Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
127s -
max time network
148s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system -
submitted
12/05/2024, 16:45
Static task
static1
Behavioral task
behavioral1
Sample
3b1991e3b20512a9c5bfc08244ec6bec_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
3b1991e3b20512a9c5bfc08244ec6bec_JaffaCakes118.apk
Resource
android-x64-20240506-en
General
-
Target
3b1991e3b20512a9c5bfc08244ec6bec_JaffaCakes118.apk
-
Size
7.8MB
-
MD5
3b1991e3b20512a9c5bfc08244ec6bec
-
SHA1
c614d97494fddc3f8d1182e899f94625ca9e9162
-
SHA256
a6ecbdb5fc257f59a2aeca5f6d44e5f4f0637c5a837dadee87a42ddb2fac3c41
-
SHA512
6abbcbec3f344ecde8cf71cf73cb2f6ff330e2c5a1ac7707662a5fc6e03c6b43d6fe23ea9295c25ec773019020e080ce44ba8c2f1e1880b9a2111c0d91e269e9
-
SSDEEP
98304:WUDrpQIYgqOibemwKOH5qW5xoaDtrD3W0ERsKaX+m7dtnoD2TyxEQGgs9XKnPzEz:W+Yg26heSybStumhBoD2Tqs96nSf
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.begcmnq -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.begcmnq -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.begcmnq -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.begcmnq -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.begcmnq -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.begcmnq -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.begcmnq
Processes
-
com.begcmnq1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4282 -
/system/bin/sh -c getprop2⤵PID:4323
-
-
getprop2⤵PID:4323
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
220B
MD5ac4c30e1d28cfab12422a3dd668f38a9
SHA19549d5412a30b1981e1f8fe24abc8607b508d151
SHA2568b196ba905ee47abc3ba14df48cf36ed327e0a5c25f5dafd9ced6662bfbc87f6
SHA512a1962917fe8770a91b6808a12c80b8b95422ab1c817c7870db1ef31049e743c6b01baa774edfb44ff75d1b638991f12e690224a4abeb9b147db2eacd59b8cee0
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD501f76b95da06cdbe8b93cc65f71ebd7a
SHA14a9c919264a1cee4651c547aee403d8e43bef441
SHA256759e8fe07923aa6b4f727a6a7e77f804fd4f25760e6e66ceb90aea769dfb7629
SHA5127f60a395de558eb0378296b4815b851114168d460cd57c83512ff85c64b693c80345220807e2654022fe8f473296566295e8e26a32c847ef520c45b162ec76b8
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
76KB
MD522c2b6e5f5fad68128398a2c6eaee554
SHA17dd30f428f90049019348664e37552dfabb9e154
SHA2566c02da77ac3b81637069680e8915b358428880fe96fd93525864abe2934a3c78
SHA512d9f314e01b4a9fe2af7fff88b023becb22b1b50c2411c5d047db160af42792bc8bfdaf24230a6a2ec9ac09cc87be7a5143d37e57b91e5bb92c6235888651339a
-
Filesize
36KB
MD55d7ea1a23af19b4340cc8d90f28297d5
SHA14cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA51233071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
-
Filesize
36KB
MD5ce6135aa1b1fe4f2c2db2a546d2a5558
SHA179b59582154017aadab783dc266fcb158c252940
SHA2567b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA5122839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4
-
Filesize
512B
MD522bc8511d76b8b03f4ca2846ec89234d
SHA1078961ef290283fc298e34dd0a18e5acf7caee8a
SHA256bf7cec1df5b2696816195b32d6e44b0ee313c79b81948486681a4fc1179f660c
SHA512f8fc44c1de6dcc51b8d3990599e9f63499f3171c1cbcc040eb15f6481d51340ff3557ea451fc4d7ad4f2dfd2f573b03734fdbdc0d3b14b3ca6fecd28d036a3ac
-
Filesize
48KB
MD570e68c33179b6ab5feee7f3b0b50a262
SHA1667785b61f21f39b482986bee58d43768d407a17
SHA2569d39812faeb9929847669b5f4ee035f17062931f7f940216f510847ebcfdd302
SHA512bb1c7cae6b9b4176b0fabc1a8f9edcadad09bd2a15d0b3436e4cd25024baa82d095ac9d1e48334d5d313a297b44b02380f03f7ac3d44413d7937af8d28e6a7b2
-
