Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
01/10/2024, 10:04
Behavioral task
behavioral1
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
-
Size
5.0MB
-
MD5
0561f70e015e11bc18f20467665ec6ec
-
SHA1
bbb9f43d8f257380c46b5c84f8394709ebfc0367
-
SHA256
b176592831805119e4df999c3c96430b20d810c8bcfbe268cd90d0ceaa77abc3
-
SHA512
7a3277ed16f1902ed88aedff5fe04e3e81b088b2de3342dba432a4868a95188c07ee89a69050d0a48dbcdcccf002357756f78b7e9a9753057ce33cf356882c44
-
SSDEEP
98304:rf8NhqZmFm+yzgQJYrJXtwUw5fyL6qaRPAq3TK1M6VH02Sqf0H3zQw:Any/J8JLwyyIqW1pdB2XzQw
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
ioc Process /sbin/su com.ubisoft.assassinscreed.identity.hack /system/app/Superuser.apk com.ubisoft.assassinscreed.identity.hack:Metrica /sbin/su com.ubisoft.assassinscreed.identity.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.ubisoft.assassinscreed.identity.hack Framework service call android.os.IPowerManager.acquireWakeLock com.ubisoft.assassinscreed.identity.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ubisoft.assassinscreed.identity.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ubisoft.assassinscreed.identity.hack:Metrica -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.ubisoft.assassinscreed.identity.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ubisoft.assassinscreed.identity.hack:Metrica Framework service call android.app.IActivityManager.registerReceiver com.ubisoft.assassinscreed.identity.hack -
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.ubisoft.assassinscreed.identity.hack Framework service call android.app.job.IJobScheduler.schedule com.ubisoft.assassinscreed.identity.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.ubisoft.assassinscreed.identity.hack:Metrica Framework API call javax.crypto.Cipher.doFinal com.ubisoft.assassinscreed.identity.hack -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ubisoft.assassinscreed.identity.hack
Processes
-
com.ubisoft.assassinscreed.identity.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4931
-
com.ubisoft.assassinscreed.identity.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4977
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD55f95caa096ebd3fe93432163e3fd2d34
SHA148c9bba88699f9fbf625d27b189ab4395662ccc2
SHA256c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
SHA512e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2
-
Filesize
8KB
MD5b2fcb080d9f072b1c0b4c79d2eb99eee
SHA1cba14014122beb41c09bcb6387b8c2c92fefc76d
SHA256ef1e057f20b34f46f4a36a213c8ca6c74f048f13a1d535c2f7fe5f176ad607bf
SHA5128018913cb99b5e55a7d0e398bce6a9aa88ece9be110aa092285c8a915b348ae0fa56dd6549784f085ddad701499f6c9ca8bebb2c89f8651726848ab351ab8b73
-
Filesize
512B
MD5a7353d635edd11aff40873eaf3d44bcd
SHA1a6f5fe2a5d61e3b69f477de0e41a6be5715cafc4
SHA25687455600555515af9646545930a983bc5a4f809d09d1e209992a79e1207ed62e
SHA5127e406b07e077d546c5335d3428ae7dc6459d98f6645edbcdaebe88a3a17b23553583d08c1984b9c85370d394abbe25d26fa57dd0ed041e036f8c7a6fdb07a777
-
Filesize
44KB
MD5a7bb8407a41a8e88a2e8ccf54e1450da
SHA1663eb3b9cf7e8fed3f2b7080298a47ea9761b018
SHA256a217db94a31019bb69340ef37f80d116ad92b672aeb2c31d9eb2b55f6e09b609
SHA512e1ea5b2e8e2b5cd4234c55ee94cbe81265e768059ada08a56a4b4270db633a21a7c53b34c7b746e9c378eb0e5418c3788c193ca047660b4aff940a00a0ecd229
-
Filesize
512B
MD54a3fdd77f38a4375f746bbd8537732ae
SHA1f03c30e32e21bcabd1d9914531fe4412749c6f4a
SHA2567388091c75b67f0bc3bd042e23476611bd1084c1fccd2b249ffa881dce7536a9
SHA512f5cfc949429282fc4b15e2f7c56a24e3c542fd64eee7c79252781afadd5a9a1c2f39c754acee5b6f3b7803170d7d8b4b7d50bd811621c6d36eb25be0024814f2
-
Filesize
24KB
MD5040318d46ba763d9628f9cb2efff3647
SHA16a5ba56ee367c1c3115aa5769ae9ccc2657e0b29
SHA256e01a8f276ea58d5c9d6a861a79b81258ee6dda9af418aff1d9262eb9667b61ce
SHA512d408a4924a786fa49684f473a0f6774d4cadb89f25ad584b5e9816eb8eca36aa1e57d5b06ad0d9b7730c7392f06decf8efca29508b14ac61f85a711dec726af7
-
Filesize
20KB
MD54da11032bed9f179f5145624df0c7ea4
SHA12392dd39943157ef3c1ae116952db747eafcca5d
SHA25646be7e0c6a9967c0b6adebf6e29bf26d4c22cea9135d7b8165b2fbf3322ef1a3
SHA512068a53e4bd9eabfec61df1d44f4a6dc18ada70c51c4eacab5c075150b0f2250b3b23676bfbe7979f8d451858bad6b9b9542213be5bf3b2d67fae3a9d40917550
-
Filesize
12KB
MD5e925176d17488f783f8046db60d17a1c
SHA132e9b568deb752487c7c73ad537d3381c3426cea
SHA256604fa58cef53c01453e1297c2425cf831931555d71974c189027774eae8e440b
SHA5124b0a948440b13c7dbf6601d3d32eeacb0501c88a22760626901ad03c0c5d7cf3ab3032e6129ff8ef14b7ca9c5da6a5f8d2692e162f2dade1e4d8757afe9e74e0
-
Filesize
12KB
MD51409b2d0595ce6d27e40f6c529eb5116
SHA1bd7b7c5503d1254eea7839c75ac0725a8815a017
SHA2567c8daa81a2f6675337bf60f6a6b2a07846b644822e3581feb513cb6f708d5223
SHA512a032925ec79c8bc690acf62fd6fb827ecb212b9ec0296cb18f934dcdf9f486f7c49c1ddaba8684a5a43c3fa991f5924514fb6c2222c555edd40e2771b69bb1be
-
Filesize
32KB
MD5907d838baafbf09f4b9d56a7f62c9c99
SHA109ee1a7395ebac9df1103da791d867f6654257a9
SHA25698e6a5749d3a38412fa57c809d7d91605bbd00ed150530f59ece1d7f64211e79
SHA512ab068061c810637f2d3a686050fbe535885759681e7ebee5f7f27e067d04d2c3e9a8bdfe1ea4bf56e2fd69dc19ecd0af94945f7ad428d9b832505a2ef2477dfb
-
Filesize
48KB
MD506ffb7aa298a35fb8dbda9770cbdcc61
SHA181d05d1428546ef7829d7941a6b276e6e73531ce
SHA2563af8f5219e468726f86890a6bfe7225ba9ed688255c283456e1218d980a5bd3f
SHA512ed2d5e903d21e56103235b3e8235be8fdb777e5071805db45a72ac736df38467269520092a319f772dfa0352fa77c93feea01642bdc68a224c7d8a2449452c95
-
Filesize
108KB
MD55e095a1eb8e219f23bb0c27809a2b182
SHA10e84d5d0dc0237ddfa942177f0fab8a6d290cc52
SHA25667297396715c3951c0572243d52306014f35a1b58fe9a7640a2245d891441a08
SHA5124b7cac473d4d72dae0a4f3eaf0c74ca3ba8a8a2950e35f2529ac50bb4d63b2fb96fa31bec7b040df69c850ade9cf1858d2b4cec4af7bf9e87dcbd7b027c8a9cf
-
Filesize
116KB
MD539fcce214e652cf34414c3b0f4170346
SHA196e39a1964ea33071a7e1916545c1c9d4422841b
SHA25679b1175178b447567e23d59878f9ffdfaf0593c0bbd28c04a8eea71466d37b3f
SHA5128baa1f97b412f92d321fb47acba48e70603155fdd0d81e03680022fa4afa5739dc4f8cdf2e0f032f39cd22ef8204dd1bbdf3165a6ce15041b5a2ebe99db9d34d
-
Filesize
325KB
MD579953b6c9bda4752ea43da924045c0ca
SHA1cfcd9fcd1a8565d3ef660ee9882360f21772109a
SHA256b2d55f0b54c378fe722fee18fceb1f977f90de9d9b25a68fbf8b9ba1be3d37e0
SHA51219f96bd87b320b1b69aec8a8b0284e4478153c73044bca4371ca6fc630210d77124558b1f45ad7723f0f8ab73eabe6502766a09a6b5037e20e7c08dc4d8baafe
-
Filesize
301KB
MD53875513c211a247394ef053cd44692b5
SHA182d965fb260f4f8f94cc8b7d97a6058b99439a29
SHA25640be2a0f4d44f272f827ebe8359464e8515766ac1420ad656d906fb4c05a1066
SHA5129615168cca390901d11ee58d6aeba3bcb49e5f1b2ac6c9b99e902c4dcb3ebdd66f6e4be7f923a6a17e1701edaacc88b548e4d663a071ae319ca2f5d0df83b7e4
-
Filesize
12KB
MD59bc2ce0cea26edbe0f1a302ac5c0e8d7
SHA12ffabbc0261c2064df251ffe26785e59555eda73
SHA256a5aa7a15b91d1998876dd13e64db06ac424f63b3781edac4b41da277e47c996d
SHA512f34119200775cd403273665cda75a6628bd5912b8bef5d78a87afbd013f7ff40feb428986287fa08a2c09a1ab865eb2f6397a7a5fb58cdaeaf4636be9ccafd2b
-
Filesize
20KB
MD575c83f45b22a1cb82cad5b69941dd133
SHA13b99f8545445795faf52134e6b111915556391f2
SHA25684018767bf75e68789233610f3a6bd150e53dcca1de50c21a422754f24c1f1ab
SHA512660ec97b95ff42a4570f7b1ac98bb1ce5a8e42ecbf6dab04bcea075ea8beb9868395cf3d0e97c544d15b281e317dc88a237f453fe80f27cb31cc86d2d079189c
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal
Filesize8KB
MD5009f0bc5f38bd805840f05438eb3ade1
SHA13cc40bf5b7459f16eaafb1b97525dad1de036916
SHA25682d641bc9bf686a3f1bc841097bc9c532b11f0a0b403a8900b49101d9951aaa2
SHA5121c6751dea4da200b78ffaea938139d5ee0fdd2202cd3041ecb9686510b778352875a4d38a2afafa24aad15425cbd29467ee6d79f32d7cb3c6bb7a977b369d035
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal
Filesize12KB
MD50be29424229af465f7ce1a8675133fcc
SHA18ee61ac456bfe5ecba9fcaa6b0fcce5a4c1ba461
SHA256c5d10903743c55f836d6c4cfb2bcb2e80715c374270d78e53ab4636f02d315b2
SHA512c0ee6eb1139608466c4ae588bf20bfb997454c241ab1e972955fc339f269869143d4d12664cb16e256db953080cdcd829bd741b2f257958aa7bb20c0e8b9f72e
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD55018b7452394fb849dcb733d35c92da5
SHA1b57a15a56d87dfa6cbc20ac47a0c1cd6cfea411d
SHA2566c47236b46f8564e93253632d0ddafb5e1b9a5181163a208ff2f34613941740e
SHA512352ac45eec94b820f92ed1476ca3f9158992665f0e9da4e2f9890fd1dc0f51dee4073dd86a1a3f4b6cb77ed16614e27dc43d959552e56da887658f2ef6c8d37b
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5f16ecaea2ac5257d0027d957b6104088
SHA12d0d87f9b73f86ff7648aa02273caf03202d6075
SHA256a8a1ae33626023cb8f2f85b0a6bb87c8441a9ce3fa035e606ed205ee383f14f4
SHA512a9aaece80f70766299516959a35fd88d9c05e63c04a64b42a90d2d89335f101d70e0659dd310e62df8e7f57cd3999545881fc751ee7822060ba658e027ff90f2
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5d99a3f68194776b3a49d10213c197ef7
SHA1cf4f2cc303a3066efb4f1d03bd4da23dd3ce54c2
SHA256d8a85014c9d528cc355a03507f6bf498faa5fdd6b17dec0557ba267e33ecdc1f
SHA51252f4577b2b47c6903ef4d5c39188f544ebf27d405d40fe353d9f9668eac123b26f4eee28e47fb834a7eaf808d244aec9a19bf6b57c92e8aa939c65dfda2679f9
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD59d0f0794b7ab55da144988459194e026
SHA143b1eed3689fa3cf3068ec11b47c8abcc8c83bf2
SHA256794f791459951325b3ef48cbb44478de674a9f51a85a7bb29e7866148dd4ea86
SHA5124c1e91b059fa558b7671fe17d7f6d044d6972a4480fe9b55eecf903b0683358dcad74b4c5e65a988b278955b54c5c3f5df9878a99a1754955e93c20eb7108821
-
/data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD589ee6db529902fe969a1789d1c58b92e
SHA1d9d574089e4029f2520bedb44c02654dda4bdca5
