Overview

overview

8

Static

static

6

de840bf8bf...18.apk

android-9-x86

8

de840bf8bf...18.apk

android-11-x64

1

YinShengPlugin.apk

android-9-x86

1

YinShengPlugin.apk

android-11-x64

1

Analysis

  • max time kernel
    2s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    13/09/2024, 16:53 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    de840bf8bf34aca77062ab623b2e3028_JaffaCakes118.apk

  • Size

    11.0MB

  • MD5

    de840bf8bf34aca77062ab623b2e3028

  • SHA1

    fc8c119040df097bd36fa92e547efb0ddb88c870

  • SHA256

    35d37aa360e9f88a720988f954bb1d8aa748bc6c9e8e34ed42cc73052336d991

  • SHA512

    6586c5deb8094b630eb32283db65909ff4e9ff8650af8b25c3211fbd6f445e37981c9224e3a7e5be96b46cda19fe20f8261fe06bbc6443e2debc05c72a47f7cd

  • SSDEEP

    196608:U2EdDOQoutjoFMlu7zO3pYcV0PoL3S3RSkIivA+3SGQ8tMxToV6UgutmZwPqYPeY:U2dCqz3en0PaNXiv/3W8m26UguIZwBeY

Score
1/10

Malware Config

Signatures

Processes

  • com.gt.gold
    1⤵
      PID:4442

    Network

    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      142.250.200.14
    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
      Response
      ssl.google-analytics.com
      IN A
      142.250.187.200
    • 172.217.16.238:443
      tls, https
      1.5kB
       40 B
       1
      1
    • 142.250.200.14:443
      android.apis.google.com
      tls
      1.8kB
       5.8kB
       11
      10
    • 142.250.200.14:443
      android.apis.google.com
      tls
      5.7kB
       8.6kB
       25
      23
    • 142.250.187.200:443
      ssl.google-analytics.com
      tls
      1.3kB
       5.9kB
       9
      9
    • 142.250.187.196:443
      tls, https
      847 B
       40 B
       2
      1
    • 142.250.187.196:443
      www.google.com
      tls
      11.4kB
       12.6kB
       34
      40
    • 224.0.0.251:5353
      3.7kB
       11
    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
       109 B
       1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      142.250.200.14

    • 1.1.1.1:53
      ssl.google-analytics.com
      dns
      70 B
       86 B
       1
      1

      DNS Request

      ssl.google-analytics.com

      DNS Response

      142.250.187.200

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.gt.gold/.jiagu/libjiagu.so
      Filesize

      382KB

      MD5

      aa01dd97609092ce310e17bf791069ce

      SHA1

      f000840a8f68ea7beb2e29ea466088daf55609db

      SHA256

      e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2

      SHA512

      766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4

      Download Submit

    • /data/user/0/com.gt.gold/.jiagu/libjiagu_64.so
      Filesize

      363KB

      MD5

      164b659b1b75016c75a025e050ec82d1

      SHA1

      53f0156f39800db2ac4acebd1f3f97ebcf9138f9

      SHA256

      aa8d5d52b64309ea1b5337fa5042874a3f81fcf5fe286205ac9a49bad2db88fd

      SHA512

      a8e9696f179ca5915536e1d600d18c452bd90588a3d8e8bfe1a94b1ecba166cf627a3e2036421294afe4acae2a4bf12d95786d26e180440794e48f7de96fe88a

      Download Submit

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.