Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
154s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
01/10/2024, 10:04
Behavioral task
behavioral1
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
0561f70e015e11bc18f20467665ec6ec_JaffaCakes118.apk
-
Size
5.0MB
-
MD5
0561f70e015e11bc18f20467665ec6ec
-
SHA1
bbb9f43d8f257380c46b5c84f8394709ebfc0367
-
SHA256
b176592831805119e4df999c3c96430b20d810c8bcfbe268cd90d0ceaa77abc3
-
SHA512
7a3277ed16f1902ed88aedff5fe04e3e81b088b2de3342dba432a4868a95188c07ee89a69050d0a48dbcdcccf002357756f78b7e9a9753057ce33cf356882c44
-
SSDEEP
98304:rf8NhqZmFm+yzgQJYrJXtwUw5fyL6qaRPAq3TK1M6VH02Sqf0H3zQw:Any/J8JLwyyIqW1pdB2XzQw
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /sbin/su com.ubisoft.assassinscreed.identity.hack:Metrica /system/bin/su com.ubisoft.assassinscreed.identity.hack:Metrica /sbin/su com.ubisoft.assassinscreed.identity.hack /system/bin/su com.ubisoft.assassinscreed.identity.hack /system/app/Superuser.apk com.ubisoft.assassinscreed.identity.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.ubisoft.assassinscreed.identity.hack Framework service call android.os.IPowerManager.acquireWakeLock com.ubisoft.assassinscreed.identity.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ubisoft.assassinscreed.identity.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ubisoft.assassinscreed.identity.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.ubisoft.assassinscreed.identity.hack Framework service call android.app.job.IJobScheduler.schedule com.ubisoft.assassinscreed.identity.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.ubisoft.assassinscreed.identity.hack:Metrica Framework API call javax.crypto.Cipher.doFinal com.ubisoft.assassinscreed.identity.hack -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ubisoft.assassinscreed.identity.hack
Processes
-
com.ubisoft.assassinscreed.identity.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4505
-
com.ubisoft.assassinscreed.identity.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4552
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD5212a337771ab5b18e82e4d1b7acdea35
SHA1092a996b96b0dc7006669f4a3dadc94357b25013
SHA256802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
SHA512988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915
-
Filesize
8KB
MD55bc17992206664650a4db937fad62ad0
SHA170c86107fccec990c0cd20e6e7bd7264e3c392bd
SHA25604a5c144483040fc410bfa861317f3a0bec0cb74e5310d3abe680c368573fbf1
SHA5121020cb5236c5b12c50398046923bbc693f62754d421fa51096f4c0d806b82446e8bd60afde2f6a6f29b29d9b220bd2992eab52ea376dd317cbb5dc97c2d3ff1e
-
Filesize
512B
MD589a1fb0abbb7be60aa6f0cae53f271e6
SHA1acf80d8aa78f5474b50ce00a06c1c550cfe4df35
SHA256d9828ff1030381d01e2e65486485db9caf65b78635342484b4b9d021e1b0e9e3
SHA5121ac91fabc69deefbb8b4858bf36e4c3f1c4a947394b3b052371f29a6cd221c4ca1a0ed17fdf782efccedf633666bb57f3d99e3fd8ca1ee48dc41378b7596fac8
-
Filesize
44KB
MD5fcd59b00504ca9d08d1a25d66e4c5710
SHA121ae40ba043a03a3361cc9afd608964de43e5821
SHA25692b21b0bb0921c1292a09d43fb3c1bc28073d9e2da835be582c8f2088b888537
SHA512dfa9e169ad7db858eed0fc46f7ae0ec4dd354949b7580ab093d1493f838a8eb6eda2218e0b7e498a348758b9d2b2e4782e8722ac2cf3fe352f02cbfd4471af7b
-
Filesize
36KB
MD589333a52c6d07efd841f794152b3cd2d
SHA17f01787350d662da13f9e5dfffedb1d6f34d21ee
SHA256f53c14b162f13d83b5dd9de20b1f544c4dc08aae3725d86ae04545a34312e2b1
SHA512fd857cea53e718c9346554694f75415de476b423646ba00c6af5e1c5c03f43167a15d9f46eee99f6a7ef193c69af125d61ce0b7cc80ecc1cac84c2fd7bf6c67b
-
Filesize
12KB
MD558b764b273eb4acddece49cc5be3ced4
SHA108e85bea85bd51a3f32dacfb0df29eaa94c9875c
SHA2561046a4bfa1367cd9293a98d0f49d1b1743481c5cf4dbf52e51f66fc6efa660bb
SHA5126891ab7303cc030cff7a2cba6356c6a5f42d38cc91724a98f0938b26af9e2034308c880d836f798bddfedf032942279fcbdfa320e64c7c39c26f90f91a7dacdc
-
Filesize
226B
MD504445405d5aacfdff789e0e8ec538ed0
SHA126a6012e1fb0d26efd7cc1cdb383039791812b99
SHA25699ae5df957da51e73c7c69d4a6890b82c3767489f0678768769fb4298ee15134
SHA512530c4900979701f58950f75b87c868bd3b26bb5967ee2107abb9be44cd68083199587f66e841ba9aa1b3108a4a94559e94d520af819518031d8c2ec510f85134
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
12KB
MD505488c23e3724ac6b6b90e526fed37de
SHA1f41a18342e8d6b0a61f8995bf37869a2a46640d4
SHA2560ccd798d70491e4879e935c78bdf096f6f40934d647da387209f3d1ed24b31e6
SHA5120930255cf5f0006c8b0a5cef92368df10ffb33a38e8503aa3769faff55f5fa237a9f492aa35e3220bf17db60b14167ace445a9d76af11eab3f4963594dc914e7
-
Filesize
32KB
MD51c5b5b6fcf912fa5b08ebb1a6216a283
SHA1305b9c79b23faf87679f1a81aff03e91b3d87797
SHA256fc211f25844998cf0ef9f88f976b71403f46400f769ce80b8c3ccc2411cd9d0e
SHA5128ad7054f407d6fc9a64e95c10efc4a2f7ff03f76bac21982f4a00879d2b62256c69b6bb6fa211de3f8831dc5d1672f66f62124463427b04cf459e2eb53603b10
-
Filesize
16KB
MD5e8e461cfeace053ea6b510bee3422f2c
SHA144faefb7a6df3509a2b1d169c37b7ec4cc2c3c5a
SHA256067f37893201882f3a7f7ec484de8d3450d6a9f52b2df2ad7b7a8f651bdee48b
SHA51240daa022a1bb69d9bbcec51225da939ea516ef5ad62a86bfc9efdc8bf3c171eed9fb5123df3d5d619670bc7216a77c6ae526aa336053be11c90e3698d5c05eb0
-
Filesize
108KB
MD50ba3d86a2daf0a974d21b006d8659a2d
SHA1f1c8c42916637162b3ecfb7012abf4dcf3deee0c
SHA2568b734a3928363f3c180907727dc8e71519ac7092c9b1a2ee114e553ba7ece12e
SHA512647b1f4d9d1ef6030ece2dedf5de19678dc62c9a01c1c42103eb7d80aad73c3b5ca097a45d35e9379106dd7b2b67486a38edd96ea97e4d5dfc5733470e81daa3
-
Filesize
253KB
MD55e5d64874783937d7048ea3cc0da28e0
SHA1d5f20b03a555a9e60c5b1c9b05480def862e2136
SHA25623a1057b9f82d43a89f1bbd10d4fc7e37d0f477f2d2e3dfac4b50bcd6871205c
SHA5126dfa6b63e2b21b3a1b33ce28c170772c84deeb08520befc643596d8f012ac047fdc7a0a4cf7c91cee62bcd0b6bc8dcc5220a16999bcb5beb07cb48425ca768b1
-
Filesize
116KB
MD52b9b5f709e17b434010af8991ba2de5c
SHA18c20904f0401057e417067c3187a1d0d39ebcf1b
SHA2561ae0814b30bc8b4038434b5ed045415deed9ddf1ca74f1a959be83e189b047c2
SHA512a076d5ff6bcec82e1bd984c907f955d36005d7d6fd7802858052a7c2774b2a01b7e38ad4ff40ff515a113707ebcc03680ee833c52dc05d90958ddbddb79be02a
-
Filesize
20KB
MD59d11d9a2a34799cf7dfe2f363701c4c6
SHA1ff6e04183e0159069f3c8f09566d3a58da73668a
SHA256ee28c2e359c3878913e5cf0cbf92568aeb0c072343bcd4a15d3594e585da6672
SHA512f200f92dd5b4590b4165dfc64bc18e7d936702481bc0498ad8f01d200bc7e6a5dc80316b1f616aabfbbf00efa737eeb176350f7848fb6f6e5ef606ab79872733
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal
Filesize512B
