Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
100s -
max time network
147s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
15/08/2024, 14:33
Behavioral task
behavioral1
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
-
Size
5.0MB
-
MD5
9a6a0065d390836ece27df30ba14db7f
-
SHA1
0cf21e39120f41f5c96360faa9260443aa9db809
-
SHA256
4da1a07d52db4243c001d32265f0a1951091bfde058c4919ef2e973a24c2a8ca
-
SHA512
81d1302021d133b802a8b6ca0252097a7cf2bcd6930ed7881c1996652de2adc66348c66e2183b16865f08d3b5df0c7f1b576a5dc0040e99fb931783e498146ec
-
SSDEEP
98304:1zkLWIFcjwYlBRHXs+53WlmBmVg0sN50dy4/X4gWgDQB1+SqfaHVxgw:1zwTFcEqBRsKou0sNbSogWgcBQk1xgw
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /sbin/su com.cmplay.dancingline.hack /system/bin/su com.cmplay.dancingline.hack /system/app/Superuser.apk com.cmplay.dancingline.hack:Metrica /sbin/su com.cmplay.dancingline.hack:Metrica /system/bin/su com.cmplay.dancingline.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.cmplay.dancingline.hack Framework service call android.os.IPowerManager.acquireWakeLock com.cmplay.dancingline.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cmplay.dancingline.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cmplay.dancingline.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.cmplay.dancingline.hack Framework service call android.app.job.IJobScheduler.schedule com.cmplay.dancingline.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cmplay.dancingline.hack:Metrica Framework API call javax.crypto.Cipher.doFinal com.cmplay.dancingline.hack -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.cmplay.dancingline.hack
Processes
-
com.cmplay.dancingline.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4503
-
com.cmplay.dancingline.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4546
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD5212a337771ab5b18e82e4d1b7acdea35
SHA1092a996b96b0dc7006669f4a3dadc94357b25013
SHA256802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
SHA512988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915
-
Filesize
8KB
MD5ec63f17a5976151c2ae7090b8935f692
SHA158167ffa40e30a6265035fa0d8b99923e98e108d
SHA25619a94b0e789ff2fd8c9570d564057bf8388180f01ef4c3c644fe68c0eb1435fa
SHA51283a3ec6abc8d6be2422512d01f4c6ee8bce494122fb0217b70a6a73d1c8b4c1baa866522c124248ea7d61f188572d334aafb8a1a0f8e19845d4cc2ce46ed4159
-
Filesize
512B
MD58ec6fa8c8a9322aac54a6e2eb6769473
SHA1fd50ab1a0260e6120f1e8fef0c6e55111ba88cf1
SHA256bca8139d955c88edb87ff2ce11631a4568222a5b26e02c9e709f637a7c5cc299
SHA51254503b4745e416f99d4d367079f4496c0f977c513caa57b267a27c773fdf6c08abc3120b97dfeef418d9e66edaf997d22b4396a609b78c99be181010606f47b0
