2b2be98a09b093e8596f979d2ea71789a22ec7a5933ea39730e73e78fc2dae99

Analysis

max time kernel
5s
max time network
138s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
14/06/2024, 22:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
abc5b45fe397c85370d760835d4a6716_JaffaCakes118.apk
Size 14.3MB
Sample240614-2faa1sselk
SHA256 2b2be98a09b093e8596f979d2ea71789a22ec7a5933ea39730e73e78fc2dae99
MD5 abc5b45fe397c85370d760835d4a6716
SHA1 2b748fa8d0661e315ad8ce978100dfe6d30763dc
SHA512 dd37ad484b69ecdb7659baf75aa3f76c564a4fde8bcaa36637518a9d358af6a72ebee65e39119932c7756f9ccef954501accd894412680994496de6908936699
SSDEEP 393216:Om7IJ1rgMsWjX5NJqeXYaAWOUwG+7Cxx3lqbZ+:Odfr7sWjX5NJqeXYPwC+
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.jieshunpay.smartpark/[email protected]	4561	com.jieshunpay.smartpark
/data/user/0/com.jieshunpay.smartpark/[email protected]!classes2.dex	4561	com.jieshunpay.smartpark

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jieshunpay.smartpark

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.jieshunpay.smartpark

com.jieshunpay.smartpark
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries information about the current Wi-Fi connection
PID:4561

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.jg.di

Path /data/data/com.jieshunpay.smartpark/files/.jglogs/.jg.di
Size 340B
SHA256 50c00d22adba38cd3d95d4f9833448a6435d9b543d762b54f282ae1fde0b09de
MD5 4a4ccdb1b8930cdc61e58ce86b1bd700
SHA1 5f7e0ccf7a33f8342d0d3cf3e07d1a4b1b926636
SHA512 97246ef90bc2429f96f10d9fcba5772bff2d6c3eec602800c8c37f28891b13aaf32856aa9eb7fa1d6ddcddc53db4f96bb0ca8e5e668e70737354dc4b0cd20fa0
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/data/com.jieshunpay.smartpark/files/.jglogs/.jg.ri
Size 314B
SHA256 fbd12db1c6309018e992410cfd78533e790bfaa87d892e54674daba5b3fd7a3e
MD5 1b15bdd48ff6e6ac4076062ba3f3ed11
SHA1 9a2644984bcea81239d4488823460808d94acc6f
SHA512 6503b43e31641cec7e981e9241754085c5ccc8593ad54faa3ecaaaa3e7758f219adb12ff3e4a560d08ee0ee08759c746e5cbb7e1a0d8af89e0fa83650543989f
MD5 SHA1 SHA512

Submit Download

.jiagu.lock

Path /data/data/com.jieshunpay.smartpark/files/.jiagu.lock
Size 27B
SHA256 d3e4ba5ab9b31318d502c6716bbfb14c1fed173c61590146870bc82e7ca91e85
MD5 dbcadab7d918ce75bb7343b6d499bd00
SHA1 75a3cf8a71ef40d085371b79f4c0f73d19756315
SHA512 7777c40a31da8007e1eee2b687d5e8ce691adb2425e29d5837d8761ac1d54b4be28ecb8c840c726cfce81aefa8b12234ecab94987ef8b8048f6a9c0335336c0a
MD5 SHA1 SHA512

Submit Download

classes.dex

Path /data/user/0/com.jieshunpay.smartpark/.jiagu/classes.dex
Size 3.5MB
SHA256 9b9fdb468a6b7f2dd79ae0e03781d15dc41731c5ad53924cd138125c5c1f8a8d
MD5 3b1e1f417f9194a8129c0c0cd2868046
SHA1 87b8f569f593fc066ef794734246e51c3d4396c8
SHA512 9cb1b876379e04ac297e97c188c0e61104524c4e2dff539b9b8720e08ceff6de89cf9caf882bea05a9a2328c4da0de4968fb003f3b20679296e1a1910536b117
SSDEEP 49152:52WTqhCNEcRGkx3n8t90VNAhCx4cjkFOVqzGxcggC/xFKkjsaPr/:55scEixMt90VNAO4zvggwjL
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu.so

Path /data/user/0/com.jieshunpay.smartpark/.jiagu/libjiagu.so
Size 455KB
SHA256 78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e
MD5 e5a53000766ebc433b27d6a66ec4f555
SHA1 2c8f53f1c03aec2005bcad67d731f07261dabde0
SHA512 370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d
SSDEEP 12288:XfCZt8eDxO+LCDA89hC2KL/MqEvnapbMt6hVPZWJ:Xfw/O0Cc8zCD/MVvUHnRWJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

[email protected]

Path /data/user/0/com.jieshunpay.smartpark/[email protected]
Size 6.3MB
SHA256 75541c62e6372eeafd682bc56b86a5c3be49e9218af284df682a5e8d526a27be
MD5 a521b3285c166c3cdebd603029d729a2
SHA1 1c0e413a383dd1ecaa4f391a56abd96697e92c4f
SHA512 008e38a31613ea3af7233bf7ba7ec536193762ce2ccb53e6240bc389106ccf530dbe9bc6a69be07f5c77c465a38dcb9cffb911ca41c6020728fd021a52d4bbae
SSDEEP 49152:FNFrWTojToMSPkKKp1HKdBo8xBvIsklVldhCx4cjkFOVqzGxcggC/xFKkj2:fFrCRis8VdO4zvggwS
MD5 SHA1 SHA512 SSDEEP

Download

[email protected]!classes2.dex

Path /data/user/0/com.jieshunpay.smartpark/[email protected]!classes2.dex
Size 67KB
SHA256 35d73388b7667329dc113290b6125e48c72d853d0de99351c90b760e474bab22
MD5 a73947ab07d84ecb44553318bbf2eb57
SHA1 5223d84519859759c97dcd76c9e12a10ae33fba8
SHA512 1e26c1e0821c2d8a667609a1611c12d74b4d4a235ddd5dcdd9eef15cd2c0aa52c6ce965ddacda1823d8fe86eab3fed8cd2d6b5aaa580f84404cee5a789a190a3
SSDEEP 1536:dfdNgcPTh5hso3IAp4EkCQ7u99fXWg9LfyCSIU7w/Ro:ZdBTXhs1y4Ek749LfyOLe
MD5 SHA1 SHA512 SSDEEP

Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 48B
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
MD5 SHA1 SHA512

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 32B
SHA256 9b5dabc146c6852155f43527f2d6d9dd139a955bf7e7019edb3771699bf223bc
MD5 561c17416bca63cb3c041fc4f5d3ce66
SHA1 79387035e9f3da5e57a6514f6882b4cd2ca7802b
SHA512 36f7b523eeb31abb849aa60451e04482c239c6ed848288d9632aadd88b5dcc31ae3c6d6996cbd98a4ea0df78d45d1306973c043e2a8df48f48cdfce8ab3b0ac1
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads