Analysis

  • max time kernel
    108s
  • max time network
    183s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    19/05/2024, 04:47

General

  • Target
    589d6fa413e083640fc16ce9afec65b2_JaffaCakes118.apk
  • Size 23.7MB
  • Sample240519-fez96aba7s
  • SHA256 45df5e19c65c28725ccc53908b531f43e8df7887f5dbd9f91f5ce790d20fddfc
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

Processes

  • com.ldw.xiaolirili
    1⤵
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    PID:4499

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .jg.ac

        • Path /data/data/com.ldw.xiaolirili/files/.jglogs/.jg.ac
        • Size 32B
        • SHA256 4e772b8bcc92eefe3000ed19c884817f4c627c8a2d9cb9d97560778dc70edbdf
        • MD5 SHA1 SHA512

        .jg.ic

        • Path /data/data/com.ldw.xiaolirili/files/.jglogs/.jg.ic
        • Size 32B
        • SHA256 dc3ee62e914f3c46f923f07e4dd822975babe515aa08df28fe4a2b5357e779e4
        • MD5 SHA1 SHA512

        .jg.pk

        • Path /data/data/com.ldw.xiaolirili/files/.jglogs/.jg.pk
        • Size 32B
        • SHA256 9f2fa0cef2d4c34fdc089d08dfc98beb07eb50543a992240260391793da7a3b8
        • MD5 SHA1 SHA512

        .jg.pk.h

        • Path /data/data/com.ldw.xiaolirili/files/.jglogs/.jg.pk.h
        • Size 64B
        • SHA256 ad700568f93cd3303ccddf94ea9aa221fc3bd896206543fe2206b9d41b81c7d7
        • MD5 SHA1 SHA512

        .jg.rd

        • Path /data/data/com.ldw.xiaolirili/files/.jglogs/.jg.rd
        • Size 32B
        • SHA256 aa1cbb52a85fe5b69d4d2eba7c6a82815eeffcc0c584d2723a181cb7306d24f7
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/data/com.ldw.xiaolirili/files/.jglogs/.jg.ri
        • Size 307B
        • SHA256 ead513031eea2a12f38a89103af2947f7c8dbbb40390da86374196ef43d287ab
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/data/com.ldw.xiaolirili/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 1c5994a5a443135cf3f266c58b133e3009c824b105830b6af9e036f556dcabef
        • MD5 SHA1 SHA512

        .jg.store.report_pid

        • Path /data/data/com.ldw.xiaolirili/files/.jglogs/.jg.store.report_pid
        • Size 32B
        • SHA256 656821c26c1342e1770f67d60e90c25bd19e5c400789e5d5f38f4e34c8f29684
        • MD5 SHA1 SHA512

        .jiagu.lock

        • Path /data/data/com.ldw.xiaolirili/files/.jiagu.lock
        • Size 27B
        • SHA256 4ddb765848871d816f78422eec58fadee92d84a82a701c9b205186d4ea340847
        • MD5 SHA1 SHA512

        classes.dex

        • Path /data/user/0/com.ldw.xiaolirili/.jiagu/classes.dex
        • Size 5.9MB
        • SHA256 f004e201fe30837615cd45d2173f44d928cfa497afc2f34e43ca1ef8557f688e
        • MD5 SHA1 SHA512 SSDEEP

        classes.dex!classes2.dex

        • Path /data/user/0/com.ldw.xiaolirili/.jiagu/classes.dex!classes2.dex
        • Size 5.2MB
        • SHA256 edee9d3c501c4672c0d15da0adbf24b09fc177f62a4b8202435faf55b1151ab5
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/user/0/com.ldw.xiaolirili/.jiagu/libjiagu.so
        • Size 558KB
        • SHA256 335091dfc73a9f792cb720389c5d94eb6642764a38d70d4b6b7a8afd34038421
        • MD5 SHA1 SHA512 SSDEEP

        dso_deps

        • Path /data/user/0/com.ldw.xiaolirili/lib-main/dso_deps
        • Size 396B
        • SHA256 d92bfe3cacf4165c05fe8c142ec1e1b5e08ed0097bd824d67865b2e1ad766a4f
        • MD5 SHA1 SHA512

        dso_manifest

        • Path /data/user/0/com.ldw.xiaolirili/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/user/0/com.ldw.xiaolirili/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/user/0/com.ldw.xiaolirili/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512