Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
168s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
29/07/2024, 22:23
Behavioral task
behavioral1
Sample
642b3b062d5a71332e5a08c468a2457a_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
642b3b062d5a71332e5a08c468a2457a_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
642b3b062d5a71332e5a08c468a2457a_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
642b3b062d5a71332e5a08c468a2457a_JaffaCakes118.apk
-
Size
3.8MB
-
MD5
642b3b062d5a71332e5a08c468a2457a
-
SHA1
d4c20d9c5a89a730bdc2ef02df1c272425499aff
-
SHA256
5c95001612ce83a25a7efd51db4f3aab4d17cacbc6392b088535787412a83370
-
SHA512
63e2ced60f389cfc91f81636842fc41486584ec414a660e44161acb704f3770ce188e2530af2fc5af5d0e3706c0e4bca2f062d14ed873d1874affe60faaa216b
-
SSDEEP
98304:LLOgD7AvOQENMDWWlIBwX9vbNGKy+GN5I4CtmMC:HFpaHbN3y+o55G2
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
ioc Process /sbin/su com.jalkipalki.vika /system/app/Superuser.apk com.jalkipalki.vika:Metrica /sbin/su com.jalkipalki.vika:Metrica -
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.jalkipalki.vika Framework service call android.app.IActivityManager.getRunningAppProcesses com.jalkipalki.vika:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.jalkipalki.vika Framework service call android.os.IPowerManager.acquireWakeLock com.jalkipalki.vika:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.jalkipalki.vika Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.jalkipalki.vika:Metrica -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.jalkipalki.vika:Metrica -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.jalkipalki.vika:Metrica Framework service call android.app.IActivityManager.registerReceiver com.jalkipalki.vika -
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.jalkipalki.vika Framework service call android.app.job.IJobScheduler.schedule com.jalkipalki.vika:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.jalkipalki.vika Framework API call javax.crypto.Cipher.doFinal com.jalkipalki.vika:Metrica -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.jalkipalki.vika
Processes
-
com.jalkipalki.vika1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4969
-
com.jalkipalki.vika:Metrica1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5050
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD55f95caa096ebd3fe93432163e3fd2d34
SHA148c9bba88699f9fbf625d27b189ab4395662ccc2
SHA256c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
SHA512e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2
-
Filesize
8KB
MD58c7370f2b019486c07fa5f7a75029f40
SHA120e7fa76744a49ea7375c2c12c79eb44d200cf96
SHA256396cf9144fa4b990ac6770047d3feb6c6a2612159484dfb6d5dea46b5b13d4cf
SHA512383d5f5b0e15e9ac8ffa27d4602d39547d42247a473585bcdd1a0c1f5bb69584515a6812402a167fb422a4043f2975477f1c50ba58a9be6ee9b9ce85cb19bc37
-
Filesize
512B
MD546e72ccd0ac68a4891a0e3173da1ffe8
SHA1091c6fefb9990a84d6c52aab9fbdc9306ff9ccd8
SHA25691b96d14921bb316a6feddbea770658ecf56a6cb773b0a3146e02911981435cf
SHA5121649a842634319187e569b6232806bc144af1ae25e7899ea5fd4c00122c7f2c15349625c66278b28041a426551b08f0d214b5a81243f819bb05d634b3b3ade88
-
Filesize
8KB
MD596c8bf9210d004a08cb0ffed8db9fe4b
SHA195f2e921534a43286990a368b1e35491488a4ebc
SHA256129bf7064459adebfe9985ab4a8ea49bf4b6df45ccc120c8eb68ade5850694f8
SHA51279b8dc90a1779d1a1db35f0174e38003ecf4d5bea8f571547ffe134ee17ddc44b3340889867c0f86a0305109bf5f4f9207432fe39a1e4b80e99b45d580b7ca4a
-
Filesize
512B
MD52f0dc27ea70750d2e095bad87ef6793c
SHA1e908d5afaddc87fd8b7e5d12d2cccdf11f6c7045
SHA25631de055a452d268d23e8412c88fcd8e40a384e05da292d9e8d4dbebfbf1cff15
SHA5122d2d5196d2ffde6ae6b1e82bfda5bb29df214885a6880ffd52d3f20e3e5da1d0989921477e09385ed91d864315071c5437858f706308eab8b09124c147937803
-
Filesize
226B
MD5766fe6b332f34a6cd7e01781f124d3b1
SHA1ce6d00cbad1041f338683abf226a6246b41674ee
SHA2567467f36b768285a2765b06f5a57640b72bcef5dc8b5c8f3c51f04400dd8dbc3d
SHA5121160a243ef6b98b151c089ba24f5ae9e3f322ed2c88c4d2d78aa1486a9648c9d3a4e297d479b198e90027f98aa33f8e0f251cbc5ff4889ce624f4a62d51e1b9f
-
Filesize
281KB
MD58e66593c3fc28ddb5080b96741ecf0c3
SHA1e34bcd7b58adb39b79eb566a9129c1aadbb7c5ea
SHA256da5f2d0a3f39d7d3a35664a10e353d676fea5052087c4fea26a570e7ba149caf
SHA512504ed0aa71bb233e7cd238db6ab78c79073b5aff3ab23fdf6eddcea7284dbfa6ec9c11b36bb56678fec028bf91f8619bda0b9a2c72a00489461f7f795b71fa34
-
Filesize
12KB
MD5716cb204cb5954a26a1c1e571dc799b3
SHA1e451688889edd1898094ac96f4d846e21f63c2ca
SHA256ae7f9f82073dd52da6dc83ccf51bb1f3211cfc60ccb88c9ba078a3911763dd85
SHA5120651d15256ab9f9fcc978538e113ced337ade0c4b68f6535501156618f992962d9e637770eda02f3b765676ff528f780092a3986be2001185cb27a6e2b142441
-
Filesize
12KB
MD5a20d2d825ed10de7c769d141bd7504eb
SHA12df4ef7a938f474c1367669a38863fccaa5c75cd
SHA2569884f05ccc2ff5f02326c7cf1a8762b1d837c6ecb06ef1f827a57ca63e5afb84
SHA5127ac699b509652819977887f3ddec971d0058fc5567fa5b520aab23feb706e567f516ef382f950ae81aa54303813b42d3bec3735c6f1a1eea3c57043eeffe9d2c
-
Filesize
76KB
MD55d4e81b2e56b831f38547c685d30f353
SHA19f5b58c25cd3a7f3dcf9e5eec2f4ca4a697ad2c5
SHA256618a6f9b39783e37d41d8d65856c660757f9add92a3ad5e57969c2e69b262a7a
SHA5127bb70f771998edfa9d06eb59fd6b8edf7b179b14b240158d26d0058ff253a920583a1347829c9e7fa1d4e9dacf301d99eb56a27490ce837eae3f412b9a284b62
-
Filesize
16KB
MD5fa0ef15a1c590dedd18538b351cdbda5
SHA14b21319a238136bd3c4a4655ed81344fb0ec9579
SHA25634291d560669297843db1dc45e9d5b1c904b853a9f7c64f5f5c2fb9f4fb2ba17
SHA5122d8b3cac3dc554bc2c481e475fb14cc0e9a62fc5845385148add02b83c48379b9373b10c69a2b4e1e1b4a136f56cf3270d39e829ccc86bf1fdfe0d0452be8aa4
-
Filesize
116KB
MD5794762f60944ed153f8257cb5bc50e8e
SHA12285f8219f3498c19aec107f3491496facb01c97
SHA256fe9934bcbcd2c071ca5a106e41c8dec8e1847db413b2f1eb57d4b738fcc0c98e
SHA51249545bb3ad6df8dca90c52cbaeb42c6a775d3417824fe5fd1556d0bc272c09707d9c508f3eede15ad15b6956cbc1f7b1578fe19943f026c2387effe375f20a9f
-
Filesize
108KB
MD5c891010b279fe9b5796886b277dcbcba
SHA1c1bef13dc4bc2219978d0d267fdf3f0bac9ea467
SHA256a71de9815136eb2297a142e03bad2fce29d1858582a0682f1e15eaec3118d852
SHA51269ac88681dac6dd8aaa9547cbc58be7713c0a37ec076e917a9aea09b8cc8f7eef6fce01525addf1a69da9eee16b266a602e93c1f098776cb929e941775c4ef1a
-
Filesize
193KB
MD53739b16ea85f0bc05dab2930afcf3816
SHA1e4d732de84331bfbe02e66253d351a435225e21a
SHA2566414d2ec4f3a87dfd3943c6a39077b5260df776f969beb7e2d01c69643686850
SHA512e692e4dd42d7c22e8c5daafec72f0045998487382995bfb7d67cc12c140ae099f88bf7315c49c6bebc6edfa103f27452b783b0036c0cb8afe9098ff1d064531c
-
Filesize
12KB
MD5ddc75f74e9b0ec24baf6296cff079900
SHA177b46e25dfeae13d53298be108411513030332b8
SHA256c648e95d3f9ac420ff988f567007f22bceaeb2f67c72bc3194fad862d6232ada
SHA51284c0d038262b6a276f2ecdbf7d2853cf9b05c4b0169b1390329bd4383651fc03af7924600992f7a0c219ea1d38016cb31dc145dcfd432ebdd1a53b6ecb14d544
-
Filesize
8KB
MD58edeb29dca8e08abef0eecdf6b9c7dea
SHA1b98acbf8a4005348a8e7a0e54a3d8839109ff681
SHA256fb0934fbde2bf14ac81bb62327159d153610e5e0ef369356c848bb380350679b
SHA512a994d1d600cc4875491ade95d2c1681afe4169b71e6016610f2b78c0e6222779e82bedb3e504793e5fe796c3231468508157a18173b54345f9fe961995ce237b
-
Filesize
12KB
MD5b408df5f655170ed92a04bc974cee8ab
SHA18710be049f172f8b3babd235cf6db92483e4e09e
SHA256881dd5374b45d6e4e25bcd5e3adf671fa40eccc358a239d884985a5ce53c6e81
SHA512c378ffa87c48ba24890894aef4bff80ac3a4752c0d0ba790e7d3fe6c490fe43f495e8ad043d2a1bb1902eababb0a53c1fe5d4d27352f8682146e5a64568a96d5
-
Filesize
44KB
MD571c5ec3d15cdab5ff8a54d1b77ee0a13
SHA1efc5be06ad39251924f0751645d8ca9869c252f0
SHA25630e996341e32286df6a74074d7e447b7a735a7ef4759c03b8966d6f0c217d09f
SHA512ab8c65495d5465a80bb42e87cbbdd8f897e4eb843f4b598079a7dc2b2716ae2f871d4776df45b95c26316a4b9b0c3ae01b92b24a3de3ed8ef15afab6dcfdca4a
-
/data/data/com.jalkipalki.vika/no_backup/db_metrica_com.jalkipalki.vika_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD59996177c9758bb8282453ec9c9fa6430
SHA150fa2f0305a5ea4f6c7ae3e4f176c4e5203e873e
SHA256d77874aac0df210e2c294f000583f0676ecbe69ca4342ed46e78bde4802463fb
SHA51287b92d9b53070093425a43e88bea0028bab60634e2eeea7629f5577e818c93e7f481be29f6d1b8803b04bbd1c6fbbb4eaf5a93accc5ef247adc1c87e81276797
-
/data/data/com.jalkipalki.vika/no_backup/db_metrica_com.jalkipalki.vika_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD588e1f4e6bdb41ff49f055fb3b6807d69
