Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
28/09/2024, 20:27
Static task
static1
Behavioral task
behavioral1
Sample
fd1537c3666f90166203ac1ce59dfdb9_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
fd1537c3666f90166203ac1ce59dfdb9_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240624-en
General
-
Target
fd1537c3666f90166203ac1ce59dfdb9_JaffaCakes118.apk
-
Size
9.2MB
-
MD5
fd1537c3666f90166203ac1ce59dfdb9
-
SHA1
b1d4fba7c49dbe2b9336f9468713108fb3cfb674
-
SHA256
6e8af9d320db3fa4f985ac7a1c53120f3d2163589001c958b9bd35056147a000
-
SHA512
df52400cb8ac16696add4d91f9d5de666820658b6860a5da28ac19e3a6a2534483903238122dee5fbb18c4c88167c4b014553b3bdd47c150993f83c43863b52c
-
SSDEEP
196608:ZoAJpP8+IvabiCNf50x/mxAgRqIB8kfvcQkaLQCtuxqGe4Q2A5IiZWRsq:ygCv/9ugycswxq8Q2A53WRL
Malware Config
Signatures
Processes
-
com.energysh.drawshow1⤵PID:4255
-
chmod 755 /data/user/0/com.energysh.drawshow/.jiagu/libjiagu.so2⤵PID:4282
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.energysh.drawshow/.jiagu/classes.dex --dex-file=/data/data/com.energysh.drawshow/.jiagu/classes2.dex --oat-file=/data/data/com.energysh.drawshow/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed2⤵PID:4303
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
MD51a582c75006bf5baba8aadb31b64836f
SHA15dc82f85696f72afac2b00010c5a1fb2fa68d820
SHA256b91387249fceb0012833c513dd48d3fb2d9f1234d5844965a9feb3e95971072f
SHA5126ed03f9695317c13000441526115f5a8f4b6b11d0abf59a4a93e8553ab2d311c0f99941890d504cf9471f3b7645471288eef52a13877684a4a2cac6f3abd1845
-
Filesize
338KB
MD5350725f563f224eafc5105c95e122ae0
SHA139bfbebc17cc2e68de75858f3e6a7e591de5c587
SHA2562f23bbae04cb5c6dea52e9c02762a5872c3999796a2fd127a7b77374cc37e936
SHA512592cf1b26694b1da203e27496ffb5da498c025b4c9bc174bc6c2dd17aa65bd63bc2ed76952237cfad4c60c527bb285631d1988fcb2a0aa179c7bf2c5dd68f852