Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    01/10/2024, 10:04

General

  • Target

    0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk

  • Size

    5.0MB

  • MD5

    0561f70e015e11bc18f20467665ec6ec

  • SHA1

    bbb9f43d8f257380c46b5c84f8394709ebfc0367

  • SHA256

    b176592831805119e4df999c3c96430b20d810c8bcfbe268cd90d0ceaa77abc3

  • SHA512

    7a3277ed16f1902ed88aedff5fe04e3e81b088b2de3342dba432a4868a95188c07ee89a69050d0a48dbcdcccf002357756f78b7e9a9753057ce33cf356882c44

  • SSDEEP

    98304:rf8NhqZmFm+yzgQJYrJXtwUw5fyL6qaRPAq3TK1M6VH02Sqf0H3zQw:Any/J8JLwyyIqW1pdB2XzQw

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.ubisoft.assassinscreed.identity.hack
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4306
  • com.ubisoft.assassinscreed.identity.hack:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4345

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db-journal

    Filesize

    512B

    MD5

    8c0ad40030c6adf4616ee8af87633972

    SHA1

    a660e4a8f438361ac20540f7a10d9006cd70ad43

    SHA256

    5c8ea3076e0eff0376712f1e43fd899323cea53e647264e28c66c23fa9fd999b

    SHA512

    ffb71afda3e4b6b6b760287ceddf9a53bcef2b61df1a059abb938450fbe6db849aa921322c39d0019b71fd6126ba34d0239d43528a09f040c49e582078592c71

  • /data/data/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db-shm

    Filesize

    32KB

    MD5

    b76d3a729c88a2c86913739938226565

    SHA1

    d2c80c24067af95b060571036ecb7d8458972e88

    SHA256

    18e0169a3d1dbe9b633be7f3a29cc23447da04a2000075ab6eda8bb895870408

    SHA512

    03296a626e20d5916439c56d4ac05bbb1f5cf5b5df26949a346352ca715b08f1a0d7c0593cb134cf7721bcc9d09cfc3abb4cbee265dc9e491ff420dfb5b0dfa0

  • /data/data/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db-wal

    Filesize

    64KB

    MD5

    23a298719c15ad44793fda5af1a7847c

    SHA1

    fa8cdb10c4787acfb28d0721507cd8f9b17ba236

    SHA256

    e77e8f621f89517e54f9b34a3851603f125513cdd4e8b0ad384b7e6f8559be79

    SHA512

    ac602098d25c9227dd7d50139cdbe9fe7c543a12d0aac542e98e68cf775f9d271b7118d335069d81b4d77a9397338129126f060556db1e94503b530c29bed856

  • /data/data/com.ubisoft.assassinscreed.identity.hack/files/Mint-lastsavedfile

    Filesize

    402KB

    MD5

    13c263adcf5957c49b263354ba52034f

    SHA1

    8372c96e41b43f236cf6eabcdfcb8bec59494318

    SHA256

    6d0fde5f12fd5c8685f944a5d6eba524de893b530d4324deea8df2c107587f39

    SHA512

    db5382eddc78b9912bb44ac4d4befcd16a2db893c1ed8c5f947389836d3c9fc645661f651401e4aebe6f4fa822965aaf17defa865fbd798824184fb289671558

  • /data/data/com.ubisoft.assassinscreed.identity.hack/files/MintSavedData-1-1727777103590.json

    Filesize

    36KB

    MD5

    d197ec87c1a56ab395b2abf2568dd553

    SHA1

    4bc182fe592350ae5ee79923a9c127c09bd2fcad

    SHA256

    5283e945a7b090be02f9d7e2e74ccfef11c3209c3a6acaa983317a744bcd002c

    SHA512

    347ed9a714e4a9a4de53bb7d78dcc9bebe1d0f3e78164b30f775288e5585b7f9c8271524dbfa7343d77087da01e729090f53d99e6a20fedee6ea11a2abf6e870

  • /data/data/com.ubisoft.assassinscreed.identity.hack/files/credentials.dat

    Filesize

    226B

    MD5

    038e8b3e51b28bbf19b479fb87a631c8

    SHA1

    9a37dac6929dad163dde59ca38b6a85cca7c75f1

    SHA256

    ab1515d9bcdbd68a4e476201ad050ef28e73687fd29f7f2ec991d61daff5c1fe

    SHA512

    5cc4959cdec53e8021ead1fc32af58d5d6c6dc328e5356ba250c01b0e97ed937779d2165538636e6a76e817091514b3db9e451de5126a9dca580512fe77189c1

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-journal

    Filesize

    44KB

    MD5

    e2ff3c7a5b558122855a54035c46b266

    SHA1

    c429f8091028308c8b49e55a4f8f8dcc0c42d837

    SHA256

    5fffc5e330fe761249facb268bd0838939f387b44267e2a07713e2f6e049ed75

    SHA512

    630ade023cde4c3f235315169486884b2899aade51dbe979afd56f7fbe6710d8784e8bbb5ae0ac5760930312921964a57bb7278eb2f7bcc33ee5979cfcfc6b21

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-shm

    Filesize

    406KB

    MD5

    958a4df3d157220ece08493921b87a3f

    SHA1

    5a8e1c12c62c1eb93fa08351e98ade84aa6832ad

    SHA256

    b17aea27cd129dc31e00faedf967ee0cd2b94446257a37aa8343f0938a284752

    SHA512

    e90b91249e2fe136df41c1252c7209c3aad6d0cd0391bde16b7a0612d4071027db732fd2cde65c4ae6a767a95d93f99f814eba255eb097130840e214a07db4c0

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    f1bbf5856940cdd7aa89a7689765101e

    SHA1

    a02c6b8dcabee8eb2db69e14951e38a2315fbcb2

    SHA256

    2ec0ccf73faf8a45eeb22ad1f6acd3c5dc3b1206135460c3a476d07cb696befa

    SHA512

    15f1e7b3e23b4bbe11090c5779c6a0b9c1672d38335a7421b7993c7b04c1ca93550c5dd804eeee8a3c3551082ba15c516455e137aaf9031bed3a20d3327084ad

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    cea470584dcd8548d9691a9121a2d441

    SHA1

    3d4abd0a114c1b663770965960a6bfc331ba0805

    SHA256

    e41e22a74507dcbba1a0c93a650b44f58098e7802aeb203cf0002124ec6646d0

    SHA512

    2c5bb59a3759776d0623158072a1b2b98e742f5a2d39fec71d1cc4686c878c4d86ba33c8a7f136aea4293182c215e04a7d56e6574d6093a32d256fd8d5fc17bc

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    116KB

    MD5

    131bde39ae3a3d8bbc7a1a7f70b70399

    SHA1

    d6e57d22d745039b1541aa046456b430d9438c6f

    SHA256

    453b3c1ff1a5aff24ede42ee5cf02158800ad051af20f5124ff244e945319e98

    SHA512

    2862cb8563febc4c2f27dea61f70e6a2486e07d876dfd26b046bfa2a4b9f538a4c74e68a951d10d1f141c7201ccf009f374a14ffc4e49a239b974c4b35b4b2c2

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    257KB

    MD5

    2fd6c51c8d10ef6d92e53d70e2a1ff71

    SHA1

    885bf746f7f5003cf2d01cf57f49b7ebffbb3090

    SHA256

    caa751b69e116faaa5a0fd46211403aafdd6e274a6df571dd99d672924dea4a5

    SHA512

    ff9c9b400d262bf18dfba6803663aa7c36f1e12c0cc2efe2212f053ae69ce25a1a71768ea7764431e6befc0fc14d422ca0ae64d533295b31f814c4b581bd9701

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    a099de73358649cb700633a43ba3221c

    SHA1

    7b55c6a5a8e9f826b36d6f7a8873b895790dd324

    SHA256

    d2fc9c53e3af1c98960eb907abe5ee2304a9a4d909941e27111bf8d9bb377bd6

    SHA512

    b4e395ada3b8f8514c30c7cb204ba31ec1c8371e797fe2cf747c6102cefbce038e0a156568f2517790af966530ee9ca9610fad960e39ebb9eaf0332dcc577b06

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/credentials.dat

    Filesize

    1KB

    MD5

    230c80e53f0c11ea12202740a01e9973

    SHA1

    c5c9c4ea4532f3f8c7542d12daf1e75f557d34bd

    SHA256

    ca6f2375026b9beda5b025036b86ef01d564811d8d60c953b57a4cdc97a54d50

    SHA512

    8350f70a1a39a6dcdfd3cbeeddbf5d2ee00b973f1da392f4c2f60e3f6e972be049d2a576ba48e7fa94ee7785a602f0ad98814e41a724d35582f81ed73c814c27

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal

    Filesize

    512B

    MD5

    ef4ed518ec9f133d40d1d4d9b32b1bb7

    SHA1

    a688f1d950dc3f8bc894cb833c77d8827c11ee2e

    SHA256

    5138acc21c62e6fddabada0c346d5489950f0dd03490ca873dd956e9114cf471

    SHA512

    b7fbe6e6f32d87af8027885095ce7515edab04babbbc39b797fece077fc003b6d9a0e9a705340da0543eea995f94b03a448182d4e020fb7d0e9b7987b25d8cc0

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-shm

    Filesize

    281KB

    MD5

    01fc506f70cd3dcd21095d25f02dbc8e

    SHA1

    58678a6db4e1824af352b8a756a6cdd48b730690

    SHA256

    724cc730f198d6b35113671e294f00f65b00b4849eb560c3159d52c3f6aafd6c

    SHA512

    42f1dd5676ffce729eaee32f0fe2920f28a20d943b869ed6e0e24c5983c5ba4944ba898c16250252cc8fd4ce3efc9ef60b731b715cdef303d5ad7177577db8e7

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180

    Filesize

    8KB

    MD5

    164e855b5f352c0061e295602dcb3baa

    SHA1

    ea5d9714f534f15069e1cfaa03b059c1a9811096

    SHA256

    812c92b834138065c98650e21f159a416a5019545db53acbdc6a40e70a192baf

    SHA512

    31cef19892abc3d90d1d7afafc38911ecd66f3b2e70335f5f06a581c59882feef79afab4760aa4d56f9d0e133b233c10ed4a2cf543ce8ad21682d2da3d06332e

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    20KB

    MD5

    85eb041682b1be7c8293503cc598880d

    SHA1

    5c9de799e1b1d3f11c401d4674e082a57b9197e6

    SHA256

    d0e2407b34ad478dc5d689b8acb48b4bcb7661fed3105f491e8a85b8556632ed

    SHA512

    d9dd1287472f92b215246469c82391533a7a90c3a5cd1ae1ec7ed8dcbc967b6f5bf5519991548bb519eeb45ad46f6255e705027af8f650e5dc4efcc7f13178de

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-shm

    Filesize

    32KB

    MD5

    76951439e9b66e5f05bcaab42c278308

    SHA1

    8a809bd31c43169a360edb7211925ed8b01159d4

    SHA256

    e3fb4bacbaac144d3c99916499f4c063bbcc9f88efd410abcc8eeba37e9da13d

    SHA512

    7b12510f24fac6a0e20efece48cf93fd8edf80521a60759000dad253a9d8374f74dda50ef7aa20f925b7b6f8f5b351d6760ee43b71d0215e0e129d88e1506092

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-wal

    Filesize

    245KB

    MD5

    372efcdac1bfaa9d65d2472d9182afc8

    SHA1

    c508bb8976f069fbc3fd61b489ed5cb790fd29b0

    SHA256

    6e5c26caaad06b1f87db56701164075e94652684f734c37ca4b86391c31d9b57

    SHA512

    49072a4ef7d9153c74e8834ab99121eb31eb99cbe06a6613e0d30c4e7b6049908817cf94323d62aef5a29ac32a4525be18f3278fcbdfed3568b83f7a4b9ba833

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    f8245320fcb01da479b4c7c430a51e23

    SHA1

    084cbec91a5498754cf87d3adf4dcee59e8d3e4f

    SHA256

    65978cddc1520a1a27d60321cc4552647f59ef665f539022ed8b5270197e5e9a

    SHA512

    35717af08a2bec68f90f9cc53a3e21ecc9f27a3f51ad06b913940472573fab5f14c67431613ca29d62d2418e80de6e8d223c706541d75bb7c6f6395c7e78c77f

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    bc674b9822dc0f63d98be73a3a054190

    SHA1

    982b88416915dfaa63e14912fd013a22fb0824e7

    SHA256

    8fcb25b11f4c5a59afb448ccc116ea3268d84d1a862d7ff13832b08877c28891

    SHA512

    f05a125595ce6cad96875e5b06d65f04d904df976feeccaef7cb17b439047a278a6606fdb7aa9f203c8560ee8a2efd55b64feb2c1fd5df58dce01099315643a7

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    ac26a375d5d673c2a7b39bbe42efacaa

    SHA1

    a7384db83f153cce2cdd67a97a20df068f6ecd67

    SHA256

    001ea8b38280af72e70a8168524cfb2b07a711040948397d36fcace03b593716

    SHA512

    45e1842b55ebab067e53fb3c6ab880c0a652a951f26c1cae5363f429207db5f1aa56c821e89973612b73f9c0d186561221b6129db22e447ccd421b40342dd6bf

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    8797d3a5bde8d03d7d83d259aeb34cad

    SHA1

    f44550604a7a7285793cfc385c13c991e4f6a90d

    SHA256

    568260f3b043f4134fc09c827694ca6235ea12b8ed3982294f49a1d8b7b590b4

    SHA512

    af4f40c9e7808aa794a6466f4f83c947f30202c142c63f0d4623f8f5dd84f372241dd646e589e1f87c60b9656dba8d45a979ecdaaacb7b15e8ac69734528dc56

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    512B

    MD5

    dd5336644dc386eed0dcb6daa2183d01

    SHA1

    e578b9cc4d867279adbd247826b0a0a591c12ae5

    SHA256

    b7db1750b0f3464fdd5e347431f181a3f437a8ffa504947da9d77e6f8770adef

    SHA512

    d1245d0ec3a47ca6ed65cfdb904bb3c469fad3341df0214dc32c8b175250b37bb99fbf0adfc5666447cd156e180e10729dbb52a6a2ae93154088d98dc0d1cf35

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    8KB

    MD5

    71b2d43639a463f962fcffb4e306fbd1

    SHA1

    45542cca3e9fa130d3aacb20bee32e265cbdec30

    SHA256

    cdb1668f1f91a255e2167cd2d2dac6de8c557b1a195e1d9e91f98da0234f8dac

    SHA512

    317adf1c527f6cdf69924eecb8c5cdcaa1375c7d12df254cfb9d618bbbece60f4df0347cbe63c56f787e2780c8b8f22ac21c6a725350aef0061a65d54937147c

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    8KB

    MD5

    0ae4cd49401d9a7ff4c0933aa6de0450

    SHA1

    b09d351e63c4a0562af8d1402ca8e8c1f93d7e2d

    SHA256

    8a7e75920ba071a58f0d34d3a60d8d795053f1c2ea993f6e857a8ad44c787307

    SHA512

    259ef98978a660ce27c2a8f69c841b55653925429f8e0f6dab6953c62a9fbf5348b10c5e1b0e7794f19660168dec26ec3be3bdc421a88b2a749d1505674f0b43

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    32KB

    MD5

    6bbad42c3ecae21e2c9c87d26405ffa2

    SHA1

    ac4364ef9304951bba00b5d396d53089eb8c0dfb

    SHA256

    5498ad10bb91d72b1309c44554a72689ee80379be198b367aaed18b7064332b7

    SHA512

    f31ae0181183e0e580a9b6fb5bfbc9528c16a7670d324d02e205ce5f6ad23a0b3cc8f35bfcce30b6c0cfb374a58a7aaf8801c4bdefcb1aedc2ea24e7fd7ebf37

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    8KB

    MD5

    6f1b71f743215db2cd974c7650b2d4c6

    SHA1

    c862c2f324546b8f6102c086a6e1d6f476c84885

    SHA256

    fa8d7665503a524d03760aa71dac121814837224f804ca734b278aa0ed1fdccf

    SHA512

    8f3ef6d0e1fc723f018cfff509acef7efb7548f81fcad7765440398c26ef7283b9180f5ba71c0e331e5ee8c440dd449ba0bf6e740ec7818b9c89fea455f50fc0