Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

6

98795b321c...18.apk

android-9-x86

7

98795b321c...18.apk

android-10-x64

7

Analysis

  • max time kernel
    6s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    05/06/2024, 15:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    98795b321c3f256b95d5248bbe643f7f_JaffaCakes118.apk

  • Size

    20.3MB

  • MD5

    98795b321c3f256b95d5248bbe643f7f

  • SHA1

    ad3fe33f4236e80ce7ea2d4b9e52f826beb82e2a

  • SHA256

    59c77cbbf2e68b2338b3e88eae8cf1d86bc079b17c0fa69471d20b45a227529f

  • SHA512

    06360020c31497c858a2c3d633d6f3970aa8a52cff339ee758e6badee8aa4cdec956e2a8cd4b634c8479feee3e2e744984d110f9a3ea67005efac2f91be66317

  • SSDEEP

    393216:JGwGd0ysodpST3ntT7ETAvx4k8PCTLNPa9KFZLjogFYtkfoevq:JV4bpUntUkvxi6TLNPa9CB8gFYPb

Score
7/10
discoveryimpact

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.yunfei.qianjiangcgt
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4279

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yunfei.qianjiangcgt/files/libcuid.so
    Filesize

    129B

    MD5

    02eef34429a49d49842b1f5fc7a4f45d

    SHA1

    4ed44e7e2ed4e58b1ed7d007f44f66c333d4fc8d

    SHA256

    b61eaf967c822d025897d7a83baac0debc8cd1443e6a7f634c396196674b26b8

    SHA512

    430df9486bb841e6c8dc230d3b25a1d25be00c8e9039287f474662f6265a539e51b88e56f9af76d3b3cad78c403469d771241d36414651f40adca4df3e8635ff

    Download Submit

  • /storage/emulated/0/backups/.SystemConfig/.cuid
    Filesize

    89B

    MD5

    2f4e4cacced16d686f1626f124aa5ead

    SHA1

    11cf8b5e53c4cb906caf3d083c09fdc8fddd9bfe

    SHA256

    63fe278d0b6d41d471b2c7a83f6ab5c43563a052a565528dbf6818acf2401ab7

    SHA512

    4b7da3f95ec1fe44fe5b16a8f71ce7b19472b71c0307c4500023cf9b20f3287199e2f8b0d66df7589798278a3af6a8ef4527372d09e31b83c61485bd9ea9aee9

    Download Submit