Analysis

  • max time kernel
    33s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    16-06-2024 19:56

General

  • Target

    b4ec317400d84f856ae65e4da1a9cb67_JaffaCakes118.apk

  • Size

    22.9MB

  • MD5

    b4ec317400d84f856ae65e4da1a9cb67

  • SHA1

    bb24bdf0dcaa0a4817e858589c3f30cf5d01533d

  • SHA256

    f5d1ca55b216f9a3cdb99459b041f4154d5064c400039d282fd7e548105a1787

  • SHA512

    824f28121a49a189ac6ad16856fa6294950ceab2dcf79ad71fe367410c73b2ccd2c2bacd75b18bcf7d4cfb17312512a12b8cfd2cdbb17c8510281f7fdfdabfcd

  • SSDEEP

    393216:7J3IOZ+3g5OQrVyixHBps0NSMIAbz0CRrCBmbVhpziMnsNjPtqTHAd5GdG0LxV/5:CO03gQQrXHBBNSMIA/r59zirTtqLAL0l

Score
6/10

Malware Config

Signatures

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.lj.lss
    1⤵
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4568

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.lj.lss/.jiagu/libjiagu.so

    Filesize

    363KB

    MD5

    6c9d83b90aa9c9f904d22eb9b16f8f95

    SHA1

    4d5e0ce3c55a22475b58a982d67ab9aa84384c40

    SHA256

    2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

    SHA512

    07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

  • /data/user/0/com.lj.lss/.jiagu/libjiagu_64.so

    Filesize

    348KB

    MD5

    700c4805546b91b4b67c68d0f61645cc

    SHA1

    0d95f797434316c92a0ca6ce62f7f7bc8e346479

    SHA256

    b3e78d93e35c4c35d7e62acca8d7503da85a7c0eb8d8dbce1f3e0f58de1bbe63

    SHA512

    909a9570f3f90bb8da63b4f387729f284c9f9dde8997f70f0671b0bbb113780f96cd885e3ba01ed6b602cebef2ca406008c486e924fe989ddf5f9470fb4633f8