Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4s
  • max time network
    167s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    15/05/2024, 12:32

General

  • Target

    46319e158b45c3983948419d937d2281_JaffaCakes118.apk

  • Size

    27.0MB

  • MD5

    46319e158b45c3983948419d937d2281

  • SHA1

    9441f223cb19bfa753f10841fd3d607bd2670765

  • SHA256

    484a22861ac88afea80a9ed06c81529154009f32780520c76a4f4b3c10813a2e

  • SHA512

    7a186fbfbf256bdf82a79f8113547a91718ef013446c84039918aefb8e655dead4d17b6f30b64ef457ec049a836a67445b6540ee3b58fba06693316c1a9d8f98

  • SSDEEP

    786432:vU2ulMOw3oS2yEqAQpGVozc2j5hS+2ZY83sHBXUitKtZUFpuOK:M23R2xQpGbAS+2ZpEGMXuOK

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.yodo1.crossyRoad.UC_02
    1⤵
    • Loads dropped Dex/Jar
    PID:4253
    • /system/bin/sh -c ps
      2⤵
        PID:4287
      • ps
        2⤵
          PID:4287

      Network

      MITRE ATT&CK Mobile v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.yodo1.crossyRoad.UC_02/.ucache/classez.jar

        Filesize

        44KB

        MD5

        0f58fc06ed82517967b3f090fcf133dd

        SHA1

        f88827a59b1c66d87bee46d8e65d0db8390ec28e

        SHA256

        762d16bb51bc30daf26d23316ce89ea6a2d2e1f0acdc281559eb4b1784624111

        SHA512

        f0dc1acb5d20d047d9e3cd16de7322ab506f04a1477a2d04c6910a5690893a5051d5e45eef02c8b9de3214267392cc83c26ba04f55752b7198bed2eea7a1d842

      • /data/data/com.yodo1.crossyRoad.UC_02/.ulibs/decrypt.so

        Filesize

        33KB

        MD5

        d77f0c45d6ef44aa6ffaebb0745b3f71

        SHA1

        b4bbd203af0df73e110edff1b4664a2479622718

        SHA256

        9e11157e8e75f1bd1b5f220fcde84fa775e35d54d032072d2383333700e8a76c

        SHA512

        5eb541be98a27c82d5eb227faa734fb644aba814770fb8d4d9f8fb1423a02b1df4ba43a44bfa3932fbbe2222e9c54589d653b0ddd204bcd43d86740726aa07fd

      • /data/data/com.yodo1.crossyRoad.UC_02/.ulibs/libunicomsdk.so

        Filesize

        29KB

        MD5

        1f5e92b0d33c4fa49b3d2bf741459165

        SHA1

        3863f02af2659ff9da9a570e01dfe821c2b17c39

        SHA256

        1f76971d227937b5f1d1c5a156965768e881cc40a9d9db3b5b06a62d37133b14

        SHA512

        b4ac9a0c3792ad2090da698bb9af12f604fa016c30def77d4c82bd47d4a170d83b0591d5b5bfa3ba967742bb4a9b6b0ce8accad327b2f3f8e2255336191c8034

      • /data/data/com.yodo1.crossyRoad.UC_02/appsdk0_.dex

        Filesize

        935KB

        MD5

        1cbb023da1aca1e7ff736ecf51125aab

        SHA1

        92564393bb41d0e8a8ef02e4f35fe32ad7096154

        SHA256

        7cfce41fc01fa345ef7dc690904306b7a28724dae64699f353aee480551f65a4

        SHA512

        c9d3b170ab387fe9a7bbc89e7670b8a5f315dbe4b1ec47db947829ecd36f63e37db64e3227d0568ca47d64e197f4eed85a573d8964bbe0bc0bafcfc85e1ade82

      • /data/data/com.yodo1.crossyRoad.UC_02/files/AndGame.Sdk.Lib_20130_4E4DB8F73D48429B0A74BED2D59DC7A8.dat

        Filesize

        462KB

        MD5

        06264ef41c32f1bbd57e30a7ece44e76

        SHA1

        b40604c71bdfb0db8b9d68557a614b7e6a3b89a5

        SHA256

        ec45d75fb8785af40b3842dc2a17aeac83a707c9718d7974cef64b03903251ee

        SHA512

        02edc9bf6616558155543fae7c0d7ad901f9d4fb45fdf2b7478ec1415a45171f10f7dc874014bb45050fd2dd0f91319a33781d489c51bdd24abcd4a819608ead

      • /data/data/com.yodo1.crossyRoad.UC_02/files/appsdk0_.jar

        Filesize

        233KB

        MD5

        0bc3920d462d75ed9b84ae072dde0d1d

        SHA1

        7356711fa8ee5c1ad8c18606eb90fd8900976f08

        SHA256

        262ca9d057a4868e31a34c802a456276b5c35e8db1a895c3a85adc2f59c9f526

        SHA512

        e742ce137186e1ec4b0c74aeafbe41a8e5275c60f6e08c4c1552f502a6995b5200bbf175803b5afbd4562bd5cbaad7db84c126742f2521ad98b6b0f6446d8301

      • /data/data/com.yodo1.crossyRoad.UC_02/files/d_data_store.dat

        Filesize

        9KB

        MD5

        f79cca92d9fb3401cfc3624a2f8c5759

        SHA1

        7c474bb2f335a76b6b27296ef985673f31d22549

        SHA256

        be2c61ec5cf57570f7cf457604c0ff34be1d7b9172f4da6f01687baa134f1313

        SHA512

        1e7757128e2030ac65087ff4c2aa73a304db6fa2b41fe160dc5f7c9f46833bddb7a440f14cd4ca7ec0aa9faa97178a8a40197dbb06bcf97f9cc77efbee841807

      • /data/data/com.yodo1.crossyRoad.UC_02/files/d_data_store.dat

        Filesize

        8KB

        MD5

        96dc165daa50b264b6384dd898f1895e

        SHA1

        25be931490790f722cb2916aefbf5758efde2461

        SHA256

        85dd88f550139a6ca38f207a575b86e6ab82c3990995b93915d5412e0abcfc31

        SHA512

        47332089a4c6ade6e6cd607ef2ec1e105d6484f8632015c4d26cc3a6205b4a0afd52974717d9d4637cdef76d0e050199b69ba6b6adff9507ed7e0d3d0cc8859f

      • /data/data/com.yodo1.crossyRoad.UC_02/files/iridver.dat

        Filesize

        8B

        MD5

        0e599d726c9d190ca75091bd3d4860fb

        SHA1

        3ca2df040ce6530cae6256cf60ec66625eb4f362

        SHA256

        3a4d5be7d8464f47a78e3405225b68e9adece33c53f0c43ba0f350a4ecbb1f6f

        SHA512

        51d99a77c4bfd74058dc4bc75d874c09fa8b63415ef132b3fd6ead6ad9cb6e3ead560e935ef2ca36d0122fe477e93875b15277eeff0aaa75a15afebee7446d7a

      • /data/data/com.yodo1.crossyRoad.UC_02/files/libmegbpp_02.02.16_01.so

        Filesize

        632KB

        MD5

        7aef178d4ea9656f8ac064d64c3e5c7f

        SHA1

        3b92ebdbb82efcde9d300a902c91d45dd982b214

        SHA256

        88f05ad243151875e14421335a3ac3d4ac85b596ea3c2a30e3922a457cdc4387

        SHA512

        e79414d7f5028968c473fd1854b2604ecea119595c0037a5e0d4b2aff01a2dcaed011103c02643eae9d27e116697e0767ede1c89c7875b719824ee4531a51411

      • /data/data/com.yodo1.crossyRoad.UC_02/files/tmp/AndGame.Sdk.Lib_20130_4E4DB8F73D48429B0A74BED2D59DC7A8.dat

        Filesize

        461KB

        MD5

        4e4db8f73d48429b0a74bed2d59dc7a8

        SHA1

        45ac6f094d14583003ad91af70863b53723bc01d

        SHA256

        52c2a3fe2aaab5d061a9dd3784d0c6b24e616f1900b1bc989eafed1cc90e882e

        SHA512

        ec1d05295a5a79497aa69bf9b003f03ed608195bf67096ee44043585e2e3fa85bd1a648f9a0ad173bf98361ebf07bc939f6dfb5078644d8a3c9bf83d54da83de

      • /data/data/com.yodo1.crossyRoad.UC_02/files/tmp/c_data_store.dat

        Filesize

        365B

        MD5

        5287420abed55e5de4acb9b0d05239fc

        SHA1

        0bc86e245a256118bb46d96b668fe3d840a676e8

        SHA256

        c3d61bf7ed7f84d9cc6ea2378b8dc3d3a268544ccbf9bb4b8bf2469351114e14

        SHA512

        2c4aaa035ec966e1138efc22008a5f2d4a0b8b6422c193622ae2d82d7e3dbd0c8e28b6c0c1a18a58b147a9de59888e5a6dbf0c8b3b11b8634bf6017896c5de74