Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
18/10/2024, 08:02
General
-
Target
56500a265643b42b8333737053255c0d_JaffaCakes118.apk
-
Size
999KB
-
MD5
56500a265643b42b8333737053255c0d
-
SHA1
e2b61809b040b9cbf17dbacc6b556bf0c343dd4c
-
SHA256
975a86001a67846180169011ed23c6c0f98cbe9c3413d42d7ece92baf8463c5f
-
SHA512
d29bd6a195eb086525344ec6c0f2d433f24ec2aed5df9acb7e9c18653233751d24659797d25815fc99a05874ddce72c2c1e8603140be0ace78ec7948d1e63ffd
-
SSDEEP
24576:w2uo+x0fweBUWQhVO9dth0KjuiJEfTAcSqVDby7MJ7KfuSh/X2bGy/:mo+kD+DSZjNkUcSqkisuq+r/
Malware Config
Signatures
-
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Reads the content of the SMS messages. 1 TTPs 1 IoCs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.noPoint.activity1⤵
- Queries information about the current nearby Wi-Fi networks
- Reads the content of the SMS messages.
- Requests cell location
- Queries information about active data network
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
41KB
MD5d0b3fdfa1f952d6e6cf4e08a0eee7086
SHA174eb7c2040bef7f18220ed1a13471f9518daede6
SHA2569f9450065da898b605346aa4e5e83125e2d986a35dd8e7fe45993bfa47021b1d
SHA512fa3985a8e05da008733f1c542c9b6e93161243a20b2be86c43def910b80f8d4a20a034f189cadb44f421139f058e00c8de76aedb1f3c908a07ba4f5898209b7f
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
68B
MD577731055735c8fbc576baac5575d5608
SHA108cf6c02898b1f0f0cebfe40d249e210ae214d87
SHA2567ceabbf9109e450c61fbb5902a6e66468d9d6176f29d7d64925f8ad9675b5584
SHA512b0ed869b5acf581d6f24f659491d6991bc1e0b4aaa7788ed9a436c4abb79fc0a1cffbcadbc4f4f94c305082f5ae30fa207b5e9dc965c2eb9b120045f12e00c70
-
Filesize
118B
MD5c6f75c1488c290e4fbc3b0e0b2d17c12
SHA15e6458862e58dfcc728a9aae2f9105d4007a5f6e
SHA256dff89f0a627dd6ad09988d1d38171f954379b431fd30e5a4924c42a51cfd7493
SHA51295c5355d70bb5c2e8a4b575daef96fda3c8f0be398ad848aea6eba4507d4dfe127f0f8e25b21defabe69e1695f45b1732a4008e1aac59e6f1d7a89f364950a21
-
Filesize
2KB
MD5bec9e8e26939309c95de826e60e4ff57
SHA1a2fb5f07eb2b07cb24b99bab34296958f06a2e37
SHA2567f843610bffe92d37df261310d03ac82b62578c2fe23980bca1b5c0f66277499
SHA5129aec4832b567a49aa195df5c09a8f9e00b03ad45cfd9930e42251d89a06f98e1c54e82e50d531524feea0fd1f9ce3cb43ad67b507414194e5eba5b74eab282ad
-
Filesize
2KB
MD50cb132cde7a68b60c8b75e548295a85a
SHA108f6f2f2baf967c66da9d62c21966f808cc0bb80
SHA256790f2c47983f272b693bc640e8fa8682f63a4849323d2b3e58325012733b3976
SHA5129496a52c20d0333aa45c588938fc094907f8ddaa1a1e5c3e82670efa976a742effe73e7013625058b671632e05a414beae2593b0f916084c60b54055cacf65ee