d7a2619791e5ff6f880139c92f772c066f01ef32df245f9bb8980926e8186e50

Analysis

max time kernel
9s
max time network
148s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
23-05-2024 10:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6aa5d9bc6f6d71ddec8c0ed738d19c75_JaffaCakes118.apk
Size

17.9MB
MD5

6aa5d9bc6f6d71ddec8c0ed738d19c75
SHA1

3e8ff09f0dd4e76e74ec95ee2de372ed973cf2e3
SHA256

d7a2619791e5ff6f880139c92f772c066f01ef32df245f9bb8980926e8186e50
SHA512

04d079d1b637b231e564a03c8271a42581de9326c869b1ccb29cbc2896067ec6e12d602879f541e68de974972d9123a559cd729f66b9724fb2875123dd36ce51
SSDEEP

393216:Z6jAdZ5D9opbZBIPerHcV+r2tF9YC307gf/dgXRJX94F:Z6jAdXDAZBIPeryF9/Ec2XzXKF

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

com.xgbuy.xg

ioc	pid	process
/data/user/0/com.xgbuy.xg/[email protected]	4630	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex	4630	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex	4630	com.xgbuy.xg

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.xgbuy.xg

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xgbuy.xg
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.xgbuy.xg

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.xgbuy.xg

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xgbuy.xg

com.xgbuy.xg
1⤵
- Loads dropped Dex/Jar
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
PID:4630

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ac
Filesize
32B

MD5
1264f30db5bc978090c891fc9ba97820

SHA1
22a1664ca5bac8af36bdaf8e4098c02c7fc9c1fc

SHA256
6383110e70c2cf20a67539bbf759d99229ac2dcd214cae6a3c5de840497bab2c

SHA512
f3ec53223344ea4763479b39ae62a3dde4b83e0db05d4707c9e2c914725943063706c6c53e6fc043ee13640ac98242775c901b84ec76eb3edf11615bd0084488

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.di
Filesize
340B

MD5
fd756bbb6bd22541df40d349ea622db2

SHA1
dfc68633ce78e8eb46f955521e3ccf71ddc0d92a

SHA256
352023f77116523cb4baa3a2b99502d8983c65d8da170fb3a1e168c4071cd510

SHA512
c3d62408d38c1ac4d67057be5ece45b9a1fa494688796c88f624b0b9abc09f7ed7dc7d14d131a6a67a17cfa08273cadebb143ae995918a6efdd7df35eda8f9d3

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ic
Filesize
32B

MD5
9afbf0dc0b4a4fd0a874cfec2c55461a

SHA1
a42766499eef11be1120ff87588b7f715c1b2a7f

SHA256
75c6a927b6cffe50b1a48e8aff766f5d543dec5aec8010b835ab4c4d8dd3da37

SHA512
863cdc25dd26bc2db5a80480a5d5bd16965ce02afc94f732f31c24bdcd3daaae24d41504f0eefead9a8ecc402aa2e798ce100e8a225b13b38b05aa433456185d

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ri
Filesize
314B

MD5
e066c79224992798532442612ffeb82d

SHA1
bc70984ee4081dc2393a3efa5aa5d43424ceca24

SHA256
7c4b68834d15e0a681ad48c34174da2d30a3084ee39e0d8cd6cf0066cf48c287

SHA512
983c359514c4e0ead45a206744871544311791f0cfe25b024d2c901dcd07d35021b9bde843422c3c3756bf2a0c1efb3c0ea3634ce1c8abec6afe1bf975756fd4

Download Submit
/data/data/com.xgbuy.xg/files/.jiagu.lock
Filesize
27B

MD5
85d1d068d355c25eb785ca1cede181eb

SHA1
5e575106d9468ec61f753484de3a7e5cb475f7e8

SHA256
9cd1b622b48c1a6f0523acbe4838f9d1db2e4071fa1b92a3112bc830409da867

SHA512
a0ff58c2229899a4a2648d609ac4cfeea7a4bfde8957e8a913a0ee4909998dbb8d62a861ff2de504958ae38647cbee0c6047ee078678576e51c67067c65ad0b9

Download Submit
/data/user/0/com.xgbuy.xg/.jiagu/classes.dex
Filesize
8.0MB

MD5
5e99738dac60d8528303c05236b49521

SHA1
09defe8e673554d1fbfb6818d7f6b06926ef21e3

SHA256
e4d0cea4069552ea69782c90b6d51278d0f422dfe2052e7f78c992e07186b109

SHA512
7291923d241870717b7ea2d2f8672dc37248b3bb8070056ad923465e55e347a3da20620e79edc8ce0939083e2d3efb3d574ab9cdf4ef88364d1164dfbb49f49a

Download Submit
/data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
Filesize
455KB

MD5
e5a53000766ebc433b27d6a66ec4f555

SHA1
2c8f53f1c03aec2005bcad67d731f07261dabde0

SHA256
78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e

SHA512
370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]
Filesize
6.5MB

MD5
343543170cadbcad918429d62ea0b7a2

SHA1
9a55aefb843427a4fa43fb62e9fff30ee674b04b

SHA256
d2c01fef1bee484e1ee39420ba919522325c02eb4809c799fbc2b3262f2c447a

SHA512
d07071e13fcc2c80e2ae4bca90e9b4b23ff7a212353050ea600b3bccfa6f1ed93584d6c5ef84addb07fa418214a1b7431c8fd037edf3c7de44391ad8bffc04bb

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex
Filesize
6.5MB

MD5
09623bd5b2ce2e506e8dffcb2cbc3e8c

SHA1
e49e1b0d7af536becc5e4701b663ca1923b09c80

SHA256
e671a6a2653b372037b959916daf955753b4cef04d60fca7a2728c60cc5656a1

SHA512
c5ffb5d4b6e41531768e4635626b1ff26d8b676166d5eba1baf195d92cdad8c0ab4ccae5236897e9eaeaeb2e2cf2116d3a62790ebdbff45ede9e201139c70450

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex
Filesize
2.0MB

MD5
668702b0562aaaae77078af0889b6745

SHA1
eb46db301936ec7c0433aec9512786468d593988

SHA256
744961b59ffd06c0769febccd0c634a0bbc36a16c8ad8715d177b4a737fa3123

SHA512
00d36a6f14c526c5524ff1cf13eb46364397b464def62f99df58716f49b4b80e448cc3c16b056a1d4f3c2cd888dd1b31636cd56e86adad286643dafa3526df62

Download Submit
/storage/emulated/0/360/.deviceId
Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata
Filesize
32B

MD5
bc317b3abebee77b74c4a6237adb87f1

SHA1
9c0ee6e285d8a91749debbe85fd489f1e9f9b68e

SHA256
f8d808e6eaae530ffcf0c5b1701272a7e7f448b8c839a6ebd53be9bf3805d8fa

SHA512
65bce3fdbf8972a9e0595cc14246ff034d3ed34cf07da6c19fe057868c4d1bd5185e1a3f4c3bfdad2b239d58e4be2d8982ba8f69ae0712fa8cc81368d421e629

Download Submit