Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
160s -
platform
android_x64 -
resource
android-x64-20240506-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system -
submitted
12/05/2024, 05:15
Static task
static1
Behavioral task
behavioral1
Sample
38716f839b1bdda0a97d3ba22f90794a_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
38716f839b1bdda0a97d3ba22f90794a_JaffaCakes118.apk
Resource
android-x64-20240506-en
General
-
Target
38716f839b1bdda0a97d3ba22f90794a_JaffaCakes118.apk
-
Size
1.2MB
-
MD5
38716f839b1bdda0a97d3ba22f90794a
-
SHA1
a8239ecb3b6650554593e353a69b781c93f84785
-
SHA256
56597a06fb16925859fe01ff734409d950bbd494eb30d854745e9430d4da5295
-
SHA512
d105d768ca13011edcd34cd2b7cbcd19280496a284e5460944bd6362cf978eb49c20dc1d2b6b7d24f30bfcc823c51bca24c4d87c3f1a77048d67555170ef1042
-
SSDEEP
24576:b2yBmGMldP4YZMXNEvovYNcy2DUOE5dYhcYL3XAvCr5CP/:b8hZ8NESYNp2DNE5ccIA6re
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.ifext.news -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.ifext.news -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ifext.news -
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.ifext.news Framework service call android.app.IActivityManager.getRunningAppProcesses com.ifext.news:pushservice -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ifext.news -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ifext.news:pushservice Framework service call android.app.IActivityManager.registerReceiver com.ifext.news -
Checks if the internet connection is available 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ifext.news Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ifext.news:pushservice -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.ifext.news:pushservice
Processes
-
com.ifext.news1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5097
-
com.ifext.news:pushservice1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5154
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD57f0b234ccb1d3a0719a1f69fdbc8b395
SHA127f808e346f4b2d4f3e792b7c37b1c1df40da83d
SHA256dd143e39acf4564e2bfb5f32fb6edb59a13afec344030321dc0ae654c99198c7
SHA512c657070b28c03518296533a3c9293bbbae278b082d82eb13798e061921998f7dd70e6926c9b079d3a493adaf25ba268f715a85f7946903834cb8644273edcbcf
-
Filesize
512B
MD58ad308f47e0f5924a631b3e2957f6675
SHA13f957cbf7de083b3de17030de1ff5268c91eb86b
SHA256235fef62f68b8c87425fa401d67de824f4e7a458266cebb5957078603c8748f3
SHA5121fd7d54eaeffc2853a89cdbb37ee10411d2c20cfe65c5821266d3a356037376e0e5c557b6608b885748c2732fd23d2671e600e299c52e8d0fa0832a7e68fd57c
-
Filesize
8KB
MD5a75c2284f59e5032734e9d87517b9562
SHA1f1497a0ee213bba16c7748b404dccbdc5087b273
SHA2562df6e3ceddfd9c5a968bf27c222617dd11e3b9bcbde0f3e702146b3acdfc557d
SHA51284eb898cc5ac96b4e787064dade701954b56474e682c7a58d240a1bb544648b752493c06e958ab39f4181120c57435ad12b8cc6f793ed92737719179003207bc
-
Filesize
8KB
MD5ef42e5bec8fd9ab90d56f3abc9376315
SHA196f903d1d9821ced343092e7b9cd449354e55cd8
SHA256f6f0165d0cb0c11e0b34e121a276073322fa4d4438b53b4e39a1b7ebd7aaae60
SHA51232a096892a464f6a6aa3025e60845a181015f0eba4a99511740f11824815c4d170a86bf0d3e56cb4b35dc6a2a89f45659c18fa03eac54b67b31b57abe4cc2081
-
Filesize
4KB
MD5af2076ef40e26e268a92c425c112553b
SHA1de0a417c7d530447ac1e89af1190f3154538726f
SHA2564a0ad9911ebc31b73adf6d2a1abd48cb74d94d45b008cd75257516b1f5bfbde9
SHA5121251622adc49d61bcf08574a9fd88f29ef2a5892650b2d01385ba3fb1960b5bce36903a0863aa092c5685155924158fce664575eddf60fb22c76d99bbdb63219
-
Filesize
8KB
MD53bc8e32056cadc759ad37851e26ad4ba
SHA19dd706f52609400f4b8e07251bd162a99bd34cb9
SHA256af26b563458b1845391235163e794389883efa5cbe1e34def2a7712bdf55b7fe
SHA512de58ec2ea282858bbb81f6a4cfccd4b45b2d62a09101fde332ee8af2a4669b5f8eff2b5465b434b77f054405df2d5a31dc4fae04dcbaff28c34c30c4cfe678b9
-
Filesize
14B
MD5a731c737e62f84dccebbf6fe8bd7c07c
SHA1e3149685e5cb8249a530903af4c15a34c50e94cc
SHA2567959ae7e5309881fe3401b643cd07b4015529ffcb445034809eedfd8050bb3f3
SHA51256217f3437730d46dc2c7680f3cb9b7417108641cbf1cf2d0e370a0108df5e254dac6bfec9dc6564c4a6e410f9d418918db16701aaef4c5b9fc4bf3c21f46132
-
Filesize
2KB
MD5c8fd9b2a0faf22ac2e49dfdfb43c5568
SHA1eb6160a3b3827bffcb6357253345f137e3031c6a
SHA2560ea604a40585114d43206d8e629dfd0f68f2e4246a0bfce5958a15a82ee25632
SHA512ae146804875becaee34c7959caea2d8efa1cdb08a8a389af6931837835ed652c9fdedd43f5aeb27092faf0620c04d7ca3575b92b595d9d7b9ff191ada40d9f2e
-
Filesize
2KB
MD5c2bde3bd315b92d5600f1048fd5a4418
SHA157c84eaf55768d71724fb65624afb6b37d956d30
SHA25655229b6acfd6e1c067576c8a5bdeb94adda7c857a37130e83fe4ec502fe19cca
SHA51203183c8683d7db15ee0c855b9368d6f0bf7e2499f26bc3450177c24f3c8a1b937d017be9028e976adfdc8653b4a6e34189432639c115f765a1ea4886805b230b
-
Filesize
48KB
MD5a03d487d89c13aa9db2d2968550c0ada
SHA1b43937f80c87f97017fc0b91b0eb281394857ac2
SHA2566cca76a36bea7c59ed5de80992be9992ffa3ffee51ddaf061d629cda47f99ce9
SHA51213acf79952dff2dacf9f729e3ea4f5758f0519eee50070744f5ff8a32b08043d19aa1bc787114050da79b152f1c1fe7d29203631898e2cb2319e8d2e9f3c103d
-
Filesize
70B
MD592882762af7af4aa5ee02666a7dc0d3b
SHA18386b0a436824540a75e0cbc498236b1d20c0321
SHA256a37b5bc1fd44bfdb7be0ba0668e4673338085c437a2f6e99f1683579765e68cd
SHA512ebc3133f4ed516b469e96750a3ca2553e792dd9884cf37725f86317c11a641592baa84b2d4d132ee69d226fc3dab27d52f6f68370c6a019106d3bca4ddbf1cb0