0e8f2b966061e38de8530b6c0fea24059c1396b0f32f85b67be94870eb2f03ec

Analysis

max time kernel
11s
max time network
153s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
28/05/2024, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7b0dd52cf074c8875433360be6fc691b_JaffaCakes118.apk
Size 12.1MB
Sample240528-alaeesge48
SHA256 0e8f2b966061e38de8530b6c0fea24059c1396b0f32f85b67be94870eb2f03ec
MD5 7b0dd52cf074c8875433360be6fc691b
SHA1 70fd007429dab1dbf8b206ff7b1678d33a21de09
SHA512 c1c839f428bbb26c460a8a053905de785f9510ebf5f9e896d9a4a7352438fef8996e38cb27b14fdf4e126a93018a255c4820dbc7718fc574eea7bf61a96b0ab0
SSDEEP 393216:vjqCx+YinNErzVx/xNvjMAMU4yZ79rwIXjec:vjqkuEDxpMly7JwIz9
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mephone.virtualengine.app

com.mephone.virtualengine.app
1⤵
- Checks if the internet connection is available
PID:4278
- chmod 755 /data/user/0/com.mephone.virtualengine.app/.jiagu/libjiagu.so
  2⤵
  PID:4306
- /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.mephone.virtualengine.app/.jiagu/classes.dex --dex-file=/data/data/com.mephone.virtualengine.app/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.mephone.virtualengine.app/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.mephone.virtualengine.app/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
  2⤵
  PID:4353

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/com.mephone.virtualengine.app/.jiagu/classes.dex
Size 8.7MB
SHA256 0c3d22a533a87435a17d802ed5ff874fab9c360e55d015073bb07ffd0663cef5
MD5 1c11e3644c6e078e5d3ebb98d203ed44
SHA1 6db0726a64c69f7cf3dc3afcfe870832ef1390a7
SHA512 872343fe1a7d69e8a306a9c92b70841561341c176ec7328a2624eeb251f4ea0f297accb615a2f43ce9cf5bc3efa09f2f38aab2bf21e765d2554d880111efcae9
SSDEEP 98304:/gxe0xY/zJ6vBbySLrLhnw9JoeCG7NW7rE/xBqJL1i46PYJXDDSGoR3UJOJ3BC:hzJa2SLqALTJXPSlJL3BC
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu.so

Path /data/data/com.mephone.virtualengine.app/.jiagu/libjiagu.so
Size 344KB
SHA256 b33b45d44e01f762b2678eb5fda5a804650b74cced4ea7362e3a19b37049e2b3
MD5 f07c10fa1727a4d7395f07d20d77892d
SHA1 a7c2f367daea205bda6035a739bff81003554b4f
SHA512 83411cbcf78a99fed70dbebc46d626c85f61ba729ea0b3c93d2e109c63bbe6a739eae09d61af7fa0ff127502f3a13034d45a130f581e8ed3f66db892712736f1
SSDEEP 6144:xoeBvffgPhZt6JPeSJQena4FGWRvaKCfOd3s4q69Bvbw4ESKlXMRKkwq3gf:SC3fCZt8eSJQenwv+LHbNx8MwnqQ
MD5 SHA1 SHA512 SSDEEP