Analysis

  • max time kernel
    8s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    27-04-2024 22:27

General

  • Target

    03c3db1130badaefcc531d5bfed44f98_JaffaCakes118.apk

  • Size

    30.8MB

  • MD5

    03c3db1130badaefcc531d5bfed44f98

  • SHA1

    79137df661f19ae03742353e03319f326729f2a1

  • SHA256

    a754307414a4467ca04a1d1a70c30ae23b8e21a1ee8054b1b092b437631adee5

  • SHA512

    f3de6de56be48b5aacc2768e09558e4e125da79eb91c51d74505ca4d1e29fb16694a33063abf89e6965197ad3d028cb4f97c6e8f87a239f9f0230005cfde86c8

  • SSDEEP

    786432:7pnc2/D6i2h4fmhapfm0wCDa8dy6mPk51KyciCR6IjJx6dY:7pnqhMPm0NDa8Q61TKJR/

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • cn.nimostudio.chengyu.two.android
    1⤵
    • Loads dropped Dex/Jar
    PID:4222
    • getprop ro.board.platform
      2⤵
        PID:4256
      • getprop ro.mediatek.platform
        2⤵
          PID:4276

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/cn.nimostudio.chengyu.two.android/app_plugin_lib/libabcdefgh.so
        Filesize

        61KB

        MD5

        042246eb7c48a8cda97de99465e6a177

        SHA1

        f71816c4a80fbb7b63bfd6425d98db513aecb00a

        SHA256

        9a712cb778e9d43f8f4ea9fa2b9f4b8cc29daf74984d04f0c938dff21c118342

        SHA512

        2d201619998113c5d2990c92c28c973d557872bc4bbde153b5fca39bfe0b799ef0e9bf8c29d1304847f8e6691d55649d04c6a82fe8f03e621c9e8da50c50faa8

      • /data/data/cn.nimostudio.chengyu.two.android/files/stares/updates/sta.jar
        Filesize

        2.1MB

        MD5

        e1dd5bacfa75b9cf6abf6eaa1635e3c7

        SHA1

        96a86954d989f634798c91523712c34eab06da3d

        SHA256

        8dc8a08cb4af889317d11fec26e2c1058f2af5056a4dbc25deaec8707073947f

        SHA512

        e62c106f91d7a7202411a6938ed721fa695257f205e93772a87c59804a899a1bafd4887d48f2c9f33e5fe3ab6965227beb3fee007515ceb926e83d0e990fcc37

      • /data/user/0/cn.nimostudio.chengyu.two.android/files/stares/updates/sta.jar
        Filesize

        3.4MB

        MD5

        387e3984e552f9a4f47309dfc453f82a

        SHA1

        0e629acc985bb3565f33339ff04e9e1b73675cfe

        SHA256

        245b99a86572d6736a00b18cdd507b865df688f14bf2fe232be26ef5a6171330

        SHA512

        3d81d00d68b5ce7c5f91ad5086793b592d6f8658d67f74cdbdb9418c726dfb4f491a50a94030358927d8fd60c2a72534a11c13602424968e3bb99551b493dcd6

      • /storage/emulated/0/data/.systemid
        Filesize

        36B

        MD5

        5c461097e9cfe3c7392a77a6a04c25cc

        SHA1

        453f95d07400008319a711310bd1dc4fdb730f9e

        SHA256

        58aa2e32b81fbb94beecd8b9bf64952095cbb339bad5b9769125d8f9a4393198

        SHA512

        d342c4ce7c54e6461b4314bb51835f035b575b385270e7d599bcebdb39249e56bab1c56367621b9b2162e3789b35f82d43133c45e0f97c4ca4c4ac62cc60e23f