Analysis

  • max time kernel
    8s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    13/06/2024, 15:24

General

  • Target
    a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118.apk
  • Size 26.3MB
  • Sample240613-ss6ejsvajd
  • SHA256 228b47232fdbd86a57675f74fb8fcd95a403e87ce1a49f7ead286136607d4ad0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.bujiadian.evoa
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5019

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes.dex

        • Path /data/data/com.bujiadian.evoa/.jiagu/classes.dex
        • Size 3.3MB
        • SHA256 8673d25ba018d6132c82120d2f680be6e77acde70f9efa75ce29ab2591749966
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/data/com.bujiadian.evoa/.jiagu/libjiagu.so
        • Size 456KB
        • SHA256 707cbb7d210699b111f050a382224f04ba2dbf72ecb4ee8f420d5759b6a23681
        • MD5 SHA1 SHA512 SSDEEP

        .jg.di

        • Path /data/data/com.bujiadian.evoa/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 26f6857fc1f2f3809ac4e696b0dfcb79db34f5689929f1e4e5b7ec230b996b8a
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/data/com.bujiadian.evoa/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 9076b2960dbcfa94e7ed041b0ab90f1eb3f97fe7496a8338930c44e92c05eb99
        • MD5 SHA1 SHA512

        .jiagu.lock

        • Path /data/data/com.bujiadian.evoa/files/.jiagu.lock
        • Size 27B
        • SHA256 bbcc0072a775bb7be9e70e2020d78ec6db9020a951840816831306a18abccff4
        • MD5 SHA1 SHA512
        • Path /data/user/0/com.bujiadian.evoa/[email protected]
        • Size 5.5MB
        • SHA256 9878d5cebd820ca4af15e598a853e4984020310a3b213d35c5dca736054d7123
        • MD5 SHA1 SHA512 SSDEEP

        [email protected]!classes2.dex

        • Path /data/user/0/com.bujiadian.evoa/[email protected]!classes2.dex
        • Size 1.9MB
        • SHA256 9aef35fc4046d4fc4e4a4dafb8bad2338e256ba77974838de2dc54e47c113d87
        • MD5 SHA1 SHA512 SSDEEP

        .deviceId

        • Path /storage/emulated/0/360/.deviceId
        • Size 48B
        • SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
        • MD5 SHA1 SHA512

        .iddata

        • Path /storage/emulated/0/360/.iddata
        • Size 32B
        • SHA256 a390b3b9ce31d33bddf925c8da20b87a5cb3dd53158871f87b2a6d3fdd3bce92
        • MD5 SHA1 SHA512