Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    6s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    05/06/2024, 15:16

General

  • Target

    98795b321c3f256b95d5248bbe643f7f_JaffaCakes118.apk

  • Size

    20.3MB

  • MD5

    98795b321c3f256b95d5248bbe643f7f

  • SHA1

    ad3fe33f4236e80ce7ea2d4b9e52f826beb82e2a

  • SHA256

    59c77cbbf2e68b2338b3e88eae8cf1d86bc079b17c0fa69471d20b45a227529f

  • SHA512

    06360020c31497c858a2c3d633d6f3970aa8a52cff339ee758e6badee8aa4cdec956e2a8cd4b634c8479feee3e2e744984d110f9a3ea67005efac2f91be66317

  • SSDEEP

    393216:JGwGd0ysodpST3ntT7ETAvx4k8PCTLNPa9KFZLjogFYtkfoevq:JV4bpUntUkvxi6TLNPa9CB8gFYPb

Score
7/10

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.yunfei.qianjiangcgt
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4977

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yunfei.qianjiangcgt/files/libcuid.so

    Filesize

    109B

    MD5

    ef7939ef31154876dcd774ada8844555

    SHA1

    5eb7e9585394521a851f2f0415193d4c67a6b88e

    SHA256

    3dde1f932bd93f0f82d4ddaf9af8cc96564d4ffc00403826372fef1312de251a

    SHA512

    7bb6c0f841b45bc9e6fa5f2a02809b22fe2347e91845462e5be207875aeec808b02593cdfa02182f6081b67cb257c3221b0643dac02c16be0c71d9c340878804