Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    179s
  • max time network
    186s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    24/08/2024, 18:52

General

  • Target

    bf33eef0e1a31a7963563032443e4a84_JaffaCakes118.apk

  • Size

    31.2MB

  • MD5

    bf33eef0e1a31a7963563032443e4a84

  • SHA1

    fffedda546d7071a24e1235092112d8ad3703710

  • SHA256

    c0501ffef0e5f1dc51e833812f081ca988d9629b5ec50109d43297791db1ceaa

  • SHA512

    92303ba2ef37a974820aa52a55239def221ce000215bc1ef110996ce76954af77963d916963ce582623ba11462ca18ab763c6d7e62f2eab83846287b084d21e4

  • SSDEEP

    786432:dtLmNgksLK/VLkDK/VSbwAk1bYwprE+VWYCW2VryMJsFcv:dtLmaksLK/lsK/osLppvCRVrBJUcv

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 1 TTPs 4 IoCs

    Uses Android APIs to to get current cell information.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.cmx.wuliu.ph.owner
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4503
  • com.cmx.wuliu.ph.owner:multiprocess
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4555

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/hmdb

    Filesize

    12KB

    MD5

    8514aba9c191e69ab9dbf0119e9db55b

    SHA1

    1959823f131ac25c9f6257dc312d3b651f64b3df

    SHA256

    65e0c093c590dd9ccf327efbe319ec427ad5dc1e1162c53b1258015fabe3a7d3

    SHA512

    1bfb6ba2c6dd9d6b865c8a3d84cc81e1c0c33d268ecebaec2f70da3f57e6e0b6475f34062ebbed5d762eed2c7ade8e16aa22abddfb17753a0f834ca236d4f314

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/hmdb-journal

    Filesize

    8KB

    MD5

    a07a813a50a0603ff3760d13236c1cc8

    SHA1

    09bd465276afe741254baed0bd1bd774a7526068

    SHA256

    8a611ed5fb00e64112e6029dbc0bbfb219b6baaba901f73e0c9cb751b053d417

    SHA512

    c99208bb7bf8cfa95a47362470e6aeecab365a44b7a1ba1934d8b4bcb357f924d9701aac637ec13dbb4a31eea4b1c70f7c5b3cadab6e164f3a0186472de2c5cb

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/hmdb-journal

    Filesize

    28KB

    MD5

    0029fe18d4092ba526d08ae0e51166f5

    SHA1

    130bd52fcc43593005bf2099cf332a8bed412883

    SHA256

    8dd1b998def57f6fcbb4eb8e99930ce8fe8eebf1de90114eea253269304ab268

    SHA512

    02242d378f2c00875148eac7e3c0b268ed41d17cf817a71ae32609238c9c1ce6633e2f9fb10b3e171eb1ff0e346955b397ba5c623049bf3d078bbdbd5961829e

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db

    Filesize

    20KB

    MD5

    c4e6e91f8424781973d49bef19329834

    SHA1

    b507196b46c6af679c004f9a5bb2dc1b319b10e4

    SHA256

    701ef9f1e84ce4dfb09181ce60c351bad0623bdf8f425aad4377cf1bdc70fc56

    SHA512

    85e9fd3489fcd273ef273125362b7d15cc50441108de48cb883085e143aea0f22a665b8effcc93fddb081b1953531652cc39877b1e7b1a3e73acb152b9a8ae1a

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db

    Filesize

    36KB

    MD5

    3565a47c51d36161e23e969e572aaab0

    SHA1

    623cf5ba89b15c26c5e8430aae05164a4f1153d6

    SHA256

    9289b32ad16aad8e7e8a255cd4033ea6d0e64c09ef8c0a808038ba7b1f51c0e8

    SHA512

    e13e2a6a91aca8edeeda5bc319ee210c44f0c74277894b54c0627b19284fc37b6299817d2ff126cd1443b5bf6c300773adcc659b7943b14461b9ec3de93a0447

