Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
163s -
platform
android_x64 -
resource
android-x64-arm64-20240506-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system -
submitted
11/05/2024, 17:26
Static task
static1
Behavioral task
behavioral1
Sample
35b8e0ff5694f2821f5f2cf88a13568f_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
35b8e0ff5694f2821f5f2cf88a13568f_JaffaCakes118.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
35b8e0ff5694f2821f5f2cf88a13568f_JaffaCakes118.apk
-
Size
18.1MB
-
MD5
35b8e0ff5694f2821f5f2cf88a13568f
-
SHA1
a265013313a4930ae5f00c85efcb4d418a1d522a
-
SHA256
34488165a1c0beca37c230bc9daf6ed1afbad3c801f03f85920769e2092b1e79
-
SHA512
869cc9fce6df3f8b55b60e3f1b53468ff5600f9aa7ae871c104140caa0b8bf924b91d1efa261dbdcc2419345777b808eb265ee6967cd57308782b8c78798e243
-
SSDEEP
393216:HLbsKB7ZRsDQ3hLIR+mtu9uLgzyp9QZIRwyN8Ljo4FYdPkVoevz:H/sKte2hLIR+mtu9kgzyHmIRwyq84FY+
Malware Config
Signatures
-
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell information.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.sz1card1.easystore Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.sz1card1.easystore -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.sz1card1.easystore -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.sz1card1.easystore -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.sz1card1.easystore -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.sz1card1.easystore -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.sz1card1.easystore -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.sz1card1.easystore -
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.sz1card1.easystore -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.sz1card1.easystore
Processes
-
com.sz1card1.easystore1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4952
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD5c39dad3b3cf3b7fb7b3bc297683ca1fd
SHA18db58275acdee6ff1fa3892fb66181f2d459748a
SHA256dc245adea92f2cf76b43fa7d969ae06c54faedc8067ccec59b004cdeaa750399
SHA512d1c84f865d36b9cb71a4597fcbe74d33f57efaf1996a570197be22be3642bb631fd5a356de6f90b23d75b6d4ba53b2595b9200bf532e79fb2840ea46baaa297a
-
Filesize
20KB
MD55c320bb074bafc955c7cceb90e47ab54
SHA1622a12dfb58807b908c1d57b0a2384fd2885ad28
SHA2562258c1fc73131add7369ebdedcf7f7b3b3856c739b30b17a87ba3c145e183ede
SHA5125b00d6d9408557c654a86c824aaf17ceb0f561ce5b15d2596b142747de94f5d5a6807f087dbdf9902ae883a092e2fc634aebbba763076b29aff47ae28de01b13
-
Filesize
56KB
MD54d6bcbcaa8a0fe131fdb6d008ab6f5f3
SHA100472a197f7c702719fe79068983a90977885e6c
SHA2563ab02d160e5dec72479a405bffc0a7253f3e18a5d7eb413d67ab96c4ef00b758
SHA512db3d4a40b7e2b6e6731195f5989e93ea1038e2ac436df84d0948e8262fafc8c53741a5e86fae81633ef18727bc18ce7d8a1b39f0f5d9b1857095c37e009ce6c4
-
Filesize
16KB
MD537028cd4be7679d62cf50c001331c549
SHA1afe26edc5ed42233280ccacbf2adfe0e9e766140
SHA2566c519a2d8edb05fe2b9a92e140b1dedb4b450dff23f952236155e33f0c6a5dfa
SHA512fd1e3c586b39500fd1fd8dd0d5a8baf84fd5fc5e7de4f3dc893c22ea77d7ad92ea31abc9c59bde2c7e9155bc891ccac272ad41a19822a533c352b52a5d4ea0af
-
Filesize
8KB
MD50ee920fb45f5676c11e340a0aa07a695
SHA10270b8997ca63f8596971414ab3d07f31a182513
SHA256f1189ebf37e37cdd14aaa14c190f620657a6829c5e761dd2258ca9c9a8d19cad
SHA5124477a6c773472207e6c0164ef0b35e37b77122c95f1ece482b53bdf07d239ddc7cd003d8c7a2d11b6f5fad58239f22ad05f7888189549bc24abf53c06bb77c75
-
Filesize
12KB
MD56c3da974dc4b4d4ba9ea927dfa683b45
SHA1a8b26bc43334a3671007595c8c0a9d20323e091f
SHA256d1d8b3d6f743fdf057160cce645f819e61ce9d6f1b967fe4506ccf08b77d4d1f
SHA5122752b7dd2803594e82417b3057f2c2d081ab8897ce894ac7e46add3a2deffb442dc5869035c849d54c45bc5453aed4c519a3f66a54fc90f4e2b2c64cf6742ca2
-
Filesize
12KB
MD52240890bc64b3af0db244c50ee0bfb10
SHA136a4fc6835740d12c7f745e4fe8f3573976305e7
SHA256b793da6abaa121fc1979415145b23d4dc2861cd3ef66e745a7692e19941b2070
SHA512598c92e522feaca353a73e962b9eaa0d61032f8e1337b5d42418a98a228ae43759549dda23b6c4786025358cb1e00e352a9c6088d6706b9d2a5a80c4bb320469
-
Filesize
12KB
MD5e6bcd664216f754985426015123884a5
SHA1b7e73cfdd403ef41652961ae0464d9e9cb24a9d5
SHA256c8ee3ee7e4d46f981d0c9aeb48b1649874f9b7c31f168055f3961c723668986e
SHA5121adc4d1f94aa3bfdcf79575c10ca366a426b40c54a8f92bbcc6c7446f8d0b2f5e4b8609d5127cba759938d7848e97b6dc1cd2c937d1a60a65ca4cd8c12d295c0
-
Filesize
512B
MD5bf2116dff2b1b6ce61c979c40688e653
SHA10176babc72c3ca103a752594ee0a9f2263803a6f
SHA256b95779f625dce14bef3a867f5d28f40bf3690ad9b1b7bdaa74a5b8c4debb9bde
SHA512ba44642cf85015896561cde797ac903846bfef86985ab3a554db4e2ae575361390b698e8daba7de6461c37527946c1d0c0c9cc7a39835b26d289e08dabc1f7de
-
Filesize
8KB
MD5f4941b4407c9b203c6d19b5d6f6e14a8
SHA1a004eae16d0e45b40380da61f01ddb664476e9ab
SHA25680389ad2acee498dae33f89ecb358cc8704df9ff9e670157f5765481fc92412e
SHA512706eae6161f51bcff65a6ca767d802bbb47cf1e19828c984e665eabe8c086f8393eb8d5a9a4b44e49557fbeaf382e7a8e6abd7222d5e9c9f92ff151b28bf08c6
-
Filesize
60KB
MD569318630d6d6165974d2260370d21eaf
SHA1be603911eb7cb6e4b050bcc8a01db7f1ece57089
SHA2564558ce6666513c3b6632446fd7fce89923a05052ec4a673b5ec4f72bc7be8989
SHA512c1fed046566394d26f5448356998a463ae3a6a4f6acd2c3cc09c079c6849b0075fe558847209bfcca5af67d344a881fb7c6c0c869422c0be493270f0f83cbbba
-
Filesize
8KB
MD5a9c2ecee6e6a281b2ca7b5ffb6eaef37
SHA1cf0f2661a03589528c47fa91720c818a057e3c48
SHA256418444cb8b9690c29671c1ff95dc3906bddf555633c4bdfd574d043dd61cd105
SHA5122173e24627bb79faf8f4c698f4cd844c9986721a88cd2242c0d0443f423300b7b3995cc8dd1887a8f557d191464e3095ef72cb5b30295b9fffcdfe229bbafff5
-
Filesize
8KB
MD5bb0b032ade074a363e608765f0a3a42e
SHA153a75819f1a93fc56191bacb27eca2044eea8027
SHA256ba16f4bf50f5183fd1a79b7e1a122ea3326e918a9527aab3474ef738a5e2b7cb
SHA5122dbc9d45073845d335d4bd5f92b59987f0d5223b9b68d05333dda56c833c5edf459c31e917d9b90b18ec21191d8458231cf320825c7be6ef41fc15c8df3a6fca
-
Filesize
12KB
MD594f2031b8a1952cff97a9fd937550691
SHA1889d1b6bcfcf54682acf4554e78dcb1351394796
SHA256e54f990830a41b9804744506d56d8f3a57ea85e3d80a24de2da5344255b0326c
SHA51290d8e9e60532be036346f3c3b89cf07c45e3188888491e60ed0cb0d09761e6f98af5557d7c9e389544799491c4fae9f8c0dea3b69e1b80d456c64e7c43c061aa
-
Filesize
12KB
MD5e18147d9ae0eb6140a5a4d913d2255a2
SHA16b262b6a882612c88eacf09d924a8d6226f2c937
SHA25619d9976a896e3ed5c8dfefba682018c04e2c55cb40d67bd21797deefca3ef331
SHA512bd46df2c0d9a6dfcc7db2b07a3b0d606513195a93c336a43477ad6661aa911a653003e1159296f862507f3fb732e067feadf1a629815ee16f258839ef496811d
-
Filesize
512B
MD5ca3f2613802867b5386b0b764f305a65
SHA11f6684dd43a814ffbe3005ecf026830ea2906acf
SHA256df43576a7b0fba5e0887708dd4476cf12529d9dede098c4c65914c7d898c085b
SHA512cec40bb00c86a063dad2fecc0a757d9fc19c60f305658ab53f35fa14034adbbc481d476ea9728f70bb472ffd68edc1273af0953af9352d77d680257990d1f3ae
-
Filesize
8KB
MD504e300646dd0fe2f3b26183fffdd1545
SHA130da6d3652971003f292f8d90e26b08dc136b191
SHA25652d9c408a3cffab17d15142ee3c54292f86996d566c7dae2e782d2badf15dd75
SHA512d6157c37e3b5cd476a8971d73dea50488eb3bc7ea6de358a53322a9fede2f5cbb4f3b5cef4e921ec0d8dc972ebc2d1136fa35d6f007a5b7dd97dac4319c934e2
-
Filesize
28KB
MD5a0ed18831d0210cb87c8441825fa200f
SHA15da9c5852e89836533b45e753e6127b3fbb6104a
SHA25624471342a0ea7cfbbf4760bb9dd7aa825648021087d9d7baf7a187a112392149
SHA5123a4225963a232f7d28d3acd2f946f302f1998da3f2d6dfab25f4effe69df2e62aa48faff7688091e9007bcc7a4cb839bbcf4dcff5f2f55db28075da525dec360
-
Filesize
512B
MD5742f53d90fc224cd85469b3589819a8e
SHA1646998f880c224b9c2aac21c31e2620b92be2849
SHA2560c120e0c9f688326434003813681a58a51a6d0a22717c779b6d4c237899a290f
SHA51294444350a3fbac2354a4c4fb6d5d1a6d9566a3cdae2de63c1102cb1bcfa07019445980b5c24eeef0a54a04c354baeee6f9d8610437313cfe586da8268f1b7875
-
Filesize
8KB
MD56a057dbabb3e5054a678a8960dc4e816
SHA16fc994f88eb67b75f8521aa3d29eaf228bbb61c1
SHA256ef887ef2a9c00448a4309b983c3fa644ed03fe93693f0f2f2f81ff002ed0de0e
