Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
61s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240603-en -
resource tags
-
submitted
10/06/2024, 20:47
General
-
Target
9be47542a0affb2991d186711f401424_JaffaCakes118.apk
-
Size
31.5MB
-
MD5
9be47542a0affb2991d186711f401424
-
SHA1
d894cdb6663f9f71b2f20de019a546b34c4fcdf7
-
SHA256
39d46b4885c04f36132293bc11fa97134c41abd1201e58cd07269eed4305d5a7
-
SHA512
0973c1fb1e1fa955ec860a8aa86ac680b0e27288b0687b5b8df55326e7ce9c3b2db8aa877de823e40f21f88f5c6ff6d062132eb794c11c1189cff16532266cd7
-
SSDEEP
786432:I/c0ukRbA+7lnbeSQuL6sWDs87JBGD6VdkGnaPOQdp6bWg:I/57bAKK4L6LGD6vZnnQdp5g
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 6 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.NeronOnFire.SpaceStickMan.gtx1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.NeronOnFire.SpaceStickMan.gtx/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.NeronOnFire.SpaceStickMan.gtx/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.NeronOnFire.SpaceStickMan.gtx/files/ebody/res/37669/vva.jar --output-vdex-fd=63 --oat-fd=61 --oat-location=/data/user/0/com.NeronOnFire.SpaceStickMan.gtx/files/ebody/res/37669/oat/x86/vva.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
-
cat /sys/class/net/wlan0/address2⤵
-
-
sh -c ps2⤵
-
-
ps2⤵
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.4MB
MD554ccc6e24e2bc5ed3495b63633be5750
SHA1ce6af30bcfb659810db335efc29a9fcfda19a8fd
SHA25688204d85aa2d62c92a74d450c6d1deff6a030738a4fd739a8c44a9f83a82bdce
SHA512f88900668f8421197c9d08befcd771f2dbb0e48af1d7e55e9541c965fe783780af7dba6f7df22b07572bf48ab5ea49f5147f21a5c9a648d9b6ff13ab546b8bfd
-
Filesize
482KB
MD53109df50d76c9f65eb6dee8df94d8ec8
SHA17e54861a416440c377338aaf1f585f377c406095
SHA25672015fef9dcf64a5affd4681a85b8a5f43da02f0f9c08cb6e4c39f3ecac4665e
SHA512e5af25c92421ff91b37abddbc665b28f9e3b9d502643e5d81ccf7cf7403dd794ccd4daaa6fc291a45870a954c0807cc2ad2f198998b18b4132e917775f8a92db
-
Filesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
Filesize
2.6MB
MD5f89793bb73a1dfca31a10ae21357bed8
SHA147a36c05e0fc31a2803da81ba1297267806101ef
SHA25684c62eabb4d46fe7773e72fc36a58581ff48161f7f9665af96eac568cb251dda
SHA512d500017a3da344ddc56398a7bd908a824148f3270502ba004897a57997fe35faa97443e422ef006c98700069886865131a205c3c4ba98e618c6a613ad58431cd
-
Filesize
36KB
MD55d7ea1a23af19b4340cc8d90f28297d5
SHA14cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA51233071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
-
Filesize
512B
MD5f0733e1a4d1a29adb3d63165dc2cfe68
SHA1bde6077f6f91b40989b7520150380f7b71e28d54
SHA256ff184bd49643f81fc709a3e5c3baf54d222ee5501558fcc2c8c354c97f38eff1
SHA512d3fd8805192dc21362a3eb9bc18c6e1a54fb77946f80e9610a025f7ceb8dfe18f3d2aab9fec880ac0bc4356bafd55f07c9fa0922e55f4a606847bd5d01c36600
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
48KB
MD5f985befe09c957ff4f93ee5e9b79b67a
SHA1a7d69db7f9ead39bc5582020af29d40d06cf5c2e
SHA256e97a21decc6145a328c43bbda5d0b47b92248baa0ba910a4e8f070a6dee2e5d5
SHA512700413fa7240851d94b2d6b4227465a186b50fc08b976eea3be491dcfa816dd5c555c798dc8e029813657ab8a08c858e68ebc3da73f3c2d4be0011c61a2d3ad6
-
Filesize
40B
MD5fe1985ab1e29d6ddfc5bc4a6979b9425
SHA15c76551104c36aa1a8168abcc2c2fdbe9c776d65
SHA256be35cba8d67d03b2e204510ef4c1edd3ca2b7733a884272fc98c5849fc4fc762
SHA512c9193e89cdb39e587b166024e9258aa27c0189c0f89e49c8d4627abdf99d4ccf1d666cbabc7878297ad978ab3a5ddb3a4acb4eb3472b3f1b0908b37384bb2ec4
-
Filesize
40B
MD55950e37a415ccd3325926cfe40b054a1
SHA152c7279ed924e27d5ef30ccbde30c2988c4eaa3f
SHA2566cb1e31a5dc1cce91e6435b5be48382fe8c6dcd20b81df7d43cf4d37093ebd17
SHA51206f4dea0493b6b586760d997b22c4796f4805ef0b4a675abe418cf55349167e31ee043d81f592e62f25cad07106b2e84442cc766aded3e3d2d9955234449a8d4
-
Filesize
340B
MD5555cb933affd60000d6757d193fd6477
SHA1c7defdfbb607786a6f18bc3917736b9233a11e8d
SHA2567fdb5970f7b6aaa92ad2964585b4f213dcbe775ec1611dd539bd1bc554a6740a
SHA5122e79fec038f528028d1bc769b68dd4dfec64a9a56b563e67437f3490ae1f0322a6aade7c3cf8703fc00b90cc464c44423ff09ec66ec84ffbf2c6301a4e4c43a3
-
Filesize
340B
MD5836cd5fa3a5bf059520b17e0d8186eba
SHA19f5254761013c240ac4b940f2d8722bc2b5f0e40
SHA256e7bcbac39a8c8ad4373f6123310894b10d1af475a0fcec131f5d1d7635001551
SHA512608095aa5c8cdc01b0c4adf11710162999af4cce318279abf9daa224f5de0d8af4fd38b930014be4b89b4bff6f712a3e3feb558b354f2e2afc5105b6cb12a3a6
-
Filesize
40B
MD5f7f30a681126603524249122eb2af1bc
SHA168b8466916a3dd4bd5db7b3b935dc48cf0e57c77
SHA25627f6535d54175d30c4f9c3f4dbf217291c4df1d5fef0d45b84b1f17d36976fb3
SHA512c7eaccc138e857d90331725d29e63eaa57f7c2ca9a7a9ecb0c1652bbfd2e339fa1674825d136a04766d36f9ac300c317ff1e4da3c62983d07548446ac8c03b4b
-
Filesize
73B
MD53d0ca6cd52635b01d85a42e4881753cc
SHA1d25fa7d44a755bc8a436bd9ec54ad12391cc9680
SHA256985975593e75fa5c2e5696a3a99afc23533c923b539eb085beec860534ab6958
SHA512dcd18a48751325ba864dc18d3392513f5e5ddb17f3d6d512feec48f3d23948ca15a5cb8fd88af27efa7546c84c63edd1e371cb6aa58b92024e220523e8f6d4b8
-
Filesize
314B
MD5c99da8d339616d2f95f95b2649ae0261
SHA1837dbbb748768c9e5d835fe4f1f6cb8e27898ff2
SHA25606cd1967408515aa9442d6f2b1f4b5ddc7988becea6ca735b1907deeb27054c8
SHA512d7fdd1981dce63a3676803827b7c12412310eb5573a967723cd497ceb019c3699eadf38183902c068e638170152c4165f62574bdda2f6878fc06d6bf75cb9bfe
-
Filesize
127B
MD5527dff93367b6c3e416b7b6220cadb37
SHA164bc984f2ee5960ac6de7a76ccb4c004fd59c041
SHA256c91b27a203ea678d186c4a3972a608ce9b9eee9853c9f0f2ef2b3dbb02ec7a18
