Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
130s -
max time network
191s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
15/08/2024, 14:33
Behavioral task
behavioral1
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
-
Size
5.0MB
-
MD5
9a6a0065d390836ece27df30ba14db7f
-
SHA1
0cf21e39120f41f5c96360faa9260443aa9db809
-
SHA256
4da1a07d52db4243c001d32265f0a1951091bfde058c4919ef2e973a24c2a8ca
-
SHA512
81d1302021d133b802a8b6ca0252097a7cf2bcd6930ed7881c1996652de2adc66348c66e2183b16865f08d3b5df0c7f1b576a5dc0040e99fb931783e498146ec
-
SSDEEP
98304:1zkLWIFcjwYlBRHXs+53WlmBmVg0sN50dy4/X4gWgDQB1+SqfaHVxgw:1zwTFcEqBRsKou0sNbSogWgcBQk1xgw
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
ioc Process /system/app/Superuser.apk com.cmplay.dancingline.hack:Metrica /sbin/su com.cmplay.dancingline.hack:Metrica /sbin/su com.cmplay.dancingline.hack -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.cmplay.dancingline.hack Framework service call android.os.IPowerManager.acquireWakeLock com.cmplay.dancingline.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cmplay.dancingline.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cmplay.dancingline.hack:Metrica -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cmplay.dancingline.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.cmplay.dancingline.hack Framework service call android.app.IActivityManager.registerReceiver com.cmplay.dancingline.hack:Metrica -
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.cmplay.dancingline.hack Framework service call android.app.job.IJobScheduler.schedule com.cmplay.dancingline.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cmplay.dancingline.hack:Metrica Framework API call javax.crypto.Cipher.doFinal com.cmplay.dancingline.hack -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.cmplay.dancingline.hack
Processes
-
com.cmplay.dancingline.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4936
-
com.cmplay.dancingline.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4981
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD55f95caa096ebd3fe93432163e3fd2d34
SHA148c9bba88699f9fbf625d27b189ab4395662ccc2
SHA256c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
SHA512e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2
-
Filesize
8KB
MD524e62aed432d8ff3e521200901452bc5
SHA1e02973340e0112078fcf408d055b7de032ab70e4
SHA25603b3d862a38650ea854e7910ee7f928a10aabeea15c6e61a1b8061abc951c0c8
SHA51233a921129f2d07298f9f7c13468dc73566c6a21f3ad0bee13f1e0baf4f627019149bd33c561071d9abd74cf0c505db3ffb2e465cd6b6df6883c1c6455f433fd5
-
Filesize
44KB
MD59efb983080520fc535c81659a38f308f
