Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    34s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240506-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
  • submitted
    12/05/2024, 10:00

General

  • Target

    3986f531f1b941dc1c7cf09c6c8fcff0_JaffaCakes118.apk

  • Size

    5.9MB

  • MD5

    3986f531f1b941dc1c7cf09c6c8fcff0

  • SHA1

    0bde8311b6a00dc1dfb69e57815db32c18acd794

  • SHA256

    bd42d8857fdcb7a9c2603219bdfe25631d9a1f61c3bedb9dab29e7e8620e6a14

  • SHA512

    1a02ffad6801b8d0f9e78bde73f9383a958ddd99c5f3b588a492b544ff4df93bd361302ac82a3f697bf7e8098d41e64a5e9d6d2885d99243628833ef7e5cae21

  • SSDEEP

    98304:8UgtIuXwQyV/M4fA7QLXtLw/XTEYdBKP98cllgf2vBAI:NEwQy64fA7OjYrKPfa2vBh

Score
6/10

Malware Config

Signatures

Processes

  • com.adasleader.jason.adasleader
    1⤵
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4271
    • chmod 755 /data/user/0/com.adasleader.jason.adasleader/.jiagu/libjiagu.so
      2⤵
        PID:4300
      • chmod 755 /data/user/0/com.adasleader.jason.adasleader/.jiagu/libjiagu.so
        2⤵
          PID:4346
        • /system/bin/dex2oat --instruction-set=arm --dex-file=/data/data/com.adasleader.jason.adasleader/.jiagu/classes.dex --dex-file=/data/data/com.adasleader.jason.adasleader/.jiagu/classes.dex!classes2.dex --oat-file=/data/data/com.adasleader.jason.adasleader/.jiagu/oat/arm/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4368

        Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.adasleader.jason.adasleader/.jiagu/classes.dex

          Filesize

          811KB

          MD5

          c001ca323b6d2d3d37dcd88d38a0013e

          SHA1

          372dfcbe10e380737c5acac56eacce2830d57289

          SHA256

          3b4a50df82bab4d4215cd40c42b151a0b14b268382cbb16f00acddce22c48654

          SHA512

          072c442b6132a8e89531ece0d6e26f31f89fca685913813b8eb86631ec05390310993ded14f809f554898c864af2d4b296014da35155ee0321127a511c1f264c

        • /data/data/com.adasleader.jason.adasleader/.jiagu/libjiagu.so

          Filesize

          426KB

          MD5

          0a2045622e5b312ac04bf6bd713bbeaa

          SHA1

          353ff675796c2c372fc57ebed4ae53bcc5377cdf

          SHA256

          62f438c2ba131f0542daeb032d9b2620f6ef4b0e45f6a9d5f4ecf6ea29b75713

          SHA512

          09d3b6219cb8385875e60ff6443461ddcb7241cb01a62bec51a83f828fd87427931fe05ac5a7f76b5700ce1b6aed6d8bd9e7910f442dced89dc0f01baa77893e