Analysis
- max time kernel
5s - max time network
150s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
19/05/2024, 06:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5906fc6b7f015cd78b460241e931d00d_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
5906fc6b7f015cd78b460241e931d00d_JaffaCakes118.apk
Resource
android-x64-20240514-en
5 signatures
150 seconds
General
- Target 5906fc6b7f015cd78b460241e931d00d_JaffaCakes118.apk
- Size 5.3MB
- Sample240519-hdk5yseg21
- SHA256 e3588d61fe7b8f7e20edd249acdf2fc74a3e65e0418818a00de7fa538ddd1b94
- MD5 5906fc6b7f015cd78b460241e931d00d
- SHA1 cd9948518f11de4b940ef67e88345d181fde6ef4
- SHA512 3edc6593d8e9e837989b5e4d9d64e5c575640377641fa8195d2f35961ce06c4bc4d1d8a74b48e160280f40d26b32a4d8696b927e804ef15ce19e17e3a42ebe75
- SSDEEP 98304:b02f+0zHTq0uA8T0fNmdLcBvZ8h6TW3n/yCMV8L3/Bbc19/PCkzAMV8L3/Bbc19v:IotrT+6f0cBGhQqna2L3p29/PCkcL3pK
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.qihuowzwMi.cn/[email protected] 5147 com.qihuowzwMi.cn - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.qihuowzwMi.cn - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.qihuowzwMi.cn - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.qihuowzwMi.cn - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.qihuowzwMi.cn/.jiagu/classes.dex
- Size 1.5MB
- SHA256 832e6c1e323cb8ba95175a123bef67312f18ba79aca0ce3eb019d8f75ed7dc27
- MD5 0cf2824f8b6fa79ac545416552f5fdc7
- SHA1 630c5a577b12ad2fee6b54d6fdee9793dfc8fbe2
- SHA512 3ed588648988ba88c246b0a35f1f9840c67b5192e5d32ce354fa9cc7195834bda4901da6607d32f7b44c8234a9e149c4fcf6cf9e63898c54f3db4464df9bbee2
- SSDEEP 24576:oO90RkWdjT0fz1v6h/yefhIvmcExuBaY4GTkpgNs5yBxtoFzFTM+gsMZhmjIok65:os0RTdjIfxAyefTx9rI+gxBEzK+TMy04
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qihuowzwMi.cn/.jiagu/libjiagu.so
- Size 382KB
- SHA256 e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2
- MD5 aa01dd97609092ce310e17bf791069ce
- SHA1 f000840a8f68ea7beb2e29ea466088daf55609db
- SHA512 766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4
- SSDEEP 6144:wnNmS07fgPhZt6JPeJqE2sPovWSpp8BWwprOFM4UNXqUV64WHRZDYQwYW2f5l8DV:McffCZt8eJ9paWS7kprOFM4UN6UNWbat
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.qihuowzwMi.cn/files/.jglogs/.jg.di
- Size 340B
- SHA256 daf9b8091c7914069e33304c60dffabab787aad8fef728dc6c08031250bf7c73
- MD5 b02ad63ab2ed20f9223427d0feb1f9b2
- SHA1 674c32034bdf0c652069034832c2a2d02cc5ddbd
- SHA512 c4a0b52be18c30ea5d1bc19db5b0c9afd387672efe21a683cbe9659808f4a5829f20b8eb744fb5cba657c199443c31b08f26493f44463528b8549f52300cbca1
- MD5 SHA1 SHA512
- Path /data/data/com.qihuowzwMi.cn/files/.jglogs/.jg.ri
- Size 314B
- SHA256 d79af81563bc6ec88f4163f11b3a39f9e24cbe006e35c3d83c1ed6029bb5df95
- MD5 dd6ce96bb9b5fb6586bb7aa919f3e9ef
- SHA1 51b0116f939a5e74e70e6def8abb121b18397762
- SHA512 d53e3a7388e990c2fc5812f6346c0cd0f00df6c17e5c9230b3ab2102035b4bf2e7eb5cb23206682264e8815d7f01282d93b7a7b951197ab77a0e6ed1d9c65ff8
- MD5 SHA1 SHA512
- Path /data/data/com.qihuowzwMi.cn/files/.jiagu.lock
- Size 27B
- SHA256 cd96754927fe35f9790a212882f9897cef5ee3e455b96a2292b2096a2c00229d
- MD5 f96e497a2341cf9cfcffe6139980b9ab
- SHA1 8885b40e89db88a8bd4c54cac25c2ead8989f7b4
- SHA512 f216a454bcc3d550464c4f5269d3f3d197e6541ea42c24b5db66d9090ba50070b560a74b3d2c09d537b84ac8ecc290411f69af15675516dbfd8e9f58c805d8c1
- MD5 SHA1 SHA512
- Path /data/user/0/com.qihuowzwMi.cn/[email protected]
- Size 4.2MB
- SHA256 394c6fb3a39d08edb0a2b6dc3db5a64becdf6141b8a8eb0833ee70cf549f2aa6
- MD5 3766728621604cf22cc698e9a6a8390e
- SHA1 287a10c0d3535fb8df3b4cf44d5c34a7d5a54545
- SHA512 b5c105feccf6ef3bc0b9681cbb9ae384de3c1d170451b2b49f33a65b998207edb2ef63d3fedb1120d14db253bafbbffae033fcc9dec48de50b506bf957e8bb42
- SSDEEP 49152:Qa2FtwYp8fKKJNuOQtVOQ+ZAc/xtJrFkFC0gs+Z8jYi4uwKQ+f+4FE/Q7Xb3rPma:Qa2FkbZNP5kO9Er
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/360/.deviceId
- Size 48B
- SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
- MD5 4c4c5285293d5141f582aefa4e038669
- SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
- SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
- MD5 SHA1 SHA512
- Path /storage/emulated/0/360/.iddata
- Size 32B
- SHA256 f2b7c481f578df781ed18a909cc39b8428f62b53f362259572eb10cd3212944b
- MD5 55131940e042bfbbf23ae86fc2e0c9df
- SHA1 57e25064deedb330a8ad69946f0c3c7517ad3c32
- SHA512 f29bb4ebf0b2a857aedf2474b7cbc8464920495b0d50c0be99eef9bacd4b1abeec01d44570a1f0209f570008e1eeb50fa51a8dcc373f75c2ced3c346102483cb
- MD5 SHA1 SHA512