Analysis

  • max time kernel
    33s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240603-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
  • submitted
    11/06/2024, 04:01

General

  • Target
    9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118.apk
  • Size 16.2MB
  • Sample240611-elfnnathqn
  • SHA256 796e10a2f302405382e7b7d80481e99ec68df22a3ca6032ea4c299f49ac4d75e
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.dhf.miaomiaodai
    1⤵
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4508

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libjiagu.so

        • Path /data/user/0/com.dhf.miaomiaodai/.jiagu/libjiagu.so
        • Size 363KB
        • SHA256 c57cffd4175fcd618f29d48eeba1b8b30e2bfd4ce9e05c6c5b0bc4378914d008
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu_64.so

        • Path /data/user/0/com.dhf.miaomiaodai/.jiagu/libjiagu_64.so
        • Size 348KB
        • SHA256 3e29e52a3139ae44e7ce621c3d9bfb9584bfc3280be727b9ead2ae64f831f258
        • MD5 SHA1 SHA512 SSDEEP