Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f38af00c9645fff8992bffd7841de8d5_JaffaCakes118

  • Size

    24.3MB

  • Sample

    240416-p8d4fsag52

  • MD5

    f38af00c9645fff8992bffd7841de8d5

  • SHA1

    dff319ddb1cc4c838cead438457b4f5c3640181e

  • SHA256

    149beb5fd851b43f5ebc97e277d47cbbc205d49d499eb2cfa0aaa75486d42ebd

  • SHA512

    e217c99d32aa0ac237398d4e70f0ee09e8761bafb9e0eb222568a1c444bd43fb729efcf6579924995b5592a6bd33a259afe02a630d5ba6fea54c492f3354f079

  • SSDEEP

    393216:0tudagkAo1l4Jgw3WNGd4hpocGxUEtcYzgsnFaH4Jxw7/bl+zf:0HTPNfhpoPH2itsYYrBc

Malware Config

Targets

    • Target

      f38af00c9645fff8992bffd7841de8d5_JaffaCakes118

    • Size

      24.3MB

    • MD5

      f38af00c9645fff8992bffd7841de8d5

    • SHA1

      dff319ddb1cc4c838cead438457b4f5c3640181e

    • SHA256

      149beb5fd851b43f5ebc97e277d47cbbc205d49d499eb2cfa0aaa75486d42ebd

    • SHA512

      e217c99d32aa0ac237398d4e70f0ee09e8761bafb9e0eb222568a1c444bd43fb729efcf6579924995b5592a6bd33a259afe02a630d5ba6fea54c492f3354f079

    • SSDEEP

      393216:0tudagkAo1l4Jgw3WNGd4hpocGxUEtcYzgsnFaH4Jxw7/bl+zf:0HTPNfhpoPH2itsYYrBc

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device.

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection.

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Listens for changes in the sensor environment (might be used to detect emulation)

    • Target

      gdtadv2.jar

    • Size

      443KB

    • MD5

      232146e2595dbcc4917a3ae7b3663b3c

    • SHA1

      3deedba5289f3eddc87cf35c06ba6c6aa1380275

    • SHA256

      abbda9c3353d88c4de9df8880b962fe7958c610cbf54e3e57568af80cd504711

    • SHA512

      43fc0b3687d54dfaecc0a53ce290c59ba4b35540b0348f28edede81fd8e96888dabe7c008eb0d1d8d4fd23c76ace1ff570dd9175695f25a5aaad055f1dfc0d69

    • SSDEEP

      6144:Nvd0m3MKiQr/B49UXhtjKzGLCrR8A5ZpKkUuf/nVo9v1LIMyXiBqpMoZInOrGPuB:j1F/BkURZdiL7UInV8xIbXolwCO6xu

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks