Analysis
-
max time kernel
1180s -
max time network
1142s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
19-12-2024 07:53
General
-
Target
dcc61ee1bdbff7e2b659bfeb6bc4b929_JaffaCakes118.apk
-
Size
16.9MB
-
MD5
dcc61ee1bdbff7e2b659bfeb6bc4b929
-
SHA1
0d213c8d396702cdf36f8f9295542d82470be639
-
SHA256
a601ecd0a85763ad8687faae5d019d06656ebc99a06cb9d9568727c6b9d958a7
-
SHA512
c4a1bb0b71f43868eaad6d8d3f79c4ddb93e87bd4a570fee9030e9a2423b964cd2956a92a0bd52ae189959e793844816e4526a57af9193c9fb78e078dec5a7c7
-
SSDEEP
393216:uPErRu8smLMNk8fbMlZixtPCffNHGQtqiVYVD/MofEWoTnsdTXK:YEo5PNdf0UQfNHDgiVQjLEfTsdT6
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
-
Queries information about running processes on the device 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 4 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 4 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 4 IoCs
-
Checks memory information 2 TTPs 2 IoCs
Processes
-
com.tencent.androidqqmail1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
-
/system/bin/sh -c type su2⤵
- Checks if the Android device is rooted.
-
-
/system/bin/sh -c getprop ro.board.platform2⤵
-
-
getprop ro.board.platform2⤵
-
-
com.tencent.androidqqmail:Push1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/sh -c type su2⤵
- Checks if the Android device is rooted.
-
-
com.tencent.androidqqmail:Tools1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
-
/system/bin/sh -c getprop ro.board.platform2⤵
-
-
getprop ro.board.platform2⤵
-
-
/system/bin/sh -c type su2⤵
- Checks if the Android device is rooted.
-
-
com.tencent.androidqqmail:Uninstall1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/sh -c type su2⤵
- Checks if the Android device is rooted.
-
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Virtualization/Sandbox Evasion
1System Checks
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
436KB
MD5c7fdf76c2ed2ea6b3d98c252122c7217
SHA16af0c686b16df2dcffd392c7cf1cd7d1bcbfd144
SHA256515d37a564e631f8e858806c5c37d363715f8df86119aef5a590bf65dcc57c78
SHA512bbeb9a1ff04b9d8fda679e7440d50500e6449530269a662dcb8d6947c788af1222ea82c94776a4bfb6dc4cd225e8052ad284247cf2d62f0196a56e9180bf7d34
-
Filesize
2KB
MD56e41621e6f2f665eab18c5a112202aa0
SHA11089f0109d419a7f2188959eed72e7a8f97306ca
SHA256c555f2e2f83aeb06af5e6edc3b5e1f8628b024983e2b056105a3d809a35d4940
SHA512460cd1e87fb6a5ce646b46264f2a8f2791e91a312546c0e7807b3ccb3c07fd41d283e5dcebe1c745f43850cdd36940d600d0390d4b72f598460739670e507ddf
-
Filesize
583B
MD55d5ab43368891cea552df50dff5be801
SHA1a9fc0297851bf963c5ce1e7685b7932cc93b9353
SHA256ad97f3274fe3b67497d143229966a920c893446ed8cc58a3a8107e348dbc4688
SHA5129b624ef9bd9bebb4eb233763eea0bfc42e31fd2838dd1b121578e7fb92fea6a1a290e20442338554964bb143265508530cd0e2de9f57afb668a06adbc46638fb
-
Filesize
44KB
MD52ea01ea70fef0002dff088f30d36e6f7
SHA1fb6f0bf25fa8aff6bd5e94ee78c4206d9d2cbc69
SHA256a35e5e7849ec37545c578f5cfe3ddfbf978603a5cf6a5bcc00ff440db0579170
SHA51230f91838b493cc046ed20dc4c77bffeda5d2003d9a82764ee71e29bf0703ac0cb50f52af61367e25dc98a1cf2a3ae7ae3bfe49e16d4e2c145e03d3d1d288b4ea
-
Filesize
512B
MD53b479e635d6f717b838d3b0dd18e4388
SHA1cec46930741a33a87b4d962a1d91bbd8344a6cdc
SHA2562e9aa325eda1e6566914159e0928493fa09c8bc31e6b4c3a956ddf7e06058f57
SHA5125d6923c0b3467e391f41f2c9251bfa4865e1cdac75adcbc17dd38182f018ea07633c48ac8c3a207ce42ee8c430a1e512123406cc8b26fd3ecc5c1ce90c0e38b6
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
12KB
MD5bf5355c18ca1cc2e873a05a6025a0d7a
SHA1f85ff14e4f3e304b3309760a3c602d1d122f877b
SHA25605e15c7209b58c907162e31a788f0ed7066b4ec1aae07e8267cd2c6df694ec0d
SHA512da2a010595250fe81e0e155f88cc07de1fd4b127465d378f3c93abc293d1e4f3c0edffd6e61ff3c54638ebc7bfd66b6b737ea610b3a6050af7e3296fb56c2722
-
Filesize
16KB
MD5daa216c75a05d262c2dd5b07057d509d
SHA1ae543cdb80f933f05c6b37d0954965ea332c3f6b
SHA2565c73014ed6358d73cbea8dcb66c0bb854bf248a644d963c89de7768301f928ca
SHA51217e2103dd9c9c0d273e593f26464b9e0f153f612dc3f5d0c312f4f66162b3de6943fa27cd2a7e614e40dae840c253acc1115c414227dc36621458fa2738b5076
-
Filesize
512B
MD542bfca4c2eb501f005228de025e138de
SHA187f28bd66298aff5e6608205b782114b3541eb58
SHA25648ebf7de5d15384689a18b255b50bb93b2fdfc269eece0574573ee3ab06959f1
SHA5128044d4dc24d57c72d2387e527700e165a73debfe11078b0c37dc892057cfdee6662d71644b1ed45e5642b402d6fd8853ca200432715adf9b927fc734696319cb
-
Filesize
225KB
MD53facae6d4c4eb7624db0ad03891c9a8e
SHA1441eeea6c9cdcb2a3f48ffe64e2557d1d6c0ec69
SHA256f282cfe716ebf93597e7bb3600af2f77ff99c0cbc7e6e3089dbf8e859c237f6b
SHA512de572c961f76676165cc3655336cdc8a40061adb20d2909a0110437b716832f0987ee63cf6118cbca264e88acf6629dcac4b4f5d34dd955eb46c63cc7c93c701
-
Filesize
32KB
MD5f5a284708bcf44581155efac1483ca08
SHA1dc4854c037f0aa58358cc8d9e6e8fc613b0418e8
SHA25649f3bdda58ff34ae040c60a5efd06c5b7a7d3d59fd71394a4448be7a4b8150fe
SHA5127cc02b4ad33af2f3595b87e38bbf263fc2c4fdca853f23531dd306b499edfe9d705a52378d17c04c48698cf9cf4b0692b8ddea60c7a7de7aa7a15a60afcd720f
-
Filesize
512B
MD529e292f1cb71ad5dc39816c0acdab6d7
SHA1bbf0c418ed3b6f1a52a09205a725f86ca545919d
SHA2569188b73f3c3aae78e39eaf0d629fc8c0a51a6d50f15e93f5ff2a3423926ddabd
SHA512b43a9d477f026fea49aaad27df841bb60ba98c45e8133d176c79a937cf47ef236cd71715b5e50784ba040471fc9b4b940375cf702b415f4f413f26778b88de72
-
Filesize
32KB
MD5ab969844bc67bc8cce613fafe7001c6a
SHA1478b590c7eb922be0b848fe540299dcc66bb8aa0
SHA256978301ce7150f4bed6d5b519acb88ef7bc6488530fab4394e716ff0c3025b6fd
SHA512addceb31b03ba101e449ca80903379a3e05488d4063fee417eb5684c9d860f4c2fb75cfc96c7bb04be30f91e6bff0c1967e4b3a79e6932d338b6ba492c37874c
-
Filesize
32KB
MD532f8313091c561d7262e53b38fa340b7
SHA165245f7b7ab4986b8d501c85c9e14cc982c7f86d
SHA256a427a3411e8fa077f29fcd743cb4d04f3aad57130c27c0db3e501047e1afba14
SHA512e750dbcf96947cbebaeaa9322bffdd9e1fb8f639174704497406cee5243a77265b111024e4e67ff7cdef185a72eabef3a791f5fdf424d2c77580838a5f4316c8
-
Filesize
160KB
MD50934258d9d4e991d8e8c6b1f0869c722
SHA144a11bcab3dcdbf41e0fdcb56c2a3b7fdab2018e
SHA256e848575ece57a2d44e879d376dc61b436a17c7a3670c2058280a7dca0d8c4eee
SHA512b0ca038d9bb6315f7f86b22b313c7b660851f629519402fbb26767a2215fef6819eb9f58718636b945a2c3518b6a9127f1b1089108641a577db49ef8b0871b94
-
Filesize
32KB
MD51b5132587b6c1cadca7b637500d24962
SHA1da3b49fd6b480ed25b122fdafe6b22e633468001
SHA2565c4087b9a8f07b21b66ff9f40cbcac3ff49ca55f72706f126b93f7e1d5669708
SHA5129be7f025ef510f177360a365475c77074399b42bb6a990d6fecf2e27db768245a22b379e17f0e055e35b0be0428fe943b0a7632f287cc73f9a3ddb558db6bc52
-
Filesize
20KB
MD5ab95769a1b81761912b3b476772778a6
SHA1f54511f7232b32f85468c76d495dec4173275999
SHA2568ccb9623a2b23757854071c08c5583cce08efa2e7a56329ad3c0b05ace731750
SHA512374e1469c8b7828dae7f9a17aaac80edaeef85870e67f3b37c90eeb22d6ff7fc738a02258b7fe77a4a10f0ba4d32504e8fde78ac84b0ddaa7ecbfeca6222128b
-
Filesize
4KB
MD575381d62fc8f2ddae774a868d7635e3a
SHA1ed55b43f39cf60134507782d75f5c9d86fd9c987
SHA256b4397b381b384ddd4911fc3d4ae9aac5982685e21b39c7059ece50c37dabe28a
SHA5123ea74f1ff79083dfa426b44ff814bcc0c652cdde4fad0e465f5c2c9f6912d548b0bf0954d7a245c5f0c41d8659867e6dc4bea058f28548ef3323992d23fd9223
-
Filesize
512B
MD5f43ce14e12752452b001217270db4959
SHA18e2ba795259bd6b7f1c5054158a8c2c15d88bd31
SHA2563e688e28940de8c775f628347dd99b4c84b2e953d67b60032985e51f14988e69
SHA51260033ae34edc3ed6178feff47cf89bd0eab8c9b4b4ea9544a19b5a5f13eab56fb3a4b51e84e2e3c37e79af63b4c3a1a43b97985915cd006095b9f84a178b245c
-
Filesize
12KB
MD5abe1518e97ad6993154fe619342c43e0
SHA162380d924936df91456b149d976a1d9c92d2545c
SHA2564abcedee058d89a8ec9eef859f6cf5537e45fbd3405e46c63c179f59a2991b38
SHA5122bac1e45659edbc549c461548bae1ea42801f8c1498efc60e84e890afbab83adf30ab8dfe28bbcb3c904f56e13ee67a3d1ac9b171be70122026b7f8c71eaae8c
-
Filesize
4KB
MD5eb5e155bde3eb6be3ed78e79d70e7976
SHA1c8d03cbdf602ca6d6faedebcb4d857dc19c2ceeb
SHA256726663b9373a678f465eaefb34d2cf687df9d7efb5b9d6a17b53e8280f3f9078
SHA51210680ef91ae7bf572d3c049112f061741dd82bfe7162d8195dee97dd5001753adca05537d8e87b1b90ef817c1f2b2e406d9f6d1350b607690878fc7c7af4bb66
-
Filesize
512B
MD5426e72366d99f32114270a20c7c16806
SHA12fdec78db86ed32e65a76dd49bc662b36057f1e6
SHA2568b7fd89c4f797114feb0fe2208e8f998ebd160598b4a046837df4150610109be
SHA512b06ebf85dc8afa69710166e14272cf46fb65c9067840651e62e8a1e2f362710ffe39636fc63c5c8b89a0adbbd682903f7e2efefe5f8deab49502e4fa3d669127
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
333KB
MD5fc8aec4db2b45cd6e885431e7e4430cd
SHA139e37ce1319682fa9c26b5c4ba3570ed45c0496e
SHA2561d9b8e80b12c3b1313dd138d4039752f101e8a698da65c7621a45f6fa0d5dbf0
SHA5120fb0592f171e44be32e7d73f6fa8ed3c6f6c5f745f5b18682ecefdbaddba18b7704a74fe273c7d85d3d1318dcdb63fecb4e733f1fe15e0dc499dc28223d48326
-
Filesize
92KB
MD52cdce69313ebadd03e8a692c75fbce76
SHA1e72891663038d1cb71707b28077554de3ec6d31d
SHA256b941d05a3e528d72204c0c9613fbc30f57817fa746f50585ede4de72df97af0e
SHA5124270bb9a858da36522b3f32014909a69329b5ed7f684a38cb3317624d8f1a3e009f44478088708120814d6af97a72c8ffeadafe21b9ccd7fc9a5b73c0c6fde69
-
Filesize
44KB
MD566876cd1b3f0cd3580d7d6a7bfd87623
SHA18b066c5ca7509b2f33859eee7cc3cfeb512b34ac
SHA256853b558a9f13af4acd4bff9dbd87f83f1fc20cddf33d02ee417da6b5fd5b7d26
SHA512c7a91b9b4e98bc3edec6a2c04830cbf809c14747139afe6662c4edd46f322c1e28cb276a992c2959cb5607717872a670ae15fe0b9964c1b3aea6bee1e61aee5f
-
Filesize
36KB
MD5107afeca190da50887c80b1cc1e2527d
SHA1ef6671e82aa9143596330d7a3bd1696cd86e9e54
SHA25647f8713ce7f085de9643576c6ccda0642821bbea5dce514f433716327fc64d8d
SHA512055bcb6da959114947c92d051084963fcf0766a140ea829ecc3d4329c7b50c15d4f17954f0380e73e378e3d244008b6ac63c35df5e7a46c53e66431daea5a667
-
Filesize
16KB
MD58a828ab4564d0da7dbcbef3a36c4cb5b
SHA11f6cec5431d95f7da5771a41922f0668a135c14c
SHA256c801c1f7adc699502ef646c467694a62d6d93c1aa00bc853e39dde71e83f4cfc
SHA512c91df4f67edb3e4a328b2d4639affd0028e86cad047b73c7bf05f7b977e2555b9c0b9dedba482e0bb5078ad492658bc00e3c25285e842c5adcfed3d787939c7e
-
Filesize
16KB
MD5ec48369a01b1e09021f30383e9a84da5
SHA126009312e237db4b0523fb5f82252d78812b7ad0
SHA256d085b82d18a8affa11f2d123c2d9b83385bc28fb96407f9ca09a2aa8352cdafb
SHA512f06d0ce035300dba101e17110092b2fed533c6a535cad10a45e9e6681e02de61436864ccb4376d0108fb411c8cad5b5bcff2fca4156af41ff5b7070bfbca5f04
-
Filesize
24KB
MD51db426ec93710ccd5e7acf015818f117
SHA1dc7e8384ff7f079d61b74707ed13e35951020ac4
SHA2568101e15bbb2f5542ab0e534d67895a373197f5b31a79a56224c3163728ba7dbc
SHA512a784eeb91e81d22a835a5db6096833ef45d88c6b3bb3416487dd0101cd4aa90f5feca80c62a9df8dc85239767ba3acc41a49000d75867b57568cc7524a4c34da
-
Filesize
445KB
MD5c6140560f943e1017a93c2e6bf4793d7
SHA1ae9685894118477b8e0a579a89d83aef0b5cd106
SHA25611431d9f67215e702f84cb7237a09e672b711411b67c700ca6f10b7e5c0a2277
SHA5120f008aba973b81f07d557dcc6dd5e2ad5e671d89588ae78795640088c6d63b003eb537f46acfe098ea310dc326dc69a661207a620af6737770cf252993b3c5a6
-
Filesize
56KB
MD5924f651ee393e883c6524c5ab37ded76
SHA121d866ccf85b4290792d9bfdd811205ad9e2a445
SHA2564642f022f3a7b032fa506c755b03f9ceabdd1e3b6e4629cbded150d3b35a1f99
SHA51224fd6659165e8e797b7da53abcffce126bdaec838fb6c794d9c70b9331c7517ce4519b3f64292ad33c29c38f4acb3e0c0a5b4da1d161fdf344282462f2b7c938
-
Filesize
36KB
MD5a277e791260f7146d18c2dbe5bb9e2da
SHA154496fccb089447822f408437b24f4e22f29a467
SHA2561c74ca8e387df27b0fefd3512babcc026de12f1c8e9da975c2e1613cc57e1460
SHA512dc77ebfbdaa118beb139d325ef17c05fda6f84eb9b7bc18310d05100c3dc4832aec6e321409e8679f56367f66a1b9d8302e5c2beb9e8689a7b527384dfbfde21
-
Filesize
48KB
MD5b42689bdd1785d0b8f4c9d0bf63167ff
SHA1ffcf1dca46750ca2ab454f95e25d6dce6923f7a8
SHA2564c4c05364dcac12b64220dc9529c1b651495c8c45f1bb33415be3c6f35a13ff6
SHA51214e50895e82345653dc300817e9da9e2a171b49404c3434a9a136c7b182a319be94db448e450d7e71770f2df30f6ee4c51d437aae88746901b1eaf39d39d57df
-
Filesize
4KB
MD5c34f77484e3d7e24d509708099458baf
SHA11bf25fd2e37bbba09715719f43b638e872989413
SHA2568e8e7cc212b453fe0feb177db3808c7b0bd49c607b8d23a240866940fe75b2a4
SHA512d87473cb3676243049400d9a51249d8b9f2945db58864021ee738309827f10d32e5ff8868281ca15dbfbbc621817713b9624d83d02311a9ef83737735ae77a0d
-
Filesize
4KB
MD59cfe255514eb493417c0dbb06424fc9a
SHA18c1174dfbd21e953ce3e1c8c477f3a46c0865b59
SHA2564a3aeab049b4ad7f109b4e495660ca7edfba0ff60ff87fd4716f8ee2e0c1256e
SHA512ead80d239f933c1e2209b9c37483eb9c0ab9269ec3b3ea160118deaa931d69c68e440c1221711a93510c940f09ba60a9ac8c60409f1b223944d9cad8dbaac7ff
-
Filesize
15B
MD5e9b3218310730595d1c6c43e9d48e047
SHA13b0f94eb5363a120c6753280b04ba242aa3d9a0d
SHA256573d6dd39e5ad0411e4f79e4afe2dbccaa14687a630267e9fbd5de9f6f919e07
SHA512a29a1035d0da9a64055e4d70a6a0e32816252bf3d1a4eaae9c8c703872efd4c6c87d7fb7a7cae8ba3fca055208f30dc6c2b43f58e114dbf21439188f5297803e
-
Filesize
1B
MD593b885adfe0da089cdf634904fd59f71
SHA15ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA2566e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
-
Filesize
10KB
MD53c5172c70faaf63ebe0f53efcb67dcf9
SHA1050436c52a16375d288be62f03be3453ae6a157f
SHA256c7253afcae18e81005a7449ebbaebcab0f92321f5ab5dbea4c85cd3f896ac45a
SHA51226b7b9a40cf4dff3e84d9f335d830bc6e387814ce3cf6726039559398e6b5ba7394315341c9f6fd16744dce716b8b8f67a609674640c0b7951a46b728ca59724
-
Filesize
36KB
MD55ceb064ed78d149583ccbcfaf7a06437
SHA12055d9e4a945bd16cd7db01136de5530d54f7bf1
SHA256bd11443ec0946c3fe4ccc9abe71a889bb243afdb8745f92d00eb3a90bb9d0ac0
SHA5121a4e4c055e1d2baf3b4b5fefd3214add82e99657426aa39e8dd953509b7cd7f496129fb6a233cf45a14406b682d3f95cd0d61dada154a85f02b11ec5b42f0b43