Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    179s
  • max time network
    185s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    05/06/2024, 01:57

General

  • Target

    96f1bf8b954af271ee2f83952a310d0b_JaffaCakes118.apk

  • Size

    30.7MB

  • MD5

    96f1bf8b954af271ee2f83952a310d0b

  • SHA1

    07fdd45c61c9707947599ba47d025d8d2a64e292

  • SHA256

    3441938ef791c9881ffd01f535333c18460a49dba15d9e234c28c112a7ac766d

  • SHA512

    aca22128a764f423289a19a06c69825da185e7cd15666dce067522d73832d34e79cd39078a559ec3a517971c6be875a4cf6b22e97482114ca3730d0d3c493982

  • SSDEEP

    786432:GJ1QwSc+079fmNNf73Ns7VB707Lhks94hym:GkwDbeT7W7X70C9ym

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.gamespire.photonstrikemod
    1⤵
      PID:5052
    • com.gamespire.photonstrikemod:pushservice
      1⤵
      • Acquires the wake lock
      • Queries information about active data network
      • Registers a broadcast receiver at runtime (usually for listening for system events)
      PID:5090

    Network

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.gamespire.photonstrikemod/databases/pushsdk.db

      Filesize

      44KB

      MD5

      26e5169d22f18b2955e453d1e93912c3

      SHA1

      54d6c9676e66f25168c607c0134181917f4dc6b5

      SHA256

      70f6736c01d67b3855690c4c9f825c3024075b55436d36d2caf776e96339d0ac

      SHA512

      c001f1377fb0717291321bc84c10c83006c8af0b61003c3f08d57bc723997d677ae2ead8fa432a6df5f9d6c00f01c932e232141ce5a234eed47dc2b86d24a75d

    • /data/data/com.gamespire.photonstrikemod/databases/pushsdk.db-journal

      Filesize

      512B

      MD5

      be17842811481dd70597d1dc053735ba

      SHA1

      bb0a00579370f934291ec4e43758d6c565ba1960

      SHA256

      7499dadd1afd56287d2410bd669cbe85455f08a9be2afb38f70628a90c6be85e

      SHA512

      ef02798d03cfb026cd1cf3aa839cc6fe5d3bfef0550c260e15d7dd2bdfb24fe937ba4ae909c8e7122209c19d034c0bc5a09b8421e7a37780b9f583b310dd98e1

    • /data/data/com.gamespire.photonstrikemod/databases/pushsdk.db-journal

      Filesize

      8KB

      MD5

      a7c61b5993e418bf463ec9f1abe1da91

      SHA1

      24ff8b1c542c256d650193f6e628e95ed3a615e3

      SHA256

      da7d0bb2928f72385646f4c7275485f77d38091a9f251be6626f74a24f3bff83

      SHA512

      c1db0e3c6427b915ff2287cd5a1e0e318b483f39e4a049f8cc2fb0e9ffacdb58137bf03d9e63d05b20b4380e7fd223142bb6616aede31f5c04ea02aa6222ce6f

    • /data/data/com.gamespire.photonstrikemod/databases/pushsdk.db-journal

      Filesize

      8KB

      MD5

      f60dc88b645fadfde55370be1a222cb7

      SHA1

      9f648262d140324e5a9457e75b2db22463596b6c

      SHA256

      fff5a587151a52f32fadae1c5112fd6cff5dbae8322a92d24dcfdf03790f2712

      SHA512

      c822a01ad7cc216b813ca0f76701e8e245e23964fec9274d0e24b78fdcb4f9bce6c516569ef36257b59fafb0a9fe763a1d0e4c84dcc12ec516de2a392401cc88

    • /data/data/com.gamespire.photonstrikemod/databases/pushsdk.db-journal

      Filesize

      4KB

      MD5

      e4021a822403211b51a3842eb596d081

      SHA1

      083250cc449837cc7bb732b5e56bfddbd1930aa4

      SHA256

      dc41fc30a3898ea804a2ed4c6f63e71909aca918f51059123dc571ea77be2e97

      SHA512

      c90a28e6e949ea072153390318bd4eb149bca12a9e806a56e405069bba04785b3a98946d851b7ecf4b35dcd4e64cc6747d9b52944025b160fad57a5653ff1669

    • /data/data/com.gamespire.photonstrikemod/databases/pushsdk.db-journal

      Filesize

      8KB

      MD5

      7ce234bdb5b4d1a86792a58cad140982

      SHA1

      1fdfa03041038c53b9966b193525503e4a4011b9

      SHA256

      dbaf09caebb7cbd0a79a18603efd3ddd6cfd466504ad1cbbba25985e2aefe1e1

      SHA512

      4d17259a2fdea1a6e88674f31c8ee93788ea49488ff0b3be406f7c959a1ea5a858c1de379e998b4c56acb5807a36d6e056dc908748960c618d4722418f85eaa3

    • /data/data/com.gamespire.photonstrikemod/databases/pushsdk.db-journal

      Filesize

      8KB

      MD5

      f9443fd762b315b11c3f1d104a27301b

      SHA1

      0f6b9eeb0787d38367eceee06f1b24dd557fd8d8

      SHA256

      b180c8ef9a542b9cacc009fee31e0a3b676cb602b5d6afa52e12838407443094

      SHA512

      2609349fe374a08706814ac6e55bd74763e097e65782ee4f60f9ee0ca7b2e16a68063626ecf1b22cb81128c3c7780a08854d191320df66dc8809c5b61a09f878