Overview

overview

6

Static

static

6

a409ec7ca6...18.apk

android-9-x86

6

a409ec7ca6...18.apk

android-10-x64

6

Analysis

  • max time kernel
    35s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    13/06/2024, 05:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a409ec7ca6d13310480ca5ef56e27e3c_JaffaCakes118.apk
  • Size 19.7MB
  • Sample240613-gecdrswdpe
  • SHA256 076c6dbf7627dffcfa07e7e278437ea17313c3e967a8cc31f8d2f12b3daa49de
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
discoveryimpact

Malware Config

Signatures

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.pandadoctor.pedi
    1⤵
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5108

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes.dex
        • Path /data/data/com.pandadoctor.pedi/.jiagu/classes.dex
        • Size 4.9MB
        • SHA256 cc1159b69c8ca9a18b458b501d112a4679f56f1934d3d0e67472e48eab5fccc8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libjiagu.so
        • Path /data/data/com.pandadoctor.pedi/.jiagu/libjiagu.so
        • Size 363KB
        • SHA256 2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libjiagu_64.so
        • Path /data/data/com.pandadoctor.pedi/.jiagu/libjiagu_64.so
        • Size 348KB
        • SHA256 b3e78d93e35c4c35d7e62acca8d7503da85a7c0eb8d8dbce1f3e0f58de1bbe63
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download