Analysis
-
max time kernel
63s -
max time network
159s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
15-06-2024 02:06
Static task
static1
Behavioral task
behavioral1
Sample
ac895c5188bdeb076a6b4544ac52d58e_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
ac895c5188bdeb076a6b4544ac52d58e_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
ac895c5188bdeb076a6b4544ac52d58e_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
ac895c5188bdeb076a6b4544ac52d58e_JaffaCakes118.apk
-
Size
4.8MB
-
MD5
ac895c5188bdeb076a6b4544ac52d58e
-
SHA1
1a385d48ddd27d2cb087ceecb3e325c75b4b35b5
-
SHA256
e2fb4062e8b7253122874d43825352b20c75088a207007af46a641ee09e7a91c
-
SHA512
cc33d61505cf84f05c03122b6f2f9fa7f06c154ea9e9233950b28328f5b1043cbc0cdb333c649c6f67456b153dce40b270696c5188a3179300ccd9e51871533e
-
SSDEEP
98304:55WHjMeHPubCwosXhPeO9ggLHiqepEFOXJUz3MhaFpOHqQUVLgxjOo9yLQiKWEQp:vWHjM5VnZeALgDUIhEpOTZ1cQ5i32i
Malware Config
Signatures
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
flow ioc 7 alog.umeng.com -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.longjiang.bainalj -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.longjiang.bainalj -
Reads information about phone network operator. 1 TTPs
-
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.longjiang.bainalj
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
122B
MD539909e43014acd9750860652795505ec
SHA101a49a4dc185b7822fd03b284dc6c915c5167b7a
SHA2567578945262c3b90ae591de59e9f983739a640b05bd8975543c94b40fadc863cb
SHA51206a0b4eeb1b9a86fceb2035a0e282cc6820e00a8de3d9f18eb097ee32fe9ae72155b77b83cf247fcfe0e689b9bc475960601176e1e0ce319c5eb134774200373