Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
179s -
max time network
186s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
24/08/2024, 18:52
Static task
static1
Behavioral task
behavioral1
Sample
bf33eef0e1a31a7963563032443e4a84_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
bf33eef0e1a31a7963563032443e4a84_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
bf33eef0e1a31a7963563032443e4a84_JaffaCakes118.apk
-
Size
31.2MB
-
MD5
bf33eef0e1a31a7963563032443e4a84
-
SHA1
fffedda546d7071a24e1235092112d8ad3703710
-
SHA256
c0501ffef0e5f1dc51e833812f081ca988d9629b5ec50109d43297791db1ceaa
-
SHA512
92303ba2ef37a974820aa52a55239def221ce000215bc1ef110996ce76954af77963d916963ce582623ba11462ca18ab763c6d7e62f2eab83846287b084d21e4
-
SSDEEP
786432:dtLmNgksLK/VLkDK/VSbwAk1bYwprE+VWYCW2VryMJsFcv:dtLmaksLK/lsK/osLppvCRVrBJUcv
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.cmx.wuliu.ph.owner Framework service call android.app.IActivityManager.getRunningAppProcesses com.cmx.wuliu.ph.owner:multiprocess -
Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.cmx.wuliu.ph.owner Framework service call android.net.wifi.IWifiManager.getScanResults com.cmx.wuliu.ph.owner:multiprocess -
Requests cell location 2 TTPs 4 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.cmx.wuliu.ph.owner Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.cmx.wuliu.ph.owner:multiprocess Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.cmx.wuliu.ph.owner Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.cmx.wuliu.ph.owner:multiprocess -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.cmx.wuliu.ph.owner -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cmx.wuliu.ph.owner Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cmx.wuliu.ph.owner:multiprocess -
Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cmx.wuliu.ph.owner Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cmx.wuliu.ph.owner:multiprocess -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.cmx.wuliu.ph.owner Framework service call android.app.IActivityManager.registerReceiver com.cmx.wuliu.ph.owner:multiprocess -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cmx.wuliu.ph.owner Framework API call javax.crypto.Cipher.doFinal com.cmx.wuliu.ph.owner:multiprocess
Processes
-
com.cmx.wuliu.ph.owner1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4246 -
cat /sys/class/net/wlan0/address2⤵PID:4355
-
-
cat /sys/class/net/wlan0/address2⤵PID:4394
-
-
com.cmx.wuliu.ph.owner:multiprocess1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4291 -
cat /sys/class/net/wlan0/address2⤵PID:4379
-
-
cat /sys/class/net/wlan0/address2⤵PID:4419
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD53fe30614d7e0d11db870b4624f6c50e0
SHA1053ff0fc621ab40f2afeddb3e7b4a73ee41ec533
SHA25667c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d
SHA512c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae
-
Filesize
32KB
MD5e9ad2663872a80cafb6f314ed7a2edb1
SHA1e594c2a4fcd364d009793a84613a7ba7acad1e02
SHA25654446cd25ec981430e9fa5fe996098c0e34f2bb7334648031a993cff807485b6
SHA5128b64145fa6a50ab7ba711ef09e9556059b4e94cbe80523f2ca2cf079533168728948c5f927c757efb5c742d841ae1dd10a4169eabffd826fce1b5a4a5b49b85a
-
Filesize
36KB
MD5b2e57373bc23ec2500d347404c3c7f3c
SHA1ba81f22fdaffbf99287d8866adadcf8ae31dca0d
SHA25675c78ee93a4693e71c2d346d9cb04d381937bc3961acd80ef1a98cd767a9919c
SHA512c68a39e34b703be98eea783bac482c6729c472e6d97b2092011caca26042bb959a6faa224e1d448bcd84a7378637f6c94698b1c566ff10626acc6b60f3b56a13
-
Filesize
16KB
MD54bf52e7f5ba1a017e93b3582d3066cfd
SHA1dd2582f8f260c8d9b0e547e9b9bb3295aec96224
SHA256fc1236a8b0dcc5e84cb04b2c89f3214374c1c983e1107f5e659bdd0faa944264
SHA5124de8e077a014e1c3b2e6d00761317a673d3b19fa5cfe46f8cfe31e57becff05cbd38a495f902d87f69470d300cb1f97702654a7a5f83731bbfe6f066a1c78aa2
-
Filesize
20KB
MD5b73bd140bc4a0045b8efbe6fd95cdfd3
SHA11a05440cf5fa7b4893a5c56303e61df498653b97
SHA256a8ef6acf84393431a8012571216a88ae62e6b4a7ff40166d18961d8b3180e17f
SHA512304fefc8b7db7a78c1b1f708a9db622776766d5f8b7e396705073840ceececd8e34b627efa93d4061bda788b0888f6565e96f22d6a105abc982424cd1971b3fa
-
Filesize
36KB
MD560e918a66670488ae5e111bdcbcfa95d
SHA1ee81e2f5ad9a7301adfce5999095370e532a43d9
SHA2560126f776c2c01bb621001c4d80787b706902fa8fdd89fd1f062d063ec74d5313
SHA5121abb9311fce204649d299a19efab820981c427a8f3778a9848fdfe99aac19fbb3d62bdc4f5fc93bad66c090d198e9db33c23066041207272f2942272167796d2
-
Filesize
28KB
MD59e69b50192b26e7460b1f7316b598033
SHA1546cb501af2f7ce88b4addcd73d68429bfd3da17
SHA2562e38bb946e960046bd15d7990b47977b667400e1c1316fcbb71eee03a5bc9ce9
SHA512a1fb9e5bc2934d85432fcf5c25a9af44ab02dab971724fe61ae71cad549a728059cbda03e9d39b003d06f96483e718d0895fb45ba55dd07315b7d890daa37e2d
-
Filesize
36KB
MD5e84e2d5ad34599d9a6a2a791991e0d50
SHA146bd74965a588306ff4f7079db86bc51ef68e217
SHA25607baa278537178b70f8f0bfa13d6aaec1ce90dd2c1fd5336676c4db695be5620
SHA512bea25c44374cef544a0e4acd82edf6aad5c243aadd7556e7c78216c45688d9861874e8ccdca05942c0219877770914fe476bc142a6bbfcb0a74422dd2bc506d9
-
Filesize
28KB
MD5adf220f3017cecf7749ab16f454d3ab5
SHA1a5dd5974a1d76ded733acf8ed73f0a393db32f0e
SHA2565a28d28e7a7478723aba9b7c6e66e8cf07cf11c28b3e8dd3c0a30d0b529c4610
