Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20240506-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
  • submitted
    09/05/2024, 07:18

General

  • Target

    28e52e897d16e1dfa670232cb42669e9_JaffaCakes118.apk

  • Size

    5.9MB

  • MD5

    28e52e897d16e1dfa670232cb42669e9

  • SHA1

    a96a1db3cf72652a8c2a3e4f16e6fe97f83b2e59

  • SHA256

    4ba057e7cef1e49089e4ce6eb7e6774452195e8b18e19776d4bf0c840e21e877

  • SHA512

    87e9535014c86f73ee73cf069a6fc8c7057a5e994dca5bff9b38d7d9b661ce54e5fccc2fd1147bec03eda85594865783dd56fe0effe34440ba2004444908a6df

  • SSDEEP

    98304:nzkK40Bn5rKfSO3RdZwhUyTCHPndYaaSQinFZ6/qncPNArfiyJh86JImS62XF:AK40Bn5m6O3vyhUye2vUn6/jg1o66xj

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • br.com.oneside.deli.acai
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4495
  • br.com.oneside.deli.acai:Metrica
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4535

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/br.com.oneside.deli.acai/no_backup/credentials.dat

    Filesize

    233B

    MD5

    a26bdcaed92c9e3f6d9179d7a69bc67e

    SHA1

    f265638a9aa86a167304ab42b003c81ac3b30a9a

    SHA256

    ac018fbc7e80de6f5c38b83d97c5e12c4dfbb209d1c06fce391e95af06f38093

    SHA512

    aea1f1e943a11492bb2a9b4bc477a11e7609aba632f3e46529a994ed0563495f247330dd5e4c458f16ec48107bef56de0a69ce67ceda1c1a8ab47eaca316c7ee

  • /data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai

    Filesize

    36KB

    MD5

    76382b99ee451a3e98102b403d7485c1

    SHA1

    0aaebed2f39e07ccc3dae1626af45bfca5e171d5

    SHA256

    8dcf79646dde4beb0b770a5795ddec109a2705577de03cfbb08a6bae627cc937

    SHA512

    6d204e33a3809c08ccc1cf727dc492d71bba3a76e0438fdb561517a1b3a2e1b1a7ceb23fc011e2d39730c3da1ab5da8ebc7a9c0484277302eb74669fb7368bdb

  • /data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai-journal

    Filesize

    8KB

    MD5

    594062ebafc413525dfbdbe4df411783

    SHA1

    c135233ddae02800167c297db795d66c3b40e529

    SHA256

    b64904deaf3200fa30a6fae87c05c815462d344cd0cef4700d514953242a3107

    SHA512

    f4afdd6201ca54a434941c83b7fd4e3df04e9ba524932354bd450838f8bde871b2f3de9c4e2c84d8034742abe132b76d22446448b0f5e9a509f3cad626d03200

  • /data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai-shm

    Filesize

    32KB

    MD5

    29c970f684a8e8a044088044ccafdc43

    SHA1

    cb0fc5968662ebaf9f535c8a44d3b89f720cba83

    SHA256

    15f1a58fe008f6823572349a56fb2ed6fc0cc6a80bc9ef18c58ffedcf4634591

    SHA512

    f9e119c165d361e4c3154842fa2df14b35b544c884e4dcbc96986904971274003213fde1bcf8d3c28f8f350f8cc64b9e1de673383731070bec8471a9e2be60cb

  • /data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai-wal

    Filesize

    406KB

    MD5

    4106e50bd8b42f75f0ab5c4923180b4e

    SHA1

    e015c1f92830ba00dce8e0f7f123d252aeab92d6

    SHA256

    1480b88b007d789a1803ad8cb20d9182a30239db3291efe29690cfd746bc2e3c

    SHA512

    bf34dbd914aa43eac7d05eb1844e2a6747a056b8512720c2615aee941b4a648b475fd654e2f448213dfaaf38b3706e77ac028d48523f1a16972529502348c4cf

  • /data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180

    Filesize

    4KB

    MD5

    0620f8c9282965428ebde3831fe9892e

    SHA1

    858b7a9234504ee7b7ca9bd8788909ff8e6a6d6b

    SHA256

    d0f94a43cdd1bc5cba6f6e7721b07108328c89ca6786a469f0529bf94f2a5b8a

    SHA512

    2192b84a973fec830e15d1f48ff3674d15db34d5ba04115af8923f884e3f7d84a163fc5eefa257c1270bef8a9f8fe5bc2971731dd8fa9a523a354ce8ee9262ce

  • /data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    512B

    MD5

    1527062e5b1055e9f0751212f075ff07

    SHA1

    2dad27cf191cc2677579a4a023df152e09a8e1e5

    SHA256

    08a5122c0ff883c6deb764bcc52d34c18e2345d07afa27171a05f317f49bccd4

    SHA512

    829fe6484408b8e97655d35cc3ae62ee45644aff6dc5bf3d4bbeee307ef171b123ef2872cc8b23e519133d5d0805a1bcc39d2b976e71975f7242f0dfdcc55464

