Analysis

  • max time kernel
    5s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    19/05/2024, 06:37

General

  • Target
    5906fc6b7f015cd78b460241e931d00d_JaffaCakes118.apk
  • Size 5.3MB
  • Sample240519-hdk5yseg21
  • SHA256 e3588d61fe7b8f7e20edd249acdf2fc74a3e65e0418818a00de7fa538ddd1b94
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.qihuowzwMi.cn
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5147

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes.dex

        • Path /data/data/com.qihuowzwMi.cn/.jiagu/classes.dex
        • Size 1.5MB
        • SHA256 832e6c1e323cb8ba95175a123bef67312f18ba79aca0ce3eb019d8f75ed7dc27
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/data/com.qihuowzwMi.cn/.jiagu/libjiagu.so
        • Size 382KB
        • SHA256 e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2
        • MD5 SHA1 SHA512 SSDEEP

        .jg.di

        • Path /data/data/com.qihuowzwMi.cn/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 daf9b8091c7914069e33304c60dffabab787aad8fef728dc6c08031250bf7c73
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/data/com.qihuowzwMi.cn/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 d79af81563bc6ec88f4163f11b3a39f9e24cbe006e35c3d83c1ed6029bb5df95
        • MD5 SHA1 SHA512

        .jiagu.lock

        • Path /data/data/com.qihuowzwMi.cn/files/.jiagu.lock
        • Size 27B
        • SHA256 cd96754927fe35f9790a212882f9897cef5ee3e455b96a2292b2096a2c00229d
        • MD5 SHA1 SHA512
        • Path /data/user/0/com.qihuowzwMi.cn/[email protected]
        • Size 4.2MB
        • SHA256 394c6fb3a39d08edb0a2b6dc3db5a64becdf6141b8a8eb0833ee70cf549f2aa6
        • MD5 SHA1 SHA512 SSDEEP

        .deviceId

        • Path /storage/emulated/0/360/.deviceId
        • Size 48B
        • SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
        • MD5 SHA1 SHA512

        .iddata

        • Path /storage/emulated/0/360/.iddata
        • Size 32B
        • SHA256 f2b7c481f578df781ed18a909cc39b8428f62b53f362259572eb10cd3212944b
        • MD5 SHA1 SHA512