Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    152s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    01/06/2024, 07:42

General

  • Target

    89c76c2b79fd580ef267f0d234f50946_JaffaCakes118.apk

  • Size

    10.3MB

  • MD5

    89c76c2b79fd580ef267f0d234f50946

  • SHA1

    7eb39b77d3ee5c0e1fffdecf5d55a634d5e2e1e5

  • SHA256

    bfc09cd5882ac31c2ea7a2de8bcc50fb5830a173020e1a896916f54de6046842

  • SHA512

    769deefbf32596da27da78e0d2a2f2ee3dd09a30a3d2539d68bec811ec257fe9caf317824f2920f88b02ff43f952cd9a9f577a72cfee570c1479c30b1637886d

  • SSDEEP

    196608:+7Rb7Z7WbGN1SVVYvIJqEZqu5fbeFRnjE1cpEdNkJknUIVpg39JfWLkYG5H:I97Z79mXEol5fKzjE+pEdaJQFExf5H

Score
7/10

Malware Config

Signatures

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.xiaoao.corpse2014.jiahe
    1⤵
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4306

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xiaoao.corpse2014.jiahe/files/__local_stat_cache.json

    Filesize

    90B

    MD5

    683a4051b7480ebdb9a6bf4ac75d6843

    SHA1

    a6436786f9679363a7705bd867151dfff9c888df

    SHA256

    fc06455f4ec8c24466cf5f20608f5068d2b325a8b3aeb5522d83b82b971acd71

    SHA512

    d5f0245546d5f1007d5365d5062a1d633261b8818d0244a2035adc4fd69bc2d2129b6f4672c957a50d1428696a263d50d8e7f55e4e1a6d3565fce00093684896

  • /data/data/com.xiaoao.corpse2014.jiahe/files/__local_stat_cache.json

    Filesize

    25B

    MD5

    2d805b13f2f28dc3ca9bbcc000f49bb5

    SHA1

    9eac165b4d81258fd3967cde5cc53b53b1dabcb1

    SHA256

    c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

    SHA512

    5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

  • /data/data/com.xiaoao.corpse2014.jiahe/files/jiangshiweqing.txt

    Filesize

    3KB

    MD5

    f32fc67fd5ae09dd1b4c3a8e8c4239f9

    SHA1

    45acf88393cef87d40e06772aedfa6fc03a9cf26

    SHA256

    ac745fc1324c29f46a3c83027feac9bf3eb34457a7b98e92a672ff1cd97579e7

    SHA512

    9aac75e8f6200c81292f63d30934b5c70817e09285b98eaef5d5fb03297eda592b32ba04d539bddf3046330283b4921a66f3b7d3b044afed4e4df89974eff842

  • /data/data/com.xiaoao.corpse2014.jiahe/files/jiangshiweqing.txt

    Filesize

    3KB

    MD5

    699ca167a192b58d787d080b4b97e45e

    SHA1

    cf39fab59b7c95f6745e4470d9361ef419221d5a

    SHA256

    1e1ba2682a86c7d5b2cd9ef28d8175bfc5c0d52ca80f82c1a697c0cef1b813dc

    SHA512

    0ec5f5df989ab5713bd992bd539124f3026388f5f310185057490af761ac11c79eea7e61c37b9b232d8bc32047b94250d87f6f96ea35c1dd83012c8a812ab4b5

  • /data/data/com.xiaoao.corpse2014.jiahe/files/jsweiq.dat

    Filesize

    48B

    MD5

    b203621a65475445e6fcdca717c667b5

    SHA1

    c17fd92682ca5b304ac71074b558dda9e8eb4d66

    SHA256

    17b0761f87b081d5cf10757ccc89f12be355c70e2e29df288b65b30710dcbcd1

    SHA512

    ed68f5f49945dcd0d81dfebe2f2fd1fcfe016807d5c64ee0377d046efeb0a7fd9b4b9589b3df8a14194d51dcffbd89c8aaa072cea2ad4e7976bdf53528ea90cc

  • /storage/emulated/0/baidu/.cuid

    Filesize

    89B

    MD5

    ef165b4d016544ea8b5379009f2d612f

    SHA1

    095fa5ca1bd132ada9f9f9998e0455ce836b7779

    SHA256

    1d8f5bbb068254cb0b8afac7433ba4b305f8fabbaa41a2f5ca2f87343953bea5

    SHA512

    b6d2a246ea728eb034b8455dfaf991bac869dcac4fe89799d2651e66a1f9bcf8727decbf7406984417a7c9d9cc272275203867185e13b980f0ac74e866b36c46