SHA147b9252adb83a043bc76a2c4c9676915e7140ae2
SHA256b86dfa3255b502a3e7acd187b76eae6c82ee5bf55458c5e28ed17b220a71b150
SHA512c939927a917e5376a28e620850e070c785255e9dd4b3d80976aa3ceff7ad641ba55fb1a476fb8399bf6cef82a0d2fb131e16c6cf579fc1e85685b7df09bb8277
-
Filesize
8KB
MD50dd4398971986eae226bc10ff835e363
SHA1064ebf89e1c4dc3b183f9034b0c43f148b845af3
SHA2560461e44eed13dedbcd5453c07afbe2973d4b83ac9f7f49ecdc10ba63053c6213
SHA51268b5e0ae831a019dfa9d478aed8e429c97a35171ce00f116522a99208f18d56b70f8e8ad0621acf970bca25e0de0ca3967ca66cff1304dd97e1fc6cb4e27c445
-
Filesize
36KB
MD5d7fb67ee1198c203d6cbceb2f4829e9e
SHA1241fe4e2a3ac4cef4c06e94377d8b05dc62a506d
SHA2560be0eaf014a209f2cb92b0b76b0af683d4248bca91220a5704c8c358d3bea11b
SHA51225e972a27b8757b58bb8dc3d38940be5756d071e83f018df4d02ef1ad1ba3b96b96bd4e9145221886a082202f4e92c62e9a956049b2a21460a5bad313ca4fa95
-
Filesize
226B
MD5a3962765ccd1fba9a7f21fca7c89dc35
SHA1318eef86719aa31c3409b0a36751ff898a72bd00
SHA256fdbfffff3804a6c3dced57928ce0e3455025cc1319f1d8f95350a39e38326d08
SHA5122c466dce7e463517a8cf5bfa89d15b34c274c3fa9d88f3f9b1eb285dbf373107134b82c697e019cd5374d6578c8f5b10cc5cc57eb65405a38eb5c872ff8e42a6
-
Filesize
116KB
MD5a3e859f641d5b715c27b924417a50090
SHA19aec7731bb30f995c41361c582b3ee903b2f507a
SHA25646a5918ee47b128bb77006b4c5a293b1dc2c1a635caf0ec569e4ae939f407147
SHA512090e36e89d3903550fb91820326c6a26daebc910676db73a344390188bdd407c66d1dfb90e67e3bf7f191a42954dd2908931d9d2c39ceb10baf3d917e1576a01
-
Filesize
3KB
MD50bf63cf27c82bb4d76205454f7542c25
SHA127e91e47a4ba8b50f52a876088e111922d3e4fdf
SHA2565875b6dde2fbdd07a55b9488e8487498400f022d88f8a02993815241a228cc57
SHA51239239ad025390d4596610e1cf74cb7f93a8ca208f71965597f946cc9b3d17ae0d486aeae498215632f3fc78eb92970f4a2cf155f2f743c36f8faba449f64f23a
-
Filesize
12KB
MD5f7fdfca075af674a7678348a8934ea99
SHA10625077c22461d010f07324e2354200641086c10
SHA25619b5abe31c8139eda4d2a99648384b678de322cf034e02a8ae3912352644e7c8
SHA512db8460e7353b1570b3a66138af551c4c0eb7f690d347abd59935f2fa8f12f98f8cafed02fabd19f799ed656e0469ba94d9e1b05c987d3b4aac1cb99f0c794a74
-
Filesize
8KB
MD524a5f63f2abd1470d8f0382ad4ded500
SHA1517e2c99643bcf409ba4afbea96ded0c8d77b341
SHA256653add95e9d9b4a510cb39aef397dd6e392c1beeb3ae3145bf575916aaec2d15
SHA512272cce2b0066b2bf8abdd839eec1095f8e2d668419c081c3685df21f98a5ce3dcef57e6b767e64e93a7e0a6a034cb20cd9f270fc665a959a80842d66fa9ec5bc
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
12KB
MD558bd1354d541969019ca89a565fdc711
SHA10203138a4b514f08cb2bbb9b978a4b85a93a9dc0
SHA2566f046d737a51f92c39c99c639debb949b6c56c0d958c25f04cf60e37b034f243
SHA512f6ab5eb38efe7468baf543708de220144476462b88959a272e714fda5bd7e682b26f59773833b50f46861eb1ea6e5b44ed837d60d51e1a8d0c149d753c6cdfc3