Filesize
16KB
MD5916dee8775a7d4460655bbfdb64a329b
SHA187aa00f9c23b15fbb2812872f4087d4f0772708d
SHA2566228b1c38fa14351dda344054449f7e5642850f879d982d768096c6de6d9dc66
SHA512f7e8d4fc1811cbfdad99f221739c6e13951fe5114ea218f4ce58cc4c2ea52319986b3cec68971b39aa9036207b6a9bfd019379c3fb52e43b72cc9ad49af96e7e
-
Filesize
512B
MD54e6fffab19e3f927276072de2968bfd2
SHA125bb3aff561efddfd4d31e6a1a124e013df78797
SHA2569d463a38f177cbfa894d12fcdcdc858048c04d64f6890d5153c80d62e399f1e9
SHA512777a896b41e46a8f25c6b281675810d118d406d5a505ce73816e9b33d3b77db14dc16e19297eb1c4d36310c1e17bbb5335fe5c2cf967667025abd1a379ee5f55
-
Filesize
36KB
MD527ebb1b58118860bb1248692b72071b7
SHA1aaae01ecacce14f38e7543c50040dc01f668649a
SHA2568a33332836ab1e8fef0b6d47c572a69b999b0aeb50187729808b541d810dca6a
SHA512a1be1de3718c07b08085d4022193a196662e6a66d743e66d2fa984cc1fbe5f380eb45baea3cfd2a2c9701e272553aaca665730d602d5e1b8b6630715cb64e366
-
Filesize
32KB
MD515e79426721e1bf39534d29c221b13b2
SHA1a1c27aa9a72a3543698a87aaddabe9b24b652c63
SHA256a22805cd5c01aa85b9e7a18c45a34d73c106e75ede9c384044b16232b5beab73
SHA5122721250292fa8cbb90f122d16d40397758193c30d4f70b9ffef49ccc67bef3b4cbda9536d862d282f3fd1897d4e7c6a6306b568ef5a8c55b505218f0616e696d
-
Filesize
32KB
MD5d604a3bf1f8d992cc320ea5b1f7609bd
SHA1247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA51267e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab
-
Filesize
512B
MD5851a71eb32c1ab06b2d4613e52314cb6
SHA1e6d5b44ff123a9a1e8926cfa9d6ad6f95d79b9f0
SHA256dd2a79ccbf43231c4061c177dae716bab35247fb05eeac3203423751a401f9ac
SHA5126a5e360e037aa53199bdf77bb2c5e708fe2d1a8b769cc9fa86aba446f84df0c84f95822f0e7393e41ce5b21c339c94a479892b2abcfac76140e4a74a3deb983e
-
Filesize
56KB
MD5ce8d2ed0ebc0b618f61eb968acbf498a
SHA1c8cc31d4fd0684cf341e526e09b8c4178fecdc77
SHA25668478087556bd86cba51af12f4769ca88fccaa880fe0c6e74035a1ada2868db4
SHA512aa21d783762c1cbba2a9ab270b80a043eca71ca557d7b2faf90d633da11c5c32f5fb5b93b53608073bb18ae83e026c8e65246018266cfe8ef71813b8ff0c4c25
-
Filesize
8KB
MD5c9bfc87dfd45ab475edccfe242da5fc7
SHA137c99a28d3a374feab6d52c7bcd0720326737ae2
SHA256399f3c3365fdf98c8f7d0a46669d581d97a1848f531670f1cf9fc3d55ed3863a
SHA51299e5fa69866e421f265c3c899ad7ab838a75f6fdfefc4a6ab946afba1269b1b12a730201d513550594deac145dbedf4c2a60db3d63126ead1a735b8ef7590496
-
Filesize
1KB
MD564b78e99561d7c7ee996cbea8d3ff4f8
SHA1de69f108ed27a8545622d81c18f28d4b47e1e294
SHA25668355546d024afe8ca2978313ef4cc6ede6e7e5e3d2d2c5a11aea8d6e09e8c69
SHA5125447f8c7cf5f3172e52457e814c95615e8e500ef269230c653409f27a94752e351c24a8c4dadf464f41aaf6ee33403d47cddf5405098224440a4befc9a991644
-
Filesize
162B
MD5cb1347edc697e10bb863af238321d0c0
SHA1dc94174e770eaada37e9a71efdbeae6c799dbf91
SHA2569802124e60081d65b70edcd51ae48e9864362434d8f9f2e8100531a1754e7db9
SHA512eff8b8c44c054c064c618218740c8f8408e65e18a916493f00adbbcfebb434e94f3e5553193e2cfb6fccb4674c571865da3115b9c91ef601f7510a6a8329c11f
-
Filesize
60B
MD5dc4299a178ca680dd25ee77f7117e753
SHA120bbbdd67fc73b4f6374021996c0da633397b523
SHA256e8ff15a6a47a3718a1d8d70c958b97e56edb713bd51760bfb7f33dd012d449f2
SHA512d89332769c8a3c3fde88aeda9aff0a6bea1251792df6bbb0d17f2c2b37c4748ec2fda4766e846cd420fe6ecb7ec92911bb93fa1a971b636415b4ab39bed2aacb
-
Filesize
413B
MD563a3e0786a071e7a4758cbbe85694ffd
SHA185fe0fcbf73845f01df75b8171467aa97f46e42a
SHA2567cf9cdce119d7ae72de8e6ff8e08fd39e190e7316d8dcaa7c9ee81b1f7d05958
SHA512b899cbf97c9a36c46268f35d1a9ae71b14acedb30334a8f15577599b2e76c38a7b2ad346de387c3a6662192eebb949e3552d8f4a12e7c714ebd4c8218d5c0aa9