Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    28/08/2024, 21:57 UTC

General

  • Target

    c7b7c607d2e0953807562a4f7bec3cac_JaffaCakes118.apk

  • Size

    10.8MB

  • MD5

    c7b7c607d2e0953807562a4f7bec3cac

  • SHA1

    a94397ddf6d18b8095552200e49115d4181694ae

  • SHA256

    b19f5fb052b671961fb82fa02d44ca4d339f083221b378f4e0aa4916179cccdb

  • SHA512

    b7cae43dec751e1210cadb673c42ece1fefeec8ebed43910e29dcd20938c6c0dc7b078c3ff1a70a9f1670ee064ca9ad54248ca3bb7f6e9e258d86c16397b4ad8

  • SSDEEP

    196608:E1fjpixnnwWjvryNmnTJAdhzQEajpaxvOLpU0cIR3ExAHckko9nFYh+h:aflipnwYr9nTJ4zlAgpZt10d9FH

Score
5/10

Malware Config

Signatures

  • Checks the presence of a debugger

Processes

  • com.zhensafmasng.wuerqi
    1⤵
      PID:4964

    Network

    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
      Response
      ssl.google-analytics.com
      IN A
      172.217.169.40
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      172.217.169.14
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
    • 172.217.169.40:443
      ssl.google-analytics.com
      tls
      1.6kB
      5.9kB
      11
      9
    • 142.250.179.238:443
      tls, https
      857 B
      40 B
      1
      1
    • 172.217.169.14:443
      android.apis.google.com
      tls
      4.8kB
      8.7kB
      16
      22
    • 142.250.179.228:443
      tls, https
      455 B
      40 B
      2
      1
    • 142.250.179.228:443
      www.google.com
      tls
      14.0kB
      11.3kB
      30
      35
    • 224.0.0.251:5353
      3.7kB
      11
    • 1.1.1.1:53
      ssl.google-analytics.com
      dns
      70 B
      86 B
      1
      1

      DNS Request

      ssl.google-analytics.com

      DNS Response

      172.217.169.40

    • 1.1.1.1:53
      android.apis.google.com
      dns
      138 B
      109 B
      2
      1

      DNS Request

      android.apis.google.com

      DNS Request

      android.apis.google.com

      DNS Response

      172.217.169.14

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.zhensafmasng.wuerqi/.x86lib/libbaiduprotect_x86.so

      Filesize

      533KB

      MD5

      f5ec057e434c684d4d07cf473b1f6988

      SHA1

      17ba254d005873d40ec7c819330c89aa3f54fe6e

      SHA256

      e4d622868f224ed715127f001dba95a67c82b50cc77b54e453fd08e7cbb29067

      SHA512

      7e9a957560f6ab8e1f6e008a9bb770e4cd05bf75deeb71eed4d74f83783c8343af5f954b358b40db3cc8b751c6606f33a7aad00713f5f22dd9bda3ff516e0f29

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.