Analysis

  • max time kernel
    65s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    16-05-2024 08:29

General

  • Target

    4a36b61ce2086322b86a3ef09503d7bb_JaffaCakes118.apk

  • Size

    5.2MB

  • MD5

    4a36b61ce2086322b86a3ef09503d7bb

  • SHA1

    bb8c4b56c45ee98980783cc78157cf8b64309f40

  • SHA256

    fe3928fbd9ae2fa41e697d5866ad9e266ab10f068afa3c5448e9526097c5a862

  • SHA512

    0a4475e621c6c4260592a578fad0abd94e0b543c5c84cb7e251444cbc213a93843a2a0a1f11caf7c3c622b628bc0aa34fadcf13689be63eeaef1af824def4362

  • SSDEEP

    98304:5AuA1/asGtE0yVaFFCoIVK2t0rU+xufCm2jniocy3prmkmb3rUsK6bp:5AuA1/EXFFCFVZt0rU+xua/ih3kmbrF7

Malware Config

Signatures

Processes

  • com.smwl.x7xjoffi
    1⤵
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5102

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.smwl.x7xjoffi/.jiagu/classes.dex

    Filesize

    984KB

    MD5

    5bb3b8e47056c6dc37b9a250b89a60ae

    SHA1

    650da7583cd19dae3c8903d8cc2a64ec4d7308bd

    SHA256

    705fd7a3cf04b9ac7298bada93fff2521c4503014e266943481facd7f565e23b

    SHA512

    9bbeee7c9eebc1d234a9ca2c18c6df0cb398ff9ad5a6c81a07a314ab83fbdceb610acafab60fd3b5314909608fc5a778039879bad6962b395d0cebfa9ae777cb

  • /data/data/com.smwl.x7xjoffi/.jiagu/libjiagu.so

    Filesize

    491KB

    MD5

    b9bc395bbdf359c140d0787436c08d9b

    SHA1

    e926ef140c4a631a824ef73f59f2dbe0c1f9d290

    SHA256

    d8f0b19c36bdf0aa6aa2add107c126e48771a83c8f693abf290a1ff99078dbe9

    SHA512

    80fadc22da3ddfc43d24eefe309f602d6741065e9f94835a34be5943ce515b89262ef1db4594b085836ba2d2b762a7750de58025c212aeb9cb189f886d21cda3

  • /data/data/com.smwl.x7xjoffi/.jiagu/libjiagu_64.so

    Filesize

    521KB

    MD5

    c0b42b6408f49db84516bbd2e764529a

    SHA1

    c815fac880084d2d7586ba0e940084d24ca2e36f

    SHA256

    1b16f8aa85d1d069a52edd738f524578d9c52a6f91a3ba480950f9808c0ed11d

    SHA512

    f1e01008265ef4a0904f3dd63127d49c7ce2d7a4dcaf52ca8bc1379df19f5d35d861c26c8dd74019106a07516d2d5ff16c7de170b6d148c286554d2334f0a943

  • /data/data/com.smwl.x7xjoffi/.oabugaij/.fsgkea

    Filesize

    1B

    MD5

    01abfc750a0c942167651c40d088531d

    SHA1

    d08f88df745fa7950b104e4a707a31cfce7b5841

    SHA256

    334359b90efed75da5f0ada1d5e6b256f4a6bd0aee7eb39c0f90182a021ffc8b

    SHA512

    d369286ac86b60fa920f6464d26becacd9f4c8bd885b783407cdcaa74fafd45a8b56b364b63f6256c3ceef26278a1c7799d4243a8149b5ede5ce1d890b5c7236

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    dcb4909b9fb7297faf3147cd0c6776d9

    SHA1

    6653ebbbc0a53a5b8eb2a857aa6c2023a8f7c8fc

    SHA256

    ae9bf64fbde1dd60d85a9df4a38e7a326a4150dc70756d9cc03131a2229d10dd

    SHA512

    36fb9305035b5581fc8456bf177439b27e67f981854bc824c741d24fc3a25058d03ba561a1261d01895614a5479cbdc15e4a6842b4dde7728f3ec185475508ec

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    e73bd8521c9a97d9e7356dcf90b83217

    SHA1

    00dc97a609078adb4295a5dfa223c0a628d8d1ce

    SHA256

    7925e1b0ce71b254559d15a0af11386ba8d8ef9e44a01254e952ad95eedd6ee5

    SHA512

    bc206d1e73d2082aecf93466df707b8151c8f1bac0257a2590cf4c65115371631d7795449d3ac1e87753e4e9daf02832734b6be36883485b6d213b275c832cee

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.pk

    Filesize

    32B

    MD5

    ed5079b820b0923a5b43b0fccbf45780

    SHA1

    5f5a13a28608598be582cca45a79f9d04488adea

    SHA256

    b14922a947ba0db3feee3e861f0acb0bcf06508e27c57fe948078144ee261f88

    SHA512

    48260cddc41efc6d62e82c2a07a63987dff7e4c5cb3bffb9a0b4f203225bb6774cd0eba611ea6f025007ce51969501dcffdf375c453ae782d7f8f214d3594f5b

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.pk.h

    Filesize

    64B

    MD5

    fa1d26bd95c9fbf971c7932a6474893f

    SHA1

    9f3ceed32117dc9466d53ccdd033bd0c8d218db9

    SHA256

    1be7bb3e4ba9f3e32b0dea00c4b4b13792acfb29677e0f7be12410cc304e5ac4

    SHA512

    016a4efbfc447be35b0c8859352499104efacaced21da5c694111ed2984dae4b4441a311e9c9126decb8da7718da4a42dcf13a6a46ed5989b16fecb9a876fa94

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    e327e545075d7ee5acd5d570e1027179

    SHA1

    df82d052e0ce087b6a8ac83fb8badc490e0c85df

    SHA256

    c445214b892e45c3c034ef9724da9581398d20bf5d040754f101947d70e2a2d7

    SHA512

    a3c17af07143a16f4443a9a5f33c0df06e6fa63bdfdcd38b9dfb640337deececc9aba72f29329da97422682c2153ad517510070cf3f19b08a8098a587039e3a8

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    5a9b2516630ae88d5d7c35d0e704f509

    SHA1

    68887cf7ef8623fc6beda5e24f7e8718d0bb3d4f

    SHA256

    bc3a6aed58dcbce8b93c4c3a72ff6e0ce89189ec3e90f80c7f295172599b838c

    SHA512

    895940788722021e33938c8196be5b100bf387fdbcc7e3eddb1b42ef8b8d0effd816a382d56986185e944190886c435f89630db8ba45001c1e4ffa74aa7b8a8a

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    154f1cdc72e0b322f09ddc3d69c47f65

    SHA1

    f6037bb7616985510bd44590cb2965778bb645dc

    SHA256

    06f3e44f5cc3de5728712448da846970b084e465a44ea1035bc990c4ad2113fc

    SHA512

    9d62840f4f7728f556df98ffbe4b4753ade746a341cf85762091924642b08883b5cffb89fe3b3f1775d732f07589c5e2ce3cb54ef38d4067b43e007e64d7d549

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.store.report_cf

    Filesize

    32B

    MD5

    08196a7bd751bf896b57c4dfe3997ada

    SHA1

    bfeba05bd4c79da3daa44dbf6dc841acd1c01a5f

    SHA256

    77eb9d687e9ecce080af8259eb1760d8f072cdb3b464a4c9dd8bacb34fcff906

    SHA512

    15ed6174d1cc9cf0c68ea8974f0a7ac767dc7011af2895f3aabd54758a479248e9780ee4921f1dd456b9f3cd2f01cc41a94ae246b4c964f0985d10c72d9150f6

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.store.report_cf

    Filesize

    54B

    MD5

    40b41f60d39c94d5a18eb71c27be67c1

    SHA1

    a01880d3e3bc5b9ae619f4f968ab0ca06ed162dc

    SHA256

    6ec984fee15890f05a6f4aeebdea24780d51a3efb58616d2403bbee8b183f4cb

    SHA512

    a2894ff67b3929d1171af2223de4aec1deba452945af41d074b50f235dee807530aa1b7405da2e95ec3dcd5c4e944e55680e8aa19033b6368f526340e42d63d4

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.store.report_pid

    Filesize

    54B

    MD5

    981dd16c29cae8a389e218b4a59b8da1

    SHA1

    90ebbe1c44d13e108ac36513003508f989a2e737

    SHA256

    f448d135130a50ca99c8183b5aa5256052628756413b0064dfe151bdbe18b021

    SHA512

    11e4cdc2f76c4cf4045e926e6ddb80fc0417d5977e270ae08ed8e83d2cc50b8d0f162171822dd435046e198750e3970af33bf98a55e5c874976fcf9582645b61

  • /data/data/com.smwl.x7xjoffi/files/.jglogs/.jg.store.report_pid

    Filesize

    32B

    MD5

    0141d516e0393810155c78db366309e8

    SHA1

    903464dd3492f717831928802db138dfb009ad98

    SHA256

    c9ca85ada960b064c7a99324b49b77fad4c63fc5afdde379b77dfe93dda61079

    SHA512

    26f85b465ca78b0d98a13dee3f6492765e77df4d2f32448ce07b582819c9719dbac37a45ffdf12fa98f1a2c96a94c5091231fdd54bb22a098288485e993c7cb5

  • /data/data/com.smwl.x7xjoffi/files/.jiagu.lock

    Filesize

    27B

    MD5

    cccab4b479ce55b238539800d2c2bea8

    SHA1

    066c89e77f5c81b8a3aeeb5b4ab560a9dfa4561d

    SHA256

    a611d77cd5dc1676477fda4c7450c4170ebc60a0672188f18f8d115fe44512c2

    SHA512

    ffeb7348076300a4cf671117bb07975e9931bc70f49ed3259e8b630d3ac18424990e631044c1be2e0b915f8ccd5f5f22dd0d66ca4dc85f1aee03f437e7476799