Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

6

a5e2821ca5...18.apk

android-9-x86

8

a5e2821ca5...18.apk

android-11-x64

8

Analysis

  • max time kernel
    11s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13/06/2024, 13:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a5e2821ca5cc83d8f2aec8929e5c3ce8_JaffaCakes118.apk

  • Size

    31.6MB

  • MD5

    a5e2821ca5cc83d8f2aec8929e5c3ce8

  • SHA1

    aae0cc4f85464af795b6ba9ec6140ffe1fb546ef

  • SHA256

    0ad2f0e88641b3c90da8034902b241eec08e8af870c041ab222dd81e321d0ff7

  • SHA512

    27a33c21aebd8a3ce5f35768dac194cfc998609c53f1d65885584382493d3015f801e41754e8d8e3868c07d91f291aac2f3c632748579c89ce66df59e34ea810

  • SSDEEP

    786432:tE8iC80Zf4SnedvzFdjih0Pk+Zka21Wp3MY3j:Hi2f4SGzTiePkw721SM8

Score
8/10
bankercollectiondiscoveryevasionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.ae.olddriver
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4170
    • getprop ro.build.version.emui
      2⤵
        PID:4240

    Network

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.ae.olddriver/.jiagu/classes.dex
      Filesize

      6.2MB

      MD5

      61dda5c9a3a99fa5137a9cefb2c158ea

      SHA1

      e3ff0cde2eca9520bcda4be7032682acc214829a

      SHA256

      15f7090c5077dd31879cb956ca38c1a91d24eed5d366681c25d0a0c71bb91c39

      SHA512

      eac62cc71a65669dd984ade3988efa4c61e809392f55b5e69a1f9acad1f582e4462497ce01061dd153b40e229c2e283b9420221bb878ec9d583ce41ba4c07b7c

      Download Submit

    • /data/data/com.ae.olddriver/.jiagu/classes.dex!classes2.dex
      Filesize

      1.9MB

      MD5

      a1bdf63f26dd0dec6c2115877f7bc515

      SHA1

      0283fb5deb3477ac0f73049012e5407dcdbfb187

      SHA256

      f25d400a7ac8d12c7b2e7ac6c1e9b29aa0b5ac0550f7b471d33fc550bde7477d

      SHA512

      046bbc3c55b97a927c729b6b6581c8cb940f8c6b837512b06e03758192812f75b6cadedab3fd36aee1f8959dbc7977d4141e9c809a5cbde42dcc13fb6e513ece

      Download Submit

    • /data/data/com.ae.olddriver/.jiagu/libjiagu.so
      Filesize

      491KB

      MD5

      940317093cc329d45cf45ea8713b1c1f

      SHA1

      3f9ff8cef8e41d03ea714b8d5f030ad1fcaec0be

      SHA256

      57f0ffa7062aaa03074648a0c9df78ed9d3f78c2f07fb846b11bb1b667e246bc

      SHA512

      3f40076d241bc3a2b83e56d01e826b8cb7d310a67128ac8b1165bdb93dd917c6a7219c1e65dbd8a40432fb38331828c7171e266e8474dfc69db2675e29e2723f

      Download Submit

    • /data/data/com.ae.olddriver/.jiagu/tmp.dex
      Filesize

      284B

      MD5

      f1771b68f5f9b168b79ff59ae2daabe4

      SHA1

      0df6a835559f5c99670214a12700e7d8c28e5a42

      SHA256

      9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

      SHA512

      dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

      Download Submit

    • /data/data/com.ae.olddriver/databases/bytedance_downloader.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      Download Submit

    • /data/data/com.ae.olddriver/databases/bytedance_downloader.db-journal
      Filesize

      512B

      MD5

      4fe3dd16616ee33965d8b5da98b71da5

      SHA1

      55b5bad9e35237e5a3ec896abf94a7e703c6edff

      SHA256

      fd9b08cac60ca0854d8ee5a706f6f68627947f0795b106b01943fbc31f285b32

      SHA512

      4bd47cf8716600808793e524eb198807af6b873ca43cb78f2d83a0bc857ceabc2a84464ef9b5d72921c17957d55b5863b3c11e851b178c1c585275a1686c6256

      Download Submit

    • /data/data/com.ae.olddriver/databases/bytedance_downloader.db-shm
      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

      Download Submit

    • /data/data/com.ae.olddriver/databases/bytedance_downloader.db-wal
      Filesize

      32KB

      MD5

      7ae181405d535f28c886c92dc897bb73

      SHA1

      6ac0488a46a2e005b081c9946d8a66098af1d77e

      SHA256

      74b949f8538b61f8843f970d0bb25d00005c25c5cf6a2d980de390c42b46cf29

      SHA512

      f302f7ede7bc29f766aa760c179184bd8748081fd1a86ae4660ea0a69d11ca48611ee52d872384193c2f661dee51279532a6bebb538f90937a2106ace1c7dffe

      Download Submit

    • /data/data/com.ae.olddriver/databases/ttopensdk.db-journal
      Filesize

      512B

      MD5

      d90802ded9c2367821e09ae466dd8f2d

      SHA1

      f40263392098c0a8b87baee3212def02eb0f3b10

      SHA256

      c7e74153ea56efc8c11c74341804f00cd77f1d2b3f220d1a3118fa580994d4e5

      SHA512

      a49875ee785f091d282101b85cfbda001022d7bffec576b0757968041ec5415db48bd4199c8d493b849d6a34a8f44998db8d4bd1435d38c9c6bc1eb57807a9b4