SHA1c394639765c2e090dec9c6eab2de5245f5476e8c
SHA256c7b7ecff32e64be3f7276e20eb5f195bc35fcb693de084f8e687c3f85e7330df
SHA512b88ab05ae0cb1893a6adb08e0364eb8bab1f82a6030fd4a22a6dc16c2848014cb2b935a5fc4d961841a4e9914d3815a4ea5601ab1c112d0255a99b8e57f31b4e
-
/data/data/com.jalkipalki.vika/no_backup/db_metrica_com.jalkipalki.vika_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD5db21a2175a8b1079071faaf216c4d82d
SHA1833577445f5f141969930859f5b4d8488a8ef5fa
SHA2567507d33da86fa7e755df3983e122d70b83ddf3e3a2a2d6ccdc0079d9c29f0c6b
SHA51291db8fb888aca3b4cd5f454ee61cbe09e568d92ab737c87c8f0d4093de83b7d690b4888aa81bc8350f590006e9cad75453e11c9a07e2901ba90453690d0e56d8
-
/data/data/com.jalkipalki.vika/no_backup/db_metrica_com.jalkipalki.vika_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD521d42559850880d278a4cdf78f735d73
SHA17b9e64a4acfebb7df0368e0daa0865daaab92789
SHA256d374623ebf2df671f917bf8608d25d32526e71a12ecce15dbd39852ff691344f
SHA51284542e1cb5a94f4dd8bafd60ad0a3b08fd889c3061b040494734c4133429edda866eff9daf01a2abc5ac141072e181de502f6eff286e9209c13e86b84d89352d
-
/data/data/com.jalkipalki.vika/no_backup/db_metrica_com.jalkipalki.vika_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD51642226c68768e8cd044544012c79abf
SHA1fdc6c7f75eba3a7fa97da84b113d005b8c589ecd
SHA256ae573906b281df53622ce91d69999a95ece533a6ce55156f416d059aa0ed756a
SHA5120e552673134cfcdfcad0943439c55277c1b9b0be3c66482f7d18c052da94e0acd11e289b3b6ede29ad83547aa592cf0349752e6f27167d83f52e861a9bf12498
-
/data/data/com.jalkipalki.vika/no_backup/db_metrica_com.jalkipalki.vika_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5f9a18f19a4e4b7c9bb3f531494a05aaa
SHA1854632a9850ddea7191f86fe8c3b62136e50cd02
SHA256d0c4ace79998a8c48cf7365d1f5aedc661afe4c3162a4ebaf092a0c1942952b8
SHA512005133e3ceff540f73990a8263d2fcc8e3df3b5da538170437318d16bf6b16c1f08577d05d9198ed9f182486ee96ad5b26e9358c52e93342736319526e31aa5f
-
Filesize
20KB
MD5d16c3e82a230d060f146fe5cffa2d400
SHA1af3a7b79529384d3b11ad293a8c118482eeba63d
SHA25615bec7d1bc7915c8bbb19598ee41513f683617b0e9bc9093538ddec336aabefa
SHA512ed6154c17ee70713cbcf114a718c7f43d4cbf0492d48024316e7add73366281487f7afe738740a9a3f0fcb2b2796534daf4eb01f0657a4418fbd8593a5346092
-
Filesize
20KB
MD5d5b145e6ee4c39a4683fa7dfaed705e4
SHA14ac0da9abdcb869479ea7106481edd907eea21b9
SHA256743773046589f4b141b1798ae1dc8da7ee29f5dffbe364eeca56439f578ee243
SHA5123ed0f680efc32d358b2a922bde806d736d9917bf65c6cfe2477bbd3b01c1b791b0d29d4a60bfaa6e50299f600542c38d68ce2b7ec90a4980b69768056cbb9902
-
Filesize
20KB
MD5a0a548793a510f9caed081689f935eeb
SHA12d1aad0213b2b86bfe52dd2485741fb00eb02f3a
SHA2564564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
SHA512624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367
