Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
64e8d2d68ea...18.apk
android-9-x86
74e8d2d68ea...18.apk
android-10-x64
74e8d2d68ea...18.apk
android-11-x64
7bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
muzhiwanapp.apk
android-9-x86
8muzhiwanapp.apk
android-10-x64
7mzw_d.apk
android-9-x86
mzw_g.apk
android-9-x86
mzw_g.apk
android-10-x64
mzw_g.apk
android-11-x64
stasdk_core.apk
android-9-x86
stasdk_core.apk
android-10-x64
bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
Analysis
-
max time kernel
7s -
max time network
140s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
17/05/2024, 05:09
Static task
static1
Behavioral task
behavioral1
Sample
4e8d2d68ea46ffdc1c21c3af0699be9e_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
4e8d2d68ea46ffdc1c21c3af0699be9e_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
4e8d2d68ea46ffdc1c21c3af0699be9e_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral5
Sample
bdxadsdk.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral6
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral7
Sample
muzhiwanapp.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral8
Sample
muzhiwanapp.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral9
Sample
mzw_d.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral10
Sample
mzw_g.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral11
Sample
mzw_g.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral12
Sample
mzw_g.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral13
Sample
stasdk_core.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral14
Sample
stasdk_core.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral15
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral16
Sample
bdxadsdk.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral17
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral18
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral19
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral20
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
4e8d2d68ea46ffdc1c21c3af0699be9e_JaffaCakes118.apk
-
Size
26.1MB
-
MD5
4e8d2d68ea46ffdc1c21c3af0699be9e
-
SHA1
3410b56eb08db1db175e0abecf5074dfcd48eaa8
-
SHA256
b17fec8f357130122913624fa16dcb12442bdf3851a02b2aefe5593167636b2b
-
SHA512
9af6a2294245947f6a6d31b073ed655e5b1b946e7ecd24f929cc6856bdc44b5e66dc95689b9cebb82c7287c20c8d36ec1465d41ab0ce49c55ed3d37f69611d7b
-
SSDEEP
786432:P5Q6kax8MJveravd1sjpk7SF/ClJL7ud7XlBYvv5nL91b:PKxOvaavEjpkWF/kL6lXlBYvv5nL9F
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.heuer.helidroid_full/files/stares/updates/sta.jar 4483 com.heuer.helidroid_full -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD52c7e5cf6ce19853349cf4855aa6f6c2e
SHA179ae3d41e9db5e2c18678a24019938158cf41447
SHA2569343c0370eed443445df91033156e60ba5416de9f8a63e5d555b67b8a76e6191
SHA5125451363363dd55b9ea79186d3ada8de2658b72df194a3db3a087ab4abf8218723ffb5de92f3e785ab7fea510e8a7cbdadf33db842fb22c52a33551dcb748121e
-
Filesize
2.3MB
MD5c6c63be3b89eb603f4627853e1607e4b
SHA1766971709d8dd316dabbf8e11acb03744ec66ae2
SHA25674e9a4a0a3187ca1c65673322a56914e4c9c256b7a67445fab5517cce176e366
SHA512c5985e1763466d2ed918a43e38cd60198ba8ae7789343a135815e010be9bf04f77a7a904238b41b394690a65b077cfc8da388af38b80d23267dfbed452f60baa
-
Filesize
36B
MD51aa7be67755a33f1e6822fd71bbe7fe7
SHA1992d17f575a3179bf921f78b044fd6712a97589f
SHA25645717c6b3be2d6f669da9dba4ea2c58c30d203e986d429d131e755bb3a2a4433
SHA51250b1fcbadbcf416efc8d732e7be6f61c2ea0991d0a9c6f52a531a4dd6a46252f77c4ae6eff3c6b67e105c0ba8a2093abcbc321f86023e2328b8b20a848d70280