Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    054e60f9ee37974520ea50150b93bceb_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240428-qww9yagh24

  • MD5

    054e60f9ee37974520ea50150b93bceb

  • SHA1

    32648bf136383490e1c734bd9d4012774eb27ed3

  • SHA256

    caabebe2461da28001f0eefc7ed19e68c6d1f8067cd0a9c7e07c8418786c8d81

  • SHA512

    1a4862587ea017013c07698da94f9bc322a02a5d6a0c75644188e6c67ae19a06d45f9a07797e95433ef7770ec5dcbf3a3fbe75bda86acfd454c7589da71f08b3

  • SSDEEP

    49152:GlhZ5zApcRgrJpKLQ/Y+DEQlarRzzCtO5F2C:GlRzApcGrJsMYxQl+tGtoF2C

Malware Config

Targets

    • Target

      054e60f9ee37974520ea50150b93bceb_JaffaCakes118

    • Size

      1.8MB

    • MD5

      054e60f9ee37974520ea50150b93bceb

    • SHA1

      32648bf136383490e1c734bd9d4012774eb27ed3

    • SHA256

      caabebe2461da28001f0eefc7ed19e68c6d1f8067cd0a9c7e07c8418786c8d81

    • SHA512

      1a4862587ea017013c07698da94f9bc322a02a5d6a0c75644188e6c67ae19a06d45f9a07797e95433ef7770ec5dcbf3a3fbe75bda86acfd454c7589da71f08b3

    • SSDEEP

      49152:GlhZ5zApcRgrJpKLQ/Y+DEQlarRzzCtO5F2C:GlRzApcGrJsMYxQl+tGtoF2C

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v15

Tasks