Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
179s -
max time network
186s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
24/08/2024, 18:52
Static task
static1
Behavioral task
behavioral1
Sample
bf33eef0e1a31a7963563032443e4a84_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
bf33eef0e1a31a7963563032443e4a84_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
bf33eef0e1a31a7963563032443e4a84_JaffaCakes118.apk
-
Size
31.2MB
-
MD5
bf33eef0e1a31a7963563032443e4a84
-
SHA1
fffedda546d7071a24e1235092112d8ad3703710
-
SHA256
c0501ffef0e5f1dc51e833812f081ca988d9629b5ec50109d43297791db1ceaa
-
SHA512
92303ba2ef37a974820aa52a55239def221ce000215bc1ef110996ce76954af77963d916963ce582623ba11462ca18ab763c6d7e62f2eab83846287b084d21e4
-
SSDEEP
786432:dtLmNgksLK/VLkDK/VSbwAk1bYwprE+VWYCW2VryMJsFcv:dtLmaksLK/lsK/osLppvCRVrBJUcv
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.cmx.wuliu.ph.owner Framework service call android.app.IActivityManager.getRunningAppProcesses com.cmx.wuliu.ph.owner:multiprocess -
Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.cmx.wuliu.ph.owner Framework service call android.net.wifi.IWifiManager.getScanResults com.cmx.wuliu.ph.owner:multiprocess -
Requests cell location 1 TTPs 4 IoCs
Uses Android APIs to to get current cell information.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.cmx.wuliu.ph.owner Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.cmx.wuliu.ph.owner:multiprocess Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.cmx.wuliu.ph.owner Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.cmx.wuliu.ph.owner:multiprocess -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.cmx.wuliu.ph.owner -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cmx.wuliu.ph.owner Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cmx.wuliu.ph.owner:multiprocess -
Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cmx.wuliu.ph.owner Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cmx.wuliu.ph.owner:multiprocess -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cmx.wuliu.ph.owner Framework API call javax.crypto.Cipher.doFinal com.cmx.wuliu.ph.owner:multiprocess
Processes
-
com.cmx.wuliu.ph.owner1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
PID:4503
-
com.cmx.wuliu.ph.owner:multiprocess1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
PID:4555
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD58514aba9c191e69ab9dbf0119e9db55b
SHA11959823f131ac25c9f6257dc312d3b651f64b3df
SHA25665e0c093c590dd9ccf327efbe319ec427ad5dc1e1162c53b1258015fabe3a7d3
SHA5121bfb6ba2c6dd9d6b865c8a3d84cc81e1c0c33d268ecebaec2f70da3f57e6e0b6475f34062ebbed5d762eed2c7ade8e16aa22abddfb17753a0f834ca236d4f314
-
Filesize
8KB
MD5a07a813a50a0603ff3760d13236c1cc8
SHA109bd465276afe741254baed0bd1bd774a7526068
SHA2568a611ed5fb00e64112e6029dbc0bbfb219b6baaba901f73e0c9cb751b053d417
SHA512c99208bb7bf8cfa95a47362470e6aeecab365a44b7a1ba1934d8b4bcb357f924d9701aac637ec13dbb4a31eea4b1c70f7c5b3cadab6e164f3a0186472de2c5cb
-
Filesize
28KB
MD50029fe18d4092ba526d08ae0e51166f5
SHA1130bd52fcc43593005bf2099cf332a8bed412883
SHA2568dd1b998def57f6fcbb4eb8e99930ce8fe8eebf1de90114eea253269304ab268
SHA51202242d378f2c00875148eac7e3c0b268ed41d17cf817a71ae32609238c9c1ce6633e2f9fb10b3e171eb1ff0e346955b397ba5c623049bf3d078bbdbd5961829e
-
Filesize
20KB
MD5c4e6e91f8424781973d49bef19329834
SHA1b507196b46c6af679c004f9a5bb2dc1b319b10e4
SHA256701ef9f1e84ce4dfb09181ce60c351bad0623bdf8f425aad4377cf1bdc70fc56
SHA51285e9fd3489fcd273ef273125362b7d15cc50441108de48cb883085e143aea0f22a665b8effcc93fddb081b1953531652cc39877b1e7b1a3e73acb152b9a8ae1a
-
Filesize
36KB
MD53565a47c51d36161e23e969e572aaab0
SHA1623cf5ba89b15c26c5e8430aae05164a4f1153d6
SHA2569289b32ad16aad8e7e8a255cd4033ea6d0e64c09ef8c0a808038ba7b1f51c0e8
SHA512e13e2a6a91aca8edeeda5bc319ee210c44f0c74277894b54c0627b19284fc37b6299817d2ff126cd1443b5bf6c300773adcc659b7943b14461b9ec3de93a0447
-
Filesize
28KB
MD51577543299d56e34bb79ba302d7551bd
SHA141a317b2e4135185416f0d3476300a5370cdb06d
SHA256a8396534eeebce8b589198db09b583e7c7af4480fed9c50d12096a11562e3ac3
SHA512200d1244ad612181dcbfee954bde15fb90f22e8902137f9c02db32a8d434167ee28e55bc0ebbf16520681ead353b9938a51ca25fc89c6733fa882d5146c81627
-
Filesize
36KB
MD5a925951bbef27a9ea507f847a6ceaad7
SHA134b73ba1b11a2423198826f820fe87a1b8cc13b6
SHA2561dd2d23b7c64bde28175205a16f99abac0aa5938d31812c095234defbd1f917b
SHA5124ce18802068f8549fae1d3c594423476753deb776c57acf8ddbacb47360db50c922452db037b3c2d852f28147781c6532a141e9cfae51772b96958825e7ce5cf
-
Filesize
28KB
MD590ffbe6d168e1f96621ade8825d948ca
SHA1a20e23d314cc66d6a39770709afd864b92fba667
SHA256664d3df67b51c88a36a6c3e8905b661f8e241bd1ff204426ab7afa4d5b3748e3
SHA512c51fa6b7ff708784e531f52d1711e4eb75d932b4ae9969633687b3f907bc5b024dc60ab421826fe6109e0e5235d4d4fdfb4a33aa00afd165909ec6e31d249aa0
-
Filesize
28KB
MD5c2dd4e20173b611c3585a39d178fcdc6
SHA18b46280f41f77ec0a80c1165571ac3146e876ec0
SHA256f7545762df2989f5e733c4c97bd7affa93fc213017b5aa5fd0b1ed8a0f8b1741
SHA51207174e1ea2e7bd8220cef552146efa7526c701025c97b36f5f8b428cb2470ced0b720d0f580bb6db8ed6b165886a20c5f42d197a4f8926e5c53804c7b762e9b7
-
Filesize
12KB
MD51945eceee338a266a2ad4e2e81b6de06
SHA143eea5b362e170af9261b7189b9079cb30a12434
SHA256374b9e037e2510708ad40f80a6e7a02835979e6c5ab25331f719527f041fe1d9
SHA5123a4d8bb2ed727bd3e2f2db9008a54a8ce76f386222c64e6f203750e9feba2518e6f3bddc36691bb6fc06ffd79ee35b3c703b90a9fb4fb6f352e2d5dbd3f5eab1
-
Filesize
12KB
MD5fa49ab2b92e278ff9b3fe394d5448a0d
SHA19132b78775ec3febc53c9e972eea7a0ac4ecd49a
SHA2561608e6f5150b704e8aa505f80beb07733f9f8db5fe473e01a431ed26881cab63
SHA51247caa48fb84afe595c39d757472ff7b534d96fa86b6202efd66efe3d7af461ca727219b75450a0c00c1e3e7c456f3b9fcb8c87984c9ed4a7c3e233fb16aea0ff
-
Filesize
12KB
MD5ba18ddb209803cf70205c26777649ea4
SHA197b7051517c08397cf2ff7601b8028f65f3c49c2
SHA256614bded254291d92b608a08d8480cb6e551be34170beb84c2bd6a0235e90cd31
SHA5128abca0c0b97dab4a990b88ba26ce06a2793e33f66ba007d01196fa79f72e584577b810525e1a4c071b1b480b1f8a1451b4693eb21b40438d757629f7ac6998cf
-
Filesize
512B
MD5b4387666b23d29904389d9337cb1f4ce
SHA1b3ac6ba67e417ce49db0e0c2fb1b678d79f62f1a
SHA2568ccc48b5104485492d6636ca41cc1140a497b4138993b0ae77618b571f17d188
SHA512a6c94a979d5ebefc4a73ca7fc2fea45c668be7026c31122fe069101868d7aacd1de2a5fc4d19d7c30a12c00b94959af0163eaf9af69b95757e680f188c023860
-
Filesize
8KB
MD5d832b8b8cc3d946e6d304e165daeff72
SHA1bd91ed3cb0867dc9c3af752a41da43f65549f4e8
SHA25681ad76a8b446c6aac708fd465764f851e3a6314b51b6c31b904d501f40ccd283
SHA512673e9069facd9383dc36cf558d9a51726f0c6cdb1317717b3acf6169aa98376e20f912dc7b3e79996b2076d74bd6088864586a6dfe9f4de2aa2199e6a86f3683
-
Filesize
28KB
MD5d92239e0e0b9c0b89dabc915ef008dc1
SHA1bb9702c867e313393b10de6f913c30c811120c27
SHA25699e4a4d7c94e8e4874227b8d3a833e1a5c38ac3d794c177ee8e9fe9b052daea8
SHA51204591da4793356d7b5dedf7780ddd2d38a8ac0258e6a58e62d96afa78b0314c3aa58c65a7d5e2f72595e4d472f59bac8a3e185e6eed0e7c7b30c034f1dad1f26
-
Filesize
1KB
MD519ee00f5571d39864c6d407243eb019b
SHA1137ae6e6f016e7906d35147eebb61f6991e50d6d
SHA25691e74c2e2df9d51bb42d5373cdac47ba1e3a4023d70f4f52d51010c3fa8f1f26
SHA5123d78952351e39afb7d05702da1ee784377abd02204f46871c3192dd72b2dc2dfc1b6056d463e0091a79dc77c97a6341d5970906402eb8ec79804fb223b6fe44e
-
Filesize
1KB
MD5e3a5c727ada80776cf41e17d51f17283
SHA10ea0c3a6eed29a1098b4f729b09b4a2e765f52a0
SHA256ec6d6554fbe0e0e3e07fd78b4be47347ae2a50ee413a08016ccc20f5bccabf5e
SHA512498b85278dfe9dde38cccc620a39bda015c5d4b833d26548e51ba122835bcd87da4a7972ba1ba9cb0e03693a0721436c06626840b7d4b1579be422986e2ea09a
-
Filesize
1KB
MD5f2ae6b253fea35f3ddaf211262281b42
SHA1c8848b4282eb8f05ccf384ec0b10948024bc39f7
SHA25661a70f81f1287106cbf2ce65dbcb35626521443fd3dad2303953f95f57a113ba
SHA51253d4b5cadf54a2149d999c26c34870fca6b5dc9175278ac3a9ed0dfd76e88f9c458ba71aa20ef573b7e00bb5b184ad0a97678620c99dc70929307980a7bb77f4
-
Filesize
114B
MD56bcbad8d618dbd52851a46c1527baf7b
SHA13fd44a9892d512d1d73214c746188a91baae3279
SHA256df059e2044b0f70bf646abfe0cbdf196e27adb00401edfac00070d7c9a266feb
SHA512ff63d8d18ea0f8a4b5108261442599fc3702e62866cafe74e8bf21afdfe6f23e91a29d02a47665c73600fe3c64eadb2f691ab301b29f824c73a11ac41d215b5e
-
Filesize
235B
MD518ca28b736aac4a9a25fa0283caa77bb
SHA1eff192cfcacaadbb3beff38ff0f667bfd372bf72
SHA2560647031f2cea7ba16c72a0f8d6a114ed8f47d5e7da3819ffd3cf7ec35e1d41b9
SHA512b60a232861389dc87b62c914ec855a6f3ac8f8a1071733bae419341824315c5d401e1f49ecff616a47260b1a9a79db5eafe2f63f44f969487ad1337fcb0b0864
-
Filesize
356B
MD535bbd88657e59e404f69f1e4bac692dc
SHA174c3557758ff514c7157c5b8c3602b1df4d59646
SHA256ad059f74f9b43a66c481ec43332d76a3e4e36deaa3cac3d95527b15e693a81e8
SHA512316a295bbff699191d98c3e030cd08d7f359ef717f013e4ffdc700a058c83715c3dfa1cc3341540023440ec6583fbbcf8e242677cd9b605244ca21c6273ec9fe
-
Filesize
38B
MD5edac05c852c872d355fbffca64005fe9
SHA1487d2583d8aaea96ca15011a6a37a3ef384e70d6
SHA25633ba3bcccf3bf61a3a6a4b8b2f330210f445d909b6d18a7932c2379fbdddf849
SHA5127f48a2ba246f7c70125e6e481bc30a865884f6bfd2013f5ad5b89fa77343c182ec2d5ef2195127a35345024b5d6da05532e5d99506c667a85c22d30c5a149d79
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
148B
MD5f597bae04cd6c2510a52a548a1ab1091
SHA176a58a631de6a14d096b6c61d70afa7427f69d69
SHA256243381974e9ee9536b5c8a750e443a5e60f4e82ee233b78b66d75832fc1598b3
SHA512e587e8b5d1d8c391a1c8653e7d2a1a4169b4b8743d1694999fcfc5694031d3404b0e4ec889e1cf58a1f568258e02108b4a5e0ab11ebaed1fd6baebec7b67b2f5
-
Filesize
211B
MD5648b40c8743acec44e9846ac431da880
SHA1ea46c2e3ae7ba84131dc85cad25d6e11b8fd6769
SHA256e240283185561ae42085b9a1542cfae597029f594b63816b5af913e2c0698889
SHA512f6dbb5b2d4df91a4290ee01af9448acc4cd7d6de54c4a3d05c175b7d9fdc354c4feb1b63c04473c99bfe5aa5fb018afb4a33d39e15b1bd3e35866dc4c6c64db4
-
Filesize
109B
MD570e489ac0863c2213a24943edce17a6f
SHA1a8d5f3425b0d7ca8d901585cc770fb7c75ddb3fb
SHA25681509790c53118f0aa29b021816b08d76f9a1a7de1fd3b9d7877119644e0c333
SHA512856401e1744d00efbee69e507c41202caec1852062d64d3fbe1773b52e3990b5741442eb9f5b3f98b518f6f3edac125db942d25d067158c772714385b53ba79a
-
Filesize
24KB
MD5c5e8d4c85a21533273f93f25450d7a56
SHA1805e4946014eb874ce3a9bced9424b3d93e39de9
SHA256caafaf42118ca215221eefecfe1ab40bc4df4a9e0e64ac81d88d0754e3a33b2d
SHA512a434367e61920c99a72deb820a3055b2336274232d81ebf0c29a74f30210dd0b87be21e0137ce11863eee4edb88d325220d9e4e8400f3c92435cce4b5dd668e1
-
Filesize
24KB
MD5ae5bf49d7615b7e6bf23c00b64f0379c
SHA161c2d8513473cb06cd973f2c2028d2e2d5433648
SHA256d9099377c3c59d998f6a181700d99198ddb446e024a552375047bb675565bddc
SHA512a2f9b85e2bb14df5df4c04c4489b42ed09eac7d77cc6d8eaac4af6d7e5ef4c0a575e3dba2edf8bd5e8619e14c243bb173047984a50ac693c2829da42bb130c8d
-
Filesize
512B
MD5e10e4752d1bb3e298e4c35c79397b8d1
SHA1ce0b7f7cf6169813199b16276809c809800e5026
SHA25646b79f5d36e68e9021e289a0141c02809955a29072c952c020be2f6757c60c62
SHA51235338db985f972cd705e1b50a17c4735f7b50048716ee0a1936cc0181c3da7808181d02c1c9ca114c25b43a97ff884af95502ebe0e3292d536874d0cc0b23b73
-
Filesize
8KB
MD59606b857249d0ff03800d90d5a2c936b
SHA1697b991d97b363248cd34ff053407cc84e3660f9
SHA256169aeda71f102c76db6afcf710101de83b16a5b1ef646ee83289f5a652697cd1
SHA5120fd401c647fa964e3134447a6fcdac43d2cb74a2b7dbf6565effeff5bda02b5aa756e99a521d3d0c0d9e3a8ac45244ffa235af0587e912cb00afc62c962218d2
-
Filesize
8KB
MD556bb75a01bf82302e878de8341bdbabc
SHA18cfece4f32a40f0075b4d8f9daf98c696310763c
SHA256ee2dca3bc8d238bef465e35cbfc4958301b78b767d4c2f282cd6ffdb897a375b
SHA512c04053d94547cad4a6f3200ceaa064e7593df8a47d84aed6de4aaf5cbb860c4cd58532627d8d078d7da529d269a9e69ddfaa8ac27f3830e6521d01bee0db4f5d
-
Filesize
12KB
MD5bf74d418c25de566a74a08cfda9b66a9
SHA17be1c9ba8a425c3c27846f33f1e19af26a57eea0
SHA256a723ce622c2383ec89c0e1e27d463042471967489f3fbda8330261024d5913e7
SHA5124929213c4deec891b0e24f3d0385a6f8699b173a77a033a6ee6cd6508aad41b92f6cc319317c8238b409becfd822ea02cb613b5302c119662952c19cbe3ad594
-
Filesize
32B
MD53deb9b0947b0e7e95e7fb967cb404f47
SHA14bd92466df9cbc25df20e38d7c95cbb802e56078
SHA256f15173fc3b119e6ae604295ba9fa02045adb99d6b72930fa44d686bf40dd089f
SHA512812cc6269ff2fc3deeb7e671397620a0d8da9737adbd6b8c5715c296a41d84dd6e617525d89614b395dfb632547b1f8e42a34dee1d375d80360711095794de17