Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
152s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
-
submitted
13/05/2024, 06:27 UTC
General
-
Target
3e23b1e1515f995a6ee4ca35af827431_JaffaCakes118.apk
-
Size
1.9MB
-
MD5
3e23b1e1515f995a6ee4ca35af827431
-
SHA1
0ca7ecba605cbc88396feb54e0a5d74ba1f3b58d
-
SHA256
2147b7e613749b6f1964625080ff93cac4f6fe166b958379beee8aaf5f23a706
-
SHA512
5120184eee2e89ed5dd312677c0d9f9046d1ed31cf66a19994f41eca42f79c8a198696d73251a70dd4e9eeab28b88fe540d0c872beeeed4629a391df6656a53d
-
SSDEEP
49152:tc1+8xWY9E4HndtBFiHOFaeYV0N/9BDumCj/quIFlZTQ:C+GWY9E49tj6QYe/9BShhm8
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.lwj.nevpid1⤵
- Loads dropped Dex/Jar
Network
-
DNSandroid.apis.google.comRemote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.200.46 -
DNSgyd.jms.cn.comRemote address:1.1.1.1:53Requestgyd.jms.cn.comIN AResponse
-
116.62.181.149:8080 -
142.250.178.14:443tls, https -
142.250.200.46:443android.apis.google.comtls
-
116.62.181.149:8080
-
224.0.0.251:5353 -
1.1.1.1:53android.apis.google.comdns
DNS Request
android.apis.google.com
DNS Response
142.250.200.46
-
1.1.1.1:53gyd.jms.cn.comdns
DNS Request
gyd.jms.cn.com
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
955KB
MD5041c6b7293d75acb73b36082199f0131
SHA1d97e124b4b453ab8b385bec2dda8e49092e7ba00
SHA2566181d815c8a23be2a63c19bee4c8b4bb775bca78f51e3d337898f5069fef7a92
SHA512ce8892661c5beea26fe4f8e84e555c6785ed8b9e42282496a8aa928e0c24c2ddfa12a9ecd228ea2970f2a6281b7c020d845f2b9e17c7c612d57ea239a68a1e23
-
Filesize
227B
MD5ce9a649454dbc25e97d5b7fee175c260
SHA1239a4056b3aba797de24377ff9bd8828887b41a7
SHA256d1272db6b5811d78e64507efba360bdb1729df16d817e577d15dc865b8369082
SHA512fbee72946090a5f8e67d130ed6aff108354023606d3fab7608965dfec3eb69dd1607810a753a561f3736701ef607de98789fb1dbd4d5b2b1efde0bf4c13c1360
-
Filesize
2.3MB
MD56b259317eac32af14a4924dac4a64825
SHA1f679289953d343305fbde6d22982c8a5549276e6
SHA256d313388664b02af835042a9fa6303c518f37ac4a343a844f745ce1f6203cac1b
SHA51201b1fc75a83cf64bcff83f41d93027f354df00545136d507f840929ac77e49318407ce3ecae2ec036685fc02bce7745dccdabeecbc07bc58e48e9f51b5e47caa