Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

6

716bd0bcd3...18.apk

android-9-x86

7

716bd0bcd3...18.apk

android-10-x64

7

ZqhySafePay.apk

android-9-x86

1

ZqhySafePay.apk

android-10-x64

1

ZqhySafePay.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    716bd0bcd3034916c877b0a3c387076e_JaffaCakes118

  • Size

    13.2MB

  • Sample

    240525-klrc2sbh2y

  • MD5

    716bd0bcd3034916c877b0a3c387076e

  • SHA1

    9c24cc53a042ae82586e430a599a4b8ac800e92c

  • SHA256

    84aafe198f249cde3f47aae7ff6da480a41ca27978bf01c7f6867bbdeedfde7e

  • SHA512

    11db8622b2f60a72c1669abb9f6f43a98f9b2880d95f9df0185239f21f14590d5a214bf0a910c0f27d89cb0fe457ed972e35a7e56ebc5292abe22c959667b933

  • SSDEEP

    196608:MqPIIjQuOD2wX29+fah6TxGWo4ddEP0X1dXpSjwq8GgjhQWrHYQiH2DzB/:M4drODzX2954gwS8vXpSjwqEhB625/

Score
7/10
androiddiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      716bd0bcd3034916c877b0a3c387076e_JaffaCakes118

    • Size

      13.2MB

    • MD5

      716bd0bcd3034916c877b0a3c387076e

    • SHA1

      9c24cc53a042ae82586e430a599a4b8ac800e92c

    • SHA256

      84aafe198f249cde3f47aae7ff6da480a41ca27978bf01c7f6867bbdeedfde7e

    • SHA512

      11db8622b2f60a72c1669abb9f6f43a98f9b2880d95f9df0185239f21f14590d5a214bf0a910c0f27d89cb0fe457ed972e35a7e56ebc5292abe22c959667b933

    • SSDEEP

      196608:MqPIIjQuOD2wX29+fah6TxGWo4ddEP0X1dXpSjwq8GgjhQWrHYQiH2DzB/:M4drODzX2954gwS8vXpSjwqEhB625/

    Score
    7/10
    discoveryevasionimpactpersistence

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

      evasiondiscovery

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2

    • Target

      ZqhySafePay.apk

    • Size

      1.0MB

    • MD5

      fd719d8398cdefa19ea1e6771ac920d5

    • SHA1

      24191e6dc40c95f1ef62c59cb6d64caafa71ef26

    • SHA256

      76af0c879267d03328fee2064dcb2fafdbb007f9fabfbf55f543bfd38dc83f00

    • SHA512

      9b638eaff5be9ef1058971f43fdd0dfe7464b34ee33d89139b39dc6b71bcd73184fdda6276dc16433d7f2effb6ff5204760c2d0f427860c0e5f6e5e5e39b209f

    • SSDEEP

      24576:wZ1BEoimgZusEviyw+Usx3jnKTl0ypAF7ltIfhnPvsiNl3:wnaFZ06yhn3Cr8tWhnPvsiNB

    Score
    1/10
    behavioral3behavioral4behavioral5

MITRE ATT&CK Mobile v15

Tasks