Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    21/08/2024, 03:10 UTC

General

  • Target

    b1e543a2c87f8c1e757555ffdb150845_JaffaCakes118.apk

  • Size

    6.5MB

  • MD5

    b1e543a2c87f8c1e757555ffdb150845

  • SHA1

    e904925855eceda9648883af13630ac20fd6e6e1

  • SHA256

    6252f37b527a1d732a7f9ba98454639c49753dfa8f4c816da236a0003709731b

  • SHA512

    c1e8331ca3cd0ec960e26af5ae7771df7251a1840870c3dd3c9e6a47c375c27116fc6efd9fd0e9a38474d8f2bafa1a932c21cea45b2ef211e301af9601a151be

  • SSDEEP

    196608:lK8dahI+8Kb+cNalRxyNCaD9qvCjKkWL31F:lKfhIG7N0xy5pqvCmkGP

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.jahan.ara.loghmeyab
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4970

Network

  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    216.58.201.104
  • flag-us
    DNS
    loghmehyab.com
    Remote address:
    1.1.1.1:53
    Request
    loghmehyab.com
    IN A
    Response
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    142.250.187.206
  • 216.58.201.104:443
    ssl.google-analytics.com
    tls
    1.3kB
    5.9kB
    9
    9
  • 142.250.187.206:443
    tls, https
    832 B
    40 B
    1
    1
  • 142.250.187.206:443
    android.apis.google.com
    tls
    7.4kB
    9.4kB
    18
    25
  • 216.58.201.100:443
    tls, https
    429 B
    40 B
    2
    1
  • 216.58.201.100:443
    www.google.com
    tls
    8.4kB
    10.8kB
    26
    35
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    216.58.201.104

  • 1.1.1.1:53
    loghmehyab.com
    dns
    60 B
    133 B
    1
    1

    DNS Request

    loghmehyab.com

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    142.250.187.206

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9af32e6e45cad9c22a0beff7e5a3b5a1

    SHA1

    5a29f2bc3632484e3b47e1c6f08bf5f9de1cc49d

    SHA256

    b9ec7ef3639b78ce794fd930256c63a5971d6c591a575b72c2565e88b226f0f8

    SHA512

    eccbc029247794c094a0ee62de06ac5017ef3c8097d132efb40af9487224eababd73ed51be4e681cefa2d9bb8b1041bd51fb26ddaa2f0b15368b1114ce5d1837

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    b840084e09d05a7722534668c907a624

    SHA1

    e5dde0eb2205e51860c2b1f3d9abc126fa39bac3

    SHA256

    f7f8333041f0da61a2e080127ee1161e218dd6694c002d97efb725aeb8d11e9c

    SHA512

    a1d93afa3ce86d73f5fbc0dfcf3349332ec07f79d9f064277851039de805a4383fed756d01b690189eabb1576b9fccef8da82a8cbd4aefbd03e69559de7e34f8

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    75b16a993042c9527861aa522a8f9049

    SHA1

    67242ee3e55579d971664f9f6313b3a831bc9001

    SHA256

    0cd9af57f80ca380a9a1038466e89f1deca6535cc346dc3ff7f39d7f815e1575

    SHA512

    91aefc5cd614f647abda97f9d079ba09bfa82f138f445d0c253daea3a65338c5968be01a578d6aa4e48f2e5d56ad19b23f8e61db0ad22cc0bed4930cfb9cdd72

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2bd5d0d94a9187690143e110088f746d

    SHA1

    116a619ebf79c0b6d75e3faf5e4c04076d9a7a6f

    SHA256

    ac8a17b62cb9bde6584db445b447555081174095e0e8443c7803a081d04e99bd

    SHA512

    50952eacaaf1692c598ed6c5a8e93ecfab46845042f5b7b4bb32277dc3bfe0a9a280dc9dc9e3db4300a788894bd4a50259d0861e716d0278a1b0850437468942

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c80b7694b6b04126b66bc21107e7a7bf

    SHA1

    6de25b018a7c1175041c7e7fa532f57675f1c3c7

    SHA256

    9cdeb0d5d1e493c1f3e106a1d88de4a25ca28dbc0e9c4422de0b8722ea0b1928

    SHA512

    cec1d56635a36b25c000a38a711fa59ba28c938bd035920bce56ee7fc9caa4bc8e2664814f55750594c41ca71e16488715de3535b6825d6389d3efeeac27d3d7

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    40d30e91c422449170ae57f7ba1d2b0e

    SHA1

    8154e4df2153398dcff4153f465c13c7d6ebf39d

    SHA256

    19fc2d147bf99edeed53b9ec8932fa0bc531118d6bd08fa3e5cef04dd06ac4ec

    SHA512

    d5ba65ce80ef1758ee5e020fca2b08f6247f30b2e081462ea77268fb9b6ff57f849daaa5b7ff0b9bff1b02bc2081b4391d25713f8b5e4e5a58dfd5d43125a72a

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    8f1fc0207c5b2cf7005214938bad7b0b

    SHA1

    3b65ba277011f3d165b1898a4d67b955a316fb01

    SHA256

    b4cc6e3ea507404ceca33a7a22f5d04529f699ef0bf4c562a0051f7354815f35

    SHA512

    282efc17f81e36663e15cc13ac49bb28bd4cd54266045c79244f172b5b2ff079885486d5be5dc600806102e84d4ae1301ca2b745c23aa30e3a7a6fba1a5c68c2

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b2b59f483357925b70fb825f34fc7e12

    SHA1

    c41d3b6f5a523c8af4aa4e1f71c4fa28bac0488a

    SHA256

    f479b7363911977b5333eb906916d266dfea4c6bd233b2120df81150148b5afc

    SHA512

    79d9523d340742419e557c9cbf397629d4b47bc44d3d89455bff1bfe411f73c550bf3ba68c84d29c597ba590de5391431f0ee96ab57ebf77ee53c41afd0f9122

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    a1aab3ac822f3cc124cb1b595e83a312

    SHA1

    67bb9793c5ba8c7b5dde031b652fb6dd4874b389

    SHA256

    879d6778c55695e554459da195e4cbc6c1cb8101f19eeb41efd4cd4ac42f7d38

    SHA512

    2956dd9cd84dad1b43d809d7c7020c86d86a4f64e205c811c5d58a8812a45dfa23238898414193af5fc9846d2ff3ddc5b16dda1f7d6a1717b06576a17f7f319c

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e229df40b5c7e633467bc5c6903af794

    SHA1

    1f6d352d00f03984d45d029c75828414a38ccd9d

    SHA256

    fc6e66c45e5016dec4e9e96cb94689324e3c8689a805677f5fd9e35a45d72078

    SHA512

    85279c2fb7d07607b3e34ca2e5fcb5dd897d104bf84ba2bcd44e2a1000c6a1c1e3fa2eb47a4b60bdb972dd31b879af772fe90503dccb41750186c2fc94053953

  • /data/data/com.jahan.ara.loghmeyab/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    a986b53eb431f1c9400404821927837d

    SHA1

    186bae1e83da9c928c14f73ea992c60fbc4601c5

    SHA256

    719088a3e8ad37eb40b68fccdaba2560c5c46c55de31b1163b73c4ddba4bb093

    SHA512

    d74ce3ea649f630a56fde3aabad460a7c4e80e25206d79679de6a02a16c4a4b94f87e5b6c62347ec9b8994e2228665bbe3ac7e5d6c35a324efe0efa0b4407d12

  • /data/data/com.jahan.ara.loghmeyab/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    8f040e162edca250e450dc7679ecb048

    SHA1

    67e17edbd586182436beafc2f05f592283022035

    SHA256

    84ce7aa555c65c935fb4a19c0a605a1b66e7c9ad58ef5688afecf66977e6ae86

    SHA512

    2791adea562d1f3287f5ead0b12f20758a7c08362861628aa8cba4e8acfdf604fa7d915c9847b786c094e5191bc7938c304457e76826aa6221cb2e229dedf4fd

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.