Analysis

  • max time kernel
    35s
  • max time network
    169s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    05/06/2024, 08:04

General

  • Target
    979194d3351a26cf637ec97920e5790f_JaffaCakes118.apk
  • Size 20.5MB
  • Sample240605-jysafaad31
  • SHA256 cb754874f8d6ee93fd0bc1bf9d73b3c8fe76d9aa40f64b29b3470bf6a18280d9
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.gsjinhengsheng.www
    1⤵
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4998

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes.dex

        • Path /data/data/com.gsjinhengsheng.www/.jiagu/classes.dex
        • Size 4.0MB
        • SHA256 c2a068b0e1411bd1971dd91eb4f060cd5aca353d72acba3874ec90d12055ff63
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/data/com.gsjinhengsheng.www/.jiagu/libjiagu.so
        • Size 363KB
        • SHA256 945e12ea3019404a01754579a234b21ff3c7c17c175750e514c0d404e9f30554
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu_64.so

        • Path /data/data/com.gsjinhengsheng.www/.jiagu/libjiagu_64.so
        • Size 349KB
        • SHA256 b0a8f05575799435edaa9aa48319c459062259cc127748fc123536ad79f11470
        • MD5 SHA1 SHA512 SSDEEP