Analysis

  • max time kernel
    2s
  • max time network
    190s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    14/06/2024, 03:33

General

  • Target
    a7ddbf21f8265b085fb84ee15b49f520_JaffaCakes118.apk
  • Size 20.2MB
  • Sample240614-d4b8hstejb
  • SHA256 013a3b3f9f5a1bb6642ca69f9fdb9e71c9ccdeb7511bfaf6720585ba70cfa1fd
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.jielan.ningbowisdom.ui
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5071

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libcuid.so

        • Path /data/data/com.jielan.ningbowisdom.ui/files/libcuid.so
        • Size 109B
        • SHA256 c0554ef1262abd6323a45146fe12d92e46883ef6dae8c7270030c9a8632e6d0c
        • MD5 SHA1 SHA512