Analysis
-
max time kernel
7s -
max time network
136s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
19-09-2024 06:11
Static task
static1
Behavioral task
behavioral1
Sample
eabc46e347a709f4f4932b4de612cde1_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
eabc46e347a709f4f4932b4de612cde1_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
skin_vip.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
skin_vip.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
skin_vip.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
eabc46e347a709f4f4932b4de612cde1_JaffaCakes118.apk
-
Size
22.0MB
-
MD5
eabc46e347a709f4f4932b4de612cde1
-
SHA1
3334db25bb9c389edf043843d5c052ba1cbff063
-
SHA256
f9412c8d7e238f2856f0a7654a967b671ec08467bb7eeaf1039de038a016a601
-
SHA512
c94a86bf8812bf966bad553cdf833f4abc8cd7083ec6fd67a3f0c66e6bc1a7af30b28c17b74b2073d0d101c689053b5cd2c6f44362ac5678caf3ca49eaf1885d
-
SSDEEP
393216:Hm88F6smHKcSCgqPd2ILAry5cYEhhrGp/MZFPA0DzVizw1wUIgP+12:GV6IcLPeydEhMpk/Px1izw1wUIgP+12
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.jianjiaonet/[email protected] 4936 com.jianjiaonet /data/user/0/com.jianjiaonet/[email protected]!classes2.dex 4936 com.jianjiaonet -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.jianjiaonet -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.jianjiaonet -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.jianjiaonet
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.7MB
MD58840b2c1dcb09deeca421b4e7f53555d
SHA1f3d8d5e092345864502b7b93f682b8a5ecdb6efe
SHA25609f64d3907aa551ed8d7fc5014c4924402bb100e679c9dd3dd1fb1e2c1eb1414
SHA51249f2b788be18f08d885d1eb2e7fc732a2552297a948382c6deccb1fe63cfef50ebc3706c842036778e875ca32a3979c3c3d47bdf9cc1f13f26f895ab2e972928
-
Filesize
382KB
MD5aa01dd97609092ce310e17bf791069ce
SHA1f000840a8f68ea7beb2e29ea466088daf55609db
SHA256e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2
SHA512766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4
-
Filesize
340B
MD5d597fe03d647ece5d0165944fcec14de
SHA19827e48a116e573c6ce1b6678c826149b11a9347
SHA2566aa8b8e9b55515cad70422ce21496c897260c4beedfae508c76e521903ef9c32
SHA512c42363ec47586ad3826432a3fb6459230d6d467c83465a23629dd239fff0af5c484899330c237ff76e47681a7fdd33ad4e3bcdb7478abe23a19133098b402c9b
-
Filesize
314B
MD5b27f1e7da564c5c81b687477d20c5372
SHA11e7d91bcce155baa1eeb30a65e3b0c512bd89bc5
SHA256f49b20e76940a68505fab2668d66d4554fa106d8ec1737a308d2eb836bdac762
SHA512ce9eb37fcadc2d1618e67b4a73c38e36bb2cd676d2276afcdb22424e27feab25b26c32c1c76f208968381269ed6a47a27e419a755a7169aa126c2f2ac02f508a
-
Filesize
27B
MD56031b0ca7c0e36aeb56739a0a18fc582
SHA19d0b0d9cff5ee0a7e8c8890bc10fec0d8f83d82a
SHA2568543c080cb1fa1164dfde625d4b71365b5b5287ad15a7de79f6205eb9e4ac8e4
SHA512275bca1b20593ba1fa548fd4e75b9c4698cc24ee4ac5139a70ad1ca333ceb43a0ea66d9451708022fe49612ee4d5359dc5b0f16cc3103c62aa0c5e1babd94a64
-
/data/user/0/com.jianjiaonet/[email protected]
Filesize6.3MB
MD5f574c423a2dd2c7b1c9b0d9b38702b1c
SHA17e665f0b03f8fa5721bd3a9b8099373cca802ffc
SHA256d7c966ae9ca215d3ba2ce32fa066f2a79740246fea34cb60e3d08577aa6c99e6
SHA512fd8057a688d59b56e584c8df6ea2c3fefe0962931d1b38165ba55a10c73bfe6695ae9da58af552762a9abcb31240bc2d6d4eba5b591424ca93b493f9a90b68f9
-
/data/user/0/com.jianjiaonet/[email protected]!classes2.dex
Filesize3.8MB
MD5fd08c29a0a3a8332034d33e69daba295
SHA11c13304cfdbece81fddadf4a6a5c5996494efcd6
SHA2560ca58516a1a19c805c4ac1ec6bd8da1a6a4ffeb492e030bd907e7f4b7cd91a26
SHA512dbabb3213981e07f03e4ab1e75bb6350b21b315781fb7c7b26f3e7bf467e2b48de6a7fe15b2ea9a18de5b1c827e6dfb23d91779fc17c7d40ced616a51007be2c
-
Filesize
48B
MD54c4c5285293d5141f582aefa4e038669
SHA1e01852a72e5a8e6f7d63a21426b515118196047b
SHA25636c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
SHA512097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
-
Filesize
32B
MD5c2c11e5f7c833af413a01930d1bb5046
SHA1f0d5eff0dc8105e9c66fb3794f8f18532bae7501
SHA25641bb86a944960626f461b1307103edd7bef6da31ab5b6d69b34355fbd3f02be1
SHA512d557ab1cbcf198c4b5f6ed5d07bb09c7eb0a053581e94c6164c6a85a47ef3ba10181a9662c6d0c600bc356b1c31f2ccc5a59fc62efb754a31b65433556e913cf