SHA5127f1645e209b6bc4efe6f72fe275eb80b1c4ebff2cc0fe4caaf3b974e5e614dfced63303fb066102e83a9eb30f43720de902eaed5c693ae19b20747014c06e77a
-
Filesize
28KB
MD55a7d79eb596dce6ba2f8f162baaf62e4
SHA1f55514c68b0ab5b3e012bb57764cf3c80c72a410
SHA256a44e0a7d2a860ccda2d8b358fc1c4ecfa1294965098dbd5479ab7cd1058ab284
SHA5126a631b4dc0c72456f5661be1d172c6752df696b453a5b01acf1dc90186b5ec282829b50097baf5accc6142a70acb3bc311fbfbe8365995379d9b905a465214b4
-
Filesize
4KB
MD59f5aab1ee4bb5906d61d9ff62a60d420
SHA16b2958dfca5d95e143ec6aedded81cabbc61bc96
SHA256cb148c1d9d28472081cc908c0b6ff96aa0620fe94b06fb6c973f43cf2faa59c0
SHA51202865a6b7ac349876c58eb4198839494aaf2a9ed7a7208e3f4b73f2f71ca937c54265bcffc87ab8db2b8c290f5742710ad75a8b44b915f2e29ab6239161898f4
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
8KB
MD57d08a4cc20db6cbef15ad5ee624300ac
SHA10fc72eb1566de4199182c1c73940621d2e84186c
SHA2566b06e1f316c7157e95e737341888517956af6354a70da7c77432bbee527a9fa8
SHA512c2aabbd580d75db64fc6f239299e450559ebbbe60e3f2a732f26245b0d56d1e28b9d14035995cf380ed71a813dfbe7db612363b6e803b917a28a5d891c5f21d8
-
Filesize
8KB
MD571fee65744d2b30246ed8dc72c66b80a
SHA11eaf1fcdb09834ada30ccc6559ef1665c57b1d27
SHA2564601f92df22209c91062beea3b1411908497f1c1556cbca0e4533b09d488e0af
SHA512d988f83189a0065d5cdb2279cfa3e9d89f43d7b4d4cf5d81e1677b8d3c77640ed4d5d226462d21e51ecc8a5c45c98af496edacd2ceb070cd26774de027601bdb
-
Filesize
8KB
MD54c87b9bf0204380c660856b1375451b3
SHA11e84b7a01c1e2405ce5c496a182bcd88113b01d3
SHA25675a4ac6eb8d10ffe197558c6a783438a2574924ea1b1512f1d146ee42a7c6048
SHA512a7c520372c2b71324fa8b1d12c5c297dd302e679c29b21ecf6a8544311bd7234c1a31dc1c17cd129c676f13ae52c60acc2039e4b4128b255f1e933557574e8a5
-
Filesize
8KB
MD50e51435f41be55cb918a9454df8439fc
SHA1f9d75c6b20c42179a7556078f643d8f92135fa0e
SHA256064f8289002c34f2c85e9250f5bd815e014089af8c3f4aeb64b9241498e30fee
SHA512f2074d9f0caa8327f6ff19f630dbd74d6ad54cd7473bee7b3c27db552a19ebac18a2ede9f84e3c531933fd3a1548f71b29813175f1af6fc5baf7df1361306ee9
-
Filesize
8KB
MD5f43501769bad2e35f977809a805d8b90
SHA1786c6998c705749c20819f2e7fcc66ce10500169
SHA256770553351b90a1ec757b0708f06cfe85592cd0dee8398e5d2280f19e1a7ef24e
SHA512e2efdb6ad822d8535aa4dff2af953f3a76be70de78326e1f0fc9ac35f3536c18a5f3db8c670f75f48d951bbb296a3a219d87785dae6a84ba9c7f17a0a012e927
-
Filesize
48KB
MD5f4666f8e33fc96423fa25298e77ee784
SHA16e737c6bd10e8bf0109fe3747d794af8096e03bc
SHA256f2534434788e2cb69fbe2451e2d0a32fd69972e096337cf2b1e5c7e31dead1b2
SHA51284b557fffe2a0e2d13365dd903c7f69d9a3b990fa1c7beed1bf4da18dc0e6d233376dfd060edb286e0b92edf2adb8f152ff3ba6d2b7bda438d941bf3197bf12a
-
Filesize
1KB
MD56c678db429d34258fedb29bb490aabb2
SHA1ce1c134e365d3c8bf9a64a22a46d11126dc0646c
SHA256f62f9036d8069901927cdc33e484a64cd57194cde9a6264c9ee43f4916ec4393
SHA512dfad6a5d3cfce2d0e95ff47ff7dd1110d33070df17a0b1538766a3e7b0f80fddde113bc9d8dac60dc3ffd9b62958febcc45e425ff38106db4a6c2343bdfc2c21
-
Filesize
1KB
MD558bf7acbf4ba29faa666ae4d14cdec66
SHA11c540a9015340ffdc9408ae3d22822d85afa695f
SHA256f677ea57a58dcced9e1c9e361f4dcc171d4f196380348a625cb187e29783d4e9
SHA5128f58ef375d47f6acd0b9a6c3df3bdc8249c6d7c5fe01c66afaa071d359e167df70f324ad5779fc121a759546fc00cede9fe8766ce50cc230814d96103437c8ba
-
Filesize
1KB
MD5c40e560bd048ba50364a629dab6fb729
SHA11d13876fa45135168e5f7add8e64350fd1e12e95
SHA25665b03a190303269c553d804934e637a4cd73e75141f001cf3ff9974678c3af94
SHA512c1cebf45ed9f7b239fb1a8b7458426866914aa8e93be58cb6f4cc5e7cea742e7548d15b15cf0ec9068b37519aac10059e28e1d2bd58006a26cf156de91930837
-
Filesize
38B
MD592d7d51c32c7108abde02705cc6de1bf
SHA10893bf998f88c71edeb904b5156c7507efaf573e
SHA2564ef6f9cf0e9ab8ca1d21ae0e1b9b10bb057a234c4df6a68d6b3ae8dd2afcb75b
SHA512638be7145fb915329d26daff3cbc7e6c1fc704467977bf800481cb4f0a633ed4d708b989245524d38b4332bd7f685706bc612aad5daa7524b1e56de1f8d9611d
-
Filesize
114B
MD59e10c19ca757b711865bbf357cfc6763
SHA12f8aad035ba5e54ac14aa96069c8bd6d2b1bc9b1
SHA25666f61b01b1d8eda892004095accb23f93b19d9aba16449216add45cb1b19b1c1
SHA51264f9bb4df9933ff386e5add01619a3ab28af97b9820d7dffc76b0311833bb54129a88f4f10061b1bb26106ba882a83429fdf8546f7fc0a2587dceb4feeaabb3f
-
Filesize
235B
MD5631c539ae8fff14dc529f2bcf2afe420
SHA1a9b84f87694f20e668aab5b392b48c9019d5e506
SHA256220ee91dc5c6c27de0da091ebec8becd5f437f0fd930fba51eeb9783ab8e09a1
SHA512b8956ed0bb007235fc74b6e4938d9cafbc852a1bbf827226198166ee674078baf5064cce16f7d677936c5de9379441c51fb7d961c717d7a6ae04f4976289fae9
-
Filesize
356B
MD5d98f2b1f7946789d3a0be64b60a07641
SHA18467c6f4af9c81e20efc8e094288084646b6e75f
SHA256191a0088a549303dc4bc51a39d6fbc78c400a61d32dc4efa14ecb3b74460ae12
SHA512b58fcbba0618a533bb85af54a5ea4cf726dc845f9a6b61c36073f6f8b80fd64fdb9bfaacbdd4b2f3f4dc296702e2e0270b43123eb60119e01301b54226482a83
-
Filesize
38B
MD593381224e2549a93ae72833f0529a1e1
SHA18e2742e1a8cbd6ee9dda4cc919b6d661bb2e4a9e
SHA2565622095e99c45e3a319f50a99b694b54322854460ad06f2f4710a96671966161
SHA512a6d4db4f7cf3b4dcc8e31cb31df474331f7c74a6266446118f54f02b54e0661a988d7d2782111976fbc0c59a2de5d823fbf4a5ced9df662693e95c501beb032a
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
4KB
MD5a30ad58198d3d5321aa58666be9f5e65
SHA158d5c916976621eb3e42d29bfcd5577fb1952774
