Analysis

  • max time kernel
    146s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    03/11/2024, 04:10

General

  • Target

    89926abd46a7ae7058bdb4bc623b343d_JaffaCakes118.apk

  • Size

    7.4MB

  • MD5

    89926abd46a7ae7058bdb4bc623b343d

  • SHA1

    1a3c2cb8459ff777b1f7c5372403f81967cf04a0

  • SHA256

    2ec94de06334a2e235964298011d6221b3812aec8b9911dc9c2f815b9155f695

  • SHA512

    a5f45cfd04e412231b25c61a01ac35ad510afb16f373730b4568af1a5f2255954fd6ff34498b2fdbe29269b16f8e93f580edb07bd30c05295cbd211407d264ba

  • SSDEEP

    196608:pM7XKlMzh1VXkmCP2RRXlfIAwRkid05DwYux:K8GLVwu7ajd050YI

Malware Config

Signatures

Processes

  • com.threeti.huimapatient
    1⤵
    • Queries information about running processes on the device
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4635

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.threeti.huimapatient/files/__local_ap_info_cache.json

          Filesize

          2B

          MD5

          d751713988987e9331980363e24189ce

          SHA1

          97d170e1550eee4afc0af065b78cda302a97674c

          SHA256

          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

          SHA512

          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

        • /data/user/0/com.threeti.huimapatient/files/__local_stat_cache.json

          Filesize

          25B

          MD5

          2d805b13f2f28dc3ca9bbcc000f49bb5

          SHA1

          9eac165b4d81258fd3967cde5cc53b53b1dabcb1

          SHA256

          c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

          SHA512

          5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

        • /data/user/0/com.threeti.huimapatient/files/mobclick_agent_sealed_com.threeti.huimapatient

          Filesize

          531B

          MD5

          bc83618c7b19531d30973c0b57615e68

          SHA1

          8b7fdb48ff41d09e561a8681f8ec3e9c9e26942a

          SHA256

          95ee02152bc52ceb94c14a38cd03712216da237092d93c3b7aefb561becd807b

          SHA512

          66f569a611f9ac1ac76c892c011c757ae8d753e6023cdd83e9374a143c11f736a68449254c2593bb903106b47a3429103cf042ecfa3325ecafc0de94fd340028

        • /data/user/0/com.threeti.huimapatient/files/umeng_it.cache

          Filesize

          148B

          MD5

          989a2fbc08c64b99bb40000b0c3deb08

          SHA1

          228192a26f4d668ecadd91eab65b440968a64c34

          SHA256

          51506d453ebb352da3eb74498c201ccb597b6faf159fe6b0a2758105d62ff36a

          SHA512

          b622b52b59a259da486b8e222b663d9254e224468f546fc5dcc8f400b24d98a5435ef2669dd6c0a60245e1f8ee6dd8a6a7db54c1c83fef65d68998495c674cea

        • /storage/emulated/0/ShareSDK/.dk

          Filesize

          107B

          MD5

          893bb9930a6efdd3211826f4114b5a29

          SHA1

          57b8895adcc3bbfec87268d5f004cdaa6caee8cd

          SHA256

          45e6cf5549bc12c1150b2a10f20de32ec5b86fe23221536eca2cb2a43b1e2d21

          SHA512

          78f094bf00c6b440a57dc5b8edc10c3abf4fac63176dd64a54b2e7b03d9973485504d619ae80312fed1bc72db9f1617a990f37edc7bfdfa032ae47b054939010