2f60f38865f9725c43816108217e9c90414e04b88ed3654e3d43c8cc091d04de

Analysis

max time kernel
3s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
31/05/2024, 07:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

864f304ec0a1090a56435e51b24d8cd9_JaffaCakes118.apk
Size

23.4MB
MD5

864f304ec0a1090a56435e51b24d8cd9
SHA1

215d4b11d567d2184604f3520b53b7255d0332d3
SHA256

2f60f38865f9725c43816108217e9c90414e04b88ed3654e3d43c8cc091d04de
SHA512

fc359c0af809d20cafe3a6f15b515852f24b097744e86bb51e5b1fe56b47f36282136346c84b04047e2794782a36512c516eb53bd915f41cdec12cd46b2bace4
SSDEEP

393216:jqwzaW/kkuompTppFQNK7q4NRkeL30e5dOtr3BavJsy6JW+vL3015dOtr3BaMwQm:jqwOW/rBmp9p2H47vERh30GyQWqEgh3k

Score

6^/10

discovery

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.btx365.baotianxia

com.btx365.baotianxia
1⤵
- Checks if the internet connection is available
PID:4292
- chmod 755 /data/user/0/com.btx365.baotianxia/.jiagu/libjiagu.so
  2⤵
  PID:4320
- /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.btx365.baotianxia/.jiagu/classes.dex --dex-file=/data/data/com.btx365.baotianxia/.jiagu/classes.dex:classes2.dex --oat-file=/data/data/com.btx365.baotianxia/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
  2⤵
  PID:4343

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.btx365.baotianxia/.jiagu/classes.dex

Filesize
5.7MB

MD5
604a75d7710c87c542ab32b010e75c92

SHA1
52a836f0c796a0a278457e935411d3c6b63ebb9a

SHA256
577a28061cdeeee0b3209bc96d48f2646f7cf38953c120bab1766b58495776ff

SHA512
3d233cb43dea56c24b8932cad9eae466f291534b22e959c912a174736e59a9b3c1051b1b0666f4e9701436a938338348a05718bb41987109e684830c227004af

Download Submit
/data/data/com.btx365.baotianxia/.jiagu/libjiagu.so

Filesize
351KB

MD5
6525dc34d4a2656b93c41bc4223fddd2

SHA1
5c2333cb8ad87abc747d13d6352d5f19dc18997b

SHA256
744cdb26f7cf86d52fa8b214813a346952fc7476826400b85a3db96356f5047c

SHA512
b98dc08115cdefc31b2c0679d046a34e788936f985bcd70bb789b1828dcd59d949b023388a3b56ef017bafac31e79c12ebd6f6b623f01a38ea0e6e04a9fd1fc8

Download Submit