Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
27s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
14/06/2024, 21:00
Static task
static1
Behavioral task
behavioral1
Sample
ab70ce83be2275cdf7e8b42c13a01a91_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
ab70ce83be2275cdf7e8b42c13a01a91_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
ab70ce83be2275cdf7e8b42c13a01a91_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
ab70ce83be2275cdf7e8b42c13a01a91_JaffaCakes118.apk
-
Size
5.1MB
-
MD5
ab70ce83be2275cdf7e8b42c13a01a91
-
SHA1
b584bd76f98b4d208f5d675da8c4a6e02008da98
-
SHA256
10ba0cbd33dbb29ef90d6f712d8cfb5cb9742d2f6d600f5a640e981ecfaf5b8c
-
SHA512
6adb0fc57f1235a89bb693def02e141997d125a854b255c09c35ce167fe808703ed25b5c898d2da79285976c0eb69a1ed4b83af596b6efbed59e970e5bd6a334
-
SSDEEP
98304:s6f4ibBoBe1LTHi3vKeDzfFSkWmvDk4oPzwMWIgmB1ZbrqLSC9P:s6AibBEe1neK8z0YoJzkITBza3
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk sansunsen3.imagesearcher /system/xbin/su sansunsen3.imagesearcher -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses sansunsen3.imagesearcher -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock sansunsen3.imagesearcher -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo sansunsen3.imagesearcher -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone sansunsen3.imagesearcher -
Checks the presence of a debugger
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver sansunsen3.imagesearcher -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo sansunsen3.imagesearcher -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo sansunsen3.imagesearcher
Processes
-
sansunsen3.imagesearcher1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4261
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5709f0e1669a2d071779d12c0af39353f
SHA159001480b641f9b02bf6153ce6bc62534bb88de5
SHA2569a5f4aa2d8ada6f71d44621ad24bbed4bc960fcc77038066b0e8f8ff8f1119ff
SHA51220701aeec8e1672a802c167187f3c0d9d83925b012807912b692d37663e1d3aa4e8fe08b93d0aeed6427c9da5b5e96eb792663c833f41f23b97fd7611526dddf
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
60KB
MD5f3380ccd5334e1fbac59bd9c035f6d1e
SHA1a200ff7ede5334dd89f3656813175499ea16b6eb
SHA25605d2043662edbbc03f7a72ba86d0bd0caea4c790d513e5a5ab027cdbc1151bd4
SHA512740a770df1ed82577ae005e05303bb3a61119735f006915d4b3f2591551ba90e10a59bc681b340149a9a0a7599eab830e107e243570d3d1f42113c40937bdc9a
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5a6383208baa0ae28902996c9b292aab4
SHA170b9fa33f37911e17741b2459375944d59be7254
SHA25673ec1eb5efaa9821b330437c2a9d00e916f1045042a1a45f3358d1fb6d563d41
SHA5129439e10b76977c2e1c573d4c2bf8523c01efabdacf75f813dd0a952544fd32772e9bc5235c59917704b5afea319657d40259e6778d4671d2d4eadc4d8587089a
-
Filesize
16KB
MD54cb80b7f9370910c3dcf06a15c1d2c02
SHA14a06adb3f7f9e9df3f5c32315a7f01029a0c2f3f
SHA256082282975ba97f74e7c59e030a956ddd2ca9402f4c4f29160b60e34433e31007
SHA51233361a68873b71c2a6bf121b130adc07d2a31e8975dccd9cf4a8d83ab05608cc2d760a44f342244af8b26a149ae0c219338b8807148d6a5e5e3be67a66fc7b73
-
Filesize
16KB
MD599358f3393fd1f5afd698dc0a8e9e0cb
SHA1642553a7ef9ad3f7ee05ad3912f3cabf5e04b62f
SHA256097bd760cd8aea0943b41d290038486e34ddfe3bcb35f530d19f684e3ce99ff4
SHA51261e02d2fd3ed6256b82957a7429a764e5ed3c865bdc801262b29ecf797f2a4c5cc8a964ef34c60d8c6f3e3d2db12d3bd3522305f81e73ce9f2610d8b62711f85
-
Filesize
16KB
MD5d81c71072a3b5721e931fc933e430ae3
SHA140da90c52c4684826ea950068aa880e05a01d7f2
SHA25626e370ec2d6f695d41c91a161b44605c03e12fc110c98f6ade1f9921391c3904
SHA51234da1b687c08bed6f5dbcf25d2b932c7acf7504ac066de05addfbc25d88e41f2f4bc03c162f0ca6fba9eb0cc88c65f2abd8673b983399bd03fea32acaa4b3f48
-
Filesize
16KB
MD588b8d2e879a63da1b0e9f5d85fb4f5d5
SHA1359bb735a32fb56672a1253dd6d469f30fb6bf66
SHA25665e717761c5ab6a36b24ab69c23097824966fbc719c2c9b11734d3c8c57fb7c8
SHA5127c73ea9d023151b52652ff9a5588ad3985631781da23b94ff082f19b5fef49756610fbbe7115e829a700a0769a01de7a9fa7771537a3467f45c84e107b2a6d76
-
Filesize
512B
MD59363516e3f1bbf24bda8db04022c686e
SHA1e7a25633ff0e9319a3b30e1898942f59abdc7d7c
SHA2560c234d721f85248ed8aec927775ea7c67c112c83c7b8216b82ad185d16a61ab4
SHA51246ba7f3efaa01b7a0228c0755d9964b513bf945e928f2ebdab388ba8c12d081a70059aae77165d1942f4acbaf81b74a93e9545d30f6c9c0beebe3def741100e4
-
Filesize
36KB
MD5c5dd95f6f73c1e2a951455dcc80ab250
SHA147cb85e3b07fcf335d40dd25bcbaf68f4d91c9a0
SHA256ddaca9b0c4b373c5797d58560f46f3148affa2ee3796374bac1ef1eec94f7b48
SHA5121d8649449291d7c7cc4ed48beceb341bd4cf58458cacc21fdeaed5d9ef3b3d589dbcbf979348477ebe36130944f3ab1fd82d2789b7d12769a48eeaf78e2c1882
-
Filesize
4KB
MD5c5c03dd8ff26c2d7e12e648a6455c8c5
SHA1df1d7bf74defad7ca1e11c3ddaa543b00de3981a
SHA2567d6ef4138d13ee84cbf4556497d49d48bfb156c63612845009effbe1e95151e1
SHA512cf55e03d3478aeeb503abe9f428928607423aaf475a3bffad31acc5da2724be10b140e1862a8ea9c0f0d162abce48c67cabbac32c220b732d3557bb3ad861e98
-
Filesize
4KB
MD57710ace9fe794b0072eaf3ed8da35f9e
SHA12896c01d6ff030879e7b706a27680cd36034abd7
SHA256060d0bb1cdb9d6cf7ce749aaafe6d46623544ed9d9097243dc65990037da1d5c
SHA5126936bfc7e684eabcfe8e18715df1e54c31ba7f569b22319d4fed0cbc104d2282ce9f08d39ef154bafc17003af6eab8c090a614446cd6ad4f9f75be7f7877d6bd
-
Filesize
4KB
MD50bc1563d79af83786aeafc045a4d7890
SHA1c3c6f1085e6d94cbabc84ece668bfc7785b730f1
SHA256a56ec27d1812c355d02ad07c725277195d932a26ea6e0676c892df5f666a194d
SHA5121dbffc70b6f45357230c839a0924bcec081c883335fc34a09eff283156ca4de212f85c999680ed4d05640b59e387f937748c577cd3c39ce4bb0d6b6bf99c4254
-
Filesize
4KB
MD53e751f383b0e610cf519a06084343742
SHA103cf05cdd5c9d82aaed25c57b6fe055af8bae201
SHA256687fe5e1e7243043ba24ec9323dd80a0c79b786a28c4ef3628a368bae1f8a2f0
SHA5125bdfc51ccf79b4038b0ade779b7ba76649ae19c453c1032aba7c4add8306e6d81255410b17f50d08f27efbf1780abddf5138ccbd49e43a00a1b5e01a3ea8a63f
-
Filesize
4KB
MD5d8ed77b62d4865346aa8252431aadbae
SHA1293f5abcbeacf243cd6fbcfd1e05689228b495a1
SHA2561f03ed689ba4c0f1cbcaae5f65f9988c4b53e05c04e492fadd0403b25ee9ea00
SHA5123ec48c11c7580820aae3bacbb057be16ded233ffb60d9b00b57ce309c179e658802533aca2702d53d0eb82a16e5b28780c675fa16ed235b3e3c6c016f867f8bc
