Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    454d5c301bd5415dea0abfde5afcfbbb_JaffaCakes118

  • Size

    4.0MB

  • Sample

    240515-kamwgsha36

  • MD5

    454d5c301bd5415dea0abfde5afcfbbb

  • SHA1

    0a50a5cb677eb70308f381f4bcaae041df436f1c

  • SHA256

    34a48742babda8a6c97235bb8d9517eba922c6007a1ac490e208d79e489985bb

  • SHA512

    0e4064f30d2982f908d70152c9d35667457a021970002ff20212337a05591cf03cb2826b196303e5f1224460fe8dc66302540e7f84a29f15d1510052537518b6

  • SSDEEP

    98304:rB0bSNfvb7pTdRgYhAVGDIVRYSz6hP6XBh6IG9:rmG9vb7pZcM83YSz66hm

Malware Config

Targets

    • Target

      454d5c301bd5415dea0abfde5afcfbbb_JaffaCakes118

    • Size

      4.0MB

    • MD5

      454d5c301bd5415dea0abfde5afcfbbb

    • SHA1

      0a50a5cb677eb70308f381f4bcaae041df436f1c

    • SHA256

      34a48742babda8a6c97235bb8d9517eba922c6007a1ac490e208d79e489985bb

    • SHA512

      0e4064f30d2982f908d70152c9d35667457a021970002ff20212337a05591cf03cb2826b196303e5f1224460fe8dc66302540e7f84a29f15d1510052537518b6

    • SSDEEP

      98304:rB0bSNfvb7pTdRgYhAVGDIVRYSz6hP6XBh6IG9:rmG9vb7pZcM83YSz66hm

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks