Analysis
- max time kernel
33s - max time network
132s - platform
android_x64 - resource
android-x64-arm64-20240611.1-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system - submitted
15/06/2024, 21:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b03840931ad63a7a622c283dcc39943a_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
3 signatures
150 seconds
General
- Target b03840931ad63a7a622c283dcc39943a_JaffaCakes118.apk
- Size 5.5MB
- Sample240615-1g27razank
- SHA256 92e43fcf489ca85c97d541e064f53abb08243db60054e1b377bb21b07fe5e5d5
- MD5 b03840931ad63a7a622c283dcc39943a
- SHA1 ce684e555ac5907ad522136e579cefee329d8470
- SHA512 cc272f999db7d6befbd8aba39d58068c7fb0ee7b0f58a7926e610d57b641c1d8ce2bfd877b4a14cbde467bd861fe74a232f5b5024049fdb6b968673b8e30df15
- SSDEEP 98304:nTUgtIsm5pzJMpLMHCglAaKzl5UDl/IN81eiVmGN3rI63vVWobZFse:nIQCR6mH3+aKzl52/IN8ErGJIA9WsR
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
flow ioc 18 f.appjiagu.com - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo net.shidawei.monitornew - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal net.shidawei.monitornew
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/net.shidawei.monitornew/.jiagu/classes.dex
- Size 1.9MB
- SHA256 dca0558eec1f175cf4a28eab1821ef57a94aa0320201277e7532b9447bec158a
- MD5 0a8934ef7fafc5ec8527468318435c6b
- SHA1 883ce5f800dae1cfd0ce64746e37af3218241da7
- SHA512 3ba78bf2eb516e503ea0ed527fd91cd897e1ddaf98ad41a9c7fd3ed09c5cf4c5691d8f8006636c63db27908d5ce1b6f129422d26a4a1c6d4ef0d47559c25391a
- SSDEEP 24576:rTeSnUZvts7qVr6gq0AotDGuL8hPXcxEh/nKahxw8ocEVT7sfifjmad1OfBlSkM9:HgfsGognAotDGNPXB19XkTYqfjXnO7I
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/net.shidawei.monitornew/.jiagu/libjiagu.so
- Size 363KB
- SHA256 2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7
- MD5 6c9d83b90aa9c9f904d22eb9b16f8f95
- SHA1 4d5e0ce3c55a22475b58a982d67ab9aa84384c40
- SHA512 07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b
- SSDEEP 6144:SssXksfgPhZt6JPeGZjHJIzh0WwMFiqqtQ0fOllzjdC0TzhPngRLUI4AK5fw7Ow6:16zfCZt8eamzGWwFq0fytLzhPg5/EwVd
- MD5 SHA1 SHA512 SSDEEP