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF710233-0001-10A5-0843FB453BD3BeginSession.cls_temp
Filesize77B
MD5cef9beb4cebe4d64b8b0290288f88003
SHA12e7e578456218ebc78834f89598159eaeda9a0e6
SHA25635525a92f13c9d4ae697c3681dd079dba8d10e7ed1816f6b28af0b92946b5d28
SHA512f158fd5a2a8e478dc20a0072ec4d7e660965b3012b6fadc13251fb0d14545c5ff187fc400eb6a7d909978f26a17ae01bb3540a287fcf1b8c2b641906444e06c1
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF710233-0001-10A5-0843FB453BD3BeginSession.json
Filesize132B
MD51552f0f153707ac5d46e4314c964c44e
SHA1f35dc40c9a9ab619d161c47af0cd56d682c8228e
SHA2569c5420fc31d7f16dc027ab26499d7eed613ba16be8b6a69296dacd650d3119cb
SHA512c0e93c923052824ccb4d601fabec4dd7dfe2bebdd712d253d29982acb87a3fec535abb38bbefa3c3aa540f94c29809e4e7ea1889378dbf02b4fcccc4cbd3b0db
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF710233-0001-10A5-0843FB453BD3SessionApp.cls_temp
Filesize118B
MD5ee46908084391da33ce0580718a52ce6
SHA146ad974e5c4f6f3a98ea2ed877f92e45277086fd
SHA256c9a2bf021b7c271a65d9e35235c483bac9d1b5fc81173433f34d5c11db2b6806
SHA5125bdd6c1afa214c5376f8e2038797b022ef3b4859f6035802e33feeb00d5003570368f886c1c0e394022a6eb7a36336147ba5ddeefd76e7054867d3db05cd686e
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF710233-0001-10A5-0843FB453BD3SessionApp.json
Filesize232B
MD5f432d796d39a9980c692abb8ad58f535
SHA196a523167d24fb15ac9803a39544baa94f6c6250
SHA25606a1a5339b6b77a68e2470ecb7e8cf461f89e336c1d6343a352e2f6f7f31a80a
SHA5125763d5ef73c169de21e27e86794b622bf135b027f69136ad2a2b347f1315da834e7c6cd9c7350e4eab73519d86a1b800a4f45d288d814d2afc3ef0a54cd0962c
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF710233-0001-10A5-0843FB453BD3SessionDevice.cls_temp
Filesize48B
MD5cf9cb0612d588a1f71b63084cea67316
SHA13d035bb92fd3f8997160cf8025c40239af74d3ca
SHA2560d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9
SHA51270f000233e181e3b7c6fcf07aa04fdb570f970335837f8d1c4680a9f78af9f9e17c73a0a5646770f7a8787e338899edc4a5197b023865a4da894b1aca12bf600
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF710233-0001-10A5-0843FB453BD3SessionDevice.json
Filesize202B
MD575db92d50c80a89e068550028c62acec
SHA1d78ea55f5dc682e4da456d26383249f608fe894f
SHA2561dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2
SHA512dbb81daa5fab357f087dc295e7861444f945eb4c3883a09926b47312ce526bc069266a8a24b2a5b4921fb13e797696c5824195f0a79317e279ccf7855ca2ee13
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF710233-0001-10A5-0843FB453BD3SessionOS.cls_temp
Filesize14B
MD59b3d4522944ce6396563812bfdb92fa9
SHA16d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF710233-0001-10A5-0843FB453BD3SessionOS.json
Filesize54B
MD593023624eb8dff5c20050da136aaae0a
SHA1acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/log-files/crashlytics-userlog-666CAF710233-0001-10A5-0843FB453BD3.temp
Filesize313B
MD5859e674bc3453dffcabc528a1357a425
SHA1768a3c2c231168858277c0e78507e1d214b3d79c
SHA256794c3d045282df79e3aebbc1fb49905cf1ee4c7a2fd0110b73b306ac1277ba70
