Analysis

  • max time kernel
    3s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    06/06/2024, 04:34

General

  • Target
    99f7fa8e3e29edf07399d68e31fe1136_JaffaCakes118.apk
  • Size 30.8MB
  • Sample240606-e68j6shf56
  • SHA256 59379aa4dd91a4b346a125561ef27ccdc8a12e8a1a88cf88c7746f9ed37e559c
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.sg.dljz.qihu
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4259

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        TDtcagent.db

        • Path /data/data/com.sg.dljz.qihu/files/TDtcagent.db
        • Size 32KB
        • SHA256 8c9b5adb013e4b6f005f8952e54d32632f702ab42be33db491b30210ae293435
        • MD5 SHA1 SHA512 SSDEEP

        TDtcagent.db-journal

        • Path /data/data/com.sg.dljz.qihu/files/TDtcagent.db-journal
        • Size 512B
        • SHA256 48845f5af1cea713f5cf15e9c6c95320298a0047a874f777b14940001b7dab62
        • MD5 SHA1 SHA512

        TDtcagent.db-shm

        • Path /data/data/com.sg.dljz.qihu/files/TDtcagent.db-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP

        TDtcagent.db-wal

        • Path /data/data/com.sg.dljz.qihu/files/TDtcagent.db-wal
        • Size 80KB
        • SHA256 666ce893a2d38befc1e02fd0303679f229d98d88be36671b857faec1e45dddce
        • MD5 SHA1 SHA512 SSDEEP

        talkingdata_app_process_preferences_file

        • Path /data/data/com.sg.dljz.qihu/files/talkingdata_app_process_preferences_file
        • Size 21B
        • SHA256 f365ca78857c65a36a924e4093d46fcda6e077775c44c80c1654b299fe4a29a8
        • MD5 SHA1 SHA512