Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

dff1f5885d...18.apk

android-9-x86

6

dff1f5885d...18.apk

android-11-x64

6

Analysis

  • max time kernel
    34s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    14/09/2024, 09:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dff1f5885d3136fa81ff2644812278ff_JaffaCakes118.apk

  • Size

    11.8MB

  • MD5

    dff1f5885d3136fa81ff2644812278ff

  • SHA1

    34bbbab69a763c57df6993b73d0b233e1f32d7ed

  • SHA256

    c4ca2ec77f4f43f3ea7985be9961cd7a710145de268851202f1f27fa163cfd2d

  • SHA512

    3f25c6a819a4aa851cd26267e4910af6b6e05a91520b00150ac300da50f44a7665295489368db037ba14f6ccc3b3386b581db5a5c19b8f8b14fe618d9924f55b

  • SSDEEP

    196608:DNc4p/Scc0qa4OFnby9DF5/DNJJSL0Q+wZz0h43wgMNX1kX95ME5B8xMjj0Br/NR:DOfcn34OFnGBxMLiq0+DgXY5qs0BrqDO

Score
6/10
discoveryimpact

Malware Config

Signatures

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.baihesoft.ssrt
    1⤵
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4209
    • chmod 755 /data/user/0/com.baihesoft.ssrt/.jiagu/libjiagu.so
      2⤵
        PID:4265
      • chmod 755 /data/user/0/com.baihesoft.ssrt/.jiagu/libjiagu.so
        2⤵
          PID:4313
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.baihesoft.ssrt/.jiagu/classes.dex --dex-file=/data/data/com.baihesoft.ssrt/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.baihesoft.ssrt/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.baihesoft.ssrt/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4336

        Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.baihesoft.ssrt/.jiagu/classes.dex
          Filesize

          7.1MB

          MD5

          e9c0d51926ae9784d494d21f6fc3ff5e

          SHA1

          3c4cd5105c30928e9f7f18d0588aa9326ac7de93

          SHA256

          6602c4c093523f6850a5ae516385ed2133a0efa5dcc00c7a122f8dce96a37d20

          SHA512

          23421f83f853555fcfc1f1fcb293b714c5dd37c849fd564083013c9364d672e83743411eaca4410f5755b41ebfb21976feea1907fb922ed8f1443b719f5e3844

          Download Submit

        • /data/data/com.baihesoft.ssrt/.jiagu/libjiagu.so
          Filesize

          363KB

          MD5

          6c9d83b90aa9c9f904d22eb9b16f8f95

          SHA1

          4d5e0ce3c55a22475b58a982d67ab9aa84384c40

          SHA256

          2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

          SHA512

          07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

          Download Submit