Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
8s -
max time network
151s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
26/05/2024, 05:27 UTC
General
-
Target
7475d89ccc96c19b0632260dcf0f7ed4_JaffaCakes118.apk
-
Size
194KB
-
MD5
7475d89ccc96c19b0632260dcf0f7ed4
-
SHA1
0acd273cc65bd895d6ec42af7af543ec13ce4ec0
-
SHA256
08aea0c0e43b6b720379db3f1c36242c9955d9278a601ab0c7ababfee2fb1bbb
-
SHA512
b61cedeaf74a97a89a8af2f8267cb8541ecef79115624fdc49f39d6951f26a20b2ce159c876a7be81a2347bff9695fc6e5ade2594aee610a9272ef39a0d01076
-
SSDEEP
3072:ylGv8Okqa4yubjFrQ9ejSu25k9mi31Jg7u3sw6oJNY3RcB8dFbgmP1zh91r:2qa4Beu2KbvguZymBGLHr
Score
7/10
Malware Config
Signatures
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.lololo1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
-
DNSandroid.apis.google.comRemote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A216.58.212.238 -
DNSssl.google-analytics.comRemote address:1.1.1.1:53Requestssl.google-analytics.comIN AResponsessl.google-analytics.comIN A142.250.187.232
-
216.58.204.74:443tls, https -
216.58.212.238:443android.apis.google.comtls
-
172.217.169.14:443tls, https
-
142.250.187.232:443ssl.google-analytics.comtls
-
142.250.187.238:443
-
142.250.200.2:443
-
172.217.16.228:443tls, https
-
172.217.16.228:443www.google.comtls
-
224.0.0.251:5353 -
1.1.1.1:53android.apis.google.comdns
DNS Request
android.apis.google.com
DNS Response
216.58.212.238
-
1.1.1.1:53ssl.google-analytics.comdns
DNS Request
ssl.google-analytics.com
DNS Response
142.250.187.232