Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
01/10/2024, 10:04
Behavioral task
behavioral1
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
-
Size
5.0MB
-
MD5
0561f70e015e11bc18f20467665ec6ec
-
SHA1
bbb9f43d8f257380c46b5c84f8394709ebfc0367
-
SHA256
b176592831805119e4df999c3c96430b20d810c8bcfbe268cd90d0ceaa77abc3
-
SHA512
7a3277ed16f1902ed88aedff5fe04e3e81b088b2de3342dba432a4868a95188c07ee89a69050d0a48dbcdcccf002357756f78b7e9a9753057ce33cf356882c44
-
SSDEEP
98304:rf8NhqZmFm+yzgQJYrJXtwUw5fyL6qaRPAq3TK1M6VH02Sqf0H3zQw:Any/J8JLwyyIqW1pdB2XzQw
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
ioc Process /sbin/su com.ubisoft.assassinscreed.identity.hack /system/app/Superuser.apk com.ubisoft.assassinscreed.identity.hack:Metrica /sbin/su com.ubisoft.assassinscreed.identity.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.ubisoft.assassinscreed.identity.hack:Metrica Framework service call android.os.IPowerManager.acquireWakeLock com.ubisoft.assassinscreed.identity.hack -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ubisoft.assassinscreed.identity.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ubisoft.assassinscreed.identity.hack:Metrica -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.ubisoft.assassinscreed.identity.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ubisoft.assassinscreed.identity.hack Framework service call android.app.IActivityManager.registerReceiver com.ubisoft.assassinscreed.identity.hack:Metrica -
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.ubisoft.assassinscreed.identity.hack Framework service call android.app.job.IJobScheduler.schedule com.ubisoft.assassinscreed.identity.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.ubisoft.assassinscreed.identity.hack Framework API call javax.crypto.Cipher.doFinal com.ubisoft.assassinscreed.identity.hack:Metrica -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ubisoft.assassinscreed.identity.hack
Processes
-
com.ubisoft.assassinscreed.identity.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4306
-
com.ubisoft.assassinscreed.identity.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4345
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD58c0ad40030c6adf4616ee8af87633972
SHA1a660e4a8f438361ac20540f7a10d9006cd70ad43
SHA2565c8ea3076e0eff0376712f1e43fd899323cea53e647264e28c66c23fa9fd999b
SHA512ffb71afda3e4b6b6b760287ceddf9a53bcef2b61df1a059abb938450fbe6db849aa921322c39d0019b71fd6126ba34d0239d43528a09f040c49e582078592c71
-
Filesize
32KB
MD5b76d3a729c88a2c86913739938226565
SHA1d2c80c24067af95b060571036ecb7d8458972e88
SHA25618e0169a3d1dbe9b633be7f3a29cc23447da04a2000075ab6eda8bb895870408
SHA51203296a626e20d5916439c56d4ac05bbb1f5cf5b5df26949a346352ca715b08f1a0d7c0593cb134cf7721bcc9d09cfc3abb4cbee265dc9e491ff420dfb5b0dfa0
-
Filesize
64KB
MD523a298719c15ad44793fda5af1a7847c
SHA1fa8cdb10c4787acfb28d0721507cd8f9b17ba236
SHA256e77e8f621f89517e54f9b34a3851603f125513cdd4e8b0ad384b7e6f8559be79
SHA512ac602098d25c9227dd7d50139cdbe9fe7c543a12d0aac542e98e68cf775f9d271b7118d335069d81b4d77a9397338129126f060556db1e94503b530c29bed856
-
Filesize
402KB
MD513c263adcf5957c49b263354ba52034f
SHA18372c96e41b43f236cf6eabcdfcb8bec59494318
SHA2566d0fde5f12fd5c8685f944a5d6eba524de893b530d4324deea8df2c107587f39
SHA512db5382eddc78b9912bb44ac4d4befcd16a2db893c1ed8c5f947389836d3c9fc645661f651401e4aebe6f4fa822965aaf17defa865fbd798824184fb289671558
-
Filesize
36KB
MD5d197ec87c1a56ab395b2abf2568dd553
SHA14bc182fe592350ae5ee79923a9c127c09bd2fcad
SHA2565283e945a7b090be02f9d7e2e74ccfef11c3209c3a6acaa983317a744bcd002c
SHA512347ed9a714e4a9a4de53bb7d78dcc9bebe1d0f3e78164b30f775288e5585b7f9c8271524dbfa7343d77087da01e729090f53d99e6a20fedee6ea11a2abf6e870
-
Filesize
226B
MD5038e8b3e51b28bbf19b479fb87a631c8
SHA19a37dac6929dad163dde59ca38b6a85cca7c75f1
SHA256ab1515d9bcdbd68a4e476201ad050ef28e73687fd29f7f2ec991d61daff5c1fe
SHA5125cc4959cdec53e8021ead1fc32af58d5d6c6dc328e5356ba250c01b0e97ed937779d2165538636e6a76e817091514b3db9e451de5126a9dca580512fe77189c1
-
Filesize
44KB
MD5e2ff3c7a5b558122855a54035c46b266
SHA1c429f8091028308c8b49e55a4f8f8dcc0c42d837
SHA2565fffc5e330fe761249facb268bd0838939f387b44267e2a07713e2f6e049ed75
SHA512630ade023cde4c3f235315169486884b2899aade51dbe979afd56f7fbe6710d8784e8bbb5ae0ac5760930312921964a57bb7278eb2f7bcc33ee5979cfcfc6b21
-
Filesize
406KB
MD5958a4df3d157220ece08493921b87a3f
SHA15a8e1c12c62c1eb93fa08351e98ade84aa6832ad
SHA256b17aea27cd129dc31e00faedf967ee0cd2b94446257a37aa8343f0938a284752
SHA512e90b91249e2fe136df41c1252c7209c3aad6d0cd0391bde16b7a0612d4071027db732fd2cde65c4ae6a767a95d93f99f814eba255eb097130840e214a07db4c0
-
Filesize
16KB
MD5f1bbf5856940cdd7aa89a7689765101e
SHA1a02c6b8dcabee8eb2db69e14951e38a2315fbcb2
SHA2562ec0ccf73faf8a45eeb22ad1f6acd3c5dc3b1206135460c3a476d07cb696befa
SHA51215f1e7b3e23b4bbe11090c5779c6a0b9c1672d38335a7421b7993c7b04c1ca93550c5dd804eeee8a3c3551082ba15c516455e137aaf9031bed3a20d3327084ad
-
Filesize
108KB
MD5cea470584dcd8548d9691a9121a2d441
SHA13d4abd0a114c1b663770965960a6bfc331ba0805
SHA256e41e22a74507dcbba1a0c93a650b44f58098e7802aeb203cf0002124ec6646d0
SHA5122c5bb59a3759776d0623158072a1b2b98e742f5a2d39fec71d1cc4686c878c4d86ba33c8a7f136aea4293182c215e04a7d56e6574d6093a32d256fd8d5fc17bc
-
Filesize
116KB
MD5131bde39ae3a3d8bbc7a1a7f70b70399
SHA1d6e57d22d745039b1541aa046456b430d9438c6f
SHA256453b3c1ff1a5aff24ede42ee5cf02158800ad051af20f5124ff244e945319e98
SHA5122862cb8563febc4c2f27dea61f70e6a2486e07d876dfd26b046bfa2a4b9f538a4c74e68a951d10d1f141c7201ccf009f374a14ffc4e49a239b974c4b35b4b2c2
-
Filesize
257KB
MD52fd6c51c8d10ef6d92e53d70e2a1ff71
SHA1885bf746f7f5003cf2d01cf57f49b7ebffbb3090
SHA256caa751b69e116faaa5a0fd46211403aafdd6e274a6df571dd99d672924dea4a5
SHA512ff9c9b400d262bf18dfba6803663aa7c36f1e12c0cc2efe2212f053ae69ce25a1a71768ea7764431e6befc0fc14d422ca0ae64d533295b31f814c4b581bd9701
-
Filesize
2KB
MD5a099de73358649cb700633a43ba3221c
SHA17b55c6a5a8e9f826b36d6f7a8873b895790dd324
SHA256d2fc9c53e3af1c98960eb907abe5ee2304a9a4d909941e27111bf8d9bb377bd6
SHA512b4e395ada3b8f8514c30c7cb204ba31ec1c8371e797fe2cf747c6102cefbce038e0a156568f2517790af966530ee9ca9610fad960e39ebb9eaf0332dcc577b06
-
Filesize
1KB
MD5230c80e53f0c11ea12202740a01e9973
SHA1c5c9c4ea4532f3f8c7542d12daf1e75f557d34bd
SHA256ca6f2375026b9beda5b025036b86ef01d564811d8d60c953b57a4cdc97a54d50
SHA5128350f70a1a39a6dcdfd3cbeeddbf5d2ee00b973f1da392f4c2f60e3f6e972be049d2a576ba48e7fa94ee7785a602f0ad98814e41a724d35582f81ed73c814c27
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal
Filesize512B
MD5ef4ed518ec9f133d40d1d4d9b32b1bb7
SHA1a688f1d950dc3f8bc894cb833c77d8827c11ee2e
SHA2565138acc21c62e6fddabada0c346d5489950f0dd03490ca873dd956e9114cf471
SHA512b7fbe6e6f32d87af8027885095ce7515edab04babbbc39b797fece077fc003b6d9a0e9a705340da0543eea995f94b03a448182d4e020fb7d0e9b7987b25d8cc0
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-shm
Filesize281KB
MD501fc506f70cd3dcd21095d25f02dbc8e
SHA158678a6db4e1824af352b8a756a6cdd48b730690
SHA256724cc730f198d6b35113671e294f00f65b00b4849eb560c3159d52c3f6aafd6c
SHA51242f1dd5676ffce729eaee32f0fe2920f28a20d943b869ed6e0e24c5983c5ba4944ba898c16250252cc8fd4ce3efc9ef60b731b715cdef303d5ad7177577db8e7
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize8KB
MD5164e855b5f352c0061e295602dcb3baa
SHA1ea5d9714f534f15069e1cfaa03b059c1a9811096
SHA256812c92b834138065c98650e21f159a416a5019545db53acbdc6a40e70a192baf
SHA51231cef19892abc3d90d1d7afafc38911ecd66f3b2e70335f5f06a581c59882feef79afab4760aa4d56f9d0e133b233c10ed4a2cf543ce8ad21682d2da3d06332e
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD585eb041682b1be7c8293503cc598880d
SHA15c9de799e1b1d3f11c401d4674e082a57b9197e6
SHA256d0e2407b34ad478dc5d689b8acb48b4bcb7661fed3105f491e8a85b8556632ed
SHA512d9dd1287472f92b215246469c82391533a7a90c3a5cd1ae1ec7ed8dcbc967b6f5bf5519991548bb519eeb45ad46f6255e705027af8f650e5dc4efcc7f13178de
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-shm
Filesize32KB
MD576951439e9b66e5f05bcaab42c278308
SHA18a809bd31c43169a360edb7211925ed8b01159d4
SHA256e3fb4bacbaac144d3c99916499f4c063bbcc9f88efd410abcc8eeba37e9da13d
SHA5127b12510f24fac6a0e20efece48cf93fd8edf80521a60759000dad253a9d8374f74dda50ef7aa20f925b7b6f8f5b351d6760ee43b71d0215e0e129d88e1506092
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-wal
Filesize245KB
MD5372efcdac1bfaa9d65d2472d9182afc8
SHA1c508bb8976f069fbc3fd61b489ed5cb790fd29b0
SHA2566e5c26caaad06b1f87db56701164075e94652684f734c37ca4b86391c31d9b57
SHA51249072a4ef7d9153c74e8834ab99121eb31eb99cbe06a6613e0d30c4e7b6049908817cf94323d62aef5a29ac32a4525be18f3278fcbdfed3568b83f7a4b9ba833
