Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    275d23f08da30d9729c21342bb520fdc_JaffaCakes118

  • Size

    12.0MB

  • Sample

    240509-afas1ahf77

  • MD5

    275d23f08da30d9729c21342bb520fdc

  • SHA1

    ae62e6e3d2e602fe26c97eeb4843e7ca6633438b

  • SHA256

    9f4ce3192bb6e51ebb7383aff18aacbf2cebe6c6cf66f381a6b7d952a31fd784

  • SHA512

    623dd6c4aa4640cfd2fcd6fd8e19c7a4e109a1bcdcf17b2bdc00d4454b97e353f02ec01b86f92fa6205c0e0f15723afcff23b5a358836031224ab9bd6302b813

  • SSDEEP

    196608:v35tzRoOsFmcu8sHE4/sOoREeiH/NlHdfvcbPZOH2nYJ91sn/H+gT:v3LRkmcO8DREegHtiOWYJDKvT

Malware Config

Targets

    • Target

      275d23f08da30d9729c21342bb520fdc_JaffaCakes118

    • Size

      12.0MB

    • MD5

      275d23f08da30d9729c21342bb520fdc

    • SHA1

      ae62e6e3d2e602fe26c97eeb4843e7ca6633438b

    • SHA256

      9f4ce3192bb6e51ebb7383aff18aacbf2cebe6c6cf66f381a6b7d952a31fd784

    • SHA512

      623dd6c4aa4640cfd2fcd6fd8e19c7a4e109a1bcdcf17b2bdc00d4454b97e353f02ec01b86f92fa6205c0e0f15723afcff23b5a358836031224ab9bd6302b813

    • SSDEEP

      196608:v35tzRoOsFmcu8sHE4/sOoREeiH/NlHdfvcbPZOH2nYJ91sn/H+gT:v3LRkmcO8DREegHtiOWYJDKvT

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Requests dangerous framework permissions

    • Target

      alipay_msp.apk

    • Size

      748KB

    • MD5

      d06ea38e4210a87d6b96f8b0491df677

    • SHA1

      3ba573396398757088e559a9d372049a377eb05a

    • SHA256

      76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1

    • SHA512

      3d43e5bfad2b703a804a53048b6a88228a11fb80ac641d6594f774cc07f6c7367e0ee80b29966d02c9206542f467f55b0f1ddbbfef0ec372256314a7d1071f30

    • SSDEEP

      12288:IjRAsoln+WMB1EgrGERh4xWgtSM7vXrRCn4I5p2Cnfv:IjRApZ+WM7yER61P7jw4IGSfv

    Score
    1/10
    • Target

      epay.jar

    • Size

      110KB

    • MD5

      ecb9814b61a1594af368be8e0fb76ec2

    • SHA1

      77ca75c93da98e3f7b65f8ef5be0e0bafff4c893

    • SHA256

      652f94d664b22fdb6eb6637d52a635d8bf2b1c194d4cd16d2d9740ddc32eee17

    • SHA512

      a8e2e87d4f808f313d3c4c54051bc19ddd707cc0be1ddd3623f5dac7040d06ef34a2676544b6ee250384bf8565a963531c733f8bd9f3182d623389ecc57436ab

    • SSDEEP

      1536:NpCpaHkYKyfIAOePY8ODE3gBEDxs3logtsbOnV84XDwDXQYA+PSFsoA+I8G3c1iz:PtpIAOePcjQK3aByVpXDwDnqtdG3xmML

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks