353f16226afa703249ab493c597ba81c31b2c6329433f2dbf786bbe51eb4188c

General

Target

e0e740f71dfc63a0e65f10400598a275_JaffaCakes118.apk
Size

13.5MB
MD5

e0e740f71dfc63a0e65f10400598a275
SHA1

146eeab16baa2806bb36ed893dca7dd55dcff94f
SHA256

353f16226afa703249ab493c597ba81c31b2c6329433f2dbf786bbe51eb4188c
SHA512

6887ca2662f074adbc1bbe0f8864f6c88adfe4939026ed83dbf7794cf6dab24fdcfb3870006bbbc6652a90fdda84ddb633f391c77a01aef645e630c1cfddc6b1
SSDEEP

393216:gdGvJwi0xQjzdD+g/+ulN+43THNc/6Mldzqe:QbrWNKg2Qj7NyvPzqe

Score

7^/10

discovery impact persistence

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.miaotu

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.miaotu

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
9	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.miaotu

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.miaotu

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.miaotu

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.miaotu

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.miaotu

com.miaotu
1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4240

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1624

Broadcast Receivers

1

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1

T1633

System Checks

1

T1633.001

Credential Access

Discovery

Process Discovery

1

T1424

System Information Discovery

1

T1426

System Network Configuration Discovery

1

T1422

System Network Connections Discovery

3

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

1

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.miaotu/files/.um/um_cache_1726343045828.env

Filesize
586B

MD5
0e96cda1e9fa362eb2fda35c4d54d601

SHA1
2d530a5f3b8e843d3150f753108447075fa29f6b

SHA256
580268a676b0f84992a621ffcfb7dec266d875be63e5b3a0d73c5fd1887bc56b

SHA512
afc2ab925f599c920ae1bedece4cec0f741a30b8d136adfa24e1cccf5751cdc44a25813d4c431d67148f6422bc8c14243b807e617a3606755bb7188b2c1ff650

Download Submit
/data/data/com.miaotu/files/umeng_it.cache

Filesize
310B

MD5
84b3fb0d320961c422c622d0b6af59c2

SHA1
b150689703dcf95c176a74c85c8f78f4ca60063f

SHA256
0d4cf8cb50cfcad72fc161056414e8c87cb3245b21e04c822eaa45309227c29a

SHA512
214be5e31776794ab23f2f502fa278685c4b61f690f024405bcc2e8b859eb51a38c006f922a33b9ed4f31c425a27a443fd78cbeadf6d8cd7899c3eceac1145bb

Download Submit
/storage/emulated/0/Android/data/com.miaotu/cache/locationCache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/Android/data/com.miaotu/miaotu#miaotu/log/20240914/000.html

Filesize
172B

MD5
43dcd20b87439d41a5e3bd671d4c8452

SHA1
ce45204fd71151da181d7faa3928924355a5414f

SHA256
bd1bcb25001f6c2284a3780ee4152faf18c707379b67aedf3b138acb60b5e7a2

SHA512
3c34674297c30c69827266e313bec6cb11f7c808f05be29ba21c7dbe9ca1c79ab06e00df17c00eac27cddb99265c7a4299a71dd23387a19f63e191c522789e9d

Download Submit
/storage/emulated/0/Android/data/com.miaotu/miaotu#miaotu/log/20240914/000.html

Filesize
85B

MD5
15ead8a368497b8cbe715a7b36875be5

SHA1
523a799e6babd9689c94f4f6cd4d81fb0315b62e

SHA256
9b965b98ac55f689622a81f8542692a8813b430b9463765054554c7d1be105df

SHA512
f0419314ee9e743db574417bce5d09ecc48c9c74e61e0b20a11cb9d7a10711267df6a71f6eba7ceea5be93a00eb359177ba4411dc2bdf6696b9c88333027eef8

Download Submit
/storage/emulated/0/Android/data/com.miaotu/miaotu#miaotu/log/20240914/000.html

Filesize
82B

MD5
ebb1771fc953f9809830d1a7377ef428

SHA1
614a0fd4afeb44331bf9014a9b27713c0ea7c543

SHA256
fe7fca7ae86344b2c622b2912c5cce61dbbd738378ae9bd9042311658f201f9d

SHA512
db125387d3563c82baafe83f8f882c982fd5b23ddddac8296a728dfce31110d7bef0df885694d3583f46b8f5d1c9020b527dde0c429bce03c347c1c748353f60

Download Submit
/storage/emulated/0/Android/data/com.miaotu/miaotu#miaotu/log/20240914/000.html

Filesize
113B

MD5
afdccff6a9e5d13beb0625b69b6c976b

SHA1
bfbd1b51b08dfa8aeb22582442b5d77a0cab30b9

SHA256
6afed0641d93d819dc1f65ab35bfb1ce4568ca393cb2658bc169792cdc976813

SHA512
4415176891ae5917f84f9234ec142c7f9a734bca0968d1db9f3b999b7485e82c241ac7ecd697541136f0f4669cf878962b824ca024cd8a6e1a3461d2604e736e

Download Submit
/storage/emulated/0/Android/data/com.miaotu/miaotu#miaotu/log/20240914/000.html

Filesize
904B

MD5
33801f49652a208005d3913f2af2ea53

SHA1
fc6416185c5d616fb4b833d9fe3bacf4c897ac18

SHA256
445c842edb07c9b595e663a65bf364a749eb19c6ddb320fd292df6c532068576

SHA512
c472461ee15947260c1442eca540ca48d0858a73e7fcbd8953998b737b1c62c726c50e6fa4ecef0495ad512edae8d8d3e7ea82700ff61e2649c79e3e77f54ad5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads