Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
64e8d2d68ea...18.apk
android-9-x86
74e8d2d68ea...18.apk
android-10-x64
74e8d2d68ea...18.apk
android-11-x64
7bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
muzhiwanapp.apk
android-9-x86
8muzhiwanapp.apk
android-10-x64
7mzw_d.apk
android-9-x86
mzw_g.apk
android-9-x86
mzw_g.apk
android-10-x64
mzw_g.apk
android-11-x64
stasdk_core.apk
android-9-x86
stasdk_core.apk
android-10-x64
bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
Analysis
-
max time kernel
8s -
max time network
148s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
17/05/2024, 05:09
Static task
static1
Behavioral task
behavioral1
Sample
4e8d2d68ea46ffdc1c21c3af0699be9e_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
4e8d2d68ea46ffdc1c21c3af0699be9e_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
4e8d2d68ea46ffdc1c21c3af0699be9e_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral5
Sample
bdxadsdk.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral6
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral7
Sample
muzhiwanapp.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral8
Sample
muzhiwanapp.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral9
Sample
mzw_d.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral10
Sample
mzw_g.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral11
Sample
mzw_g.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral12
Sample
mzw_g.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral13
Sample
stasdk_core.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral14
Sample
stasdk_core.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral15
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral16
Sample
bdxadsdk.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral17
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral18
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral19
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral20
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
4e8d2d68ea46ffdc1c21c3af0699be9e_JaffaCakes118.apk
-
Size
26.1MB
-
MD5
4e8d2d68ea46ffdc1c21c3af0699be9e
-
SHA1
3410b56eb08db1db175e0abecf5074dfcd48eaa8
-
SHA256
b17fec8f357130122913624fa16dcb12442bdf3851a02b2aefe5593167636b2b
-
SHA512
9af6a2294245947f6a6d31b073ed655e5b1b946e7ecd24f929cc6856bdc44b5e66dc95689b9cebb82c7287c20c8d36ec1465d41ab0ce49c55ed3d37f69611d7b
-
SSDEEP
786432:P5Q6kax8MJveravd1sjpk7SF/ClJL7ud7XlBYvv5nL91b:PKxOvaavEjpkWF/kL6lXlBYvv5nL9F
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.heuer.helidroid_full/files/stares/updates/sta.jar 5107 com.heuer.helidroid_full -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD52c7e5cf6ce19853349cf4855aa6f6c2e
SHA179ae3d41e9db5e2c18678a24019938158cf41447
SHA2569343c0370eed443445df91033156e60ba5416de9f8a63e5d555b67b8a76e6191
SHA5125451363363dd55b9ea79186d3ada8de2658b72df194a3db3a087ab4abf8218723ffb5de92f3e785ab7fea510e8a7cbdadf33db842fb22c52a33551dcb748121e
-
Filesize
2.3MB
MD5c6c63be3b89eb603f4627853e1607e4b
SHA1766971709d8dd316dabbf8e11acb03744ec66ae2
SHA25674e9a4a0a3187ca1c65673322a56914e4c9c256b7a67445fab5517cce176e366
SHA512c5985e1763466d2ed918a43e38cd60198ba8ae7789343a135815e010be9bf04f77a7a904238b41b394690a65b077cfc8da388af38b80d23267dfbed452f60baa
-
Filesize
36B
MD50f8b0c7a51a18c6fe0716e619bed8dd4
SHA1cef4717f06232a144c4073e227c4ddec19bc7e79
SHA256d970acbcf070d8c88576745ce4f79f4c2d530981c1fbae872304ed9b6d1b2e1f
SHA512cc664f0ba9c2e563f1093cb9b51487c4c3e5cd53f5d2bdc2400d648c1cce6bc4a2171d6e7e8301957c6009e6338c51b18a5dd71f3d4e4a6188ba29903ed693b4