SHA2567eda2b3b0469287d2f3485aa927499dc254b6f32a152cabb548ffdb29f083c88
SHA512a68dc92a2f68d55cf4aa492ecb5d3a29613c26ad7127bc55a6393ed0bfe040f32e7d0cbc9e4f96141116b0e10bf88438853bfeedaccf9d855cb70b4d8d8ffa07
-
Filesize
20KB
MD5a808d8c7cee84fe52a98f54a318f71c2
SHA197ad151740832f09cf995f9df64602fbbfdd1252
SHA256308d390f2be61c4f32434708f5fbcb5ee4cf0de8efc698916fa1bd8aa83d2db1
SHA51224e63628f4e52f433bef55046c194b961d542052712c17ee04fbe62fa2a5df8c08f64a8a5e4449fc3b0d9f0c1e758468c94c649f08b1c3cb5bd787b3a3c8bd48
-
Filesize
20KB
MD5feee4238fc6f84dcfe98f97b2b8c99f4
SHA1c34bced38396f53464931aec49fbbdab6a43bd72
SHA256a75969bfb06d762710752b6316cf4847ea39b43062581343b9bb1dc9d1e89799
SHA5123927a066173807380108df37d1bdabd892030ab9c5a9113ed69adefcac3355382effccb4baac0637b8aeed3ccc5af7e6fa14c800e28cce31bda307680dd0570e
-
Filesize
20KB
MD5a0a548793a510f9caed081689f935eeb
SHA12d1aad0213b2b86bfe52dd2485741fb00eb02f3a
SHA2564564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
SHA512624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367
-
Filesize
20KB
MD57dbd6d088578e10cf104430066e33021
SHA1eb00cd995ed23fde3c6807ac8e68ed452ed670b1
SHA256b078759779e717c7aebc74990c1002d2c68bd1b5752bf8e75b51e475464a4f2d
SHA51232a3074545a04f36044bd412c3bdb26e454cf4214fa5c9037177ea9f47bb63a799801d43bd11d9e0d5bbbc5f265e3e8e4c8b0f6405cea424cc347f6384a2d209
-
Filesize
12KB
MD5a059abc7d7a114e6b30c61a6bf8582bf
SHA14aa131f72d67e3fb86d009d1d14c3e3963d9e085
SHA2565052732a1ad5803e228e0aaea4f5c67a7f919d2d1b7bc7dc7785ff8b3d856a17
SHA512ea042cec94b2b4054d4172ade50821e5213ea8557f6df6a951a29f1c3bbc1fc3c4d80fb4ddeef8fb94648bda5e59c1ee58e6a5dbf7abf3dbbc96f8bd09b99bca
-
Filesize
512B
MD5396ac82f2442cd4573a07d157db4afcb
SHA118e4e935229ceef727f266d85784f99c19b097b6
SHA256f62ee5bb6c2c3fbfe3b15f4fc15968619eb410cbc71693bf68199b3b619d5a8c
SHA5128e9665a237d6d6b37a753e9534fdc3a0779da2d222fa1da05b46591efab6925ebe5020a38601544ad03a3ec406d12d0c3365cc7c0d4182ffba0aa88607d54b45
-
Filesize
12KB
MD57d98987d7b8f6031d24604bd9a3eaa40
SHA1c94b9440fce7cc6a9a9e4ee07ff04f420a4b16e6
SHA256645ffed4c3d79182aaf5e313e0afdde2aac5ed7695b11927afb91fec2e99d3f4
SHA512e387c8d4960a151d00cd1725f65482399a218ed9a3c8fd3f232323ce37e783acabdd8f79865c0489827a49bc83390ff51d1c89f31a6d0310b0631e58113a3193
-
Filesize
12KB
MD534b29a9d8959689b0fd56675d316981f
SHA1bd974be9d35b413c5acfa7b80b31b75e729bd3ae
SHA25696b99730bfd0299839baf3a7223a728effd094d64db9dc04eadf977add121c92
SHA5129f2eb1fcd7619a7758b0a5dbecbda492da4e360afaff28d368ee412c9d0ca97f5af7cb9e47ef2b3b9f81525b0b55b648657d6613b1823ed3e0298500f86baa93
-
Filesize
20KB
MD58a9226b80b7981bdab2e1e316589771f
SHA196ec21c0cf9c6a4730f3010fc8d4f4bda1d8e0c6
SHA256f86d610df062e3c18d99e832e382a33777f4ea80e052596b991ce9796f79313c
SHA5125f492c5b29ba9b3037663dd62eab78eb44227296bf0d17fdd8843c725361d6267a9d537d29be96b76c5c1366aee781e676e0d8f3496b507b5624e0139aac2be1
-
Filesize
12KB
MD50b99e6664df39013b83fde4fc9cd4b02
SHA13846030f2e72308f21b9937286b20afa251d6d89
SHA256769df395bf40bc8cb4ecb991500a25185b506a41c0b6d8ee295b128362016541
SHA512ad13019f1c92067931607a25cc786737011a7e179ac5c039a7ae586ec921ee47c9d7bb28408a661ef4886265f86ed8d1d788f797bb33699c4f8004b5349f34f7