SHA5125dc01fa09c49a1cd9e08b3b8e025b2f5928accc829246a107317cddb5c32ab7d41c798f9cfa5ab0fa6bcc6c7dfa470c57864de92404f1fd743284895936883f0
-
Filesize
32B
MD5448e391c59eef34ee1defbe4dee4c41f
SHA1df1f890987371d7d8e6963c68b787856e42bc146
SHA25655612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549
SHA512ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7
-
Filesize
27B
MD543ecbc93b14872e3959e46a0f2c0442b
SHA118b3d9896c1c541e8d8c7798f889007598213553
SHA25606042f7dc72797d343da905157975d2cf5832353e07dba774b40eddebd9b974e
SHA51206cf2706c738336138ab1ae218405b498a1314e2ffbbe9664b7507c66c3413440d3ecc1a86b1b913a5f06f201597057c460ef4ce8a40ee2d578834dcb94e2fda
-
Filesize
8B
MD5b98b6dc7792e9b5b43941eaf0557b73d
SHA1cbf7fa3f609876f987a1d6486d5efb7933c9759f
SHA256f5e55db172d979ce167caa4765f8f7e36f60a28e022ca5f72371f8ecf315ad81
SHA512e6ac41227bbe4ad6e8767b6fdf8894624039e3ef34af75e3bedb057c9a2c5e4f9426be45aa5058c99d37178763475589905a07cab3278d374937d368e3b04ade
-
Filesize
2.6MB
MD5c0a1b0ad00259da1005edd05151635ba
SHA19679497cb82b4b4a1b2d594029d66b1f1f0de905
SHA2566ec9e8d0b677ea2e6d1282250425af4e57cb7586b26206f9983d680e64aaddf9
SHA512907226b3052ccbf24a7eea23c4aa8f0abd30bb1997d2590821e2561c81beaf1530fefe189c3083884d4463fcc1094a80e65a7c96926e4cda7df9c0d1414cd937
-
Filesize
342KB
MD5d66b3092a0364edd2d053b28db5450dc
SHA1b94e8bb0ad25a3dff77e9960cf9442f1141d5d4c
SHA2562b2de2a36792222e246096fbc72f3ed89167f4ce7a76c3e46393470ba3d6eff0
SHA512b6e3f2b57797b0621cbb3b664ef9d6557240ece3c866ebac73f0bdc65292e99c14f93cd7cb4f21639d7f53030b81decc3536c8a1c1b534005004f8532f5ebd0b
-
Filesize
32B
MD53c650d3e406dca102bde74538010bf06
SHA112e662b97cfbe786dfe5f80485bc5adadc9aae58
SHA2563c4a4dad0f0a5373ebcef93dcf877eb55a79dbfe902235a52718b6979bef2a78
SHA512c6c621e126be190a479a03ffa0fad9358114e3af5474ac708bd9637ce8b1070f10d97fa44558dc6517ef5f421b92920e7dd7aaba8240514ce76ff3b5c0ff5348
-
Filesize
5B
MD5f493971809a5352fbc493e2b7e7f7110
SHA10ad8c106dd4b30f40bf4fec3e8720ec860932bd6
SHA2569085aa498408b4a70b82c08b189ff3969bce460065cfbb21ecd8d6777020e266
SHA5121fb25e95900472fe3523d31010f4b18b32741725f30f3a1b7f23f60c992c113657836645e18c5df5439de92058fda48b6ed72268c34c64453199cda261d0e00e
-
Filesize
1.0MB
MD56cf733de6bf35000bfb604214fa3a2e6
SHA1138c35beb7ee9ef139fae2413a13188ab54cbcaa
SHA25682bc8e6cdd63c5a2791a10951281c6e34f5f662f894b6b3baa9d5c4fd2032575
SHA51288a57beed0a300dbc1b29f9a3cdc743e783b13d37e11b68bc350b6853f8a8fab76c364c74feebdd131b9efec442984deaef9f4b99bb31008a75788a162f45fe5
-
Filesize
1.0MB
MD5d170908004c128c03a3f5bd9b2febdb2
SHA1123a176f4370b54c67f7475e1fc66754696e4398
SHA25604ae0c6944c16e958fa9b29b8561efe1fd9c06625f18bcdf37757b9c56799bc6
SHA5123a940951695e3cbcff1a1d102ed2739d05415c02179fd7f6d2a316ea3f5e0b09e143016e4a6f98f48354d0caf7c98cf6c1c8f37299dc7b432cc70e0e632ac673
-
Filesize
48B
MD51d8d16c4e3b19ebf18988530d9b9a757
SHA1bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA5124562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82
-
Filesize
32B
MD50b1a42a739a768e74844e5c24b55acc4
SHA1a3ee9367b47c0f8da49e4ceee8ba183ee9e833f7
SHA256d58e356416c363f1ed36ae36bde8ed77fbee269c119a2fb3f2d3fc2a4879031f
SHA5128dbb52825d13b3604380b4851f80743e2bc5b9c2d47be7312fcdf05299a47b159b6d56f6f2749f86246267cb697897308f9cf50e059dae3d52f998b6687d0ff4
-
Filesize
63B
MD5c0e6a38259f4b000ec7db70b00d747f6
SHA15195ac0982e12f8054015bfcee78286a593f849f
SHA256804524279599fb49de3f38b251a0571872e6cf1fc2af2e1f29e31bfc883d60aa
SHA51288dcf3eff11a2581f2bbf0d292cb833f57df8bf9e4ab05c5080d6740c264dc1b3da4ca2e7cf35215acae3c6280d72888dd22bdff5da7dd771e968de3abf3b175
-
Filesize
1B
MD5c81e728d9d4c2f636f067f89cc14862c
SHA1da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA256d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
SHA51240b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
-
Filesize
336B
MD54b822e6683ff40ab5bf64e16e6f4308e
SHA1233717c3119fa078e7e199938050420a1f792951
SHA256d3a3dbd7d8194ac71e8c0a79f8833f40c3592e14b8e38b163f4eb7368f0d9e5f
SHA51292bab8b4e4307a8ca627dd9adccaed9341103f81c7c4e6d99635a8f7c484ea599c27eb41de44a912fc6fba46742e3a0af3951895ad382ac11216504dc4d265e1
-
Filesize
103B
MD5b28cf09b6b8c3b25435f8702193e54f2
SHA1dabbde421740da41b741f8e48956a945e7291b20
SHA256e6ced46120a7901dac214f217167e8f331466a5f7403435af7b7efec12ce820c
SHA5126d86372cad7806af6e216c9eca4496f0dc93add556f5d4009c72078b571465fda6c36d942c9df99c30e3c47b29f660b882e9c38bd831fc083037d4f23a423b22
-
Filesize
1001B
MD513e3d0be72d6c4867102f4058faca7fd
SHA188efa051df4d04b5b918101d5a989d4602dad8a1
SHA256a3f259a039d7bda8e4323426791f9e9a172297142d0343adda4dbc0811b65906
SHA512d689788441900d9270fa0fa67f5778203c5cd0490d08c2523c900af72c4493697d1b33d3dbee5519343526adfca6189eeb43af6a687370116bc66d725589aeb4
-
Filesize
1KB
MD5ef2de8248f3e87374ad70a9d2c81c6f7
SHA1772e3363f117a1982d5bfbf903b739111eabed48
SHA256cd79786ad050142c414d18a832387ed628e545d33a31eba70572c49c29b99d59
SHA512a7f59e81e3bc949be9d9d5fe988dce16ebad485a8f5d0cd0b4f1e7f9ac3a2d73271cc66fc6f9131df541bac83f2b4c6d53368ba3d4672ee80f702d9ddd0f6d42
-
Filesize
293B
MD58673a8ac0b06a9d056d08d62f857ba4b
SHA1a351bea1932270bafbe468584058fef20dcfc31e
SHA25683b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f
-
Filesize
150B
MD59f8033f84593c7c60596536c9dfe5ad9
SHA1d2e13382cb3aeebb523d54506257acc4a07bcf34
SHA2560f8f00c1d2fa495549fce9ec6ca306b44f7db23d5df9c65a27b2eb0597e7f8c6
SHA5123fc27d4a9701767cc457ac0de3a854b7961f3d2f6eb6cae097ceed6618f9bbb2934a43d48905ad2193a2fb482ebae4237dcb96ad64422cf5d884f20e44db008f