3c7b04705e2d92f133a548f24bdd46df884c9aa84991c1323e0aec4684d13f50

Analysis

max time kernel
33s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
16/05/2024, 15:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4be39fe72df427fdbf2bac0670e5a9b3_JaffaCakes118.apk
Size

10.1MB
MD5

4be39fe72df427fdbf2bac0670e5a9b3
SHA1

b3c0fca0b2d0a97a1ad66bfbbed0376176a16235
SHA256

3c7b04705e2d92f133a548f24bdd46df884c9aa84991c1323e0aec4684d13f50
SHA512

2a46bc21a85a95ca4048fb497c6047d41b722352fe1663816353ec4ba55b3216d6112106c8b083b2934477035b3c50f8997ff274fcaea77cbb80c3a34f90bb59
SSDEEP

196608:ycog8R/S1OZrsoO+SAM/kMbmc1uz+Z5W+lfG0oP0YeP3b+pWF7qBj0f:yc71ORO+SANMbmc4qZ5WSfG0oMBqOqB4

Score

6^/10

discovery impact

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jiarui.youcha

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.jiarui.youcha

com.jiarui.youcha
1⤵
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4297
- chmod 755 /data/user/0/com.jiarui.youcha/.jiagu/libjiagu.so
  2⤵
  PID:4334

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact