Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    175s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    02/06/2024, 11:09

General

  • Target

    8dde17eb4b1c39c2bce8f3687d3fabdd_JaffaCakes118.apk

  • Size

    659KB

  • MD5

    8dde17eb4b1c39c2bce8f3687d3fabdd

  • SHA1

    37def0cbe3c3a999306cc38c045e4d0cf5664d1c

  • SHA256

    e6830886d473969f4460742e1d624952d1cf58217f68885b55d11b7e09f7d468

  • SHA512

    43e890e7c9d82cbc5e819400febda7a2660bc17fcb5577e3ba65d15689df64f13fd1f75e0961698d24fd22fc87ea631a382405f7d7b2eb8dc1d31710cba71276

  • SSDEEP

    12288:Ke/LdbZT3vKh6T91Ikqs+aObID9BuB75I1k6/MAWrEoM0KguBTPArn:KezPvC9ngUgBuBNKF5WrEoM5gn

Score
7/10

Malware Config

Signatures

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Acquires the wake lock 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs

Processes

  • com.gary.rules
    1⤵
    • Acquires the wake lock
    PID:5180
  • com.gary.rules:truth
    1⤵
    • Queries information about the current Wi-Fi connection
    PID:5258

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Documents/7F6021024A65.tmp

    Filesize

    13B

    MD5

    906000dedcfd61d2a871797006cc1d8d

    SHA1

    764ab29fda43086c30990ae3f788807597e84982

    SHA256

    11071eb5d366fbc5a01c7b2b32f1d75e829480b1d0951e943a068bc39b82b281

    SHA512

    33887db0b394a28b2fb009655b5146c49be559671e35a2e05d0db4ca37806978bd3b04a3dda6a5b66e25d77188f7e26bfda3fa7cf2300c4c78fe6c2bc2827ad4