Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

6

e82e33751f...18.apk

android-9-x86

8

e82e33751f...18.apk

android-10-x64

8

gdtadv2.apk

android-9-x86

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e82e33751fdb09ecee512b721d24d97f_JaffaCakes118

  • Size

    5.6MB

  • Sample

    240408-xn4sdacb9v

  • MD5

    e82e33751fdb09ecee512b721d24d97f

  • SHA1

    8ffcc16d5684b8a439f3a1b8fdfcdf3d82dee7f7

  • SHA256

    14edd2dc62f2297e929131231b02535c0e23c18150477a4e81e3a201ee66fde6

  • SHA512

    5055e8e4c899494c9dda659e2597f72b90a3db5756d498df576dcb12219991f7e91926dd241fdb523a00de75d7d391cb77a3507521aa9065a1ee693050154f5e

  • SSDEEP

    98304:hvAKN4bK9G5Buix2sTgcwEYWsO606mnU1kOVmCc4gnXUY+L2YKaccL0wmh4:ytg/02gBwEYWRT6mn4v+4cUY3Zan0wmy

Score
8/10
androidcollectiondiscoveryevasion

Malware Config

Targets

    • Target

      e82e33751fdb09ecee512b721d24d97f_JaffaCakes118

    • Size

      5.6MB

    • MD5

      e82e33751fdb09ecee512b721d24d97f

    • SHA1

      8ffcc16d5684b8a439f3a1b8fdfcdf3d82dee7f7

    • SHA256

      14edd2dc62f2297e929131231b02535c0e23c18150477a4e81e3a201ee66fde6

    • SHA512

      5055e8e4c899494c9dda659e2597f72b90a3db5756d498df576dcb12219991f7e91926dd241fdb523a00de75d7d391cb77a3507521aa9065a1ee693050154f5e

    • SSDEEP

      98304:hvAKN4bK9G5Buix2sTgcwEYWsO606mnU1kOVmCc4gnXUY+L2YKaccL0wmh4:ytg/02gBwEYWRT6mn4v+4cUY3Zan0wmy

    Score
    8/10
    collectiondiscoveryevasion

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscovery

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

      evasiondiscovery

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Queries information about running processes on the device.

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Acquires the wake lock

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral1behavioral2

    • Target

      gdtadv2.jar

    • Size

      241KB

    • MD5

      b95166c2f63e536b6fc4b5b811444dec

    • SHA1

      45fc74323bb2e66f4c2a493b65b70e0de2aeb77c

    • SHA256

      2f92b98f55c7d4417dff3fc2af9245c66aad3ab8be65177954ed7a4f13bae20d

    • SHA512

      65eb813d39270d83e6d43956ec139f04779dbea58e517da1727a0f4fad9de32bb4cd49bed1dc1fec31b95a95b1c653c22b327aa38cba1645330c9d256d94c087

    • SSDEEP

      6144:KRKhU/uUwjTCpnUjgWkiCBliWLvghUhSj4qj80Gq7JqBGK:KoUmUgenUjwBl1jgVjJ57IBl

    Score
    1/10
    behavioral3behavioral4behavioral5

MITRE ATT&CK Mobile v15

Tasks