-
Filesize
44KB
MD5984eb4b1b06ba77ca9ae0d4691e81f20
SHA1c835c8371107ef6288e32114b73a60069724f8da
SHA25678ac6ed3b1023774b1f82300620905d05f0ab2b1926b5674aed2825a954cc555
SHA512cb87414df15c77aeea6f909d9d25042b398ba5a1f24ef051349937d1a58d9a8f4a9e6c2d6dbfd2664a2b9740cab1d5f736106bc5e1936b82f443596b476560dd
-
Filesize
512B
MD5bb6d7633a0f8bfdbded85a80de9d7c91
SHA1b0afd34b1a4126ab25c8665ff75041388bbcbc3d
SHA256b99c3a73e4867b61d87d7a080398bbbe91d1fbdea516d4d3539f26e0d39063c4
SHA51239c6f1d64bb55dc6de7e98d51fbf339e1731279c3d2522b84134892d9d2f4d6ef27f9e0a48f4c0f7df786d1f4e4343ff05cfdc3a351dc0682dc01d0dd5613233
-
Filesize
52KB
MD5a5cad0008993a4cbfebfb695d0fb11a3
SHA1d10aa67d11b4d9a0d1fdf13269e16a65d08f7307
SHA256e449f1807e555801a4d5785fb1b9311302446ab89a01316ed58f9642e0156045
SHA512d0967e2682374f30b89d7c153098f8b25a9009a3fa2fba55d71daceef435c2a5a1c7c374c2d47353fd8580a5f15181f4b1074b983b9a7252606af48dfbefe7bb
-
Filesize
226B
MD57c445671e2f41a70f8171fa7d5cd86f5
SHA12eb3054781e06be1f242bdd5df708c232c8f5858
SHA2560d00329f1e85ddd255845a74d2b4783674504da6752faac6006744ba1fe7a667
SHA512e6272a283eefccdfd9a936188f7f7c5832bd6a7528235b204c56535e44e19102705667d0cd0dddc47544f8ced0b67f0e691e20388f059a58157c277ae7785e6c
-
Filesize
12KB
MD5ba8d1c8516b4ae794cfeeaa23ae92c48
SHA1973eadb255e015ef64853e0920654295ec7e764e
SHA256aa0001b7c592a21551c050ace9a2bc2f56926acbcc4580296d67e49e4ec379e4
SHA51224674e4f4c4a2132e57f4a39b6fab691afea10310b29ef223be116f1e41a00228d38ad00cfcbfb5bceaa8e5e5a5a79286561697f74ccfc29ed87fe429da29200
-
Filesize
116KB
MD507cbfae073a1702b2378d49e5d3ad1c3
SHA1e4ab00d34fe966a741fa68b0162776466e17118d
SHA256dd7f37f5c8a803cd85b353dd6cdaa0b3f7e184dd82ca2f8936183020979cf482
SHA51271ac05a499f403fffcd39c5fe98aecff8a3a787e041133d1413fd44eba511844427ad5b7ef2dc276e408c93cf04d6f2994c901c4f19b42a41116525ebbd8ba6d
-
Filesize
76KB
MD5372f9dce52d933edd657931cea1ce186
SHA15ba4714e8fd41cc3cd278365cba73df5904c8def
SHA2561e311253e7eff2a25d7db90346e7dab9ce9bbf471712f6dc4f20d636e5c58656
SHA5120572dd81673105791015058e0fc27a2ede90f88bb94954549f5ff856158cca1f8a4154f4e277c9d2ef79b2ddf024f60f7e73cf861707954a8dae0c5a27551d22
-
Filesize
16KB
MD595e529d2710677a5cd425378cf9c5476
SHA1159f38c55c7dc9b35906fb5f112912265f030a0a
SHA256bc7825ce2cd75d1addb524fc8f4ed36c7c3f256f53ecee937b4b99b04d6b8d82
SHA51252858f723ef0d66ee961f41edb04f8a5591e438eedb44891c892d255d8bbebbf201fbfdda5accfdb55b7151d40837004823fd29cecca0a9f9c72336d4f428969
-
Filesize
108KB
MD5959d766197f85794edaf00746d8a20fb
SHA17cf85ae0c24ab46f58c5eb9f8c89f213d0562043
SHA256ea3547bbdc166146bcf4b4a6279c1aba855c3b245af6029902f0c42dc6eba7f6
SHA512ca43416b278e2f5782716536e91f09b7f6420bd8776ad39b8f697c13451684c9d17f50f787cc095411e1d991464f46aca00503fdf87102b012137d8e4e631981
-
Filesize
305KB
MD58320f2b8738a63defd7aded6be17b8d9
SHA11662474c27bf1901fd10e43b432fd394f61659f6
SHA256ce17b2d33e54e0289b33273e94d200e23bcc21c70cf6ff0baa9cdf9ea92cc8fc
SHA512188d60caa61142b2d5739ffea5b4bc6f2266d23f7052c7d83491fc3eec02fed0e8443e0051945b77de8797aa07ff0e08846546f0d314245f044d93ab7cf195b3
-
Filesize
257KB
MD573a8d2ddf57bc0148c2802164b808ce3
SHA193851775fe32d9c97c010fe1340cd18dff111fe8
SHA256e26f355f695a4b328ba27f96d0edb2a8d86d6d9abb0ebc188d09ff54b07c960e
SHA5127911b9d67507941680cf9eeee8967687ef696611c76fb1fa0a60d456c0a6073ccd7fd666e49e2c8ee176c2a290e6b65272c242c33603857b209ccefba91c7825
-
Filesize
12KB
MD576e081d3a24527a51be2c2c62e11d7e4
SHA10f5a36b534d92bdc6262033c538090cadfee591b
SHA256af528a001651bcc4ba1634646a26715e479112e9fc7e7bcf74676fa760d08091
SHA512240dbcd73905650ebd7e08992383682216b18c50330cd1bfdff87ecfb5f16f8231bd63f2c223a5090f847bcd5928fdecd682cea8b7fd52acc256e29ed33d48a9
-
Filesize
226B
MD5223b4058d398320447929da405a9ddc5
SHA14971898611a3183ad09f12205fe8e10ef1bac053
SHA25614ff5865c246892fdd03445fad57632a50612ba05630d115ac3a677dc4148228
SHA512c18ba47c4e3ecd7b03064ce60a559e0a1818df9905c7bbed5ed48f077a20c83c1678b87f89e50f64e68f08a5773360808ff4a7d3cd846d0055a72df325c112de
-
Filesize
512B
MD542ec40e8bf208196260b23727492e44f
SHA1c67b8c9a631852d22499043bcee9995a9f8b062e
SHA256e8b30e1c75c746d8d1a5a6b9862aea509b6521486e63deb088b2926faded2500
SHA512077887d95ce33e1a4ce66c5d41e7c48d462defae9d42ea1e80649a0e8b7801aed29e96d332c011e8e7eeb87279fca55ce4e5a249f4755d38c283b48abe74b2f4
-
Filesize
8KB
MD5ea2e6937402c3bdc6faf8fc24c0d6ff0
SHA13bb3029d23c4402f1e42e6b64263b0c08e622c13
SHA2561edabfdf23208fbf1e02720e9e43d2c9cc7cb8e712c7286ab1f763eca6a0f775
SHA512eda6a27b163896aa845ab952ab8fb2c516cec39ac28180fdedbd290e8708d7146177303b00821fcb0a0f633b2c52b6cf5ab68188b85d38de0e2426b218c6d175
-
Filesize
12KB
MD5b2930c296ef9fbc516618c445ddb7207
SHA19d63dbc47a0d4878ecb85759e20e4ced862a02d4
SHA2566a43f92c092dc535ae24db385fdc36b9e103d2f7828d2d9f3c689cc9519d11d4
SHA512a1f5911d626d074d41ee012a63674a04b3e4cf241a97f97993e545d73076e2e6ad62fc37a5b3c3836862525b8699ed8c9d4dc3107fc527414a1ab2092a1a6fbd
-
/data/user/0/com.cmplay.dancingline.hack/no_backup/db_metrica_com.cmplay.dancingline.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD563969f0422c4891b96478764dd4f02f6
SHA102d50fac7066f3f8fda0d474f16533c5abda6c19
SHA2568fa6c540f37b84886b299d952d5ad67ac421348ae186702daf642bea5e7fe7b1
SHA512d7b282c2aa1b6309f7eb2d6a6f4ca4c18951fc9084cb5b6da3ce1315122886a885e3e4d5c7e574725f0d9b1400115bd9391629b6e85abc7d3e25ac422d853cbe
-
/data/user/0/com.cmplay.dancingline.hack/no_backup/db_metrica_com.cmplay.dancingline.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD512bc9a79fa11669198917b0ec617f376
SHA197c79441ffcc7f98036baf3b54d04b55197bb0f1
SHA2566b25d103a713ab102130c25e7a7d4a279ba95a0d96e615f6800c4688c47e287e
SHA512afcdd18d60c9ff78b952caab422b9c7270b0ccf935fafca2f30a4b2e442eed5a857c97866c10081dfc8bdfb394257b5acc8387b326787327d4676df9ea7bf057
-
/data/user/0/com.cmplay.dancingline.hack/no_backup/db_metrica_com.cmplay.dancingline.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD59032d590a9c535707c625b757abd2a7d
SHA1a24f85369cfae16537f6885c86fa1816420e31ca
SHA2566563466db39b8aa6dcd145e6bb9d6f10d3f1efb31307a5b7ec9e87429ab5c3b4
SHA512c08439ef0a32e9afd8f19ff9a503f4bc8f4f6f5c406f812fa2b7f54421ac4bd1d268ff405e4f67acb1d20b1f7ba8d7406b722b4378e0af200e50abc331de32da
-
/data/user/0/com.cmplay.dancingline.hack/no_backup/db_metrica_com.cmplay.dancingline.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD57965bac7e680b5273695de887cd221ff
SHA17f92141b07a289038582a6515af048a23101c979
SHA2562165b71ae71e0f28270bad6fa3dac7228440905a314961d716def9ba52d094c8
SHA5129621bea68aecc66c55d9dbd6d7a325a584ca2dee9ab85a830af6b9d6dde7ccdc4e6bda88ec254ff1ff596291ba50a137b7043d58cc41a3db8fb436730a2548a1
-
/data/user/0/com.cmplay.dancingline.hack/no_backup/db_metrica_com.cmplay.dancingline.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5a86c5a8c68f7705e2d710b64f447f028
SHA1b1bb64e0e831f3d88236581d2240468750530d34
SHA25644c30120d12d8daf1d57cbba4d0f8befdd84d3c54574dcc0dde3ae9c2da4d1e7
SHA512ba112a44a4117ba4dacb4d0c4e021b8e64a1e9a783e333e0a609b555f807e176b58c5f143b7f66847da3c01cb4f008f54b74013e5340d6cf349997729b8e8285
-
Filesize
20KB
MD592c6f84fde9e60701e8e4df66a39323e
SHA132d0963bc702d19217eed7aab0c3f37fa637bdaa
SHA2564974e80994a71b726ac58dff34bf2d610bccba85defb7894ace9a17c22854233
SHA5127265ed56530b02b94e1fe6f82272cf406a7b581a9588d91c3a0d35c927902d0c357aa5bca755f29b9240c9e423b5c38af41803e6cce4baa11ec772ce6da88c21
-
Filesize
20KB
MD5a92f3eaced683acc33b91dc598d09965
SHA158b17c5d5457db8eb6449d5b6be6633b030db909
SHA25605b90213c4cde30cfc15c0459c43153a7b6a3a75e530793ca98ac178262322c6
SHA51295824a28383053e02607d203eadf64c27e96c295c6089cb8e944f1c2ce27d688c8d60e8b0cab785451efe06bc20a42c30a1349cef690ecf57849a5ea0fac2464
-
Filesize
20KB
MD5fc318483a677c71a725dbbe6e9516df9
SHA18ac3af9cbfb464e53b709028d1f64a4d019bb2f4
SHA256d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
SHA5120e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140
-
Filesize
20KB
MD59d41d9d3aeef014607d3a23876764464
SHA11a1fc3aca99bba5b8ecf43e109a9ea2a2cfaac0f
SHA256eb3879ce9bf99215133e7e4c7a6111d95a6d8dd4ed5eed31a9acbf30095e4f81
SHA512d4ef544e70ffd463bbafc98fb9310838291b27e6f5ee24088d40bf67a79521035cda198267d207d94abc2835a1ed19811029c7be3289e5a19f484856ce7a56f4
-
Filesize
20KB
MD5f41190bc14579e44f9281cfb5fc556c6
SHA1a581aa54b64d9c7ddcab808ff810d8384a7a86f7
SHA256f984391261823fd02af8f37a1aac1dcc5475c2aa3ba0a187a12cd48590de0fc6
SHA512fed54f90704a3bdcca5a7d7d53e9cc78fe014ad6689e57b56ee28e46fbc85f52147ac8377a59a722cebdf30b734fe5ee0e060fe3fdede54d7c90aabfa68c1346
-
Filesize
12KB
MD5788d9eabfba4b9dbe92792f4ec12c7cf
SHA18fad7ef95ce9bc6a9267cf4e83bf0d27233bb7c0
SHA256bf8388a6e3f3aa4b432ecb9e4a41d69d629d0a9b509297b45200546fb80450b3
SHA51207944aa5e1ca3eeaaf16d81dec9e53b3c1892e317ba2aa812447abfbf41cfe51f583bb2058abb0ace25f95ea8d1b4e9bef6a2a07a77011446b54d859e7c018e8
-
Filesize
512B
MD5961ceabdeb71b9b753401593dd0ed33c
SHA1c7c73e3526d09de3f47ed0134a57a977296a4f52
SHA256f4771f774d90d90c702a72746f9ce37984ecb786b6224a021b54c07ec54d5001
SHA5129ee1c76353b4b156a61c4ca166aa750526262f85d85e1491d4cb851816f8392ae8cec3ce1f59594246086c536f5720fd0cdbeddc020e43d530d2f3e535b3a65d
-
Filesize
20KB
MD53f67395937fdc04da4f14b1317aea03b
SHA11227989581d103d79e99f99d6d00119b400efe37
SHA256c0761904fbc2f36f8d0f110bf15682ed697f5b019d4f908e56d83d167f4ce991
SHA512b774ba85954c7aa3ed38201f35b357ee38954ab2781ff62581c1abca7aef6ce21657530ca7c6ff6048a502efd6a4e5bd5b9813ed841ca2dcdc2dc18101ac75de
-
Filesize
12KB
MD56be732856b98bedb6be7dc63bef6514d
SHA1645c289e3344a55526df4456be8392a9f6878c5d
SHA2568688680bdb09b886376ae7a42148cdbd914fbc809219ed67a5e3938f1ca747f4
SHA5124a9b29583343a6a76e6d9a3f8d5405eaee29ee4c90c8a9731b0c1881a501be3e745cd4c8fe30d2e3d5a3dfeca4d7f515bbe82d13fa53242b77e3e146329ae835
-
Filesize
12KB
MD5953ecb50ba8e4c9338d709fa2a41a612
SHA1c1f87ca8d23fea0a365bae6be1d005770f6b97b1
SHA256846bd591117a75d062f8e40596faee139e70c2d5a3ee284ba0b4310befcb2ab6
SHA51243b4529cf73ce0c399ca09c428d09cf304dc084b008cc4e67642a3e4b100219d402d51d4d58350632b7db82de5877c331140a480e0a1d108e460c4fec5a69208
-
Filesize
20KB
MD5d1edcc0af5173b8171029c20b5a13e1d
SHA12cdc12281fd1dd5851e66661597af27262cebb08
SHA256a082e03646298895fe19eff654769a2ca7b15c581d5d4fa6dfc44e513c63b971
SHA512241bb1d43c259693c0f3917402978ee6bdbb1468136987d67092beb3850ee385c6cb15bfc2ea9ebcfea2724fba1f76a67639e0165c5111fd6ae5e016ef30a908
-
Filesize
12KB
MD50751b80671f258fd4843898ea43d3f49
SHA1a507b1f5a06bceb9a7165464dab5df8d16aff7b8
SHA2565e21e425a5dfddfffc24cc3173e6e062ac0b38a5818d568c83ea67a0ce5aef34
SHA5127a93c99af243ea34b6a28179ab6175cb6634a712841a80720bdd91da1a064bc763c77a55a2f63d65349b166f5d6cef1b7496ae1a84c8c77627f618f74098de96