Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
4s -
max time network
127s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
09/10/2024, 00:16
Static task
static1
Behavioral task
behavioral1
Sample
279463c9fd2a56b142dcc3c9d6b61ed6_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
libvxyCZz.apk
Resource
android-x86-arm-20240624-en
General
-
Target
libvxyCZz.apk
-
Size
577KB
-
MD5
1ee576a0e80f76179b09fac216bfa836
-
SHA1
eb7f52d1795c25574ce3cf282c5188b3e107119c
-
SHA256
cec780ddc500d28ba4f1d4e2096aed7678493226dd38295ad70aa1fde01d46d9
-
SHA512
96d643d74095f306ba0fb1ae7cdb3173cfba8b8a220e5135fc6a730f88dec05776ef856e95010beb031998576f70ac45093cd6d4509f740e20f24e903b405ec8
-
SSDEEP
12288:YiWq0Zpg2Tjp5hT5dqTpfrcYCPUE8yvyjeiHqpgUJ:D8ZNT95R5cVfwYCPOjeiHgPJ
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /storage/emulated/0/Android/data/com.jwcchbo.eypytfpfy.gclw/SIwj.zip 4282 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/Android/data/com.jwcchbo.eypytfpfy.gclw/SIwj.zip --output-vdex-fd=44 --oat-fd=45 --oat-location=/storage/emulated/0/Android/data/com.jwcchbo.eypytfpfy.gclw/oat/x86/SIwj.odex --compiler-filter=quicken --class-loader-context=& /storage/emulated/0/Android/data/com.jwcchbo.eypytfpfy.gclw/SIwj.zip 4253 obhhmgt.jdudykukd.lhqb -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver obhhmgt.jdudykukd.lhqb -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal obhhmgt.jdudykukd.lhqb
Processes
-
obhhmgt.jdudykukd.lhqb1⤵
- Loads dropped Dex/Jar
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4253 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/Android/data/com.jwcchbo.eypytfpfy.gclw/SIwj.zip --output-vdex-fd=44 --oat-fd=45 --oat-location=/storage/emulated/0/Android/data/com.jwcchbo.eypytfpfy.gclw/oat/x86/SIwj.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4282
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
325KB
MD50c87f90529f046a07cf587014011ca50
SHA1c75a2e87a557d545b654bf3e1ce1199d11529acc
SHA25640b17e5c97822f4be23ea845a455d870243ea75833de7df0a5ee4853ff573f76
SHA512074024e15ebc4a3803612cfca24458626afa4d11fbe9a73e8368a20b8a07fac0f94d9430539ce3441ca31ac2f01d612d1b06103aa9ee8634f5e9709ca77055a3
-
Filesize
341KB
MD5851f4fa403cbc71141fa804b2ebe4f3d
SHA17909e43e723969f13020c260207ee1720c6b2e00
SHA256dbd46e9687a409963508e1626c911cec05d5a1c26167b2dc81156c5fff2626c3
SHA5125f5182833e396aa02648fb794dbedda48f46eac508c2d23baf05034ade2cab7eaa01fb272f1f705fc6817437de7da4ea4ef5181787a3a523eb5da419802cf004
-
Filesize
341KB
MD5c5a9443c1ae47ddec07818cabf4a4848
SHA137929be721e89dbcd46ca999d205eb57463bfe72
SHA25657516f7ba59b4f844d935a42ea00f41de962c7f8357b2526cacd0ccfaec648ae
SHA512f3b561a6318d0f7ced1ee62584816ae294fe168369581cc5ce453e30b553b07781597a570c5f2447c33b6ee184bf139f7444850969944cf540495dc909275045
-
Filesize
33KB
MD5f0a6d3b0d0360c279832d8760428809c
SHA11d886ca5472daaae247cacab4be5ab533cd1587f
SHA2560b14ebbbde22707b218ea6013d13bd1cd1456db6887517ecb78b28a92d5ab2ed
SHA5120141831352d7b379340b5f0ae871bb6c39382490c8568f7f584a69f4101cb95664f19f611778c8359454f78a4020d80c7ac995c949c6d071179f91b1b26f0a79
-
Filesize
33KB
MD5784ea82e2d1fb2dc2162d1892549873a
SHA1165e6e3a681fbbbfe6e0ab1fe38e8c58da7c97d0
SHA256fb2d190b25a47b1d96a314b0aebae8e15d2bca64025d5b87998e26b8e668b9fd
SHA5129dc6954038aac45aa0833b89a7663d37568c0c46b6679ccf258e0dacda41cbb4644a02a98ae4a59aef548a7aaff35fdfd517db7b3413b471902ef24887fd2bdf