Analysis

  • max time kernel
    33s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    15/06/2024, 21:38

General

  • Target
    b03840931ad63a7a622c283dcc39943a_JaffaCakes118.apk
  • Size 5.5MB
  • Sample240615-1g27razank
  • SHA256 92e43fcf489ca85c97d541e064f53abb08243db60054e1b377bb21b07fe5e5d5
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • net.shidawei.monitornew
    1⤵
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4478

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes.dex

        • Path /data/data/net.shidawei.monitornew/.jiagu/classes.dex
        • Size 1.9MB
        • SHA256 dca0558eec1f175cf4a28eab1821ef57a94aa0320201277e7532b9447bec158a
        • MD5 SHA1 SHA512 SSDEEP

        libjiagu.so

        • Path /data/user/0/net.shidawei.monitornew/.jiagu/libjiagu.so
        • Size 363KB
        • SHA256 2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7
        • MD5 SHA1 SHA512 SSDEEP