6299cef5f3215d5635602830791ab5117b43e416fd8d46e162bbe965dfaf8e89

Analysis

max time kernel
4s
max time network
137s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
17/08/2024, 10:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a22ea8c783fca68f2612dc6071d80c2f_JaffaCakes118.apk
Size 11.2MB
Sample240817-mhr7aa1bla
SHA256 6299cef5f3215d5635602830791ab5117b43e416fd8d46e162bbe965dfaf8e89
MD5 a22ea8c783fca68f2612dc6071d80c2f
SHA1 30e41df1e1c891ea026ec1c5bc4330da6074d783
SHA512 c62ba5c4740b584642051d2172ea98e098c4b2b034588a50c2ad341663c3571fdaeabe4f94800282b566b66e0a2fa495a96f45c023aa980f083300c1f2d66a3d
SSDEEP 196608:K1gNuAMg/yxmzoxCjZMfzpKIjN/HAG+W/eNYfsuTXCzxAMO4L2EF4CR:KeNuAMgRU4af9K2NgYeNY0uTXYAMyYRR
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xgbuy.xg

com.xgbuy.xg
1⤵
- Queries information about active data network
PID:5050

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/com.xgbuy.xg/.jiagu/classes.dex
Size 6.6MB
SHA256 3edb01b86cf41f23980b3c4c4e9db4f949393d75f81df9bc03898503549fb197
MD5 7704495bcb5cd836a660ce253e7c9b71
SHA1 033f2360d27b727bc872b131c95fdb8deb9329d5
SHA512 772bd6e8fb954d155c63263a0b772f7693f50d9eec52604154abe653ff693c6174a0d388e29169849c7877477596fcf641df4ffd51c9e8fc9bee76ce040b3516
SSDEEP 98304:u6EAHNgWKPIwor7SNExOB4jboiVvc8fwYnV+jhrGV7GnH79B+9G:q4/MOr9pjbfVsXKwH7fh
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu.so

Path /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
Size 344KB
SHA256 07d59919a5936e001ab4d9b3ede13e543f8802d6d3095480c29851efdecfe723
MD5 7274dfc1e8d08075495ca657dadff181
SHA1 e3cb1f637468445de6132385e5d1043d2b4850d9
SHA512 a0a04e0fba84a1eb30b812fba12a3f21c7269a3f1b673bb2f89979d19fceff5e7f92fcb6d564f93069c5ed6169778126616012e528e42af0bd4345b8358dca9e
SSDEEP 6144:zoeB5ffgPhZt6JPeTTk3g9AEWnkF99sMs1zPzmRNduMmuBmhrCHwnVuN/+n7m+:0CxfCZt8eHkQ9AE+kSMshPzS6cBu+HwP
MD5 SHA1 SHA512 SSDEEP