Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
70s -
max time network
181s -
platform
android_x64 -
resource
android-x64-arm64-20240611.1-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system -
submitted
12/06/2024, 19:12
Static task
static1
Behavioral task
behavioral1
Sample
a1ebd4a752be1ee7a6d7df7bfbba6566_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a1ebd4a752be1ee7a6d7df7bfbba6566_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
a1ebd4a752be1ee7a6d7df7bfbba6566_JaffaCakes118.apk
-
Size
8.3MB
-
MD5
a1ebd4a752be1ee7a6d7df7bfbba6566
-
SHA1
f09fe297f7e23ff9bafc7028b15aa68493cf86b0
-
SHA256
d714c891cb465f70165fd7a0fbbc347f5798ddf3e6b53e03fd718a0a8bb4e76b
-
SHA512
b0b3009a726fef30509a17c36c901b9aef992d7656c245e37731b4396b5fc2554fe7dca2fd37a662cc82e0fbb802cd42764b88b2170ae0290db58885e5106e56
-
SSDEEP
196608:zxUinVN1YtZz68A8k3w4mXk4PEQu+pHyxlpPSSy5yukRZkuIXaCrU8bosor:VTnx8zkA4X+jtnyTRZaqK3bosor
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.chinavvv.hnwb -
Checks the presence of a debugger
-
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.chinavvv.hnwb -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.chinavvv.hnwb