Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    5s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    12/10/2024, 04:58

General

  • Target

    38812b7d85b705679cdddc20bc369515_JaffaCakes118.apk

  • Size

    25.4MB

  • MD5

    38812b7d85b705679cdddc20bc369515

  • SHA1

    163acf1eae8ca572914a8754c70a7ffddaeb24b7

  • SHA256

    4956a51ce8d0fb6896d96c1d8f045e87c0d71a3991188f9ab77ef331a3cabaac

  • SHA512

    189feab1d10bd1670d1bf0ec806686e8d8533884ce3b50e378baf6cdff1ca6915bb635d5e01ec84f2cccf10fbfa675eaf18c6ba3a3f512911f60c48c71e55118

  • SSDEEP

    786432:yx7WkVDXR6Ij/TT2ByoZE73b8ntj2xiP/D7XBAQ:2WkSIj/UZY3bOj2avJ

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.immomo.momo
    1⤵
    • Loads dropped Dex/Jar
    PID:4272
    • /system/bin/sh -c ps
      2⤵
        PID:4304
      • ps
        2⤵
          PID:4304
        • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.immomo.momo/.ucache/classez.jar --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.immomo.momo/.ucache/oat/x86/classez.odex --compiler-filter=quicken --class-loader-context=&
          2⤵
          • Loads dropped Dex/Jar
          PID:4330

      Network

      MITRE ATT&CK Mobile v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.immomo.momo/.ucache/classez.jar

        Filesize

        434KB

        MD5

        8715dc056ad3f44dc9263f848873ae41

        SHA1

        f7df5941f35daaf2a68d2c7583632b614963a919

        SHA256

        49585cfb0a1b9ef6fcff2718223685a4fa75cf277e0a64be0120d198e495eb83

        SHA512

        1f0ed2ab7128e7fa4e96afe3dc8c111f7419d100ec959050d4dd66b5143d894616ab188fe93cce9ed0bf3fef44b2941adba9408197d77c65f311bed153db2913

      • /data/data/com.immomo.momo/.ucache/classez.jar

        Filesize

        1.2MB

        MD5

        00e03251d2b09f8f8b270cd0b5281179

        SHA1

        0087e2c2153bd879a123bf782a6bb8a1070e906d

        SHA256

        ec1ed91dfda9ecd108b6240d2d90dabb7cbcdd36a00e4284f693fbc08393d77e

        SHA512

        5c740f355b1e487df88352edc152af01581744f0bc3d5a94cb1cd78f25be818f87f9d284d9d9001426b34ea000cece8ef46e87edadba55a18a98e3b6bf861993

      • /data/data/com.immomo.momo/.ucache/classez.jar

        Filesize

        1.2MB

        MD5

        e5d9aa77454d81d747e989ba2bcb71f0

        SHA1

        385f15861e155f47ba90382137967342eee2bdd5

        SHA256

        b85c516e4241b45025764a737b3806603e61dcd07129eb3a07547b95740fbc3c

        SHA512

        3ca6d22606162f9a8d43625e736835a6bb703b66bc9e2b3c7128988ac9a7246ce35a3eadbc868f92bd2e806f27d8f9daa69058af532bf8229d8bae8788b5e3d3

      • /data/data/com.immomo.momo/.ulibs/decrypt.so

        Filesize

        29KB

        MD5

        d7cb8b5358b1c095511cf9edb1c13354

        SHA1

        2ecc10b8e73597d54bd13b7b2046477f1bd40939

        SHA256

        e551db916184b19a7dbd2393e41b54543cc5eeb10ce3550b5219695ab6126998

        SHA512

        c73123bae60da7a98c56f7209a5b43b3939e774b288790a8392713c1eb6c1ae4902948d2e2faa07648df5d0e9c35753cd6ca4c0f2e9cb67c3fa45eb6d5599cb4

      • /data/data/com.immomo.momo/.ulibs/libunicomsdk.so

        Filesize

        25KB

        MD5

        c7d63bc9cd71136f6e6b170a38a0bca4

        SHA1

        3b70dd49cf8dd04e7ab25d7b6235cdd918d3034a

        SHA256

        e7b017311203825cf628d3718345aa82c81fd1d184c06a340cf1b0d504825763

        SHA512

        bb84ffe32c461fd2911134b13e7aca33e507b564e868229d9d7a629ae4ffef10d304771e6b3d04006d32392f9835ec49bd7de01f627833f24e21497445abf440