Analysis

  • max time kernel
    4s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 08:35

General

  • Target

    6a5be59727ac37f34448317f8648f332_JaffaCakes118.apk

  • Size

    11.1MB

  • MD5

    6a5be59727ac37f34448317f8648f332

  • SHA1

    99780f38fa5643213f62a84c3100ce649fd196c6

  • SHA256

    e362069979dfdbb514a5553d275262bcd38cf7f0a0d0a469f360bcfcd565a3af

  • SHA512

    0bc9b6d1d5bba469c563ce032cbfaa848ae9f492c7bae742a1e7280623cd955a068c1717cbccd1e4b9c2265e0087e8a42a0f04e21053a5eb2299c2a7e6619f6d

  • SSDEEP

    196608:wPpskjCrEHG0HojRg1zAOG+S+wecPffugXCzxAMO4BLOFQSBcxf:wCYHRHSgVtc9ecPXugXYAMpeQjp

Score
6/10

Malware Config

Signatures

  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Checks if the internet connection is available
    PID:4284
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4322
      • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex:classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex:classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
        2⤵
          PID:4346

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.xgbuy.xg/.jiagu/classes.dex
        Filesize

        6.4MB

        MD5

        064658becb7a22679e4ac2f799c044e3

        SHA1

        f4388ce897c254e825e51ee3f0fc64e13903c818

        SHA256

        7a77ecb1bc3789b2ada0da4cdd35b29706d3e443060ec2c4bc48aa501095d9b4

        SHA512

        deb5e260d62f72bb3e601f43f73275b4cdebe7b64b93fe092942987cebe8f44bd864e313e92714c06d9e8cc49452da209603e6e87ae2f028c2bfb95345a0c0f8

      • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
        Filesize

        351KB

        MD5

        6525dc34d4a2656b93c41bc4223fddd2

        SHA1

        5c2333cb8ad87abc747d13d6352d5f19dc18997b

        SHA256

        744cdb26f7cf86d52fa8b214813a346952fc7476826400b85a3db96356f5047c

        SHA512

        b98dc08115cdefc31b2c0679d046a34e788936f985bcd70bb789b1828dcd59d949b023388a3b56ef017bafac31e79c12ebd6f6b623f01a38ea0e6e04a9fd1fc8