Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    48s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    14/06/2024, 14:50

General

  • Target

    aa439d574e05ed1296fb1f45a89fd846_JaffaCakes118.apk

  • Size

    7.0MB

  • MD5

    aa439d574e05ed1296fb1f45a89fd846

  • SHA1

    0f02d6ea66ab69d569a37da7ad74bd9c4bbe72f5

  • SHA256

    ef332aac877827fc112dae98b4fd904561a27570b54a05a7200095446a3442e3

  • SHA512

    7105233bfcf6726a212a79b449f6c8c81a7846b84e87528a8f46a8cd8986fd6cb8a0dbc26fe812b6db0c239c6efd1899c5b05ef93ff505ca950e721f04b3901f

  • SSDEEP

    196608:evAcNCDGk0MZQiqDXvvV42ZN4b5TYBLDoevVW0ovVW0XL:4AmkGFMSJXVzO9oge5o5b

Malware Config

Signatures

Processes

  • io.dcloud.H59D94B6C
    1⤵
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4282

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.dcloud.H59D94B6C/files/cnc3ejE6/eje3cnc

    Filesize

    335B

    MD5

    585839d66722cfd02e40cb740cccb633

    SHA1

    374c19200fee201b26d0153487a281a934615884

    SHA256

    86a9bb4985cca6c9636c4fd071bef4b70ba7b3a5eb51af869a1299dc2b1574a8

    SHA512

    09bbe1bf1455861fd4732f2d1945c84bac34090906ac2fab75d144c22ffcf6bc585c8209e94a2b1919c8402df53966081a1af2993e12261ae4c4ac5568667d88

  • /data/data/io.dcloud.H59D94B6C/shared_prefs_ext/test_app

    Filesize

    24B

    MD5

    39c27456f2f4093f9d19df890031bb0b

    SHA1

    c42eefc1a7c128ca92b09e54c1ca423f2c13a3cf

    SHA256

    07c3e8b4414c37b35ecadb4d76f7ae9eabe367ef387c06213a756b3ab6eb9294

    SHA512

    4bb9dab37b5be5a9c95c6de02ba7404f8ee74e458eb4b1e4ee523f3bae90cc5fff7047e364fbb3dec9ad7e994eeb71a46cc08c547610c4ff929cfb635d02002a

  • /storage/emulated/0/.imei.txt

    Filesize

    32B

    MD5

    fe03ca0240e5a707705d71c10e7f9f46

    SHA1

    f9030d3d733a1cd485626fb6b399e3095e2eb123

    SHA256

    2ee68249228053191a735f7b10beea14aa4ddeb465a9baf29e7a69700e85e157

    SHA512

    a289424b462ca39e0deba8c6dfea9e31bf1e04e8d93904e8e9cb1b2ecd395cc124a1703496f2646fd863dee97c9530173cec2807f69c5c758dd4c35efd42fd5d