Analysis

  • max time kernel
    7s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    13/06/2024, 08:20

General

  • Target
    a49971dbee503e2c21da3f02679a9a5b_JaffaCakes118.apk
  • Size 10.7MB
  • Sample240613-j8sc7avcmp
  • SHA256 4a19bf75c68cc74ecaa34e8e5f7116f284d35911305a8055e9c0a832b568fa8c
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

Processes

  • com.poiuylkjh.vbfgrtdefgg
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    PID:4643

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .jg.ac

        • Path /data/data/com.poiuylkjh.vbfgrtdefgg/files/.jglogs/.jg.ac
        • Size 32B
        • SHA256 78ed5c466d4854ff40c46bb768e5bac55460999ddb797f956b96991f7b4217c1
        • MD5 SHA1 SHA512

        .jg.di

        • Path /data/data/com.poiuylkjh.vbfgrtdefgg/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 b96cfa3004f66f7a12da41b9c1a9581a7fbe5c526dd042aefa73a2141ee924d5
        • MD5 SHA1 SHA512

        .jg.ic

        • Path /data/data/com.poiuylkjh.vbfgrtdefgg/files/.jglogs/.jg.ic
        • Size 32B
        • SHA256 f88d23f47648865b256dacfdb6ae30e0ad9cad204e3c740ffe346d003026af81
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/data/com.poiuylkjh.vbfgrtdefgg/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 13671f120971adbf3a8e0561995b64cbfd3fc262114c9f3e00d3daf4d9c096f7
        • MD5 SHA1 SHA512

        .jiagu.lock

        • Path /data/data/com.poiuylkjh.vbfgrtdefgg/files/.jiagu.lock
        • Size 27B
        • SHA256 26de10d7a92b20a5f024c94e45c47653e08bdb9ab861033e8bde5dc7144df230
        • MD5 SHA1 SHA512

        classes.dex

        • Path /data/user/0/com.poiuylkjh.vbfgrtdefgg/.jiagu/classes.dex
        • Size 3.3MB
        • SHA256 d73fb18430a6f812dd4ac9aac99945296afe6ca532480b281203609a2d9985d7
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/user/0/com.poiuylkjh.vbfgrtdefgg/.jiagu/libjiagu.so
        • Size 457KB
        • SHA256 4011a80b1f410991e861724f7f04fa1cec52c7f83dde89001f3eca1d7783a51f
        • MD5 SHA1 SHA512 SSDEEP
        • Path /data/user/0/com.poiuylkjh.vbfgrtdefgg/[email protected]
        • Size 5.7MB
        • SHA256 ee433d4202c61b50ba95cd38607af6b90b093b5dce12aa1a4e0c450c284b1cbc
        • MD5 SHA1 SHA512 SSDEEP

        [email protected]!classes2.dex

        • Path /data/user/0/com.poiuylkjh.vbfgrtdefgg/[email protected]!classes2.dex
        • Size 1.4MB
        • SHA256 b920bdcdff7ef0883492fcaca634aa0ec79a67d9dc75012c6480d7560f7ddb87
        • MD5 SHA1 SHA512 SSDEEP

        .deviceId

        • Path /storage/emulated/0/360/.deviceId
        • Size 48B
        • SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
        • MD5 SHA1 SHA512

        .iddata

        • Path /storage/emulated/0/360/.iddata
        • Size 32B
        • SHA256 035bc8eaeb64ae0716fe0d1e888b7df18fb87c8a48f08d35e3c73379cdc82dc5
        • MD5 SHA1 SHA512