      Download Submit

    • /data/data/com.ae.olddriver/databases/ttopensdk.db-wal
      Filesize

      60KB

      MD5

      8f2ead098029b44ed92560f01362f717

      SHA1

      db92394b6771dcea89c933617315c3277ef3f7aa

      SHA256

      67d20bed575fd2a93781163b6e4d8ae6d4b27aee420b9df0c87fea1131a8b38f

      SHA512

      17d288d057dd1a67aa156f0f4ba27c3185bb8936e32b4496b55fedadc480aa7448cfd986bc788f4c5d93885561587704ddafbc567f0dd172a85c7e3e9c60a626

      Download Submit

    • /data/data/com.ae.olddriver/databases/ua.db
      Filesize

      40KB

      MD5

      f56217edb7e541c478fc33b6458fb254

      SHA1

      cc03a4422182487eee0e4461bc2cf705f7c84896

      SHA256

      7f31fc1ed63c7e774a897175cdd2f4fac271f3839ab82b43215c233e10398a16

      SHA512

      f5b62dac88f190131c6c311161142a858a4c3f3d7dc1858ac68d3487802a448e1b9d55753ccf99d54ea09dae07220b5978f9e10d7f7decfd65fb9c629c705726

      Download Submit

    • /data/data/com.ae.olddriver/databases/ua.db-journal
      Filesize

      512B

      MD5

      70daa3778956416f993e5c487932996d

      SHA1

      8378dfb1faeed07051037fa6109e9cbfa9eb7a22

      SHA256

      d94271a584217887400cfc5b4d2eb958406735d3b47b0a1e02394dfcead2843e

      SHA512

      fcd72db247fb998a5480ea76c53fa1f10ea0c6eda9666e0250080424ccb555464d7ef73c407730c521114f9c9da6222d662d07a5f49bc74ab1f0c91b2494a918

      Download Submit

    • /data/data/com.ae.olddriver/databases/ua.db-shm
      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

      Download Submit

    • /data/data/com.ae.olddriver/databases/ua.db-wal
      Filesize

      60KB

      MD5

      4e9084a76425a1066846461cc7712486

      SHA1

      b3f5e54f9849bcadd1d249e966b1fac1964a3c17

      SHA256

      aaee7f789ce90249771b28a5e5ff2bbe98e50a2166de257d7f263bcdc32eb330

      SHA512

      e59661ea3d65d8c9bf31a743cac981414e0f98451ec87e6e66e8a2cb2de22271863932257bdfe4d0d04cb9a97d0e2ead38fb5b4cdde3ac926d72e0721fe3aaf1

      Download Submit

    • /data/data/com.ae.olddriver/files/.jglogs/.jg.ac
      Filesize

      40B

      MD5

      ade8e5f7a39fcad1d9115e4beeb293e7

      SHA1

      31bc96440746d9ab882f14db07c1ac90d2cb7df6

      SHA256

      c3141dfa1cdb83921465774838f2034d6e5b30f6e1408d31b699305bff64b55c

      SHA512

      990ac27a9f46053d8d02b3e335ad0f65316439902fa96bcf9b1b1bf8e83ab0d4b214c08c96cc679cda765828ae33a9b4cf881aea4eea472ffda3f2e8b6dcdf34

      Download Submit

    • /data/data/com.ae.olddriver/files/.jglogs/.jg.ri
      Filesize

      307B

      MD5

      ad1166c6868910b35b136349ccae6951

      SHA1

      8140f1d33d1f3c5e0fc5e55f9475da67101d403d

      SHA256

      2d1a82da131606f52636296c581af4be5657690ae12434f75a22482b99894172

      SHA512

      3fdb8c44565f2b3c82cc7b5561f54101a631f416310348e7720037c1f7352814d371e4cbe24a9a1a3e8d35349e463467c0bb0efcf06a2763cae80f83698a0f04

      Download Submit

    • /data/data/com.ae.olddriver/files/.jglogs/.jg.store.report_cf
      Filesize

      32B

      MD5

      f2f957ca86d493628ba257373baf981b

      SHA1

      d1ef7dba8e8dec094868fac19f119c4f28fe9e9f

      SHA256

      583ffdec5752919a4fe03266c394666eab51ef968fc0db6d756f2987b9ec0079

      SHA512

      0836a130b87ded3d482c47a107ed338c00a384bf3c03953e2d8e67197602751babafa2309a990d7b9f9e5c0e22b27e12ec3aec70c9af8d27af51e3219c9c2997

      Download Submit

    • /data/data/com.ae.olddriver/files/.jglogs/.jg.store.report_pid
      Filesize

      32B

      MD5

      bb79ada89d80ada78e636ed23a3decea

      SHA1

      349bf3b72217d687e346bab5b5b94c440f434aab

      SHA256

      df7766603e92f93063753ef8fe5574b79f3a7c27698a0736c608756ce9d3287b

      SHA512

      dd10ce1c55bb4085dce07d866e64842b237a2e3316d55718fed61d3b7083fd921959a148d356ce2035ca6c967b93f7fe722a2464b59e9fe0b43c587c77bac863

      Download Submit

    • /storage/emulated/0/Android/data/com.snssdk.api/cache/clientudid.dat
      Filesize

      36B

      MD5

      889171f2bfebc6a2536da32322fb88ad

      SHA1

      cb8e0593655385ea69565c6c1ead7c25a17dcda8

      SHA256

      8c62bd865fd20bfa07fb3c2038c169f2774fc76c3dc461eb6941b8b59007a887

      SHA512

      5a1ea10940a90c5c41151551da6da9716f835d6abef943cad0bbfe03d402ea7c779aa17197dc31ca9529b632e1c6c5c54a9603dc0ea6d74cb72f12e3d64fddbb

      Download Submit