ec511758e688a8064e023b1d71faf5d43756f91f4a46f18f0235833b91fecc79

Analysis

max time kernel
3s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
04/06/2024, 16:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

95895e6c394b9e754140df04217bd08f_JaffaCakes118.apk
Size

22.2MB
MD5

95895e6c394b9e754140df04217bd08f
SHA1

1bb2d337a6aac0bd2fa0ba51671172874fe3d8f0
SHA256

ec511758e688a8064e023b1d71faf5d43756f91f4a46f18f0235833b91fecc79
SHA512

d508f1f82a21656deb8ad34ff2be783666408ef3c9708cfbd68355576a185c734415ce4122b24216e1ab8fddef9ab8d5ae02549e778a1c596c07eeef2654bf21
SSDEEP

393216:T+EXhtPQ8aPVFIQyJeSwQllPDuPOQuNMlIbbvUIVAq3Fja3KzTOPFDhIfGCiPZ8W:SEXhtPQBLLynlLUOQuNXDHj3F2aHwFdp

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	live.feiyu.app

live.feiyu.app
1⤵
- Queries information about active data network
PID:4276
- chmod 755 /data/user/0/live.feiyu.app/.jiagu/libjiagu.so
  2⤵
  PID:4301
- /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/live.feiyu.app/.jiagu/classes.dex --dex-file=/data/data/live.feiyu.app/.jiagu/classes2.dex --dex-file=/data/data/live.feiyu.app/.jiagu/classes3.dex --oat-file=/data/data/live.feiyu.app/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
  2⤵
  PID:4324

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/live.feiyu.app/.jiagu/classes.dex

Filesize
6.2MB

MD5
0c9776a371297bbab13013c9e3f4cf8e

SHA1
8dbab34e899e4598c7a2d7a6321db6a2e52168b0

SHA256
4d8a68a5debb11405e36b86bb0ab9e4809f4c1d6c7fe085b1cf8aba12f17e03a

SHA512
2fad4b45fb2435d63847a87ff84570d5facbd366b14f992c17b3c91e42cdd36a9a433a65b5c3a233d719df55e8dbc1c2fe9dc999b1c51f2b4296abfdf1f52075

Download Submit
/data/data/live.feiyu.app/.jiagu/libjiagu.so

Filesize
358KB

MD5
0f988c9a7d52923d162bbfe4d2ea8171

SHA1
0084318df7665847bc5cabac2f4b7cd2bdc02a34

SHA256
c548db6ffa4e11cf80c934aeb77d40397e7aeed067a89799262467d552921bce

SHA512
926bbdc706705674e3cd19186990b5c30d1b7b7141c6dd7ace9876899f2bd92275793a5b76e7becc8c6de82766a3dd075ebab9fd8ccb11d3e077b49c613774b9

Download Submit