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db

    Filesize

    28KB

    MD5

    1577543299d56e34bb79ba302d7551bd

    SHA1

    41a317b2e4135185416f0d3476300a5370cdb06d

    SHA256

    a8396534eeebce8b589198db09b583e7c7af4480fed9c50d12096a11562e3ac3

    SHA512

    200d1244ad612181dcbfee954bde15fb90f22e8902137f9c02db32a8d434167ee28e55bc0ebbf16520681ead353b9938a51ca25fc89c6733fa882d5146c81627

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db

    Filesize

    36KB

    MD5

    a925951bbef27a9ea507f847a6ceaad7

    SHA1

    34b73ba1b11a2423198826f820fe87a1b8cc13b6

    SHA256

    1dd2d23b7c64bde28175205a16f99abac0aa5938d31812c095234defbd1f917b

    SHA512

    4ce18802068f8549fae1d3c594423476753deb776c57acf8ddbacb47360db50c922452db037b3c2d852f28147781c6532a141e9cfae51772b96958825e7ce5cf

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db

    Filesize

    28KB

    MD5

    90ffbe6d168e1f96621ade8825d948ca

    SHA1

    a20e23d314cc66d6a39770709afd864b92fba667

    SHA256

    664d3df67b51c88a36a6c3e8905b661f8e241bd1ff204426ab7afa4d5b3748e3

    SHA512

    c51fa6b7ff708784e531f52d1711e4eb75d932b4ae9969633687b3f907bc5b024dc60ab421826fe6109e0e5235d4d4fdfb4a33aa00afd165909ec6e31d249aa0

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db

    Filesize

    28KB

    MD5

    c2dd4e20173b611c3585a39d178fcdc6

    SHA1

    8b46280f41f77ec0a80c1165571ac3146e876ec0

    SHA256

    f7545762df2989f5e733c4c97bd7affa93fc213017b5aa5fd0b1ed8a0f8b1741

    SHA512

    07174e1ea2e7bd8220cef552146efa7526c701025c97b36f5f8b428cb2470ced0b720d0f580bb6db8ed6b165886a20c5f42d197a4f8926e5c53804c7b762e9b7

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db-journal

    Filesize

    12KB

    MD5

    1945eceee338a266a2ad4e2e81b6de06

    SHA1

    43eea5b362e170af9261b7189b9079cb30a12434

    SHA256

    374b9e037e2510708ad40f80a6e7a02835979e6c5ab25331f719527f041fe1d9

    SHA512

    3a4d8bb2ed727bd3e2f2db9008a54a8ce76f386222c64e6f203750e9feba2518e6f3bddc36691bb6fc06ffd79ee35b3c703b90a9fb4fb6f352e2d5dbd3f5eab1

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db-journal

    Filesize

    12KB

    MD5

    fa49ab2b92e278ff9b3fe394d5448a0d

    SHA1

    9132b78775ec3febc53c9e972eea7a0ac4ecd49a

    SHA256

    1608e6f5150b704e8aa505f80beb07733f9f8db5fe473e01a431ed26881cab63

    SHA512

    47caa48fb84afe595c39d757472ff7b534d96fa86b6202efd66efe3d7af461ca727219b75450a0c00c1e3e7c456f3b9fcb8c87984c9ed4a7c3e233fb16aea0ff

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db-journal

    Filesize

    12KB

    MD5

    ba18ddb209803cf70205c26777649ea4

    SHA1

    97b7051517c08397cf2ff7601b8028f65f3c49c2

    SHA256

    614bded254291d92b608a08d8480cb6e551be34170beb84c2bd6a0235e90cd31

    SHA512

    8abca0c0b97dab4a990b88ba26ce06a2793e33f66ba007d01196fa79f72e584577b810525e1a4c071b1b480b1f8a1451b4693eb21b40438d757629f7ac6998cf

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db-journal

    Filesize

    512B

    MD5

    b4387666b23d29904389d9337cb1f4ce

    SHA1

    b3ac6ba67e417ce49db0e0c2fb1b678d79f62f1a

    SHA256

    8ccc48b5104485492d6636ca41cc1140a497b4138993b0ae77618b571f17d188

    SHA512

    a6c94a979d5ebefc4a73ca7fc2fea45c668be7026c31122fe069101868d7aacd1de2a5fc4d19d7c30a12c00b94959af0163eaf9af69b95757e680f188c023860

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db-journal

    Filesize

    8KB

    MD5

    d832b8b8cc3d946e6d304e165daeff72

    SHA1

    bd91ed3cb0867dc9c3af752a41da43f65549f4e8

    SHA256

    81ad76a8b446c6aac708fd465764f851e3a6314b51b6c31b904d501f40ccd283

    SHA512

    673e9069facd9383dc36cf558d9a51726f0c6cdb1317717b3acf6169aa98376e20f912dc7b3e79996b2076d74bd6088864586a6dfe9f4de2aa2199e6a86f3683

  • /data/user/0/com.cmx.wuliu.ph.owner/databases/logdb.db-journal

    Filesize

    28KB

    MD5

    d92239e0e0b9c0b89dabc915ef008dc1

    SHA1

    bb9702c867e313393b10de6f913c30c811120c27

    SHA256

    99e4a4d7c94e8e4874227b8d3a833e1a5c38ac3d794c177ee8e9fe9b052daea8

    SHA512

    04591da4793356d7b5dedf7780ddd2d38a8ac0258e6a58e62d96afa78b0314c3aa58c65a7d5e2f72595e4d472f59bac8a3e185e6eed0e7c7b30c034f1dad1f26

  • /data/user/0/com.cmx.wuliu.ph.owner/files/a/b/7da884ef074489a893b54368a1ce272a.0.tmp

    Filesize

    1KB

    MD5

    19ee00f5571d39864c6d407243eb019b

    SHA1

    137ae6e6f016e7906d35147eebb61f6991e50d6d

    SHA256

    91e74c2e2df9d51bb42d5373cdac47ba1e3a4023d70f4f52d51010c3fa8f1f26

    SHA512

    3d78952351e39afb7d05702da1ee784377abd02204f46871c3192dd72b2dc2dfc1b6056d463e0091a79dc77c97a6341d5970906402eb8ec79804fb223b6fe44e

  • /data/user/0/com.cmx.wuliu.ph.owner/files/a/b/925181bd4850536d597b808cbbd66522.0.tmp

    Filesize

    1KB

    MD5

    e3a5c727ada80776cf41e17d51f17283

    SHA1

    0ea0c3a6eed29a1098b4f729b09b4a2e765f52a0

    SHA256

    ec6d6554fbe0e0e3e07fd78b4be47347ae2a50ee413a08016ccc20f5bccabf5e

    SHA512

    498b85278dfe9dde38cccc620a39bda015c5d4b833d26548e51ba122835bcd87da4a7972ba1ba9cb0e03693a0721436c06626840b7d4b1579be422986e2ea09a

  • /data/user/0/com.cmx.wuliu.ph.owner/files/a/b/f93947837c0a843448c4c1c49b71c879.0.tmp

    Filesize

    1KB

    MD5

    f2ae6b253fea35f3ddaf211262281b42

    SHA1

    c8848b4282eb8f05ccf384ec0b10948024bc39f7

    SHA256

    61a70f81f1287106cbf2ce65dbcb35626521443fd3dad2303953f95f57a113ba

    SHA512

    53d4b5cadf54a2149d999c26c34870fca6b5dc9175278ac3a9ed0dfd76e88f9c458ba71aa20ef573b7e00bb5b184ad0a97678620c99dc70929307980a7bb77f4

  • /data/user/0/com.cmx.wuliu.ph.owner/files/a/b/journal

    Filesize

    114B

    MD5

    6bcbad8d618dbd52851a46c1527baf7b

    SHA1

    3fd44a9892d512d1d73214c746188a91baae3279

    SHA256

    df059e2044b0f70bf646abfe0cbdf196e27adb00401edfac00070d7c9a266feb

    SHA512

    ff63d8d18ea0f8a4b5108261442599fc3702e62866cafe74e8bf21afdfe6f23e91a29d02a47665c73600fe3c64eadb2f691ab301b29f824c73a11ac41d215b5e