SHA512fb1e52b9bc38740c0a5213659eafc7aabb7f10cc3674e85c00d69c387cfb6e6b8a5d7b201f46236cb93ff7fcccd0fcb6690d7cb8ccb51d1dfb15395d96deaf10
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize404B
MD51c354dc837c9b76c1b630a0c3f9f106b
SHA182da3b0bc1ad5a64154f62d43fd81a40ed674546
SHA2563adb3884f708e7b0b0b2d195cef7f6a4673709f68e7cd946ee043be0f7aabcea
SHA51270685b6c641669550dda4542d201aa8ac7a3cbd7441789632e24070ec2af5484488888621da0c84ed4940e44f3f7cc5109cb728405ff611a92125908cb79edb9
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize849B
MD523fab41cda334f9a5666a939060c7aef
SHA18b389a729d1d52c5fcf5a7130544331da2d160f8
SHA256e9a08ec0338d8b042474c6df9b1d3e7198899df785fc2d9e0f0f99416d4f29e2
SHA5127970c8cc72bae1d773398ff0ccdbe963ccfef5939a6830188a4a135e1683916c223a9c8f25f745c5be2fb90237df9dbaf76ef901d86a90c74c06a9c7ccc5bdc2
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3e64a58c-9400-4e09-bca7-0d954b6f777b_1718398837755.tap
Filesize325B
MD50111a301ad20a0a4c97509c72a58e99f
SHA1e40ac1a1b4e2980b6d935d1075d571b106242e81
SHA25676ad89c378f2c67452390ae7a66fb6c7a1f1b6a0593deab622a2ecf4a8798bc6
SHA5122abda3fc03b95533ab00140fa64683800edb038251a5547eccee4f6ee5588af39be9679b232bd5c4ab20edac6265370db5a51982f680362adae6bfa187e68dff
-
/data/data/sansunsen3.imagesearcher/files/frc_1:199670489334:android:2467d4bc170e5abb_firebase_defaults.json
Filesize200B
MD52266e0714179edf3044e2e19e208a6ca
SHA1c3c4930bf201dca4b549d54f84b25cadcc7d9c42
SHA2563ab4a70525ff58df5c7e494436093f435dbe6ea0d1d04a4eee961a1ded810c20
SHA512fb67b6aa0e0b4131ddfbb3f6a60e48088cf0b6327810fff7f698b7041e6d3900c0f4411c09951e5883d2f37cf3068fed5e6d90a77fd32fb7514b7239cb452da0
-
/data/data/sansunsen3.imagesearcher/files/frc_1:199670489334:android:2467d4bc170e5abb_firebase_fetch.json
Filesize215B
MD5843c5f30b4e79d40986db87566138249
SHA120ac86ed40ec5a8a3741db1ff2833711f1b74a75
SHA25627df006c8121b7baa7bd5e0f3e0231623ec9aa5c45acdaf0e4fd9a697065f8f3
SHA512a6e76089c89d74b0934b9df2dbfd7288f4caa1eee629f9b7ec849784e7365051612fe28d3ee1f23278997964ef84766518055503b2e1636dadab0355697fe4d9
-
/data/data/sansunsen3.imagesearcher/files/frc_1:199670489334:android:2467d4bc170e5abb_fireperf_fetch.json
Filesize1KB
MD59f9abb87541f7dd2a92cb0dcb9ad5ed6
SHA14cf6803d0e61ed5f878893477c40580271716471
SHA25686c69a7e08fbac19c5dd6333bde4097cb86fcd2121d09368ce7ad7b681f5f819
SHA51273b736e9473667cb0d8156d14361bc3669b5404c9446d342ca9e70c6da981124a8f47eaee8016a65a450d71a0018ff7b3cf54bacb1b9920ed1e3daca535cf654
-
Filesize
36B
MD53a7b3d7b2f9711b6593852e6b603d66e
SHA1a38cf7853e6c1313a945301ea02a6082728d81e8
SHA25674ec442e7a3a08bd25e50f64aeea1382101bd0f0b0be5eaacd97918ca4fa2064
SHA51275877f79986ce4a98014df6efd8515fb0bf124cb19a64ec055293818fca788cb6019b70cd4b7d017b95aa8389954ec846e94363efbc9ba464318b13bbc7e2165
-
Filesize
2KB
MD5d1745d0f1bec07dd33b3ca9c9386f0aa
SHA12e12ab0fdf0eb5f150bc90f7c8476754e6bb1954
SHA2561d52b2aa0c959648ab44a30d17bca1317c7dc4f6562c5da82e91cb0df3bc4b83
SHA5122b4620d2ff73971b601b33be94a9901eb67eb313822b78efe5cbf9fc5d454a118f74569d9e0b10f917bda0ae34aa41b139723fc24664523dc5fe51e92fd49303