Overview
overview
10Static
static
104f855ba3a7...18.apk
android-9-x86
74f855ba3a7...18.apk
android-10-x64
7CommonPlugin-3.3.apk
android-9-x86
1CommonPlugin-3.3.apk
android-10-x64
1CommonPlugin-3.3.apk
android-11-x64
1FrameworkP....0.apk
android-9-x86
1FrameworkP....0.apk
android-10-x64
1FrameworkP....0.apk
android-11-x64
1WelcomePlugin-2.3.apk
android-9-x86
1WelcomePlugin-2.3.apk
android-10-x64
1WelcomePlugin-2.3.apk
android-11-x64
1dynamic1120.apk
android-9-x86
dynamic1120.apk
android-10-x64
dynamic1120.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
General
-
Target
4f855ba3a78d3bb7418f8587d09caaa7_JaffaCakes118
-
Size
30.3MB
-
Sample
240517-mdck2adg75
-
MD5
4f855ba3a78d3bb7418f8587d09caaa7
-
SHA1
1c330edfe5f25ee9975b9d39176618dcc7f1d88a
-
SHA256
27a645a3db0a8a9fbd4bfcd7993dabf995b6eaf727976dbc1c66a18f252834de
-
SHA512
9affb34b414ba19e524bf872b71977741e40059c20d43c2211424d60fb2ba5a0044d36b28c3557e8532079a91bfa52b189d49a09a0f6030c8829b725fdceb466
-
SSDEEP
393216:Rf3pH6bgZNpBzuxUwJrt2rH0haR8moTmS3xLzt0Jd/hnaqiTCYFwGa4l523hd5y/:RRpZVzwwrUh6W1xchnhitFwGa4H8d5up
Behavioral task
behavioral1
Sample
4f855ba3a78d3bb7418f8587d09caaa7_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
4f855ba3a78d3bb7418f8587d09caaa7_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
CommonPlugin-3.3.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
CommonPlugin-3.3.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
CommonPlugin-3.3.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral6
Sample
FrameworkPlugin-3.0.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral7
Sample
FrameworkPlugin-3.0.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral8
Sample
FrameworkPlugin-3.0.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral9
Sample
WelcomePlugin-2.3.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral10
Sample
WelcomePlugin-2.3.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral11
Sample
WelcomePlugin-2.3.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral12
Sample
dynamic1120.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral13
Sample
dynamic1120.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral14
Sample
dynamic1120.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral15
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral16
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral17
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Extracted
joker
http://114.215.185.233:8079/
https://mobilegw.alipay.com/mgw.htm
Targets
-
-
Target
4f855ba3a78d3bb7418f8587d09caaa7_JaffaCakes118
-
Size
30.3MB
-
MD5
4f855ba3a78d3bb7418f8587d09caaa7
-
SHA1
1c330edfe5f25ee9975b9d39176618dcc7f1d88a
-
SHA256
27a645a3db0a8a9fbd4bfcd7993dabf995b6eaf727976dbc1c66a18f252834de
-
SHA512
9affb34b414ba19e524bf872b71977741e40059c20d43c2211424d60fb2ba5a0044d36b28c3557e8532079a91bfa52b189d49a09a0f6030c8829b725fdceb466
-
SSDEEP
393216:Rf3pH6bgZNpBzuxUwJrt2rH0haR8moTmS3xLzt0Jd/hnaqiTCYFwGa4l523hd5y/:RRpZVzwwrUh6W1xchnhitFwGa4H8d5up
Score7/10-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
-
-
Target
CommonPlugin-3.3.apk
-
Size
509KB
-
MD5
ec827d1639a419693b723e38efbd6a78
-
SHA1
42efcb0c3789fac15b8eda95e2f33bd789ab7636
-
SHA256
8f878f0abe8357bfc4346a0abef3cc3437d62416d284d532cfcab113b4d96a92
-
SHA512
1bc3f90aac56d676e96c1acd037c59028819025597038baba06ac16883cb3a51f645a3f5ef26f4fb557d37c9135c59b280ec3bb353be52cf1b2a89873d83e8c5
-
SSDEEP
12288:9qMvZwLlgBiTBu//SpQmN5a+AjK4p5bRqbCRjGsrON8W0:NwZMiFu//SbM+eddd6N50
Score1/10 -
-
-
Target
FrameworkPlugin-3.0.apk
-
Size
18KB
-
MD5
23dec9199a698f17dba2982c2a4dce53
-
SHA1
00d2498b25d7fe4b6797ad4745d356685301cb27
-
SHA256
7dbeddca1d878770c379ee00d5314f089423f9887b2648e5952d5a8d1575d062
-
SHA512
5d0dfb479565871ca463e89a4a7a742afac78baa91a521e330ffc9f605f534171a68791197c64874369f4d079a6d6e537e678d799837b24be3b79fdb3f61db25
-
SSDEEP
384:nP/UuSRfLCfkzxrqpMuMyWQ78xqUl1yVXAQv8mbrWR:UnXYpMyW1MUl0VQ5
Score1/10 -
-
-
Target
WelcomePlugin-2.3.apk
-
Size
44KB
-
MD5
8ef2b798c30946b497e6038c8e5485cb
-
SHA1
a55036a3e51dcd9e71dd468790fd9bb1a037b67d
-
SHA256
d8a23c029bc13848dfbd56568a2c40696930c4a91c6b5f1764c561eafa7970d5
-
SHA512
a4263baaa5f093c8366cdd25cd0272ab7c60b86c9a412060ff382b87352599677471a37cc64bae1b978cf5e5a3b19d01511741872f1bd725304c3e52edade3b9
-
SSDEEP
768:nYirXFWLKxe7X+Fu9924EgUmy0GtzFavNedPtMoyb43b7B34mmErdcb:nXbgLKxe7wu7256Gtz4YdP33x3FJ0
Score1/10 -
-
-
Target
dynamic1120.jar
-
Size
135KB
-
MD5
e7d867c5905223a32c896c5b6569ff17
-
SHA1
5705ced0ce15cfe00819e3b8203871a1e4e00526
-
SHA256
e6bf1010ebd78923b6b66c9b447ec426c1799d0d14a79fc0841ccb1878144faa
-
SHA512
b878261af8b2c9f96ae6c326530839140401b18bb55d53e8fe9b3d14f7d33154dd1cb94215e31a4031676fd9c26a91bc8e8821a72f75e3a8dcd7f9b9f26d7106
-
SSDEEP
3072:I2/hSVkhPjCazxXvxz7LR8wJsKWHhZ66tKrhkpbscFU7qy:I2/hyoxJLR8/hBZRMh
Score1/10 -
-
-
Target
gdtadv2.jar
-
Size
89KB
-
MD5
093b695cb80c667a9fccc3d8d16e7a9d
-
SHA1
ee35fcc7fc55c1787064a8b468b0c72409c418ab
-
SHA256
74122fec54cf1a91aede87147e563d564197dd2e534375c422ecbfcb7e3dcda7
-
SHA512
c420b3f48bf4a053bcec92f8abfc8c5c686fd7432afe86e866523d5b8d2b764637f81ce8f19df548d0fde402bf7698e7efa184494d10d324834f19f8c1659108
-
SSDEEP
1536:mtsCCcBjCYhrjmqM3PCbsb49wvSRU0pA7yUPXdtkmEILn0VRBAeF0dlL:Gc4+YhrKqsCobwsgudLQfGeFulL
Score1/10 -