  • /data/user/0/com.cmx.wuliu.ph.owner/files/a/b/journal

    Filesize

    235B

    MD5

    18ca28b736aac4a9a25fa0283caa77bb

    SHA1

    eff192cfcacaadbb3beff38ff0f667bfd372bf72

    SHA256

    0647031f2cea7ba16c72a0f8d6a114ed8f47d5e7da3819ffd3cf7ec35e1d41b9

    SHA512

    b60a232861389dc87b62c914ec855a6f3ac8f8a1071733bae419341824315c5d401e1f49ecff616a47260b1a9a79db5eafe2f63f44f969487ad1337fcb0b0864

  • /data/user/0/com.cmx.wuliu.ph.owner/files/a/b/journal

    Filesize

    356B

    MD5

    35bbd88657e59e404f69f1e4bac692dc

    SHA1

    74c3557758ff514c7157c5b8c3602b1df4d59646

    SHA256

    ad059f74f9b43a66c481ec43332d76a3e4e36deaa3cac3d95527b15e693a81e8

    SHA512

    316a295bbff699191d98c3e030cd08d7f359ef717f013e4ffdc700a058c83715c3dfa1cc3341540023440ec6583fbbcf8e242677cd9b605244ca21c6273ec9fe

  • /data/user/0/com.cmx.wuliu.ph.owner/files/a/b/journal

    Filesize

    38B

    MD5

    edac05c852c872d355fbffca64005fe9

    SHA1

    487d2583d8aaea96ca15011a6a37a3ef384e70d6

    SHA256

    33ba3bcccf3bf61a3a6a4b8b2f330210f445d909b6d18a7932c2379fbdddf849

    SHA512

    7f48a2ba246f7c70125e6e481bc30a865884f6bfd2013f5ad5b89fa77343c182ec2d5ef2195127a35345024b5d6da05532e5d99506c667a85c22d30c5a149d79

  • /data/user/0/com.cmx.wuliu.ph.owner/files/a/b/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/com.cmx.wuliu.ph.owner/files/jpush_stat_cache.json

    Filesize

    148B

    MD5

    f597bae04cd6c2510a52a548a1ab1091

    SHA1

    76a58a631de6a14d096b6c61d70afa7427f69d69

    SHA256

    243381974e9ee9536b5c8a750e443a5e60f4e82ee233b78b66d75832fc1598b3

    SHA512

    e587e8b5d1d8c391a1c8653e7d2a1a4169b4b8743d1694999fcfc5694031d3404b0e4ec889e1cf58a1f568258e02108b4a5e0ab11ebaed1fd6baebec7b67b2f5

  • /data/user/0/com.cmx.wuliu.ph.owner/files/jpush_stat_cache.json

    Filesize

    211B

    MD5

    648b40c8743acec44e9846ac431da880

    SHA1

    ea46c2e3ae7ba84131dc85cad25d6e11b8fd6769

    SHA256

    e240283185561ae42085b9a1542cfae597029f594b63816b5af913e2c0698889

    SHA512

    f6dbb5b2d4df91a4290ee01af9448acc4cd7d6de54c4a3d05c175b7d9fdc354c4feb1b63c04473c99bfe5aa5fb018afb4a33d39e15b1bd3e35866dc4c6c64db4

  • /data/user/0/com.cmx.wuliu.ph.owner/files/libcuid.so

    Filesize

    109B

    MD5

    70e489ac0863c2213a24943edce17a6f

    SHA1

    a8d5f3425b0d7ca8d901585cc770fb7c75ddb3fb

    SHA256

    81509790c53118f0aa29b021816b08d76f9a1a7de1fd3b9d7877119644e0c333

    SHA512

    856401e1744d00efbee69e507c41202caec1852062d64d3fbe1773b52e3990b5741442eb9f5b3f98b518f6f3edac125db942d25d067158c772714385b53ba79a

  • /storage/emulated/0/amap/openamaplocationsdk/alsn.db

    Filesize

    24KB

    MD5

    c5e8d4c85a21533273f93f25450d7a56

    SHA1

    805e4946014eb874ce3a9bced9424b3d93e39de9

    SHA256

    caafaf42118ca215221eefecfe1ab40bc4df4a9e0e64ac81d88d0754e3a33b2d

    SHA512

    a434367e61920c99a72deb820a3055b2336274232d81ebf0c29a74f30210dd0b87be21e0137ce11863eee4edb88d325220d9e4e8400f3c92435cce4b5dd668e1

  • /storage/emulated/0/amap/openamaplocationsdk/alsn.db

    Filesize

    24KB

    MD5

    ae5bf49d7615b7e6bf23c00b64f0379c

    SHA1

    61c2d8513473cb06cd973f2c2028d2e2d5433648

    SHA256

    d9099377c3c59d998f6a181700d99198ddb446e024a552375047bb675565bddc

    SHA512

    a2f9b85e2bb14df5df4c04c4489b42ed09eac7d77cc6d8eaac4af6d7e5ef4c0a575e3dba2edf8bd5e8619e14c243bb173047984a50ac693c2829da42bb130c8d

  • /storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

    Filesize

    512B

    MD5

    e10e4752d1bb3e298e4c35c79397b8d1

    SHA1

    ce0b7f7cf6169813199b16276809c809800e5026

    SHA256

    46b79f5d36e68e9021e289a0141c02809955a29072c952c020be2f6757c60c62

    SHA512

    35338db985f972cd705e1b50a17c4735f7b50048716ee0a1936cc0181c3da7808181d02c1c9ca114c25b43a97ff884af95502ebe0e3292d536874d0cc0b23b73

  • /storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

    Filesize

    8KB

    MD5

    9606b857249d0ff03800d90d5a2c936b

    SHA1

    697b991d97b363248cd34ff053407cc84e3660f9

    SHA256

    169aeda71f102c76db6afcf710101de83b16a5b1ef646ee83289f5a652697cd1

    SHA512

    0fd401c647fa964e3134447a6fcdac43d2cb74a2b7dbf6565effeff5bda02b5aa756e99a521d3d0c0d9e3a8ac45244ffa235af0587e912cb00afc62c962218d2

  • /storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

    Filesize

    8KB

    MD5

    56bb75a01bf82302e878de8341bdbabc

    SHA1

    8cfece4f32a40f0075b4d8f9daf98c696310763c

    SHA256

    ee2dca3bc8d238bef465e35cbfc4958301b78b767d4c2f282cd6ffdb897a375b

    SHA512

    c04053d94547cad4a6f3200ceaa064e7593df8a47d84aed6de4aaf5cbb860c4cd58532627d8d078d7da529d269a9e69ddfaa8ac27f3830e6521d01bee0db4f5d

  • /storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

    Filesize

    12KB

    MD5

    bf74d418c25de566a74a08cfda9b66a9

    SHA1

    7be1c9ba8a425c3c27846f33f1e19af26a57eea0

    SHA256

    a723ce622c2383ec89c0e1e27d463042471967489f3fbda8330261024d5913e7

    SHA512

    4929213c4deec891b0e24f3d0385a6f8699b173a77a033a6ee6cd6508aad41b92f6cc319317c8238b409becfd822ea02cb613b5302c119662952c19cbe3ad594

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    32B

    MD5

    3deb9b0947b0e7e95e7fb967cb404f47

    SHA1

    4bd92466df9cbc25df20e38d7c95cbb802e56078

    SHA256

    f15173fc3b119e6ae604295ba9fa02045adb99d6b72930fa44d686bf40dd089f

    SHA512

    812cc6269ff2fc3deeb7e671397620a0d8da9737adbd6b8c5715c296a41d84dd6e617525d89614b395dfb632547b1f8e42a34dee1d375d80360711095794de17