Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
179s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
24/08/2024, 15:27
Static task
static1
Behavioral task
behavioral1
Sample
bee3a57bbc54659c9b3998ddd5c5122c_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
bee3a57bbc54659c9b3998ddd5c5122c_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
bee3a57bbc54659c9b3998ddd5c5122c_JaffaCakes118.apk
-
Size
28.4MB
-
MD5
bee3a57bbc54659c9b3998ddd5c5122c
-
SHA1
5f20a93ebfc8f89649f073569c3183d821accb63
-
SHA256
9b602f74283cc95bfc531c7c7cc10e05f0c2472533fb9c46829e53688d181360
-
SHA512
e9f982cbe57d388b3a682852d3ae7f635da0d64ee0d5df32fd580b9c34951895082b5b9cbd324820b324b4808b72a36859f5682a2be976397d1eecd368f3eeff
-
SSDEEP
786432:E+C+GTk35/Pmm+Tqs9TwNCjT/nbwG76ROq:NoE5b+Tx9jjTP/y
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses cn.com.spdb.mobilebank.per -
Reads the content of the SMS messages. 1 TTPs 3 IoCs
description ioc Process URI accessed for read content://sms/ cn.com.spdb.mobilebank.per URI accessed for read content://sms/ cn.com.spdb.mobilebank.per:push URI accessed for read content://sms/ cn.com.spdb.mobilebank.per:push -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.com.spdb.mobilebank.per
Processes
-
cn.com.spdb.mobilebank.per1⤵
- Queries information about running processes on the device
- Reads the content of the SMS messages.
- Queries information about active data network
PID:4267
-
cn.com.spdb.mobilebank.per:push1⤵
- Reads the content of the SMS messages.
PID:4296
-
cn.com.spdb.mobilebank.per:push1⤵
- Reads the content of the SMS messages.
PID:4330