  • /data/data/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180-wal

    Filesize

    164KB

    MD5

    abae9053e2459e6a5a544c29c2d6a6ce

    SHA1

    91d93ca6284203910c14a0a62b6cb1fae50e173d

    SHA256

    d003a020d70c76903140d1f0140c20ae8583b28eec3175bb08605c313053dfe4

    SHA512

    5043a07ea8878f02077b2062179f5d4c53c5ebf562344000cab327c614e2103f4dc45a0f3e31828441f091868a9d421d4b668637afeed35c6622cea1c47950b9

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    1da700033e2503325560e0769d228d13

    SHA1

    174c18cfb039ee9ed282f7c86d3c243f618f7e17

    SHA256

    f76136b416e15002957e10a3055f48d317e9657942efda94944771d89b23a729

    SHA512

    5df23ff60cdba40e5ab7261a8efea2967e613f7c4f95daf8c5e35f2b154b6c73ebef5e936c801554605047a3ac6cd61a7dea9c49ece66a4f829469dc6c6e7abe

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    6ca4e066cae95fc2f0cbd52932abfe70

    SHA1

    b6f08b7081c51e20df4fb7d22a5df2dccb63215d

    SHA256

    6191183ee0f0d84f3449e5db6f3f75d3ba02c39565df39a619a5dcdb6c16fed5

    SHA512

    e4f55f89417bc300621e3a22707230fd4a5827aff761c43ffeb05c3e31d6ab6bba8e4164d15084f0711ac4bc343311eb982c92040b7f897f89c8eed8ec0945b9

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    44def4f6e42c3ec63f229d23af8c804a

    SHA1

    f5956d9295778b539bced03215343fd3cf7a9dd8

    SHA256

    882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a

    SHA512

    a14770398044635a8a8fc0d59dc95af3a97ae78146a9ace3795d600a44098a5ff7099aa3d0ac40442f8ff8c5d3b5ceecb4b360bf47f3e8c7c902879e2e76228d

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    02363b602f14466b2441480505416d6b

    SHA1

    319da090d60c2face8a91cfba13511d23ecf8b37

    SHA256

    1fef948860b33c4d752595573353c7b851c60ab5cedd676161861ca318bbfccd

    SHA512

    aec6578fae0d2e9e1407682ca83940c1842310c80a8cbf9dcc9bb93a1fffa8afe6bc2fcebd37ce1ecdba1c1fb1de792e2d65b6e4e1d18842fada6c1eea14d6c0

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-journal

    Filesize

    406KB

    MD5

    759f6c1f880c4439e2bab91b22aabcd3

    SHA1

    125ab11d1c08d3fa30ae25912c1cb5479d7d128d

    SHA256

    4cf308a54f5ffeec95c410bf6799e6926fccc3ade6fd5e75298b16b644a9893b

    SHA512

    9943cdac4475e7e538ee19b4ea27290ed127063a0b51cf277ece9535ecf6e06d6160b4a6d69e5337f8aabc525e292b3b2ceb08ca69e44d2f63e942b8944612a5

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-wal

    Filesize

    32KB

    MD5

    1ef556b9ef5607f71ffc54e6071816d8

    SHA1

    7225d722ec3c787670a332ec0bb93c526c94f4a1

    SHA256

    f76124dd514326584f9b52d80e17211c18b433f6cddeb64dc59fe4309e120ffc

    SHA512

    922135035be8bea5bedd0a7db765f82d3f23a3860c94cdee0c8528e3ce3b7082b94d0e003a6b859a8ce3c1f35c1915a08b626b6ac09eded8c6f44e5d9d639eed

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-wal

    Filesize

    8KB

    MD5

    7afad05e94ab8f106f32907100899f40

    SHA1

    e9e62acb2fb0e19faca2de74aea5b640a8950c74

    SHA256

    c6bad568d1208789411a860159c5c08399a4bf8eaedd10e388fd68a09ea7d19f

    SHA512

    12fb890c6e30fd57aaca95df2b047e33195ea7e8a17a620fb0f85d14ba9113a67d7c9db7d932e1e8259378ad0312f901df435202d1103a4141e694b819d90d07

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-wal

    Filesize

    32KB

    MD5

    6cef14f241e2679adef7651726bf7ed5

    SHA1

    f9ecd39c4f62460f0535c98fa5ded9d86dfb06c9

    SHA256

    2e266499fc3518f196045b8a63d52d0f8d6dade38702a564abda2cc47b4dacd2

    SHA512

    d869acb58f88705a7d3c953f5b3b58b5bfe96f83f4a94cc72c934c1e0e1c502644e9a514875cb76063f66c7808e5b907d0b6fdd64a5b8566e8f408121c05ddfc

  • /data/data/br.com.oneside.deli.acai/no_backup/metrica_data.db

    Filesize

    44KB

    MD5

    bbc715da22c400a7947b37d6a26e3f03

    SHA1

    76fb652fed27a6789335f0b9d3435a2fd77592fa

    SHA256

    86bb1c9be57f5f3e03f9a5b724d3896ff6dbd671bafba6e86ccb40b8b90cc24c

    SHA512

    7e9cdbc7e72674aaa6c86e3a61a360960b47e09b721ae7193e0e60a7b21159da5180585a9ca8a38bb56db54f46ab53a1554156959683ca2632305f2001f35c4a