Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
12/10/2024, 04:58
Static task
static1
Behavioral task
behavioral1
Sample
38812b7d85b705679cdddc20bc369515_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
unicom_resource.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral3
Sample
unicom_resource.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral4
Sample
unicom_resource.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
38812b7d85b705679cdddc20bc369515_JaffaCakes118.apk
-
Size
25.4MB
-
MD5
38812b7d85b705679cdddc20bc369515
-
SHA1
163acf1eae8ca572914a8754c70a7ffddaeb24b7
-
SHA256
4956a51ce8d0fb6896d96c1d8f045e87c0d71a3991188f9ab77ef331a3cabaac
-
SHA512
189feab1d10bd1670d1bf0ec806686e8d8533884ce3b50e378baf6cdff1ca6915bb635d5e01ec84f2cccf10fbfa675eaf18c6ba3a3f512911f60c48c71e55118
-
SSDEEP
786432:yx7WkVDXR6Ij/TT2ByoZE73b8ntj2xiP/D7XBAQ:2WkSIj/UZY3bOj2avJ
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/data/com.immomo.momo/.ucache/classez.jar 4330 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.immomo.momo/.ucache/classez.jar --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.immomo.momo/.ucache/oat/x86/classez.odex --compiler-filter=quicken --class-loader-context=& /data/data/com.immomo.momo/.ucache/classez.jar 4272 com.immomo.momo
Processes
-
com.immomo.momo1⤵
- Loads dropped Dex/Jar
PID:4272 -
/system/bin/sh -c ps2⤵PID:4304
-
-
ps2⤵PID:4304
-
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.immomo.momo/.ucache/classez.jar --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.immomo.momo/.ucache/oat/x86/classez.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4330
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
434KB
MD58715dc056ad3f44dc9263f848873ae41
SHA1f7df5941f35daaf2a68d2c7583632b614963a919
SHA25649585cfb0a1b9ef6fcff2718223685a4fa75cf277e0a64be0120d198e495eb83
SHA5121f0ed2ab7128e7fa4e96afe3dc8c111f7419d100ec959050d4dd66b5143d894616ab188fe93cce9ed0bf3fef44b2941adba9408197d77c65f311bed153db2913
-
Filesize
1.2MB
MD500e03251d2b09f8f8b270cd0b5281179
SHA10087e2c2153bd879a123bf782a6bb8a1070e906d
SHA256ec1ed91dfda9ecd108b6240d2d90dabb7cbcdd36a00e4284f693fbc08393d77e
SHA5125c740f355b1e487df88352edc152af01581744f0bc3d5a94cb1cd78f25be818f87f9d284d9d9001426b34ea000cece8ef46e87edadba55a18a98e3b6bf861993
-
Filesize
1.2MB
MD5e5d9aa77454d81d747e989ba2bcb71f0
SHA1385f15861e155f47ba90382137967342eee2bdd5
SHA256b85c516e4241b45025764a737b3806603e61dcd07129eb3a07547b95740fbc3c
SHA5123ca6d22606162f9a8d43625e736835a6bb703b66bc9e2b3c7128988ac9a7246ce35a3eadbc868f92bd2e806f27d8f9daa69058af532bf8229d8bae8788b5e3d3
-
Filesize
29KB
MD5d7cb8b5358b1c095511cf9edb1c13354
SHA12ecc10b8e73597d54bd13b7b2046477f1bd40939
SHA256e551db916184b19a7dbd2393e41b54543cc5eeb10ce3550b5219695ab6126998
SHA512c73123bae60da7a98c56f7209a5b43b3939e774b288790a8392713c1eb6c1ae4902948d2e2faa07648df5d0e9c35753cd6ca4c0f2e9cb67c3fa45eb6d5599cb4
-
Filesize
25KB
MD5c7d63bc9cd71136f6e6b170a38a0bca4
SHA13b70dd49cf8dd04e7ab25d7b6235cdd918d3034a
SHA256e7b017311203825cf628d3718345aa82c81fd1d184c06a340cf1b0d504825763
SHA512bb84ffe32c461fd2911134b13e7aca33e507b564e868229d9d7a629ae4ffef10d304771e6b3d04006d32392f9835ec49bd7de01f627833f24e21497445abf440