Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
15/06/2024, 11:46
Static task
static1
Behavioral task
behavioral1
Sample
ae46b94e9076c9c9e67d1aac30968cc1_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
ae46b94e9076c9c9e67d1aac30968cc1_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
ae46b94e9076c9c9e67d1aac30968cc1_JaffaCakes118.apk
-
Size
22.0MB
-
MD5
ae46b94e9076c9c9e67d1aac30968cc1
-
SHA1
9728fdcba4f97d22f12067cd7d6a1c317b10d3ac
-
SHA256
0a908e0d430504ca84ddb3592dc06c698952847a67d988c310050fdb6d5b3afb
-
SHA512
ea0adf9c80a490aefcde20fb1c36eae4a8ac7fe2ac394e080837552e0f4a00833c32b5872653a17b547d6a3387ad798aaeb305c67a07d0a34364e9c5a6802ecc
-
SSDEEP
393216:f/BGT6x2hC3PfLuzOVWJTuPlxkG5DKYuK3vfAm7831T3hCuGGvQQWC:HBG42QPQXdAkG5DX3vfAmg31T3suFvKC
Malware Config
Signatures
Processes
-
com.duodou.mall1⤵PID:4267
-
chmod 755 /data/user/0/com.duodou.mall/.jiagu/libjiagu.so2⤵PID:4293
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.duodou.mall/.jiagu/classes.dex --dex-file=/data/data/com.duodou.mall/.jiagu/classes2.dex --dex-file=/data/data/com.duodou.mall/.jiagu/classes3.dex --oat-file=/data/data/com.duodou.mall/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed2⤵PID:4315
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.3MB
MD56a4070e553451ef882dbae4b2359c7d2
SHA1299a05fbb2059c728667dd1ac44c232ac83f77cb
SHA2568358b63303429760db6c16688021851b608d5a23b7dbeec7c4f2fad8fee572c6
SHA5129c035194409d8494eabe5a5ffdd84db479955382c22ca079638a0a36b4a7609ca6c3587b5705fb25aecc719b28274eeb9e23c9d7222355c7e4509357ea874fd5
-
Filesize
337KB
MD5bed5183f18f778c6720b2d5680b3aa56
SHA1d17421ca5128a309fb8c52081865051ddd1f38c4
SHA2563b81393a3798003b9e7082d4e1ace9b6bf7696e1c51983be5eece8c7c8bc9c9f
SHA512a0d193ed51d556cf9d846bb415da5b6aeec6a189635069d197e66da3cee922db18143eef8181f2efa90a0a6790623b6807b2de9c39c181c694415898007b6977