Analysis
- max time kernel
23s - max time network
154s - platform
android-9_x86 - resource
android-x86-arm-20240910-en - resource tags
arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system - submitted
20/10/2024, 02:45
Static task
static1
Behavioral task
behavioral1
Sample
5ffaf7f16d4f070206848c1e1bb9e255_JaffaCakes118.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
5ffaf7f16d4f070206848c1e1bb9e255_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
5ffaf7f16d4f070206848c1e1bb9e255_JaffaCakes118.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral4
Sample
qqphonebook.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral5
Sample
qqpimsecure.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral6
Sample
youni.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral7
Sample
youni.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral8
Sample
youni.apk
Resource
android-x64-arm64-20240624-en
General
- Target qqphonebook.apk
- Size 3.7MB
- Sample241020-c87pjsvbjd
- SHA256 da2105ef9cf91324e131e71111580d196556bf23b663d4e2d51c2bb0ee957721
- MD5 009117a02eb5c89bd05273b4c456e315
- SHA1 56545fcb31c218f9b93442ad5785005c32ebc7e0
- SHA512 f07becec69bbe52d03503de22914399d4bafd3c517c4e63cbabef09d3cdc5da0a1520a16ba4bdbcf64dffd2252717508d3ae6c8ad52610216b926d9f60cc236c
- SSDEEP 98304:iyVBrPbF6rqzFAiK5LHKZuH95C67JT4JkCoGu:i4rbF6rqRAiK5Lcu98WJ0Jkdt
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Reads the contacts stored on the device. 1 TTPs 3 IoCs
description ioc Process URI accessed for read content://com.android.contacts/contacts com.tencent.qqphonebook URI accessed for read content://com.android.contacts/data/phones com.tencent.qqphonebook URI accessed for read content://com.android.contacts/raw_contacts com.tencent.qqphonebook - Reads the content of the call log. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://call_log/calls com.tencent.qqphonebook - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqphonebook - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqphonebook
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.tencent.qqphonebook/databases/micromsg.db
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.tencent.qqphonebook/databases/micromsg.db-journal
- Size 512B
- SHA256 f356f7835e8a31de4dfcd383c9c679155e22d69fccd9a359ebff463f451305a4
- MD5 fc76b9758126dd54745f355afa1594f5
- SHA1 e4bf8a4257e2c78628a99a7199c9cd3becbe3798
- SHA512 ba0d0b904bf4e62582484bdb5ffab4277ff2320a04a9bef6afd070285661973c8dbe85eead1456b4595f62510c5359c4faaae38db9e25b45a213a11c3551c4b0
- MD5 SHA1 SHA512
- Path /data/data/com.tencent.qqphonebook/databases/micromsg.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.tencent.qqphonebook/databases/micromsg.db-wal
- Size 68KB
- SHA256 eb4a5282d1d45eb4295362cecbd6048343f980632a0bd03f78a9a619fe4d1f55
- MD5 54aea9d9fdb5cee5fa0995ba8025f18f
- SHA1 30d16cf97b1b273a14ab4f886a06f3162f26cfa4
- SHA512 58f1fdd36b46a32e5cc7687fd61372d294bcd5a070a4b173a2c244ab8f48b46a9e99abe650981a0e96430d025fa9e791c0e10fc2d010e5bfcb6b18dfd5d44781
- SSDEEP 96:b630PpX5dbiVmL2gHM2aTH3PtKKTlEPxfIafIh42TZlEzA/d:b6gpX5Om1HM2aL/tKBfIafIu29/d
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.tencent.qqphonebook/files/nldb.sdb
- Size 131KB
- SHA256 1834321418fa1941cfa7108b99fc2651244a4716bbc6cf8aef9fd8f4e8387201
- MD5 c8c37c19c06dea87eb3c79b4488e3549
- SHA1 e4ecd959b877fbd789f8278de8855a8afc2be6a9
- SHA512 30206293f1977235605316f154988709c25a6c89de659e01073741a910f5b9c66c7e5e057e94d22f49f0f2028737a3ec354910b12d83a8287fd35c87ee705ced
- SSDEEP 3072:SrEn4doq3dImWcyOIOIdF749emkoJ/PFH6NaHpO:SrEnWogzWcVKUwm3Fab
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.tencent.qqphonebook/files/rule_store.sys
- Size 39KB
- SHA256 03b469c747a9095af4aae0f5c72312b80d6d6a67c9326e2e3bed1e9f42f0cbc6
- MD5 3208a0a700674c79089829435203b7c2
- SHA1 cb27dbeda75848cd17c11b01b8ad183a40737e4a
- SHA512 00e4574000676a2fb5cd5ba50b5d358b36ccedcb43cc11958d2724084f1fa32f9804ce463c99fef8fc140e65e1763cd255fa264da4456686872739a52c3b9de2
- SSDEEP 768:h2frHpE1OGjfpMqORqhgtpuUs6XsqgiDqgnzoZ5gDn:hepE1nVMLqGpuT6XsEDqQzoZOD
- MD5 SHA1 SHA512 SSDEEP