Analysis

  • max time kernel
    2s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240506-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
  • submitted
    14/05/2024, 13:07 UTC

General

  • Target

    419a6947af64bd300a5c618131d884c6_JaffaCakes118.apk

  • Size

    20.0MB

  • MD5

    419a6947af64bd300a5c618131d884c6

  • SHA1

    218f086e52f5f8d27cf701620d53a0908b239d1b

  • SHA256

    d273cef7c33005080fe33f52189e79f803177025f263480ff0e122019c70e644

  • SHA512

    1cf9e46bbdf681a2cd96ed2d378412a5d906c8fac286eab317d359e31df59b57e4210299d2ed2bf00e00301464ddfbe30c64c86793fb5798f5d850aa68d614b8

  • SSDEEP

    393216:jooOcEMlTfoL3kofhPIt7PDBtpP9t/x+iBGVnz3KikhnVqqIMns:3OcjlTkIt7L/pT/x+DVnz3K3JIss

Score
1/10

Malware Config

Signatures

Processes

  • com.maikevip.yangtuner
    1⤵
      PID:4236
      • chmod 755 /data/user/0/com.maikevip.yangtuner/files/libjiagu.so
        2⤵
          PID:4296

      Network

      • flag-us
        DNS
        semanticlocation-pa.googleapis.com
        Remote address:
        1.1.1.1:53
        Request
        semanticlocation-pa.googleapis.com
        IN A
        Response
        semanticlocation-pa.googleapis.com
        IN A
        172.217.169.42
        semanticlocation-pa.googleapis.com
        IN A
        142.250.187.202
        semanticlocation-pa.googleapis.com
        IN A
        172.217.16.234
        semanticlocation-pa.googleapis.com
        IN A
        142.250.200.42
        semanticlocation-pa.googleapis.com
        IN A
        142.250.179.234
        semanticlocation-pa.googleapis.com
        IN A
        172.217.169.74
        semanticlocation-pa.googleapis.com
        IN A
        216.58.201.106
        semanticlocation-pa.googleapis.com
        IN A
        142.250.187.234
        semanticlocation-pa.googleapis.com
        IN A
        142.250.180.10
        semanticlocation-pa.googleapis.com
        IN A
        216.58.204.74
        semanticlocation-pa.googleapis.com
        IN A
        216.58.212.234
        semanticlocation-pa.googleapis.com
        IN A
        142.250.178.10
        semanticlocation-pa.googleapis.com
        IN A
        142.250.200.10
      • flag-us
        DNS
        android.apis.google.com
        Remote address:
        1.1.1.1:53
        Request
        android.apis.google.com
        IN A
        Response
        android.apis.google.com
        IN CNAME
        clients.l.google.com
        clients.l.google.com
        IN A
        142.250.187.206
      • 142.250.179.238:443
        tls, https
        858 B
        40 B
        1
        1
      • 142.250.187.206:443
        android.apis.google.com
        tls
        4.7kB
        9.1kB
        14
        23
      • 224.0.0.251:5353
        4.1kB
        12
      • 1.1.1.1:53
        semanticlocation-pa.googleapis.com
        dns
        80 B
        288 B
        1
        1

        DNS Request

        semanticlocation-pa.googleapis.com

        DNS Response

        172.217.169.42
        142.250.187.202
        172.217.16.234
        142.250.200.42
        142.250.179.234
        172.217.169.74
        216.58.201.106
        142.250.187.234
        142.250.180.10
        216.58.204.74
        216.58.212.234
        142.250.178.10
        142.250.200.10

      • 1.1.1.1:53
        android.apis.google.com
        dns
        69 B
        109 B
        1
        1

        DNS Request

        android.apis.google.com

        DNS Response

        142.250.187.206

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.maikevip.yangtuner/files/libjiagu.so

        Filesize

        323KB

        MD5

        977673d78f73c33f3f6cfc8d5083a90b

        SHA1

        e80c34f729f1e2085ff96b527074e6fc4e27546c

        SHA256

        e866835a34c425092eda9e1deb9f066028660a50d85aa326ac367293407ef536

        SHA512

        23155eebf7bc1f31361653bbc8df9db0ac593dab3e337996662bd128fb730568fd661ecce5c2d01b5e88edf3e3d6d4d7c3bdca9cb2dd4d24e4f13874b230af50

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.