Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
39s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system -
submitted
13/05/2024, 17:25
Static task
static1
Behavioral task
behavioral1
Sample
3bdce5ef3a20b70f84d8e1a6bf56a856_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
General
-
Target
3bdce5ef3a20b70f84d8e1a6bf56a856_JaffaCakes118.apk
-
Size
10.7MB
-
MD5
3bdce5ef3a20b70f84d8e1a6bf56a856
-
SHA1
6fe4d996d834376b80a41f5756f0d93fea1204f2
-
SHA256
666c28029dbabeb13093cb0ad3ffee209f2cf10c70bb7d254cb120b44dd3824c
-
SHA512
fb9294e2b180c477898248c4191f6d10599af71b2b59e062abdd01d9af436728504615c3a2a9e3b1feb231b71737297d5a0f499fb47d6078bdb22391c24cdb69
-
SSDEEP
196608:lpPsXuIyhKDhEnsS8CjMR8KHgPon/VaacJ/wiGjFJ3gqP/atAM2dq8OyQ94t6Xml:X0XziKDhEZ8AontaXJIiGjLgqlmypIb6
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.UpSideDownDeer.RunMyDeer -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.UpSideDownDeer.RunMyDeer -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.UpSideDownDeer.RunMyDeer -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.UpSideDownDeer.RunMyDeer