61f9b81ce8b1c4485e3eac203bbb80b32238ce626e2f4848d7d0a7d26a4122ae

Analysis

max time kernel
3s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07/09/2024, 12:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d1ef1d31f8e9161b29138e6b250f8d76_JaffaCakes118.apk
Size

4.4MB
MD5

d1ef1d31f8e9161b29138e6b250f8d76
SHA1

0deabd3b994b926ad0e74957ebba637ec8e456b6
SHA256

61f9b81ce8b1c4485e3eac203bbb80b32238ce626e2f4848d7d0a7d26a4122ae
SHA512

f93a8f96124c66ee9b75ca9bd52a1aecbbab9e8ccab568e7dfef361df4a172efcdfd760759c7218d7dea904800418fe8d5af14b8243158e20d26e26c17b96d49
SSDEEP

98304:3gsX1MbULTzeC9Orx0UWb+Jx5DVp95ZBqckMS+vHyhueEFMC+iS:3zMULTzezgQx5DXZBqcljvEu1dc

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.carseasons.shanghu

com.carseasons.shanghu
1⤵
- Queries information about active data network
PID:4208
- chmod 755 /data/user/0/com.carseasons.shanghu/.jiagu/libjiagu.so
  2⤵
  PID:4262
- /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.carseasons.shanghu/.jiagu/classes.dex --dex-file=/data/data/com.carseasons.shanghu/.jiagu/classes2.dex --oat-file=/data/data/com.carseasons.shanghu/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
  2⤵
  PID:4284

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.carseasons.shanghu/.jiagu/classes.dex

Filesize
1.7MB

MD5
8c5f6e870d962e0552e73900be5425a7

SHA1
4dccdffc645e549e4d233d92ae12ef89630fd860

SHA256
c24010edec1f9f6cd817b122f6a8e35808a4f606533a8ce1df13ff8a7a77e964

SHA512
8ee3f77fe3d7f6dd18be8049d3596cb549bb773bf138352e6a67740212cc57b3947f537f30d61ecfb287941a646b3900bdab643f40c047a04de23783f225b3b6

Download Submit
/data/data/com.carseasons.shanghu/.jiagu/libjiagu.so

Filesize
358KB

MD5
0f988c9a7d52923d162bbfe4d2ea8171

SHA1
0084318df7665847bc5cabac2f4b7cd2bdc02a34

SHA256
c548db6ffa4e11cf80c934aeb77d40397e7aeed067a89799262467d552921bce

SHA512
926bbdc706705674e3cd19186990b5c30d1b7b7141c6dd7ace9876899f2bd92275793a5b76e7becc8c6de82766a3dd075ebab9fd8ccb11d3e077b49c613774b9

Download Submit