Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
47s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
15/06/2024, 02:24
Static task
static1
Behavioral task
behavioral1
Sample
ac95fffd5fe58bef4d275a235c039c00_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
General
-
Target
ac95fffd5fe58bef4d275a235c039c00_JaffaCakes118.apk
-
Size
30.6MB
-
MD5
ac95fffd5fe58bef4d275a235c039c00
-
SHA1
b42c03e05a62a5f846ee1bb0b4c8c4f8f07ee624
-
SHA256
6595926c0909c9d5e522c985bdddd6b63017643733360e00046b47b0924c8fd5
-
SHA512
886d98c78015f0ce993957f821ed89a5815fd496a8bb0da186ce584a6f41b2d1593a19c54b8e92ecb342f62d0c7e62580953b6a5aaa60bf1503f0f7547b777f7
-
SSDEEP
786432:QwvuCFWcwRVRJn0siRGjeev4tlrjmynGlS7ZsoBnmnP:tvYcwRVRNARGjQvj/ZzqP
Malware Config
Signatures
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.bulkypix.lepetitnicolas -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.bulkypix.lepetitnicolas -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.bulkypix.lepetitnicolas -
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.bulkypix.lepetitnicolas -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.bulkypix.lepetitnicolas -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.bulkypix.lepetitnicolas -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.bulkypix.lepetitnicolas
Processes
-
com.bulkypix.lepetitnicolas1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4264
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
58B
MD5731e318b4f294a09a91831d56038765d
SHA111a82ebd14bfa11bbfe9f9d293878be96034a362
SHA256152764ba848cfc5380f0042f77397bf091060c2e4a64399c417a09f09f14741e
SHA512ba44079acd032a2c3f234fca680a092c1b5e98a9ef1e75cb75db29bace391648cafc0f1335737183bfd2ff8601bf046e0f5dcf8c274d727a445141b9d28eb724
-
Filesize
58B
MD5c2924327069b4b75640d27d8f644af35
SHA124d54b995950c57818640abbcb707b7d304ea506
SHA256ca6707ed2e36e6d00e57ed4edf84eda5bb93e74d7607df43b8cf3bf3f0afe323
SHA51248c38d702c35dbd31a1caf095fc90576e79de63d165b11184114e37922e77de351de1b3483025c8ead74e04d9e7d5f9fee8a065215ee33fb0a1ceece2bd51f17