Analysis
-
max time kernel
34s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
16-06-2024 19:56
Static task
static1
Behavioral task
behavioral1
Sample
b4ec317400d84f856ae65e4da1a9cb67_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
General
-
Target
b4ec317400d84f856ae65e4da1a9cb67_JaffaCakes118.apk
-
Size
22.9MB
-
MD5
b4ec317400d84f856ae65e4da1a9cb67
-
SHA1
bb24bdf0dcaa0a4817e858589c3f30cf5d01533d
-
SHA256
f5d1ca55b216f9a3cdb99459b041f4154d5064c400039d282fd7e548105a1787
-
SHA512
824f28121a49a189ac6ad16856fa6294950ceab2dcf79ad71fe367410c73b2ccd2c2bacd75b18bcf7d4cfb17312512a12b8cfd2cdbb17c8510281f7fdfdabfcd
-
SSDEEP
393216:7J3IOZ+3g5OQrVyixHBps0NSMIAbz0CRrCBmbVhpziMnsNjPtqTHAd5GdG0LxV/5:CO03gQQrXHBBNSMIA/r59zirTtqLAL0l
Malware Config
Signatures
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
flow ioc 11 f.appjiagu.com -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.lj.lss -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.lj.lss
Processes
-
com.lj.lss1⤵
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4302 -
chmod 755 /data/user/0/com.lj.lss/.jiagu/libjiagu.so2⤵PID:4342
-
-
chmod 755 /data/user/0/com.lj.lss/.jiagu/libjiagu.so2⤵PID:4457
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.lj.lss/.jiagu/classes.dex --dex-file=/data/data/com.lj.lss/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.lj.lss/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.lj.lss/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed2⤵PID:4479
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.4MB
MD5de1934fdac9ac192bbb3296dc745e46e
SHA1291bf6fbda6ed83e8b339c99a67b28550cfef7dc
SHA256956d7c3e5d26cc65ea7140c4f6576e3913306f4ee835bcfe19d18b4ad0518d71
SHA5120b893486fa90e7eab68de233c164746f8af88ed808a47b0f7815c9b04cf7b3ea55bc9b8868caa12333b121d74f1755a5c656947269c5771d4c574a2cb2c8b900
-
Filesize
363KB
MD56c9d83b90aa9c9f904d22eb9b16f8f95
SHA14d5e0ce3c55a22475b58a982d67ab9aa84384c40
SHA2562432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7
SHA51207d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b