Analysis

  • max time kernel
    173s
  • max time network
    191s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    03/06/2024, 09:16

General

  • Target
    91402532c18c3ce82595f439bb25629a_JaffaCakes118.apk
  • Size 8.8MB
  • Sample240603-k8gr5abb49
  • SHA256 dc0034988720e462d9d4a8d1dbc494c86fcdac1c6caf13d29adca75e7ac0deda
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.jinding.YSD
    1⤵
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5176
  • com.jinding.YSD:core
    1⤵
    • Queries information about running processes on the device
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5225

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        jpush_stat_cache_history.json

        • Path /data/data/com.jinding.YSD/files/jpush_stat_cache_history.json
        • Size 174B
        • SHA256 08d7a5764105022ed6584cc5866be098c01c279cc892bd71d2087dd5b8c8e509
        • MD5 SHA1 SHA512

        unicorn#cheese#

        • Path /data/data/com.jinding.YSD/unicorn#cheese#
        • Size 64KB
        • SHA256 de2f256064a0af797747c2b97505dc0b9f3df0de4f489eac731c23ae9ca9cc31
        • MD5 SHA1 SHA512 SSDEEP

        .push_deviceid

        • Path /storage/emulated/0/data/.push_deviceid
        • Size 32B
        • SHA256 ad787ba9d63fb9b5cf186d16174deffa68a433ab89b71fcf4617ae4607622acd
        • MD5 SHA1 SHA512