Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
01/10/2024, 02:00
General
-
Target
03f98c2734034b5dda840041b33f9244_JaffaCakes118.apk
-
Size
16.4MB
-
MD5
03f98c2734034b5dda840041b33f9244
-
SHA1
7dec60e27f585a87cc97e5d0beefd3663fd5c641
-
SHA256
4980605257790eb0303a4ba4411c10da01da462464f0f6012fa74d8b9bcfaba8
-
SHA512
ebf31efb9a61ee2d400050c97b6a1003cdef2c81a9d2bf05348d10b367143156e5a434539369ede3c776d190bf7c606d9138c5af0640a2392c80faf76fc9bbdd
-
SSDEEP
393216:ZDDSJKqlcHhXhtn5SfwYoxybXjDrkuYK3ISBF7wr9egW6bPdMbEr:Z/SwH5HnQIJkbzQ4JBFEr9e6LdMbEr
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 25 IoCs
Runs executable file dropped to the device during analysis.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 24 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 24 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 24 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 23 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
Processes
-
com.baidu.hao1231⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.baidu.hao123/app_push_lib/plugin-deploy.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.baidu.hao123/app_push_lib/oat/x86/plugin-deploy.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
com.baidu.hao123:bdservice_v11⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
206KB
MD502fe22caeb17a9d7c7f5c3914e3cda29
SHA17e3293216263ab967ca6e9a3c55ba589444e3de7
SHA2560fba8eedb44faf95448ed7e25bcba48b49aa981e1e1e154fcbd90e48447813a4
SHA512020324dd3b38d6d75fbb54f18caf0bfdff38e27b0c18aa83989b53e9da96a6d6c780f281b21da8f1b41e3de1206306954dc9d1e42aa2dd12f500b66e04f4c647
-
Filesize
72KB
MD5a9a36a22676334c2a8c8d1ed9fb2834c
SHA15694e918245bf7b52e0877be9767738c1f378063
SHA256c6f9f9cdad9b6bc9a5a74b9895e1bdcb44e9bd18ad862fa13484f3fa9c3047fa
SHA5123e922e72612b0ccd89501651c3ddc8ba96846e3c8d3ac199236b7d121cb12c6ba9332b7bb3f8c9f6957238658f5a3d1043f352413073021bcc8fe4700854c7e0
-
Filesize
21KB
MD5bc11edfbef779052e2758a2ffd0381a9
SHA102b1d513180e9e2ad003246e81d15a60fe49c336
SHA25660506b7ebf128384c0d8ccdeb776a090257d6de2553a9f942e14497bae74256e
SHA512d7a59f85ffc5f4b7647f173f02ae2aef8d379e84b3b135844a36720ec7247ffd18b4b0eb424e3e679ae30e426e932ec0b1f5892f60723af2f445df8a80fa598e
-
Filesize
12KB
MD5178d2cbdb6980b8c222a9c9479661dcc
SHA1a52ea90397da5ef8b2f53651a51f8d4ce1976b2b
SHA256fa0462e6a347996a3ad15e84b3f71c4c50bc7db25aa2e0161476ab803018b2fe
SHA5126241a8097cf05b7026f49a36edb8decf7f14660e4cd7fbfc01774f4b7236a344df11eda771caf2ea288182b431909e1f19be7036ef99d64e478c1c137734fe93
-
Filesize
1KB
MD5cc37f7981333c7c8f0c9eeef1e8dc166
SHA126c8f5c3b843b035f6c74bbd11a86e35a8145b05
SHA2569c4c1e37c9453ce1cae48417dcae87efe955ec29191164f53c5615b148ff55fd
SHA512a6b972e73e0ff29105887542f2ce4753b29a2841909498c3ed555d883602eb97695645e63275498bad7a5fa29d6ff840a24dcacc65effe355ca78aaf9540a3fa
-
Filesize
1KB
MD51fc1bb2696bc57b4f99230bf17d36a3e
SHA18910fb14bc1c4b4acc830e3b2f5e7cd452ecb3a7
SHA2569c38cb9e8886054f055dbb9c346375bcc9cc6474bf2598652ee76d00137a12be
SHA5120ba1f9dfd82bd5c011cdcce2c2d27281e1acc9a59db1d168f44ed23c7b9d902c3901366a7ca91936fd76b1344f131661f83d1dcc3e4028970f629a6d7ad0df37
-
Filesize
15KB
MD5db5b51237c16f4f1c7a5e76e41aa4de1
SHA1823df7f328b1e0b3c37d23b7ee071ce34c4b5a0a
SHA2568c7c820cae9b0ce4ac2fa2ecc1730ae22d09cdb060ae1737ebcaf44c22fdba1e
SHA512ef6f83d57fe39f1376b4b6ff442a3dca4836a862c539464272c4fa6e46ab6eb3294bd6d6e5ec4cff2aa22335f881f08c0b1e9806cfd07cc61af48066b5c580a7
-
Filesize
6KB
MD580542108864535625a7422a62f95385e
SHA18c8c8db6ff6e4498bb59c49ab1f3b0202a64776b
SHA25679949b7c2f64f408da9999379e40829d15379312599bb3f1f1f7bf92b4c448ec
SHA5120f9292ef46ef1c01e4d2f259f03a3a8729cbfd62b649dd8d977c9fd144ac953875b5b561a33c04360d76606fd7d49fc23c18d74dd60a191394ffcc1256567d07
-
Filesize
1KB
MD5339bf4a0fa315b3f670a3a419c403c0f
SHA100b705c6f6cea73fd437516491c3cb27022f8970
SHA256f2c80d6fd53e86e0e6b4781426bcd43ef90377dabda2e4efd9f58ff503f4a339
SHA5123e5ac2c22da4e1d4b02b0bfde39127a37eb690e3ff366db5dfe647669c7c9760100a5fd9e45f946f2e8b245b5c9ccbc4d03e2218cabe65069afcb4375a658e21
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
1KB
MD5b42ff313adc95a1dcce54702aae08ff0
SHA174594c3bad7b3ce4e75e68700556f7f48e5ad24d
SHA256133a090844b23afe1ad69aaab9939855240327dca74dd9c104f32b295a0a3297
SHA512cfef4d65292653d09b64050075d7e8e5a915c85f17de8934fc4a14d03fae753e47f173bd01e7d8cc320d5fdb87a1aafdfb0766c0c4c26b1f3106d3f41dd941b7
-
Filesize
68KB
MD5b632cacdba25dd05e1d7c14e0439e34d
SHA1f35df3cff0be5d006925e76f68bf2b66d047b7b5
SHA256adf2a35377cc3b2e96f9b187eb0cd0da9a3fbfa09b5cb91c5acc14ee33a2813c
SHA5123de8c9730c85b172a217a44f79c66fea5586cbad1c7f6609d7d56f81eb2a620805147c34a08b7d3acc494f9021c6a94f55f7246522811e4cae6b93dcec022628
-
Filesize
512B
MD5209cc62a6edbe56711576c74c36257a8
SHA17ebe7ef25432368c45dfa4830dbc23d662f9f32b
SHA25680e077b4bc5edc31ef6babb19d9d9de5bf8c59d02a569e67018bc94f57777303
SHA5122a8081ad2ae8ddc6d4ad061f5d8b6a977ce86f2a8fccacdf7bd620aab6daed16a3cc854863a715c1505802401d6705b651b054fcce9951f3d2e9912b20e755d8
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
253KB
MD54775721e4a957c1207509dfa1e76031b
SHA19925c67b92bcd700a6c8313edce2878710adacf2
SHA25601f5e3f48c0c607fb1ebe7267fafdf340caf99946f3e6de7863ee89091f5ff4c
SHA512f6f85787309e1c7ae8e8a84f38fb07ae26e6614419a8337e19f85001f719b1f8a8a3299efabf7df338dc95a09af1cd337f1f500ca326145825b2c27d732b6124
-
Filesize
16KB
MD5b42a5befd599c29fcb2c3391a2966833
SHA1dc135958d7e579025182f49a4f6acc375f099a21
SHA2567f090362e4c571514b788bed12152ac8e0789c5280690243f1010076b6a75e8b
SHA512f3a4897723e17c78fdf6c2f421041518ac95deb26d5b5c26862189ca78b01046bd83517cff2f3423c0f3f01fc03052690146e5d46f88db7ce89aa4edbce8d364
-
Filesize
17B
MD54c2b1ddc7b05e4196067f3df9c57b071
SHA19a27c8e1b1be8ae2cab90b3b238a05e7eefd682d
SHA2566635b2c52b25a48a83056441600d2e27dfcd91b451cdcf1361e20f0721312240
SHA512a23ec3fd08d500cf2dc99ea29eba9c9f8c300c5df67d90cdc04d18e91adcb07a400dfe125b5b810050654711e74de7ff83c50978e14053efbdf7b0c4a5ee5eb3
-
Filesize
532KB
MD5f62a167fb312d8d50e0cfcba503649b4
SHA1b92b5e93f7b8e194dcf44bef8fdf3c729268e13f
SHA256c1d91235d9b25db00b204986da16232514fe4c44c0c7ec257f2e9b675eba886e
SHA5123e916d06244a4d2c008cd23f0c4d98188f8ba0a639d3bb6083227c69f02eb62f845cce2591dc4e1d5d742c22faffa940a3ff101f98c0136dd79efde49d5cc77d
-
Filesize
516KB
MD56eece12bef4636ee00537a00972783d6
SHA170cdeff33805ef11d6ca6b6f11a0218d01a4612f
SHA256de6be84627740fa2bcb1932a928a147270f525ba4e565ad7a8d49dac8100fe55
SHA512c1d4d9e29506c4916b498afdc86536578ac4ee55bc31678fe2377bc3491ec9b1040b030a8edaf76194b378e2e8134d665b1246cc153ccec593bdd382d87ac726
-
Filesize
516KB
MD5adb7c7ef99f3d6df70a520e3c4fed873
SHA175cbca5bc40d4a249b7771ebb141ff9621382bcd
SHA256eb8deedf7c179d684c841e01dae4b5e8751caa92dba055eaf0485e940fb2e5ee
SHA51207160e84c0aa0cdc6a22a49cf4952b02721b83ed0f33ea2b3aa7f3b16023b78ce23704a5ca31f03741a5c52939e24c70d000e6ed8e97d4308e7fd7635055c8e5
-
Filesize
89B
MD528aa1bfb649870da67ba0d1aa7da3c8a
SHA1dc313d42c1185de1a61a0e57790063f202584d55
SHA256de6b47ac77690c1878a73c217ac63d564731a0ac31e887df05dec461d3482ce2
SHA5128a46c5fcdece66c247e7d3efda8aefc2dc2bf4a2820f65dff39ee295014204f10cfe684342cf2f88049717efc5c159166481cfb9b4777068839ee26ab228d030
-
Filesize
48KB
MD599bbc1ca511c476a22ccdd7e07043132
SHA1f2f01604e808ccdfe4b612eaca51eb2ab6fbd695
SHA2568b09b1274c8213184b68b72e49a0caac204b8a2c5102b4f7a02ceac72e4bcf4e
SHA5125269da0a5dcea66d8a2c8e6128c26f2f71d64baad649259eafdc21e0cf7e7e954708ca8f163fa61b382ade34af223ec8eaa103cc7e4fde029179d5823a49111d
-
Filesize
512B
MD5ef9b70c8cc28dbc9cf394c98a5764cd3
SHA15207bd65bb38cb8269e36975e56fc176198e6d73
SHA25653c0641be268be53f8a8d38bc0969bf86f38d7c750a7890ce7990069820bda2e
SHA512b03fef50e16c56ea0c1344c965dc1c0e18f2a697a6fb62052f4a80088c0392acca4e3cd3d6b26b0da339215ba23dd2f3af3493b6796b86ccfe2a1e0c30081fdf
-
Filesize
24KB
MD50f3ca95a8e52a4e25f244904ae732854
SHA19d182f87364814bf60fb6d255dce585dcf6cbccd
SHA256e12372399446bda91e2361ee3b78dabcf5d681d54c260445457899c7378c8b94
SHA512185295805a55985d49e85dea12781abec6a2992db519426aed51c9a7a458521c79688ac9641dbf007caf183acb2acea117c9ce3a01fe93038094e0dc962be310