Analysis

  • max time kernel
    6s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    27/05/2024, 23:09

General

  • Target
    7adf48b907001fa9c8c3a74113dc0a72_JaffaCakes118.apk
  • Size 2.9MB
  • Sample240527-25ea9sef28
  • SHA256 b25e70596b7426b600a8d1858ff0e769614a5e8ff7cc9aba624c7a9e9f64bf6a
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.slncsc.apps
    1⤵
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5149

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes.dex

        • Path /data/data/com.slncsc.apps/.jiagu/classes.dex
        • Size 1.8MB
        • SHA256 2927b5053a9cf5fa76412ee155bef7a009e57106bd7040950b9e820ceb7446d0
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/data/com.slncsc.apps/.jiagu/libjiagu.so
        • Size 487KB
        • SHA256 baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu_64.so

        • Path /data/data/com.slncsc.apps/.jiagu/libjiagu_64.so
        • Size 525KB
        • SHA256 dc9d0faf8652513f0a1eed698b9559e0bbfaefe12c203d239f551ff557abbe5a
        • MD5 SHA1 SHA512 SSDEEP

        .jg.ac

        • Path /data/data/com.slncsc.apps/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 36269c0853ebb4dbbfcc1e6d14ed11d8f35f8d296e5f8b1610478639722d1f8b
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/data/com.slncsc.apps/files/.jglogs/.jg.ri
        • Size 307B
        • SHA256 5024d70e8f6e315a2c4dd4866f357e67f0b2de41c0802f3015d3e9e2ec7bb739
        • MD5 SHA1 SHA512

        .jg.store.report_cf

        • Path /data/data/com.slncsc.apps/files/.jglogs/.jg.store.report_cf
        • Size 32B
        • SHA256 47fc43ec291142fd5ed77144506526d71208dfc1277f7f36643870ac1f100e93
        • MD5 SHA1 SHA512

        .jg.store.report_pid

        • Path /data/data/com.slncsc.apps/files/.jglogs/.jg.store.report_pid
        • Size 32B
        • SHA256 4b3d6b64a90c1f317ca63ea27e464af8508250ca6383547cf56b251401ac6067
        • MD5 SHA1 SHA512