MD5e81e97b667f65d3500b37ad9d48a6893
SHA1653866ec09b2ed8090c305ad78ae75c37a6e8e43
SHA25616826176b3f5e1fc19792104ae236487acd0cbdfcb234069113b561186a9e342
SHA512be879ec13630e2e7523f9b91410859179e0505eaed41c1fdaf6e75645f39f8252761493081193ecd83a5b9b7d0756108adba7c69bad943353a5d442522c3b541
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal
Filesize8KB
MD57e84c3a8636444eaf80947fe8211653b
SHA12f8a76a08f7be125e4e5ca48f26cf7f1e862dcaf
SHA256777e97637b82c91e22841b6b2e77c98cf199673b0b1b3dff30318d1de21d0475
SHA512c6f775b2583f0e9f3cce9f2302ef6067ae345bac3e25d79f8bde33f52c311a6ec66b125d4286e032d3cab3cbf06380ac289b018a5921d241a35458e0c805c195
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal
Filesize12KB
MD53ce1cad6988db5a06ea605b3f2516aaf
SHA1ee5fd83113eef17ac438e9e759096f9c7eb5ca8d
SHA256b33dfc352b7705438e7cc51d7e4d2cf6ea0a93959cdf33741fac0cd8a3b3de24
SHA51226569aaf392c139e5e416b72175c587c693e48f9b8ad41c883ce86d0f46872611d23e782fd38eaeb388423d18950baffc4b2fb8358a472625d1426ad6858ce75
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal
Filesize24KB
MD553d68d6efefad7cb3bfecdd58ea5ef25
SHA1f9513aa5349b2fef429414c6cefcbb9dda91e25b
SHA2563c3bc0b201e2e718f3b4ab0de5d47cc1390739ee8e14179cc330347a62668983
SHA512eeae3637e47297f80ded471e36e9596830a27d53167aa062cfa2229fbaa5808cbdd80ca04bde737a289a620f946132ce4e3015b3501d852f701f5f77924e3cae
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize301KB
MD52be2ea63730fcb86b27ce61ee1b23323
SHA154ecaa980845d4790b3aeee5c4b84cb45a8c9a29
SHA256099e5bb3caa6336e0dae26e75bb868d14d7675cbde6101f5fc0628f2ff5064ec
SHA5127c98c171f4b6c943b31e15ec29a5c4178953bda04cb8f6b9a23e8c54e13c5140422aa50068e7178269df69d7e62b361977dfde04ad27c815b11f04752be3c342
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD519b743af27fdde18c7028547456f6307
SHA1a893c3b519f4cf03d5967949c84ffacd3c7e4c7e
SHA256bb8f0d22139b9d9ddd32552627c2a27924ceb37a434578f6b458da5e9bc854f9
SHA512e59f7dd49b699b45c93a390631fbaa527d92df191cce76f660a25883dfc0b91096bddf7dfcf4cd085c22acf1b19d44244363cbb4edc434285b83bfc0a61e4765
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD5e73eff2b68c4f1ce7295bb45b133f799
SHA17c7ac91e86e52610f874278101be414d6ce6645a
SHA25618ec20b8fd83c85168e3defbb1564ba8be535c52704958b88a81ea58491bb5a5
SHA512d413f4e5c7ede90f5fed0a774d507a5900a6fb592af996b2fb943c46099bac34dbe75298f13d807168641caffbe29edc10293cbd33c5843ce0e653dfefe902e2
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5c26c50f6eaa03ed7aa975d89ea0cf813
SHA1350741be9b61e7909c373965143f7a7d09086861
SHA2566a638d8095b37dd8c0f0d7ee3e7bbe6a5cc3ff713dd3858664464d7f83fe463c
SHA512d39c847148e4482411a3853f8eb8b083cf331d84181ff6bd8b692a559a2b300c2ad169608b61de98b7fa3880f55ee8c0d09aec38da4920e44ad9ed787d7c69c6
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD529ce1e4ff54ff4bfc3a4544a5ebfc9a4
SHA1279878c316b1024ca7337d7c6d169dcec7678da8
SHA256ff21abbe56b955eee570a97cb4e6dd76eba46e4ab015bd50e2336c97985fdbc7
SHA512856fbf8586852a11441cd45efe1ecb1a784500ce33f9c917770716b89da76019a7226c9a28ae972e378fc2bb21d80e517cc309a332635c782c6c6e4f7264fb8c
-
/data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD56490d660bc32a5f33577d6fa8e307642
SHA12cb57cc6262a4e0ad6b03278a439cd59e61e0bf7
SHA256727be5d0ae94ce8f3d87d292edb040758c45d4a5adc10286181e88d43e427f56
SHA5124a3520d57361f1bbc0c40663a63743d8259a405cf3a83202479319f8ac3f7815b756afd93da0e107bc51c48faa84e36fd715651b624ed2f94c376330cfbf304a
-
Filesize
20KB
MD5e8689bf14e48af45d7e5f603302d39aa
SHA16f425a6d1ef2ad377f668c6f2a24f6b3e5c08bfb
SHA25635dbb2be0e23b0df900e7a2ef251fd9ea40d8e1530fedf630677ad697ad69b00
SHA512dedebbf7300e5d334bf8f2131b784182c648fa189d060435d3eba41288c5ee965e1fc5e1e66c67c2541e1c67d32dba53cb7fef660cb574b6992d463f43264d2a
-
Filesize
48KB
MD582c5a6c5b3038e8fe859cfa0b3f3939b
SHA14c744a9a2df96d8dbd95b1ad36b1ec419df46478
SHA256ff7928e4fd79df77d3b0fba59d4475fbd40fe5c21ac7cc22348566b1c0fbd511
SHA51282b3afc8a9fbf6a5e568b52d3abf8a2a0cf37480dddad452761a2fd0dc4a6248f8065369807263161001120d9b5536c1364980b3b356a762e8557b8e306da51b
-
Filesize
20KB
MD5fc318483a677c71a725dbbe6e9516df9
SHA18ac3af9cbfb464e53b709028d1f64a4d019bb2f4
SHA256d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
SHA5120e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140
-
Filesize
20KB
MD5af9de2bfec8f0306a66d7dece2c97720
SHA16b3ce35901039044c0e9f3a6504a2bbba1a88632
SHA256588bedbccdea1bd8a7811d836a62a7c224bb9b411edff1b0e66357a35e6066fa
SHA5127b60e9f24aef3219e4108676c7e30e521405fe5c009077861573905eca8c57e3c9db7a66afd3a0337a9de98ed9f75621f819df47fc6e059ec9cbfdedd1ed04d5
-
Filesize
12KB
MD5d490d9d2dad3f8227e71619f8401dd86
SHA18ff89732127d34f6d67faf0ff584c7e739218ca6
SHA2567f92e32a75e78377c7410266090a3d7eb6b70a972b8ebe151ac3167241115378
SHA51264b3d7c02e1fa2a6c8ddc62efab6557402826247ab59206a6cde4c7279aa42ef1c9bb05e5abfe93807e6077c99fad0142fe6035feebecbfcb76d634f51dc5e6e
-
Filesize
512B
MD52e505705872a779c91b4a44fc995d6bb
SHA1e6edd57baa52f1374d1c0e3434c667950192f4b3
SHA256c2baab4ffa2d13b93232e2dc7533529bda7dab9c1036aad9003044b34d88f0d4
SHA512f8864688a997f5ee44a2ff4825bda82f62cad693a63288e7ee1a82e3e8b01cc42c1875c0cb6e36857b50252033ca4a087366200207b34cb9043b1de0bf765701
-
Filesize
12KB
MD5bbdd891fbe2ea049699725c6d1de171c
SHA1eb0482526172083b50080ded5896022004469dfa
SHA256455b3db15c1634b5360c2627cb9df97f0184ad255b321d100339ff614b1d677a
SHA512c8de76a3813bd5fe2f968ca7cf3a21dd7e52161f890736444435b8d7b3be11ee39b691fc8b1103ec48d07052062fb693498a77947e55806f0146613578b0c49c
-
Filesize
12KB
MD598dabd20bf1d8fe0f7da7fa3abf70a2b
SHA15c3b33b87cc33a52ba1cb90313f7aed8b4564a5d
SHA256852ca0abddabab67ce44b1bf2a5ec816e9dd441906807988e7ae2f864d8e0994
SHA512d72e2ba48f23a4df1fa0344c80d0470fbcf1ff92e8619613aedb00a7179f43ac0c812be3b8a380aaf8b5240f99cd072d379fc710b6009d4744f356171065f80c
-
Filesize
20KB
MD5e03a4dfffba077c9133125267d7efe91
SHA13640383e4d508ebf3399778e76b01cec2c49efe3
SHA256940f31f26c50ed2e998cf4f935807e915a9f130db53f91fa10f52ff0a93886a2
SHA512ed5cdcbb01c9f7621fbb1c313a2573f34e5653d4d2d75cf02ec41399452a139c69390bbba0ce8d24a0003cfd4a72e61c6f5da1b61187e46883d4aebc5a325218
-
Filesize
12KB
MD53411f8a59c6feec93affa83241fd5b40
SHA12af3261bcaa90d1d289796e5af78f887a3c58c2f
SHA2560ce9579521afa03a9b36763a9342c6fc215d8f946844bba5bbab02dcedbdeb5e
SHA5128facfa32a94660a9c432db9cecc6e32ffa1d2e92a23e1cbc88f9676f4cd3a71ecb1f0b75ebc36b693b3022d28f4ca9ddf4e715c6f7b18c2b97aaf44e9278994f