-
Filesize
84KB
MD548c8888ffd3a0f51ba0806657f082f79
SHA12395548a1c02c2a361739902498108bc82d50df3
SHA2563de563d1e7973bfcdac984dc3379d21ab491f2e5ee264b6a934d1d3bfd74f55d
SHA512c59f67b2cb8ea7e1f970bd9be9c3dfc69b0ff6732d70be27aa62f762b6868125d053efb817fb8ef030f5e03e61226f1f1e0163a22d68d2ddbc70b1006d6ff47f
-
Filesize
16KB
MD51b9c362122f9af864dcde2b8855231bb
SHA1cfb66fc015d6d383d4322effc69b12a49f788621
SHA2562053b068d456130c37d187e4a4a7782f93a27b6e4f3dabb019bc6fc2bbd70d98
SHA512274c3cd0ce54a10b35de25e4a259abdfe5cc47ee328aa8e0904f65e8aceb80436d16ca0af2c2256f516d93264f9af126b04fd8d7e995435fb5dcf6c196492a5c
-
Filesize
108KB
MD545fae61af17e7496b927aa26e953a202
SHA16afb2637ff40d9e5eb39e16f1c3827f0b83d06dc
SHA256e1dca56152138f851b3ece9661b0683aeb5d833d4e2e2c118a58696e2de99821
SHA51209d5a765afa688adcffc58ee3b4114bfa2c110027b81773ba08905c52e1d0ee5a6a17106cd1cca6f8b1ce8707a74d7c969aad4da04203a5f30258e132c2e3040
-
Filesize
213KB
MD562c57dd79411e79a782963d26683b54a
SHA1278d23f328c6731522c7f719c75766ee9218f8d5
SHA2560fc814f4d5d10c1857f93504997b528b22599785234d44aeb168285afb032504
SHA512aee380793d27f28bae39fd4aaf034cce3607b13d548c82ff5128304e89e51fbd6739f44a98b89dcea74b8315cb1a6f2d25fd600ec98b024bbd68c36e75962a86
-
Filesize
317KB
MD527b84f6da15971f80b1ff2bc84d6b21e
SHA1bfddf9c4e8547db6083bab49873650c09be0f9cb
SHA256fc04d8f5047a9e1f595bae52def8f63174d4537c1b919a2c48a3a7d01e77ee76
SHA51222083fa15137b76e03827f5415ee2a7b5a5f57416ca1b3bd4324f6e9133ebf6b689aae63497b3190194130cf32576233d58039ca02cce70710123851c39992f9
-
Filesize
8KB
MD53eb56f2f0beb551d09aebdf6d86b520f
SHA1f5a86d78389271214923e9990948ba48e319ca3a
SHA256aca1b08444d959ec251d7ea0b94762e5c3a36c163d59582dae407341cceacfb9
SHA512186d358b530ed61641d7ae53993a353407e28cce5ca1ca3466350714b857fef4bcb11e4d5dd772477a221e70eaee34d159d4ef7edf9887f16d5b6d84e3970733
-
Filesize
512B
MD5b93d7b9f8a4bd76d66a12da83e90a737
SHA13e6047782bdb47a27016d02afcc99ee3db6292c0
SHA256f8b68984e846e0efb9a1db056d147941cdf99742cc960db0930b1c4418a5e36e
SHA5121971d973e7db648f0f7ba3d4460e86b728dce0ec5ac55e620ee0fba3e1e07a1800062e94ed413bfc6c55a41ab9d7a865500abad9652d9283abdf9b5c4fde4057
-
Filesize
8KB
MD5ca5dfdb94c9e9ac94bf06cd48dfb64ea
SHA18e7d8dfe62c84273579cd1fc24f1284d17655098
SHA256972f4fc55bd287bf4a7a2c9b4c5a41ab0e7a4f8b128b01d333c6b702d7649a69
SHA51218dd0cfe4d50b807e198b9d37b2400df67ecaf2413b2ecca3b13afeb95d8964107e3c07148c5247e76da68bd9101bbfde2f78259c4c9663e42e1c0d3da1e05d7
-
Filesize
12KB
MD5eff32c28549235fad48fbd13953dce96
SHA164fa639c18e903eeb99ebf8bc806babc75de94d0
SHA256db047fd22dde2f9cfcd1aa6cbcbfe06407b7dbd9f0b3c1e42457c44622d80f9a
SHA51201278f62be334ec4fc204b9004913d36116808acfd91770512c413be41fd00e51d77aec0ffc7840142a6b741c1628de14e1c12cb6c3f20887ee30c3392f52b10
-
Filesize
56KB
MD53d441699176774fef0c05085d5f281d5
SHA1e7a8b5d72e836ae3bc7c9829d16493e2c0398bf8
SHA25698775ee89a805a505891af05afb37c4b34d3983cdc7d3e85d81b3fc612114929
SHA512b94a130f7d1e19fbced9f61fb7b5f25c09aabacf011930d2694ac4fef27df048448c0aa00ac304d5392a710ade1e6e100498c03035cb1b4b887b2e690a3b22ea
-
/data/data/com.cmplay.dancingline.hack/no_backup/db_metrica_com.cmplay.dancingline.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize512B
MD52c35deb4fae324f2e9c67d0f4321fb73
SHA1acaab330ec64a097f21a810b231396e84df64069
SHA256581e99c4a5b5037ab99ab818a13a0637d28db0022af8a63ccf7d0747ec435c4b
SHA512f45e7b07b539484ab92653255dd3136fc4b23234655808c023c729c46ab1e913ee941d739ad1716f3443bfd1b1259033246b11180b9911ba75431b90f5a93dc2
-
/data/data/com.cmplay.dancingline.hack/no_backup/db_metrica_com.cmplay.dancingline.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD5584cb90131688c029b786f7ac58f551e
SHA191649136a17ca08fe85588e8511aa52938a3f477
SHA256799903d7d9cd60768d7e5cb5ea00225bfbaf636a162ae36df1a38c39d9438a44
SHA512d4e53c12179358cd9b6801d2879d73dd4f70573a200147a44a324f383fc31be06b1e19df8c01b39e13fd46588521bb7cb2698381ecaaed281b3d17e7297c1dc6
-
/data/data/com.cmplay.dancingline.hack/no_backup/db_metrica_com.cmplay.dancingline.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5f91ddd2710a69e8f509e76f32892c992
SHA17e77fa2cb713de716a11b65278ca7aa162eb1077
SHA256ca2ece209feb13d40129f75d3821d3c20040862ae670f56c46f88c80e61fa95e
SHA512c95c7c80481adc64765fdaaa3c079d995b59e4263c82145903bccb93d1cdbb35075c81fc61e6316c730090d52a80ccfd0f3f6c94407d9ca4a4edc3052ea31b45
-
Filesize
20KB
MD597ceaf704a51e53c6460860ca447c1e1
SHA1a276a1c0a8c0b4815c0c79de8f5a0dd628be6d36
SHA2565ccb0bff334571ff97a088fb6bea5022efdd7071ffc274011a8b684f5e41cdcd
SHA5128925e8fd7374fbfce24e0a2c5123813765b1496ef07416b29a3443f65bb968d27c2a0c5dd999f512815525af91f28ce96933b820fcc6601ffad35f539c2f5e18
-
Filesize
20KB
MD55a0e37d8edd6fae93bb2d411c1098366
SHA1043dfbeca9120017563827625d0840171972f39a
SHA25611ea0c7608d6c8f1a36c6174ed394c8ff7760210797b7ab81e354d5819d41bd9
SHA5120595855751761a7d2e25c6bc627b88fd80696b45dd9adbada7933d0303171c0327c75a9a32aa7f0b6738e6f1117eff1906a0d98c13c5842562611a89847eb592
-
Filesize
20KB
MD5a0a548793a510f9caed081689f935eeb
SHA12d1aad0213b2b86bfe52dd2485741fb00eb02f3a
SHA2564564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
SHA512624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367
-
Filesize
20KB
MD59e6cc1625f52fe6865829c7953c90f65
SHA1e7dfaec94b6a8a917da69826a08e2872f7d208dc
SHA2563d6c1b93d693606fa486c0a62db82b1a1ce12837d74f5f550d5c8b722ed39568
SHA5126c7e7bf6688b424b6d9d9e0543c36906d66f7c0430c6c7075fdc281c7de7c846ebbb0a9a75b421eede517a0e7a890cf383d5a23f81cf368cf82623b6013e57c2
-
Filesize
20KB
MD509e4acccf4bc59c40e442a8734344830
SHA1b47040797d036782971b17fe18ceb27f8571e83f
SHA2561e1ff29ff7d282e89e2de097cb0f1dcce61c38aa7e9979b4c94371c89da33892
SHA5128f7fb36429c08dae42f650f6dc9e4d4b06c6e9f6b90f41d09000f48c17237ed502dbf6e3ba4e85985525dc59364d8aa3cc49a71a99b83dae8180811b784752e2
-
Filesize
12KB
MD58306ae736102070f8b147ae02719c856
SHA1ad885656d9622e2ac05bf82bcd761450afc08237
SHA2563b685f037e00f663d70c211a6ae0041ddc164865c417d9c9593d7e0d0bbc7e7b
SHA512711ce8f53e3f3becf1b46c6f9d7b7053642ce76b9f79b202e8c6801afe512d96359c0b9834f818edfab588af1305806f6e37db67e33e1bc440f68d41dc7ce659
-
Filesize
512B
MD593b2981cfc297dfd63770137f38d8e97
SHA1c2719c0f171211349362a28894c1daaec654bc2f
SHA25685d4528ba1708e6552219c093e3dd587e0211317c464778414836a7f96803f0a
SHA512901ead8955138ec18becec2c015f8c35e443d2b522e1f1172503af03ec110c38adfc93d97cce8309efcc93820de71cf91bb32cec75517f575c6b0fabe75f0cec
-
Filesize
12KB
MD5e5f9cbbfc48ef16205e7bdd265fcd99b
SHA1c7fb174612dc23a813e5fc03de538dc6c2db064b
SHA256ae516038272a51c1683a4576fbc238972bdc40fb42d9724523d28970dc939383
SHA5126141506b32fd323455bd55cabb72d3f25d685667c48de430e3054e3bd42bc3df9a8b78bccb706cfe9f0a64b8cd97989d3ab0bef2ea67985accf4e6a0dafeea24
-
Filesize
12KB
MD501de8e6d12003c21be1b968bbd05391b
SHA12682b97872415e44bd54ffce3e6f6fc0558cb297
SHA256af3ef904c1ef2a8c5d4420572312b4b1fbf8a461fc3719ff830b379083ad3333
SHA512ab357a71b37c5f9aa543e45608f5c6d818ee720444d4be7ad813d28de2b6e9ce9b30c9b5c8001ce1b97b4f8e771043c13168f2b22bf5c5343d5454e3c978c1b2
-
Filesize
12KB
MD51d0f83f911f7a97fcb402d6bc3a76c2f
SHA11a0d8aafd65e447214c8a76de47664fc9d27359a
SHA256c43d982c560aa67eb4ed1d126001ede625f988d05bac3c16de4f2194f1bd15c6
SHA512a02aa00ad0ece7c8bf582e2739d66c7a30ef20b30a63d2e68b6ec3ec4c2db4245150db6e9a1ac3ee143edfbb4e626cdc723856bc50d9ddc74d93e8083fd81f1a
-
Filesize
20KB
MD5c1af47b577b870a44f94a1ba6e21614b
SHA1ccb148fa444a901376743561a0ba88e1d1887606
SHA25672836c3c381bdee4f4a5587329a1541ab2eabfbfcc342146a6e9582305602980
SHA51273149082b32c7b9675facc24702f6ff6b33be1641afdfbd7bcdfe9281e0374dfaee0b17f43a28809b23e37fa14cec22224c9a95278405533fbd95bd7d89da129
-
Filesize
12KB
MD5772e812b5bbe7577b05ee7cb37f14f0f
SHA17821c50b3469b7b7f2b8ae2b9a337b8453d545fe
SHA25666e3a7daab0642be1bd73a82bc5950a61f718363f99fed9511d29c07cd7e72ae
SHA512ad472d59258d0f3c686b84d621bb9341482b7280506bad977a5877ae3695013e3ac7d9df91b8323db7bcd290176a614590126103ff32f3d92d63a9f691241472