-
Filesize
20KB
MD5f8245320fcb01da479b4c7c430a51e23
SHA1084cbec91a5498754cf87d3adf4dcee59e8d3e4f
SHA25665978cddc1520a1a27d60321cc4552647f59ef665f539022ed8b5270197e5e9a
SHA51235717af08a2bec68f90f9cc53a3e21ecc9f27a3f51ad06b913940472573fab5f14c67431613ca29d62d2418e80de6e8d223c706541d75bb7c6f6395c7e78c77f
-
Filesize
20KB
MD5bc674b9822dc0f63d98be73a3a054190
SHA1982b88416915dfaa63e14912fd013a22fb0824e7
SHA2568fcb25b11f4c5a59afb448ccc116ea3268d84d1a862d7ff13832b08877c28891
SHA512f05a125595ce6cad96875e5b06d65f04d904df976feeccaef7cb17b439047a278a6606fdb7aa9f203c8560ee8a2efd55b64feb2c1fd5df58dce01099315643a7
-
Filesize
20KB
MD5ac26a375d5d673c2a7b39bbe42efacaa
SHA1a7384db83f153cce2cdd67a97a20df068f6ecd67
SHA256001ea8b38280af72e70a8168524cfb2b07a711040948397d36fcace03b593716
SHA51245e1842b55ebab067e53fb3c6ab880c0a652a951f26c1cae5363f429207db5f1aa56c821e89973612b73f9c0d186561221b6129db22e447ccd421b40342dd6bf
-
Filesize
20KB
MD58797d3a5bde8d03d7d83d259aeb34cad
SHA1f44550604a7a7285793cfc385c13c991e4f6a90d
SHA256568260f3b043f4134fc09c827694ca6235ea12b8ed3982294f49a1d8b7b590b4
SHA512af4f40c9e7808aa794a6466f4f83c947f30202c142c63f0d4623f8f5dd84f372241dd646e589e1f87c60b9656dba8d45a979ecdaaacb7b15e8ac69734528dc56
-
Filesize
512B
MD5dd5336644dc386eed0dcb6daa2183d01
SHA1e578b9cc4d867279adbd247826b0a0a591c12ae5
SHA256b7db1750b0f3464fdd5e347431f181a3f437a8ffa504947da9d77e6f8770adef
SHA512d1245d0ec3a47ca6ed65cfdb904bb3c469fad3341df0214dc32c8b175250b37bb99fbf0adfc5666447cd156e180e10729dbb52a6a2ae93154088d98dc0d1cf35
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
8KB
MD571b2d43639a463f962fcffb4e306fbd1
SHA145542cca3e9fa130d3aacb20bee32e265cbdec30
SHA256cdb1668f1f91a255e2167cd2d2dac6de8c557b1a195e1d9e91f98da0234f8dac
SHA512317adf1c527f6cdf69924eecb8c5cdcaa1375c7d12df254cfb9d618bbbece60f4df0347cbe63c56f787e2780c8b8f22ac21c6a725350aef0061a65d54937147c
-
Filesize
8KB
MD50ae4cd49401d9a7ff4c0933aa6de0450
SHA1b09d351e63c4a0562af8d1402ca8e8c1f93d7e2d
SHA2568a7e75920ba071a58f0d34d3a60d8d795053f1c2ea993f6e857a8ad44c787307
SHA512259ef98978a660ce27c2a8f69c841b55653925429f8e0f6dab6953c62a9fbf5348b10c5e1b0e7794f19660168dec26ec3be3bdc421a88b2a749d1505674f0b43
-
Filesize
32KB
MD56bbad42c3ecae21e2c9c87d26405ffa2
SHA1ac4364ef9304951bba00b5d396d53089eb8c0dfb
SHA2565498ad10bb91d72b1309c44554a72689ee80379be198b367aaed18b7064332b7
SHA512f31ae0181183e0e580a9b6fb5bfbc9528c16a7670d324d02e205ce5f6ad23a0b3cc8f35bfcce30b6c0cfb374a58a7aaf8801c4bdefcb1aedc2ea24e7fd7ebf37
-
Filesize
8KB
MD56f1b71f743215db2cd974c7650b2d4c6
SHA1c862c2f324546b8f6102c086a6e1d6f476c84885
SHA256fa8d7665503a524d03760aa71dac121814837224f804ca734b278aa0ed1fdccf
SHA5128f3ef6d0e1fc723f018cfff509acef7efb7548f81fcad7765440398c26ef7283b9180f5ba71c0e331e5ee8c440dd449ba0bf6e740ec7818b9c89fea455f50fc0