Analysis

  • max time kernel
    9s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    01/06/2024, 06:37

General

  • Target
    89a179ff243912a137eb99a8395a2c7f_JaffaCakes118.apk
  • Size 24.8MB
  • Sample240601-hdrmqsdf48
  • SHA256 bb00af6432802dc6ecb201c503e620423c1f916a3e7b4bd8d9ce5e80ac2984ae
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.lqcx
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5161

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes.dex

        • Path /data/data/com.lqcx/.jiagu/classes.dex
        • Size 3.5MB
        • SHA256 182e76054bd0f6855a1ccfc49b3771097990de55ce33478b7cebb1bf01927410
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/data/com.lqcx/.jiagu/libjiagu.so
        • Size 455KB
        • SHA256 78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e
        • MD5 SHA1 SHA512 SSDEEP

        .jg.ac

        • Path /data/data/com.lqcx/files/.jglogs/.jg.ac
        • Size 32B
        • SHA256 7449210e83b6a9a3e5cad77d73d325f7fc9f7306c8a2feb2c094d89ec6c44e18
        • MD5 SHA1 SHA512

        .jg.di

        • Path /data/data/com.lqcx/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 4b52377d7602862f0e1731b50a2d00bbbef365ab9cb7ecc0fbfa8c79e2bf19c4
        • MD5 SHA1 SHA512

        .jg.ic

        • Path /data/data/com.lqcx/files/.jglogs/.jg.ic
        • Size 32B
        • SHA256 2a2bb6439c5d8d264effe11daf6bb7b65a3d8506a609ab0f7e8fbfea1630f3ae
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/data/com.lqcx/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 f4f1d38afb2bf3220ca36427f684ac779f1facf4e9af06c5f0c93db19969c208
        • MD5 SHA1 SHA512

        .jiagu.lock

        • Path /data/data/com.lqcx/files/.jiagu.lock
        • Size 27B
        • SHA256 25e9d7e0b3575627df8e34150209ec08db5641d15009b589bef688d319f51660
        • MD5 SHA1 SHA512

        dso_deps

        • Path /data/data/com.lqcx/lib-main/dso_deps
        • Size 124B
        • SHA256 8af2a7646aeab18a3ed04d63f29bb125cf754dfc347745f25014d70aac79c093
        • MD5 SHA1 SHA512

        dso_manifest

        • Path /data/data/com.lqcx/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/data/com.lqcx/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/data/com.lqcx/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        • Path /data/user/0/com.lqcx/[email protected]
        • Size 6.2MB
        • SHA256 6e04e83006cb494bb83c7ae9f27ec7635df66b0fd5cc3018871ba47c59de8f63
        • MD5 SHA1 SHA512 SSDEEP

        [email protected]!classes2.dex

        • Path /data/user/0/com.lqcx/[email protected]!classes2.dex
        • Size 358KB
        • SHA256 d32a7e26a7e513e29da4d5a9f6cf0169527e9c0e5957bc0d67a5e4aabc526294
        • MD5 SHA1 SHA512 SSDEEP

        .deviceId

        • Path /storage/emulated/0/360/.deviceId
        • Size 48B
        • SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
        • MD5 SHA1 SHA512

        .iddata

        • Path /storage/emulated/0/360/.iddata
        • Size 32B
        • SHA256 e7c5b7fd0953e0d3562ff7e43c6e5397bb3036eb377cf8d462cf68295dc6a1fc
        • MD5 SHA1 SHA512