Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
165s -
max time network
160s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
27/05/2024, 22:08
Static task
static1
Behavioral task
behavioral1
Sample
7ab47a8138f0d59a6088e165165c6087_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
7ab47a8138f0d59a6088e165165c6087_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
7ab47a8138f0d59a6088e165165c6087_JaffaCakes118.apk
-
Size
11.0MB
-
MD5
7ab47a8138f0d59a6088e165165c6087
-
SHA1
1551a18945b49d48ce610ee244622a823b08675f
-
SHA256
4cacf28cfe177667521015cd6c1eabee62922efc78a77df509df491691f5cf4f
-
SHA512
b01b5c6861f187b0dcc7f2a2d5f2d5699d1927b4d70d819e4c8e0ba74d92a3e947d3f484afc05bed3f4926ab2b27e5acb8f32203d30294a0b14ebdbdf75ca2c7
-
SSDEEP
196608:l5LuKjlAl1kyEHWVu0hA8hRZEF9lr4csJNyyBlcHR8dpGbhdIuGADl8PEtLx4:WKjlGSyc0Ir4XN3cHR8fGbhdIq2EtLx4
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.uhspace.feiwa:remote -
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.uhspace.feiwa Framework service call android.app.IActivityManager.getRunningAppProcesses com.uhspace.feiwa:remote -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.uhspace.feiwa:remote -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.uhspace.feiwa Framework service call android.app.IActivityManager.registerReceiver com.uhspace.feiwa:remote -
Checks if the internet connection is available 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.uhspace.feiwa Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.uhspace.feiwa:remote -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.uhspace.feiwa
Processes
-
com.uhspace.feiwa1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5127
-
com.uhspace.feiwa:remote1⤵
- Requests cell location
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5218
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40B
MD5a689895f98eeba3ad54c857fb7d3d491
SHA17b4bbe717287a91a5a6ab19a0bfd0a314fcca556
SHA256898acf5a8ab518b0b83c6df22462def9085de719e0f25dbe6097acf4fd140206
SHA5126e3594e8dd35521f5b8aea180ec54b6a09365a5f418241a0eacbd131cb41883b3a60f23fe0cbaa216ade13b29e73a35283ded1c5c4330c07e85068af0e17b803
-
Filesize
32KB
MD59c4fe3ac5aef41c782e3529bf023487c
SHA1a72edb52c19da5da2c6a1fb03d30ca9f0e881189
SHA256fc1f4ba7b98bdecaf55bf0c7ce6ae77fd50dbba28fb49cc4a2fb856de0fcda31
SHA512c59e3a119f4df7c5bdbc54b0831d1ca7ede0f7df69c7627cc0a035f416d776aa2926b7f5654e5fdada012a241e769b2537704dd7fb5ba6c254314e5de12e35ea
-
Filesize
20KB
MD5ada4bb502d28f75c6c5627b82f6b836a
SHA103f6827885f29b782095f475dde67b2a391b4e57
SHA2569a53dd56f32b4abce786e8af6397d9a5b9319f204f03669e4c68016b0ac55f5f
SHA51278daa788a5b8f9111692026f8f4ee57ee3efee61130ec5ebf8a3543090a0a661ef45159f11b9207cac1f04ca0d70f66e9d4ce941ab3facdbfc7afd27314fb477
-
Filesize
8KB
MD5045a9283979bf6fccf159996f55ee148
SHA1c8797520d300fe425f91ec63d1856d56c3cce219
SHA25612d2cbcb0b4fcafd4f659bbac846053b97e7998e83cf3cfdb226d1af5aa33017
SHA51216cb9f419ac39940b1825947b240de3ab0b5689608905405e8aa35b0d64ca7404374c31d018fe727b8c6be5104a3fb8246418a9462fc6337ddf2abccca422c91
-
Filesize
8KB
MD5e4e604a2d4dfd463a01b2928310a94ec
SHA1810f5b664978cc961194bda75c64491ca973722c
SHA2566220865d76b65af40581ba3d54cc3519883ef622ac7399a7e9ab4e7bf5120436
SHA51251840c6a6bf907b0a3a6fd09e8d3a79684a2c4de7d4463fd3ebc866238ad1bf4a5374d6d3fe92da350357e867577039949b40d83ef10a6a8d41ccdedffbc726e
-
Filesize
113B
MD548612f60b91f274a61e73a7cc7b64363
SHA1653868d1d9481f567f3fc9f2577aa9e47565ad2a
SHA256cf09c5cd29e0d5fc288067c33d75e415edd0439a650c9f7178b5365f21c6064d
SHA512b76a8be564ea70f9cc60211838a15bea57ac08c3f134ca52fd2fb46f8b9904cb146f8b98d8e4e87bbe86efbede14177218da4db468bbd6974ad5ab49f69abdea
-
Filesize
905B
MD581002e32f1adba5db37d38c897302705
SHA1524607d7e4f47fa564face1c4b20ce367306a711
SHA25664eb06afca6bfdbd57f3624cb92a12fadfa2bee0f027001ba629839a04af31c9
SHA51276995a2e863951d43508cc2f56becdda3654963fe31b346f29d9030e32d8cf5dd29baee91fe9e80383de206f576c9e833b1c5e15ffb33a36d2340622ba7a35d2
-
Filesize
8KB
MD58bb5d3b16ad92185121ee4e0bca8546c
SHA1f5dedf18dc92c1618ce7a27f0f1884e60b1e5e06
SHA256c409b764562eab8a1f1aec4a956d46db7215cdf2e451555500d853351932b107
SHA5127f58ab63989a868f5d0b31f811fdf7e2b4d1d1d2f318bb9d7f95474e9577caea2fbc16c0feed5ebd33a94d6273e95314fd79f343f56fd9806b7780d6d46cdc0b
-
Filesize
85B
MD5861849237568cbb729a961d146ce60e1
SHA1e0e11c1b97149e19eb62a3e4ea64720d338a1feb
SHA2561875db41cebd2e60d0635a7e717cf56ff35ce6febae1e5522e5aa21269432270
SHA51233530effc6ceccd49723861d4c5404955c98bd1b500c977ad50875b993d948a3697f00324881ed7a60c5a9527416a6fe48072bfd9d3f2b74e3b6f5924878b21f
-
Filesize
82B
MD5656521c160e4a03e17c5bee84a204be8
SHA159135441715f591015df7e74f16e1bf93ab85a52
SHA25649b2249ea571269b5f0b306b46787892599233511acf400100912cd53edb76f5
SHA512fd129d2c64e170a58ee3f51310ba083d92243ed354e5b0d803e79564d36ee317d08a8909e556fecb926618c51247af51a05475712cbe118671db4a1805457d87
-
Filesize
8KB
MD56003d25b810ecc8bf5d5c29ee70f7412
SHA1fdc78e0aa272c065f7d6ba0987dd74930cb96e41
SHA256997589aef5694aee2ff51662dd3a8ad5c33c5816e7c1b3138d4d2f90f40791e4
SHA512cf33c4449d01e5fc0c5f7b055ab9da2feb6dc0a741a6971e7708ad53be0e1eec462db65b210a58cd9208a73e1e7e3780c848c92afae896a8afc3bce2ce64d92b
-
Filesize
24B
MD5a936690571e9104e1922dda4a0ba5bd1
SHA165f49c57edde2f96be2a1dbdfc3f7351f1e66554
SHA256f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412
SHA5123be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394
-
Filesize
24B
MD51681ffc6e046c7af98c9e6c232a3fe0a
SHA1d3399b7262fb56cb9ed053d68db9291c410839c4
SHA2569d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
SHA51211bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5