Overview

overview

6

Static

static

6

68dd8da01f...18.apk

android-9-x86

6

68dd8da01f...18.apk

android-13-x64

1

BannerPlugin-3.4.apk

android-9-x86

1

BannerPlugin-3.4.apk

android-10-x64

1

BannerPlugin-3.4.apk

android-11-x64

1

CommonPlugin-5.0.apk

android-9-x86

1

CommonPlugin-5.0.apk

android-10-x64

1

CommonPlugin-5.0.apk

android-11-x64

1

WelcomePlugin-3.6.apk

android-9-x86

1

WelcomePlugin-3.6.apk

android-10-x64

1

WelcomePlugin-3.6.apk

android-11-x64

1

gdtadv2.apk

android-9-x86

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

Analysis

  • max time kernel
    36s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 22:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    68dd8da01f595c5af5114c9fbc6c8fbd_JaffaCakes118.apk

  • Size

    9.6MB

  • MD5

    68dd8da01f595c5af5114c9fbc6c8fbd

  • SHA1

    4fd585284ed5e77c48e6ecbc60d66f2d20be3a65

  • SHA256

    70c6d251a723e78f154939a7e2cdf5cd9016d6f7c55e4f2ce491410643d09a7e

  • SHA512

    44c4129ec58e5bcc828e26f9878268e2ac9077eab61ce4c4d580e5c1fe33ce00b35ea1dcaf4fdfe3fede94ae14c28579be2eba1755e02d485fd2fabbdfcfb9ab

  • SSDEEP

    196608:zXRvmn2F5F1IuE4ZuTMfbF323RDCmpyOOuLN9cxDKCvRUE+xPnQVRBIXdJzkhM:zhvc2F5F1IuE4uMDMhDxyOhhqdSNnQO9

Score
6/10
discoveryimpact

Malware Config

Signatures

  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.luyun.quicklygrab
    1⤵
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4336
    • chmod 755 /data/user/0/com.luyun.quicklygrab/.jiagu/libjiagu.so
      2⤵
        PID:4375
      • chmod 755 /data/user/0/com.luyun.quicklygrab/.jiagu/libjiagu.so
        2⤵
          PID:4518
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.luyun.quicklygrab/.jiagu/classes.dex --dex-file=/data/data/com.luyun.quicklygrab/.jiagu/classes.dex!classes2.dex --oat-file=/data/data/com.luyun.quicklygrab/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4539

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.luyun.quicklygrab/.jiagu/classes.dex
          Filesize

          5.5MB

          MD5

          7e87e2ab9187dccac6ada67398d4930a

          SHA1

          689721936f4108158434718070853951a073c093

          SHA256

          78c7500a1827f30e8b6e56cc93d4b648c6a353d9ae722e5c4f723c71a81efc3b

          SHA512

          38b6f9defd0a380a903697ef0772fc46ddd2a4ea92470568f9f8a10b40baa4e766e0e9058ed62a108cef1b905db742f3fc9381e79c5175cca08df8b96bf9b892

          Download Submit
        • /data/data/com.luyun.quicklygrab/.jiagu/libjiagu.so
          Filesize

          363KB

          MD5

          acd3a64e22c56dc0628edd7615a74ab4

          SHA1

          ec22ef7fa9dca4b475af2724d483bda140370ca7

          SHA256

          c57cffd4175fcd618f29d48eeba1b8b30e2bfd4ce9e05c6c5b0bc4378914d008

          SHA512

          ec93027efd827742d3f9db70c4d4aba51e817191ff888aa2337939f2ce518b98f1c1f7ed3d49d25d3bff47738f68ead6348b1b309c54a17e18c4460cc2142e3e

          Download Submit