-
Filesize
20KB
MD52dca2e39a0d06b376b735fcf924688b4
SHA1984d2b430312dc373cfecd1f4b7b4a1d75f1daac
SHA256444b756adff2a36b6317106459b25472522071ea11c96d621b89c344d650bca5
SHA512c4731f78b4ff032ee31528bbba8fb0df3fede47f3d981ea200225d1330d1d4ca1cbd7d3a00c6da0c977014f5899a46e764c2c26d6167e6fdcd0edebfa99dadbd
-
Filesize
20KB
MD5540f8cbe7527b5d1a59644c89a9d3bec
SHA1991eba627d90590179c42de447ccbf520b07adfd
SHA2560163a61adcd43072de2eaa3480548f942e420afe02e23e9b8e8edd5739d2e911
SHA51273368d5ff7dac143c0218b7f6e227a5f1a4408361189d1b378d705bc2653d2d74f042c73a0fa4413d21fea9aa1b4f0b8763de2b8de3cecca2ce70d4c691fdafe
-
Filesize
12KB
MD5d60b0df32b87101ba9b29130c7432f4d
SHA173b3c6ee569932778f7b7e1de7838c893476d456
SHA25608070857276bc5c1d1b0cdc3594a0155768c4681c90a2cdfbf9310f9a01ee0c9
SHA51245141b6d32f0fe2b622926ddc25da7814550c1107aaf30e3b2f2060e02a7de87bffacb918777d815e8c746110b80f2d33ee7a175a6de2e12f1ecb5f7f08f3b3e
-
Filesize
12KB
MD5620c51f5e91c128505db8f31176f4087
SHA1dde8362947e39afd4d3b4714df79177aa1e67e3c
SHA2567e086f3ce1eafc9241bf804a9da420e78114351c9b14dc643862b2244fda0a52
SHA512f18e47dafe54897b783c813036be1030df3faba76e229c5daa952d50477e8010246a5dfb80b2c78d95194f01e95f6f3e6a9b5358899973316368af460fb04eb6
-
Filesize
12KB
MD5eb87aa285dcd241a2a081d5ab91c2fab
SHA1f60e846ce5abf1ca50e37050573ceeb192f24779
SHA256bce0656b7810689dc8e939c65ebc5591fb3404b2845e6ff81d481c601864ce21
SHA5127134c0cd417723f6e5c737897a936bd4f709ffd1caf5464e148a3aac72a5ea426acf949bc6616ceb93b3536db1f615f8c3424bb00e03f6c500d1b09d51c04250
-
Filesize
12KB
MD5ee0f6020ad7fdd8ae0990554c2e0c6a3
SHA1ff29077bc12e9bdb4f5a74938a19cdd8e00655af
SHA256473b566d57af0760478eff4f477f9974bf8ad181fdc3df76e525f4262faab110
SHA512da41cf6744d6e85368b0069b0a42f4ccff7b72dd2baa09bc67175782907b2ef5a979583730e9139b349340071e015ac8eb0d7063e49a66a1bf59cc5c503f4887
-
Filesize
8KB
MD508b0f8b01c75aec6691b2ccaa0b78042
SHA1548fd4e4519394a1396cddcafaf2794d6de47b17
SHA25685c28d172817781c46b6265a6dd34ec29e8b783c7f5fa1b91a72a31fd0d76094
SHA512691c6bccbedae235f9f161afce46df7fdaceed21fb72fd4cf520b1034408a62838ef44d34d08e9c17813cb45c2eee6cb337418bd8e65637aa81e4545a484c0df
-
Filesize
20KB
MD520eb8d095e2ad82716f919452ea9c886
SHA13a9c92bcd7885f8096081b1e4c65ef044ef1b956
SHA256bc827a25047e676aea32007c420dfb4b0b537a1d720df2c7b54a891d46a3e065
SHA5125caad868d849a206c5ac6d0fc3a423802ee6eccabafcb9fdf148ddb1df80325fcdfba01c5bf77da73d6eb6798365836c716b506bbb14e441731961747d5f3b78
-
Filesize
44KB
MD584b2eb0bf80de74aa6c1c0893696b2df
SHA14129618b98819bd2ad8456e47a1c1b051df0a9ab
SHA25663fcbbd904002bd92f6620a5c7e5c368ad2b9edeea1ea02526cb651c1b132d73
SHA512981a90f7e0d51aa557d4978823331b46a96b5f292d6b718c966f20d84a7197306e1c6ed5a9062dd7d9ae1bc31118d5e09d6e798d877b7980475824f5cadc0555