SHA512aee375837cd9f77e748fdd1621bb817adc4840aefc34c3f92c4022246a0daf9afe6d96a9e0df54f9c8f7ddacb50dd627dc3bebfcd81d1e53aa1aeec313a02aa3
-
Filesize
8KB
MD58c91b89ce7733580c54edbfbebe6fb90
SHA1504941211664b90ab8404bff99296bdb7e7cdef5
SHA25630bee5043fd538bb91e7accb493015d5358f634f98fb0d46de096434bc27b64a
SHA512188549fc083af4e62be011ff000d066916758e8566f6eab91e9be1249d2f63d0c5cccf6e950bba6b15acb083f1cb5d2acca6b3bae6be8c7e5760a2c8e3248800
-
Filesize
12KB
MD530624c622b158c31249fd7c074891d71
SHA1c450876b2f446db5f304a61f04b8b05bccb3d4ff
SHA256dcb91a217604aeaf0a8c4e7ed22d0d36f7c29c09b691c35c151c750637675723
SHA512c8f9c4436711e3cd2d474a445d1909810a53aa5e492a4c73353b6f839a521bc0baa837706562d50b0bbea0e2041ed2332b63972f1f8a40bfab2d6e23ee9a3420
-
Filesize
32KB
MD5f382a52cf8568b9cf2673ed5ef041014
SHA1c507f0a1052262ad5eb828b64190bd0422cfd76d
SHA256978e10b07e91ca29ede5c387dfd9e501a19cc5a02675196d716962e7697de695
SHA512d3c06ea93abc8226595452003d40d66b74697a921c74c87f5a0e22f31f27e842a85f9572d8a372549154feb6b564dedb516443faf02f6ea025db9aee5455fabe
-
Filesize
24KB
MD5eb90430c26611f7c1c251194e4f49c35
SHA1a2cb205bb0ab081a1a280b099738e7ad26f3463b
SHA256f8a7cbe64234f52314657d5a2183fd0931ce4dc0d8a6ad04257c9211b0e6d499
SHA5127213e6753c8e151cac8547335688c2e723020ac30b2c7fa9b86cde9779bc093661d1a395ed8026d459f4cab461104b316b42d119b234549e2fe47f245ff9a731
-
Filesize
20KB
MD5f28e90e6484346a725ddb735b4e55a3d
SHA1ab30bc2b4e8abd113809a9ce4b264a5a15360ce6
SHA256ab7fc7a397f924c9aada8b00405a1a0439f7b954d5940f9a672b7afe66c66fd9
SHA512ab5f366d30325a5a24dd9920855484f1ae4bbbdeaf22ebe96f5ee3de97671b1b6d55c6be493d5398962a5a86ac9ab0c3819c5382162a2db196b614b50d66e084
-
Filesize
24KB
MD59f550280feadbaf2760ec6e8c4036f62
SHA16687d04ea40ceec8f921ccec5e08433c1a4a8af8
SHA256617bc626543747ad1296e73485d4799f045f5f8e8d0232e449791035f616fda9
SHA5128065a130067e429142a5bc7a74f4fc149b38fab39d4af6e9490096b7aa96dfc1203ddb83ff3984611d3bdc8c4627d8269724f8add8fe5577af37d10abbdd11e5
-
Filesize
28KB
MD5d2387a0507b4a7a25bdb13bae51170e9
SHA13a58c4d8a42391f6caff139e0be23432bfa4dc6b
SHA256a71cb378011a8d2ec8cb0b89cd6877f0773801cbc1b82054544de35936a1aec2
SHA512bca0815e9898c75f0c19eb5190c77514562fd8ccaabcb5880ccb5fd7f527ee2ad3d405ae906b7bac35085141fbf25cb9ed88dca1953686005e29daa357024364
-
Filesize
512B
MD5c9e1f84005395fce017225fb3dac5b2c
SHA15779a91c42e0603119512b3876b37eb59a2e5adf
SHA256b4c93f8cb1507f5f1fdf0270f2cf790271c3d7c48c994bbe5b26d5b75acc58ba
SHA5123f6c128437a4a75fa707394b7833583828294547bae83527ea0de99eca0aa8ccfc87388d1bc8edf908b21378c694ce211eda39c633c5633d0f4615360cbbba29
-
Filesize
8KB
MD5fc8b6fa822b213a517d3c6c538187b47
SHA1cbc2d89cfc62b5754ecf80d167f883236a51c2aa
SHA2561862d56dbf9a850235f314e866f9ba4e28d72c813d7cf36107dd91c3db19c521
SHA5121c961048363812836ba1567009297184f8e8cf6d2f6cac6814c24dc41b669547ad6a2ab9278cb7814aac92f728c056210b898e6b0b204393689fba9e01125a45
-
Filesize
4KB
MD5404d0036d77775e4f22df20aec1ea8f2
SHA119bf10c763f17217fe0bd391defe822ac962818e
SHA256bdb39f742788de84c39bd1c7c5a4aefaaedaac2c1d74f107654ed8a3b406a992
SHA5123efa2f234d1792545cc7efd55312056e5e280691f9f80c095bdbc6eee9c125a9a6db74bb764d07e4a14c900612c5350da35c24efb0da8be184ecd84f7168753f
-
Filesize
8KB
MD502da1f7ab475f6193a0413b6599d3f48
SHA1b53f2ab5ca96abf7c4a4337f9c6be3b5cbb70ae7
SHA2563447d3b714f011ad44e9da92a8263baca7eeaa85099595fadd75e8ea0529168d
SHA5129b8e082fa8d1292c447b1ce548816592c36fb5b5c016d2746a2bf8d4697417af9efb0fa30f452430653d36bd94de86cc566be961dabd1730f8c312fb1cef23fe
-
Filesize
8KB
MD5712f0b0091bef79549023fc7e14aed1b
SHA114bafe697dd41cf51c5e690e0d13f3423d04a06c
SHA2565913278465c13d1ddb12ed2da1b35d477c95daca201bf347ad7f7fce90d86cb8
SHA5128b7d57e20dd11ebe3734ba7ad53fa68d249422a732da7a3d08f4852bfef28ef0ca84ad9ee3e649378bc7c6c12ab2dff17d484875a09d1bb929bf3e4f28dcf6e5
-
Filesize
12KB
MD51f041b16d418261608e88dcb43a74715
SHA114a8e4da3b2e3852f84ed7fd1caf816dfc63d63f
SHA2565b73cac65d694eeed124cd20f63ad6b6a47f84601d862630a39a938cc56cd504
SHA51239db4d649c797e20e6ce6f9f108a622c1e25e358c01bfd13e53c8aad7c22704245e81d7b87bb049a70c9df0f5c18a611459f2ecda159965d3342f04f6e4c6210
-
Filesize
109B
MD583b06112a759f38db904bf2a46ea60a1
SHA1fb225b46a7e04492b5b389412faa217dd44f06fe
SHA25642ad75994747e4beafe092431bd8dde9b688e21dd2edda56136b0d62e37e010b
SHA5120143449b54eca7c4dfcd4dd4647e4703f9cb05ae8dff60fc21b72dc3126e9a79e1bcf6b0a28f478e083c42205c4e7e5b308b2b00d3f1526f0f594dd1af092429
-
Filesize
18B
MD55b783a723321f384ea8a021d20ba4280
SHA18a53b72a13e69184d8d0ae99568e7d3b95fed07c
SHA256f79b6c0ba6379e405153ae0536b49ce9ab8a64e8585cbcc4b7ee10a357b723a9
SHA512bbce3c6ae766581622fcf53a41cfc47aedaa2050caa3fcefad2e5238470067d5e3b1a7f586d57318d74e0c3725bf0970fa9a1c02a3d0139e1f8444f2310c56a1
-
Filesize
2B
MD54e732ced3463d06de0ca9a15b6153677
SHA1887309d048beef83ad3eabf2a79a64a389ab1c9f
SHA2565f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e64244ca
SHA512e053886e1b797bc5a80f932302f0201265a599d82e2502d41941d6e652614ef88fa058e009094d26655f880200df12c2100f690254fd1e5bae75d7441763cd33
-
Filesize
33B
MD59428f66b41ea14140e3daff34ac2a615
SHA1e61137af7918167964efc5fdce66df9c130d3cec
SHA256e682fa5169c65ed8024fe1c50283d606127f6bcdbb67e7bd5750e04109e0c70d
SHA512c2ad0f8f7ec05046325201cdb4af1aacf02872f5114b0fd255e6d4a78f43e3e81460e89f451e9ec84dfde10f4d6e8837023dc1e089f324a989aab91104632b86