Analysis

  • max time kernel
    18s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    03/11/2024, 04:34

General

  • Target
    89a9c88683da80992424205fce549f44_JaffaCakes118.apk
  • Size 905KB
  • Sample241103-e7f7bavkd1
  • SHA256 611e5397c5c97d96df9629330718567dca672bbd5a428f1329210fe30e7ce7ff
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.minerhao.datou
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5061

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Package.dat

        • Path /storage/emulated/0/Android/Package.dat
        • Size 16B
        • SHA256 31f5fe75c5222d0beac36842f86fdc624fe0f37d1f6c4a8dab6e2b56d3d58739
        • MD5 SHA1 SHA512

        CacheTime.dat

        • Path /storage/emulated/0/Android/data/cache/CacheTime.dat
        • Size 13B
        • SHA256 2010cbafcc333d176d4e5429045a8e3f9fba37e6c26d421e39d7a8789b000a2a
        • MD5 SHA1 SHA512

        CacheTime

        • Path /storage/emulated/0/Android/data/cache/iconCache/CacheTime
        • Size 13B
        • SHA256 057cb61309bebcf9be63cd9e66da3801a05c46b68dad46616b441878d7f31d39
        • MD5 SHA1 SHA512

        love1.gif

        • Path /storage/emulated/0/datoumms/temp/love1.gif
        • Size 38KB
        • SHA256 3757028fe3d3cd5c6a9119c85caa5589ed1b26ec8f3af4f3765d13c2a3173762
        • MD5 SHA1 SHA512 SSDEEP

        love1.txt

        • Path /storage/emulated/0/datoumms/temp/love1.txt
        • Size 435B
        • SHA256 466cc50a5f27c6bff3fae552a6ef4e92a9b4f2af257448384d36cd2a67d02640
        • MD5 SHA1 SHA512

        love2.gif

        • Path /storage/emulated/0/datoumms/temp/love2.gif
        • Size 29KB
        • SHA256 6b6778d5e5c9b17a89e4fd6c7d3b83db441dda8411b4224c3868043c63b229a7
        • MD5 SHA1 SHA512 SSDEEP

        love2.txt

        • Path /storage/emulated/0/datoumms/temp/love2.txt
        • Size 290B
        • SHA256 41062e76ec3b28be981724ca0521fea35f4c8e81a99a87395d7ecb7d0ae3797a
        • MD5 SHA1 SHA512

        xinnian1.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian1.gif
        • Size 36KB
        • SHA256 7f94248b507070945a30381df915c499d791e8cefcdd6b5eec1280ecffd61184
        • MD5 SHA1 SHA512 SSDEEP

        xinnian1.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian1.txt
        • Size 289B
        • SHA256 401c57d1f24bce379352d3e96d46d76940a4a1b954738268f17e2628752375fb
        • MD5 SHA1 SHA512

        xinnian10.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian10.gif
        • Size 29KB
        • SHA256 87371cfe1ea6878d81e382aa0e80a60315eff8c65985056455894538061287cb
        • MD5 SHA1 SHA512 SSDEEP

        xinnian10.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian10.txt
        • Size 427B
        • SHA256 45914831cc8502cd903cdfa28ec9064b8a231a2fe035ee8161ace5098023c6ed
        • MD5 SHA1 SHA512

        xinnian11.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian11.gif
        • Size 8KB
        • SHA256 9b95f6e098fed701f02cf92895c465fa472dd9cf3731ce8f413c81950af52d65
        • MD5 SHA1 SHA512 SSDEEP

        xinnian11.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian11.txt
        • Size 165B
        • SHA256 6c031d75ba706187c0146b23d9b12c0ce42101625d132ba8711d693f9036dbfc
        • MD5 SHA1 SHA512

        xinnian12.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian12.gif
        • Size 41KB
        • SHA256 9f74c6277466a98b99b6b89320de287919c5dc42a85168601820eab35c19a5ee
        • MD5 SHA1 SHA512 SSDEEP

        xinnian12.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian12.txt
        • Size 429B
        • SHA256 70a1452e9b57fd60dc55845874d7b30850c2d10358bc2e7a2fe03b2db0ae88bf
        • MD5 SHA1 SHA512

        xinnian13.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian13.gif
        • Size 20KB
        • SHA256 6656402bfc7a8c5bdee7e5063b8f2ca759bf431690df3f050cdcb7a92d863219
        • MD5 SHA1 SHA512 SSDEEP

        xinnian13.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian13.txt
        • Size 618B
        • SHA256 9a028a9b393070d5a7dc4e8dca6b23b50c85c23782e40b80d263b371267e4d34
        • MD5 SHA1 SHA512

        xinnian14.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian14.gif
        • Size 19KB
        • SHA256 d490621e5d781664d53c51fa0df4a46b584e780a53dbf80d0c1ddf605f38067c
        • MD5 SHA1 SHA512 SSDEEP

        xinnian14.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian14.txt
        • Size 168B
        • SHA256 f43e2b0de3cbf3db57c1f99e93af18bf38d18ccceb34cc2ed52799346f19b810
        • MD5 SHA1 SHA512

        xinnian15.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian15.gif
        • Size 35KB
        • SHA256 c8da44aa1b8c9a6eb1d15dddc1c9828b91645223f9519f413db653482ca5dca0
        • MD5 SHA1 SHA512 SSDEEP

        xinnian15.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian15.txt
        • Size 371B
        • SHA256 f5f0d6743702feadf28dddc4b6d2b4e618935364f00fc9c5b95ef46b7fb0093e
        • MD5 SHA1 SHA512

        xinnian16.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian16.gif
        • Size 19KB
        • SHA256 2a3cc89370d3cfc3a20e881601a0131e507bd12c25f53d3d4a63ebbbc00427a4
        • MD5 SHA1 SHA512 SSDEEP

        xinnian16.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian16.txt
        • Size 163B
        • SHA256 7af59180576673b4a5eb8ee714b1fd3102e292a4bb5265538d61c593d3a3175b
        • MD5 SHA1 SHA512

        xinnian17.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian17.gif
        • Size 14KB
        • SHA256 19bc4ff83438520d0d75f4220a87c40d6bfad4b21ea873a1b85347203950273d
        • MD5 SHA1 SHA512 SSDEEP

        xinnian17.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian17.txt
        • Size 161B
        • SHA256 0f7e498672d5a075b1712a14a17ac60ff255faf8275d4dca77d8e7cb617a9d03
        • MD5 SHA1 SHA512

        xinnian18.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian18.gif
        • Size 16KB
        • SHA256 9c860bbb17ad1c7aa601b60ecdfc3881125dc98044506533f2c4d84851fa464d
        • MD5 SHA1 SHA512 SSDEEP

        xinnian18.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian18.txt
        • Size 167B
        • SHA256 9e342a359e07cd5edb1a6fb7664027f5ed1eef910556edf09bb1b222724a151b
        • MD5 SHA1 SHA512

        xinnian19.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian19.gif
        • Size 46KB
        • SHA256 ea339810a42fd1469dfa32b73a1540beacb13a98dc600e3719ac548301e6104d
        • MD5 SHA1 SHA512 SSDEEP

        xinnian19.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian19.txt
        • Size 423B
        • SHA256 a29ffa186339f3f9a527b0ee68b9b583ed48dccbbdaa0fb102e3fafcc931c9b5
        • MD5 SHA1 SHA512

        xinnian2.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian2.gif
        • Size 9KB
        • SHA256 b9a57e3e462f676b6763e64f8610b5cd1940d476925a0c100e69783e4e893b85
        • MD5 SHA1 SHA512 SSDEEP

        xinnian2.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian2.txt
        • Size 296B
        • SHA256 95efa0a5ab596e9f91b41894d6a3f1021c4acc60a80dade89d05720d3ed0c6b8
        • MD5 SHA1 SHA512

        xinnian20.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian20.gif
        • Size 34KB
        • SHA256 d5ffc5a9155a66ccd5bfa1212808043ec8e3b61ae7ce1f823b2349b866936a3f
        • MD5 SHA1 SHA512 SSDEEP

        xinnian20.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian20.txt
        • Size 298B
        • SHA256 356ba57a260aa0a1f0210944c0138b65fa8c31b5b6d1f53c15ffb5f63ad0345f
        • MD5 SHA1 SHA512

        xinnian21.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian21.gif
        • Size 39KB
        • SHA256 95f33e5824e5e60375fa5881d9f29d127a98cb8c3393a685455c59e3c00d33ca
        • MD5 SHA1 SHA512 SSDEEP

        xinnian21.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian21.txt
        • Size 293B
        • SHA256 206ac321c73ad6bc257fc9350655cead4c3c007436e8e0b8c17b894b10ab2d38
        • MD5 SHA1 SHA512

        xinnian22.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian22.gif
        • Size 36KB
        • SHA256 fb901e20b81e0cdf40603b69dce784c280df505f38f13636589a4b47537b87f9
        • MD5 SHA1 SHA512 SSDEEP

        xinnian22.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian22.txt
        • Size 354B
        • SHA256 f28ea548c75b6f82eb8efffd11c8ad1b162d69a34c6f8491b8543a5ac68e5517
        • MD5 SHA1 SHA512

        xinnian23.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian23.gif
        • Size 28KB
        • SHA256 4f221a566ed4580441575f48192e91203efd0e9f13ac9ff5cd461314d7817306
        • MD5 SHA1 SHA512 SSDEEP

        xinnian23.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian23.txt
        • Size 299B
        • SHA256 1a7d75817765d8b550ad4f3efc00ac9d85e0eca4c1031ef27ea0ec22e7124f5a
        • MD5 SHA1 SHA512

        xinnian24.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian24.gif
        • Size 48KB
        • SHA256 2eb58ad3c21b8ffd6ec2b4acfa934c1186d5f24f80ba44197a762c1234b5ff05
        • MD5 SHA1 SHA512 SSDEEP

        xinnian24.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian24.txt
        • Size 418B
        • SHA256 b6cf7bf79d149616d1dddbb86338cad5d6608363d695729380441581156f61e7
        • MD5 SHA1 SHA512

        xinnian25.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian25.gif
        • Size 43KB
        • SHA256 c2670a9f5d82042a6f638deacb57e17ff26f71c7fb5b17e53d75a486e4d2329c
        • MD5 SHA1 SHA512 SSDEEP

        xinnian25.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian25.txt
        • Size 432B
        • SHA256 6226916fd16f84615a8547f71dad29c58c10cbb43f7d87eecffa38a3c67d002e
        • MD5 SHA1 SHA512

        xinnian26.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian26.gif
        • Size 30KB
        • SHA256 17d386a82c1e4184962bb6641cc1fbc6621c5146f516273e163233da364e164a
        • MD5 SHA1 SHA512 SSDEEP

        xinnian26.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian26.txt
        • Size 419B
        • SHA256 abf5054afcf49408593824a8f91cf8aee0a56acf295c735af68e6c806bc034fa
        • MD5 SHA1 SHA512

        xinnian3.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian3.gif
        • Size 21KB
        • SHA256 351485a2b93e2eb1f9ddb891ac77916673328d8f28c568e4a69f00acb05939ea
        • MD5 SHA1 SHA512 SSDEEP

        xinnian3.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian3.txt
        • Size 297B
        • SHA256 fca10b90a69ac5399f9ba4c85a658fef2f0af6cef73782d0e0889c177b34f427
        • MD5 SHA1 SHA512

        xinnian4.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian4.gif
        • Size 15KB
        • SHA256 9064872432ec21093637387cfcbc9134289da4a6e4cfae9ecb17ba5b33dfd70e
        • MD5 SHA1 SHA512 SSDEEP

        xinnian4.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian4.txt
        • Size 169B
        • SHA256 70b4289d8a308036a58c4ff2c81233e66737ae3732a8250c90380b1ac4d02fe9
        • MD5 SHA1 SHA512

        xinnian5.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian5.gif
        • Size 23KB
        • SHA256 d985b7386d5303d8a5e9fe8d71f66a932b65d01d3b8cbace63ade3b1611500c1
        • MD5 SHA1 SHA512 SSDEEP

        xinnian5.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian5.txt
        • Size 301B
        • SHA256 09b0661e32ed5bfe2bbeb9933f9a5cbe6648bd7ef3a6940a3ffe5f62fbf0c5c6
        • MD5 SHA1 SHA512

        xinnian6.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian6.gif
        • Size 22KB
        • SHA256 4d01cfcd7249149783283553d874796e0390b97438bb8443e968db1ae827c877
        • MD5 SHA1 SHA512 SSDEEP

        xinnian6.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian6.txt
        • Size 297B
        • SHA256 f9225c3d8127b1e2e72ede5e8709f471040c5657f3fbd80c7fa942889c307f71
        • MD5 SHA1 SHA512

        xinnian7.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian7.gif
        • Size 45KB
        • SHA256 1acc7a8af2d03c07a154b79f1f202471c368f0d70f63e174c242f77a7629d80a
        • MD5 SHA1 SHA512 SSDEEP

        xinnian7.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian7.txt
        • Size 557B
        • SHA256 fb6356a08d0e5e31f289228b856eb7decec05c692a23dc19e00e5930276d4b9c
        • MD5 SHA1 SHA512

        xinnian8.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian8.gif
        • Size 27KB
        • SHA256 4ac9859762c43f7ed7d06ac6f860e537099a43a360e1af07933aae1bd8249898
        • MD5 SHA1 SHA512 SSDEEP

        xinnian8.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian8.txt
        • Size 293B
        • SHA256 57fda3edb41fc720db21c5f423d26c6e441d5b29fe071ed5d3c303524d1def05
        • MD5 SHA1 SHA512

        xinnian9.gif

        • Path /storage/emulated/0/datoumms/temp/xinnian9.gif
        • Size 9KB
        • SHA256 4da7e103adc76941e2e7ef4f9330acd090b64efbc8842d63b1b3fa225f10336c
        • MD5 SHA1 SHA512 SSDEEP

        xinnian9.txt

        • Path /storage/emulated/0/datoumms/temp/xinnian9.txt
        • Size 165B
        • SHA256 74283ccd262d3c11028e49ba3bff9af2188a2488f32ac6e27d216a78cb308ef9
        • MD5 SHA1 SHA512