddw.tencent/databases/cc/cc.db-journal

          Filesize

          12KB

          MD5

          de99550b2f79a058756b0c831d9d9580

          SHA1

          15e5d16ad200566abd3fb58a87570d8328a416d9

          SHA256

          168ed828db70686984e05c0b1af421acd3413d03a71bb371b8b736c543ca4d2e

          SHA512

          bc63e09470b9081296cf0ff5b4a7f434a0851d65905d5f7d0697995850b4404cdc308fef414aa56a0648b31365218d3512157d49700c656bb6f591d728674653

        • /data/data/com.baidu.eddw.tencent/databases/cc/cc.db-journal

          Filesize

          512B

          MD5

          0f7f14d9b7e930f52c4989484ba1b03c

          SHA1

          c98e17e1f0945e92a8d7087127d88fe8d1663a4f

          SHA256

          0c33ef3a1e53bbe0aaf2337d162ee8ab5c1e752bda2706b6a39254faef67749b

          SHA512

          94441c20cef0a9068f208e3bc0a9c45231bc79e791567785f139e014f46117e0672394fb03ccf1ecffe744cefe62ea486da9bd5675cfbf648d24cbaa384ed1e7

        • /data/data/com.baidu.eddw.tencent/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          d67e7466084397b9964cf75142678e0b

          SHA1

          ff978417239324dc3d781f9684939b23d16e1f01

          SHA256

          ca3be4ff9a2d067a5f8ae1ef2b6a65dbf5ab7b168f77ee1af506248d0f58fc03

          SHA512

          46cc4526655f395f018b84d2f2424fe9e3b7f6294abf10f2286eed475356e01ef96e383d346dd5868d4bc4b951e9788f8f78116ccb9b3f0bd0f81e27658faa70

        • /data/data/com.baidu.eddw.tencent/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          85e8717e4e5e5b4b1e4f77e222e92355

          SHA1

          1a5fb5922f8881e30ffce04c0f4ad468d85ee6f2

          SHA256

          192ee1ed778a21151ebf4ac67b968fdd984dab616f8463a1848760d691fa24a5

          SHA512

          3770e45e432ae55a4438c166922a72b3023a4153747510afa00c00fe40d74b19ff05ac041f1924468823905ff53cdad52c919fdd9af8775c1553898a579aca3b

        • /data/data/com.baidu.eddw.tencent/files/.ca/jnzPLoJZce.jar

          Filesize

          113KB

          MD5

          ada2ce821b8e511f8f6add01283da13e

          SHA1

          cb40774aca66e6aab0cf599ad385043cedb4b3f7

          SHA256

          b5e870d67328f1d1026a294a8925eaecb6bbc71891176cd638f09f320f0b3251

          SHA512

          864701c7cd5f335f25ab71a734fc6a13499e7e772044baf8b8dd391095e4cddb048fb0760f729df8f5cdf1a1d38c1c5dff70d0588dc1a4bcbb3beed99b93ac27

        • /data/data/com.baidu.eddw.tencent/files/.um/um_cache_1729035870257.env

          Filesize

          1KB

          MD5

          5b2dbcfaa2789745b8de37e0c61cdd09

          SHA1

          bc5b0fe021073f8fc0ee6fce6efee104fdfa4f23

          SHA256

          8dbf043dca0a2c9e0c5afa22d7d2b51b04eae058489a126ca5c35bcc1ef3a795

          SHA512

          4a23489f22d4e614896e8ae62631536ce276646f16e03127d565fedd4adaf4f5cd48b2503d1c50d35f92ae8b7c1cec2c05b9f5fb8132dfa516c7826f3c521be8

        • /data/data/com.baidu.eddw.tencent/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          ad52fdb4f8003473c1cc8d4fbab51828

          SHA1

          1f2fa17eb284f5f69b525a5f294d0c160bf62e59

          SHA256

          e79c7b0110aeab00da4a00bce418e8b64359ba749b4f95f280f84851cbb229b6

          SHA512

          566bf04db651130db009ae53e7875dfe3609a7e561b6075af7ebe6fde984a68e20697c8b63a6202dacad8897c7811c386a3e8b5225bbc30dfe2b964e75229006

        • /data/data/com.baidu.eddw.tencent/files/umeng_it.cache

          Filesize

          350B

          MD5

          da6898a7e193189405129f32227d128a

          SHA1

          cde9a89efa381562030da709e8eaa2e067b7afd2

          SHA256

          d9c7aa4fc1edd73403a3578717805744a28bb1c902952f2103c930a5ffdb3740

          SHA512

          ce6e0a6ec74ada82621bb2a1a88929bb6c732d140a23cbcc6fa54401d66105cdcbd1d7650e27364caa316443c643e3be7da705b99209705a4e10c1512c316ef1

        • /data/user/0/com.baidu.eddw.tencent/files/.ca/jnzPLoJZce.jar

          Filesize

          269KB

          MD5

          4390d216408575cdc9ed228decd7b7a9

          SHA1

          de6c0a98808f1d0d22e6c5fb674799eb84666711

          SHA256

          5d75cc5a1349c7205e168a3f77eb36862e872420de05dcdcf50bf36d551c2fd0

          SHA512

          d2a4df330e0beb72e1483caf683fa104cdb0c92894c8757b068fd34720d062532cfe47512c805ac682cb8b9af8c1104c27950e7b7ffc83d5c54dac9b9865470a

        • /storage/emulated/0/Download/channel_conf

          Filesize

          5B

          MD5

          cac029e0ca8add40d4d2aebd45308572

          SHA1

          58620a1744a6814de3441b4b379883c24c3eb145

          SHA256

          d22f06e7707d70996e4c3e407358faf5b57f9eb359a33913befe74239393abbd

          SHA512

          293b62180db178e80f947acdf96a1da42a33ecacd789b75185c4e79d7d615d284dc48b19d435c0863c6fca3627ae66933dd7f130e0cebd1b0e3010b139dc5955