Analysis
- max time kernel
63s - max time network
131s - platform
android_x86 - resource
android-x86-arm-20240603-en - resource tags
- submitted
04/06/2024, 22:29
General
- Target 9674d51bbe57aefffcb1e6cc1d26499f_JaffaCakes118.apk
- Size 8.1MB
- Sample240604-2eav6ade9v
- SHA256 4b1007bea4824256170b4e3adb2fcb6392e49c39fd9ff174ca91112d9b780697
Score
7/10
Malware Config
Signatures
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
- Queries information about active data network 1 TTPs 1 IoCs
- Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
- Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
- Checks CPU information 2 TTPs 1 IoCs
Processes
-
com.yunlicai.lottery1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
CaiYi.db
CaiYi.db-journal
CaiYi.db-shm
CaiYi.db-wal
358240051014041
358240051014041;activate
358240051014041;activate.zip
mobclick_agent_cached_com.yunlicai.lottery