Analysis
- max time kernel
33s - max time network
132s - platform
android_x64 - resource
android-x64-arm64-20240603-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system - submitted
11/06/2024, 04:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
3 signatures
150 seconds
General
- Target 9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118.apk
- Size 16.2MB
- Sample240611-elfnnathqn
- SHA256 796e10a2f302405382e7b7d80481e99ec68df22a3ca6032ea4c299f49ac4d75e
- MD5 9ced8bbb8b2d68276f3fc7e4ed3b5293
- SHA1 1610a16cd2df931112230e0e6cad201ffd7a860f
- SHA512 04061e77783e2d92f727b8a5e963a4953e01b4003fba66ba46e8bda43757b78db7c19deb5367651b6900e895f06deb2c07c0c88f806ab8235954a7555fff8c8d
- SSDEEP 393216:OrienRqvF2Q5texE2RSn5TSKgio47eEKOT/ArhtvafNpagcA:OOeclnexE2RSRSKv7MOjArnKoA
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
flow ioc 23 f.appjiagu.com - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.dhf.miaomiaodai - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.dhf.miaomiaodai
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.dhf.miaomiaodai/.jiagu/libjiagu.so
- Size 363KB
- SHA256 c57cffd4175fcd618f29d48eeba1b8b30e2bfd4ce9e05c6c5b0bc4378914d008
- MD5 acd3a64e22c56dc0628edd7615a74ab4
- SHA1 ec22ef7fa9dca4b475af2724d483bda140370ca7
- SHA512 ec93027efd827742d3f9db70c4d4aba51e817191ff888aa2337939f2ce518b98f1c1f7ed3d49d25d3bff47738f68ead6348b1b309c54a17e18c4460cc2142e3e
- SSDEEP 6144:assX4sfgPhZt6JPeQtId/eRSJj4HWw3Sr+zuygGNTV940Rg8bIjV:N6XfCZt8eQtL2w3Sr+z9TDl
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.dhf.miaomiaodai/.jiagu/libjiagu_64.so
- Size 348KB
- SHA256 3e29e52a3139ae44e7ce621c3d9bfb9584bfc3280be727b9ead2ae64f831f258
- MD5 50132c32a26a923539d8e33982584fc0
- SHA1 627d770948b0df82024a67e8c6e2d24e02c6af42
- SHA512 adac859261d2b8e868578e941dfa639eff1a4ee95e2930e3b0899db3ff06d31b35eb612c302132e46abbf87611cfbe9f487b0d8f30c403398e8561abfd3a05e9
- SSDEEP 6144:8rHLZdNXMOe1+MHwtnJqZ2QmSZAJDZpF1Ik/TunIQw+ZoLqZ9F+FiEJ:eVdNcX+awtndwZmpIkGDoKj+FiE
- MD5 SHA1 SHA512 SSDEEP