SHA256e67fb2f0fe760d0fd97ee54af4a732df3575e7d00afe54fcf73329f9ae0dd6bc
SHA512d4dac9c84507fd99bc89cc5082c250f34fa5d6eea2fb137766e66a68e026f2d85bb87af25add11a0bbf99c9ffddd8a1ec51827de228d5945d66be9b70eb84b8f
-
Filesize
28KB
MD59b57cef8afd3ffe766cf972c3ebbe599
SHA1a067d70c001f06fdf5ab2166c3257fa7d5ac9d47
SHA256660787268bd6249cd3dad457816eb2830865ff729f05e56df0b668e518f9173b
SHA5128909e698c8612c6cbcf55dc05df59feea9cceb715d037b97a86790df21ad0e79da12d6c72a4295ba7a1ffd1b1306e16bd7fc6c6a7e07377c8fa83875765d5ad0
-
Filesize
129B
MD52dbed0460cc184259923026285f9f3dc
SHA1279385378dcd8da0dc9ac6d3a051138ff14bf90c
SHA256bf06f820af83a386a0e521da183bca95de7abf6f3dc40f6cb43b605117b55f23
SHA5128692fa4c5ba421ff83558747e3509e5d7ca5af7e2aa9f4038a5277d4de8ae897b814dae2adad3e965820a81136962e47139d83bd1e9833f4ad4b730839a1383f
-
Filesize
24KB
MD5374ef65de994f58e2179b764f9b08ccd
SHA12dcc5f0a8488a5f80a5df121a1e444acf40c363a
SHA2563b3ab8c32719cb3ee1ae3bd31164500c8f966f8a8725412ba79f32a651d6d5a1
SHA51264cd5249081f1dff1d01617a2d6d67ca144193345c3abf4e14f18e7196eb29ff67d882a010cff606a63444f5e8b465e858354313ed124f9e379e68b611333aa6
-
Filesize
24KB
MD5a22d9b53bda0f7778f3d24257fcf4441
SHA171a3202820a5d72b61c6a9185a225ad483faf94a
SHA256888492242c42413ad12546ef19324233a05469b6c6883c49dde8415d06ef5982
SHA5125e3cef7d79e1a41c55cb92b79cfd5273207df202feb742653462e98a600c0b2c6df0e63be1fc84201a08de83301c2b1a999973e37c3ab25fb0e8f32f94e15d08
-
Filesize
32KB
MD51ff4ead2dd55aee485c15d6ecfcfc85a
SHA1566508a759d316900f6dfd2ae7b78f1cb88a52bb
SHA256109706a4a19afa47e1195a123f526b467bfb8bc1a86c1c488a5d6a8e7411c18f
SHA512116e749a9355ebdd942a6956615769aefd04aae0227b972039ea309a7941d7ee7bb4da5b23435536eef5e177c562f450f6fc75755522125ab86e4bcd5b3b032a
-
Filesize
36KB
MD582b248056557c4bda0d88767e783980d
SHA1902d76b3975b5685ecfef53029e23f2ef0211d17
SHA256314c4a485b05b67d7f3d3e1b8ff17f6dfab1cdfb499c01280403fbf8ca0234c9
SHA512eef957b83baae7941e25764a84570c6d3af32ab4d3275717062c11697e67ffa7a5766bca873fda27501ddd4dd23a4bedb8dac9f2af4ab1ac16b01522e9a78c33
-
Filesize
8KB
MD57a2327d7da9c3cc92372b52bc21554f4
SHA1e233ae1fbd382e3155cc0eeba1f99f78105b85e6
SHA25606fe1f48207ca32755acb41c2cf4cdbd4610b26fb38b58a5dfa53488ae0a2785
SHA5122043579f4f5f61b80503bdfc21cf2c4ff8871d3f1b78bc4658ecee883d89eb6f6dfb9d319c8dfd79800d2a4b7cf01b55ad899197022e20396a445d7f235dac29
-
Filesize
38B
MD595275089c4149b556225af7d7460e581
SHA18ad0644be40f0b410ba3992c3071bc994087823d
SHA2569aa731632aaa4dfc5e5d26ab0fe6732dbab897e260b88e2f3a09646fb38f74d6
SHA51206dbde6c427a5687cce3943280f6eb88a8d279d7f1b715f92b78937f5e876194853699df723c31656443461eff0b7f14fe2e94197de88ce9d3b714cb57611ee6