8eb0dbe4da58f62504bd456299ecbfb0cc8d961965b109f15ac487a1c7d91ccc

Analysis

max time kernel
9s
max time network
136s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
15/06/2024, 01:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ac67e7ad6c10fd0ec6253816626f8a14_JaffaCakes118.apk
Size 17.8MB
Sample240615-bwazdathpf
SHA256 8eb0dbe4da58f62504bd456299ecbfb0cc8d961965b109f15ac487a1c7d91ccc
MD5 ac67e7ad6c10fd0ec6253816626f8a14
SHA1 957d8f36146cac704dd186705af00cd1079c7110
SHA512 53f5615e07cf80e2913a8cac6c630b0a3267b4e2734e8e3128eb6bf511f558525684cd53ab72308ff052ed8883b2577fc360356b0f976765bcf9759fb15c31de
SSDEEP 393216:kEkbxCiKqovlTrkbr1gX0PSUePp0WMTalnBtEymQ:kEACbjdI0UFe/IalnzEY
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.glkj.goldenage/[email protected]	4658	com.glkj.goldenage
/data/user/0/com.glkj.goldenage/[email protected]!classes2.dex	4658	com.glkj.goldenage

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.glkj.goldenage

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.glkj.goldenage

com.glkj.goldenage
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries information about the current Wi-Fi connection
PID:4658

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/user/0/com.glkj.goldenage/.jiagu/classes.dex
Size 4.2MB
SHA256 5cad0ef47972f32170c9be554f2d20cf79d5fa0c0234e48e6ba529075297f770
MD5 85f1ac95bb7bf3bf303fecf31b23175f
SHA1 de8af1da11b98b5f6d1f37f1d9fd87a21dd6910c
SHA512 36271124fe5b6a5da78a6796bf88cffc91b4f18bc9d7ef8bc6ef21abbe2496f811801af81dface20485a05fe732631e124191c07eb1e12a104b08a769eb6c33e
SSDEEP 49152:tqLA18MkdjAuxz1Vm+Dog0rtR13fsJvMecTG1MJfafF0VGSai6Qx5quSU8IK:t+AhZ0W+Dog0d6MJfauGSatQXquSUy
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu.so

Path /data/user/0/com.glkj.goldenage/.jiagu/libjiagu.so
Size 382KB
SHA256 e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2
MD5 aa01dd97609092ce310e17bf791069ce
SHA1 f000840a8f68ea7beb2e29ea466088daf55609db
SHA512 766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4
SSDEEP 6144:wnNmS07fgPhZt6JPeJqE2sPovWSpp8BWwprOFM4UNXqUV64WHRZDYQwYW2f5l8DV:McffCZt8eJ9paWS7kprOFM4UN6UNWbat
MD5 SHA1 SHA512 SSDEEP

Submit Download

[email protected]

Path /data/user/0/com.glkj.goldenage/[email protected]
Size 6.3MB
SHA256 77d16ae2d33fc3fc483abd441367eb58d76f581998bb6b97daf1f5e23d08e249
MD5 1e89cc3728f4a7431c2bf149ccd09dad
SHA1 aef23473675473ff22163836cddcf5bed5e08859
SHA512 9b88e32c15791fae424be1d1eaf60eb508b4222966aaa40916650b9b1c24dece76cadd235029df3eb993654b8ff111bf0fefda7683f7c9d876d14f1ee7e49122
SSDEEP 49152:ZEPlKDPPVkK62oT1hSuPzcDB3AHfnEQ25tOnzRwl7HL0ofg0rtR13fsJvMecTG1r:ZEPeXSK62IHjPFSl7Hzg0d6MJfY
MD5 SHA1 SHA512 SSDEEP

Download

[email protected]!classes2.dex

Path /data/user/0/com.glkj.goldenage/[email protected]!classes2.dex
Size 2.5MB
SHA256 d1f3a44a7b8f3b5fca4491024ab24024b9c48345ab780cfacfc05476523b78c0
MD5 8c6a5bc25f24b6862529808c09525aa3
SHA1 e5993fe59ffb700c614ffc9725e7625d35e3f08d
SHA512 eae1d0c5ba365f4bbdc3bf3cda642270dfd6ae42aaa118571cceb52f30dd66d1d17a0bf193e41dc37adf12534a3c2200a91e069c9c5456ca7159d677eaf890dd
SSDEEP 49152:Vg/9dnB0QE32I1u161J+CfVNKWDs35TYfu0CuF:VgKz
MD5 SHA1 SHA512 SSDEEP

Download

notes-db

Path /data/user/0/com.glkj.goldenage/databases/notes-db
Size 36KB
SHA256 97b1697ff4a5ff7ed203eeaeb66d4d089e30a4dbd8197a605e446343f48d1f70
MD5 93421287a17beabe30e8e04e6517e4d7
SHA1 2a1c33491755c4da3d555cd329572b8485cb06ac
SHA512 7442595e991c58a9667efdacd68566eaad638f70ff9a0d1d0d1116f8b668da8c68823c9820a18083c2126ee0c2540904777ae04e11ec8ec6fbdd8f71171ee9e4
SSDEEP 24:TLI52fHDmaNVe8XGB5Okt2buoOAuGJGSgGQQQQ:T+2fiaNVe8XGrOPbuoUS
MD5 SHA1 SHA512 SSDEEP

Submit Download

notes-db-journal

Path /data/user/0/com.glkj.goldenage/databases/notes-db-journal
Size 512B
SHA256 2bf56eb72c7dbaca6d65ce23a660139d1103a6a0648596c4618d82d7b50592ca
MD5 1c52f5f5f9ed840cf7296542aa690876
SHA1 2f462700776289f9d0c9565a9c1edbae212bf71c
SHA512 2a21bbe684d3102b0d61b55f28e4f2c703f9297a0fa91a038108751d00326d46c4bf5b417d436fa2e5a268f9bebf9e2abe011c72da5b01dd5e754761c9e694ed
MD5 SHA1 SHA512

Submit Download

notes-db-journal

Path /data/user/0/com.glkj.goldenage/databases/notes-db-journal
Size 8KB
SHA256 9b1351e2dc7f888423ec61458b9c6eb0e12055d6da5a7177100a975f425b4eb1
MD5 3ea62c78506217efe34350ad48587f44
SHA1 83b53d31a8a9f7a09bc6cba1c3d96910ac4e28bd
SHA512 ddd1c15b23be546735c11b6f12d8c551c79a9686154d5e7d7914c7cb358d49ddccfb3259aeb432acc5c4c0507ddbb7cf165a7141e2e8b4e5b8f40366a6b030d8
SSDEEP 6:7+/l9mROn1gRg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKFn:7+tYdqLiuWdYRmBEyPbe
MD5 SHA1 SHA512 SSDEEP

Submit Download

notes-db-journal

Path /data/user/0/com.glkj.goldenage/databases/notes-db-journal
Size 8KB
SHA256 28940e337771e1a96e00ac4fe95a8761b391e6c7b6f05fdd0dd216b05a2c9105
MD5 11948d8aebcd79a4aa081e0da1928223
SHA1 db912bb4fae3e473e672a72c0121826f760498d8
SHA512 fa8ae9c918d0c587cfff8fa31f17b8858b4fa449809a01bd75fe25360b586d53347375126e71d66cf30e2f766161444368e79368bcdd17298fb9260e6fe0003d
SSDEEP 6:7+/l9pl0FPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKSpVkl//2C:7+tfqBqLJdeWRmBEyPbLgXr
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ac

Path /data/user/0/com.glkj.goldenage/files/.jglogs/.jg.ac
Size 32B
SHA256 c3f77962f06f0b3bb0b271cff8868261ce1f6bfd8c9b5b728c999c48cca7e24f
MD5 ae96f66851fa207aadb0c5cbd6c2c52e
SHA1 e2a12bfe5254c5261634132758bd2ebb8a3e7d5b
SHA512 6eb03c85bfc740821279fc2bf1aa785e2774e25272f751a632f4e887d21abdc299c6127bf149ac705a1e50c2fcc09d9707bdff59023bd62601603911524967f6
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/user/0/com.glkj.goldenage/files/.jglogs/.jg.di
Size 340B
SHA256 d59b939d38c2c1425807cbacd432b370efe3b43106aaeeeb96f0306cdfe55ace
MD5 0c0aebf9f3388b041094e242bb4ee4ac
SHA1 d6b5fc118ba93063058d2f50418078909a97e6cc
SHA512 906abe738beca616fb863cd90214aad1bd8f23a36d2d544810098731000ccd97f68540e72d1424fd46e1fdca24badc71c40c9b01ab911f358824fe62721fa770
MD5 SHA1 SHA512

Submit Download

.jg.ic

Path /data/user/0/com.glkj.goldenage/files/.jglogs/.jg.ic
Size 32B
SHA256 9f4cea991209e2dd823dadadda6706314adb60d4da3c38bcf691ad97208d5345
MD5 fee67783db72b16df44b5fb10fe770f1
SHA1 3686de2509d3572806801b81a1fe096374701b2f
SHA512 98f854372a5ba5f8763f36404814080bd5b02b5ab5b32d1242f259bdce869b9cd97bc74c67fa9a0b3872423343d557ee3aeb8ecb4609300dc258735fb4b0d9c4
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/user/0/com.glkj.goldenage/files/.jglogs/.jg.ri
Size 314B
SHA256 188c8fecc8918191db3d317ac6f06ce00365b83baebd638899c60def232c10a6
MD5 c00a27a5054010dcf7ed79ee8576b230
SHA1 fea34af1a8337a394dcbfed154f5694aaee3042e
SHA512 0f106b54aca9a9b2bcf6435cc1a0f482644a2e744465e65426502b24568075f9f3d37bb85cfc15ee72411e5a152fb55c36bea5dfc79a71c47668cd39c926242d
MD5 SHA1 SHA512

Submit Download

.jiagu.lock

Path /data/user/0/com.glkj.goldenage/files/.jiagu.lock
Size 27B
SHA256 7a8be1f2aa9dfe0f43b8dbcac79b83e71c81ac988a660decbd2cf65286c9ab48
MD5 01ca1d952b63dbb92fdc3065fc656c8f
SHA1 4db2bf57703fac21089ac222287fe285ea6f927c
SHA512 9d813fc5853fb34f6a2d4fe793d463f65b6d0443d843e6f6d993f02ae8ccd913dc416f6797b17750d85133a1be405a2f7d1b37ed8b874157b85d5c6d1f3af520
MD5 SHA1 SHA512

Submit Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 48B
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
MD5 SHA1 SHA512

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 32B
SHA256 16c8791dc420c1a81a247619e574f01723a9e62f758afe6fcc7fe57fb3c38e2c
MD5 8558a7f29133891bb0881bf4a0748bfc
SHA1 13137ce2664e2ae1b000e9328f02a4f4c2e868cb
SHA512 f223954753ec176ac57718766cfb84a869edd4f0d1915408318012600fcc65b775005a7cf4576b2f5bd99e7dcc66b51bf4f58dabdb7cdcd7ffe2bdfc0391f3c4
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads