Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

6

9fa750cd4b...18.apk

android-9-x86

6

9fa750cd4b...18.apk

android-10-x64

7

__xadsdk__...__.apk

android-9-x86

__xadsdk__...__.apk

android-10-x64

__xadsdk__...__.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9fa750cd4ba71b5713883eb5031f1b0e_JaffaCakes118

  • Size

    8.6MB

  • Sample

    240611-1r37sstaql

  • MD5

    9fa750cd4ba71b5713883eb5031f1b0e

  • SHA1

    60053d493feb0b2ae17b19fae112496dedb4165b

  • SHA256

    b6d9c4c42b04bb365ba4247ce223ec551c608fe7997215c702ad4d2cf56fe565

  • SHA512

    786555f7f804ee3394ecad4a7cb86198e9ac38cc7d55b85d01611d7f511041f701687e1ebc6eb15a7570633de53fff49d2b6ba95b4594dd4bb8420f70ce5f95d

  • SSDEEP

    196608:g9BSjcO+XESTp+UIDGb6u0t3/Cl/hitZaDoVj1EcXk3:KM7++UI+6GaHEcU3

Score
7/10
androidcollectioncredential_accessdiscoveryimpactpersistence

Malware Config

Targets

    • Target

      9fa750cd4ba71b5713883eb5031f1b0e_JaffaCakes118

    • Size

      8.6MB

    • MD5

      9fa750cd4ba71b5713883eb5031f1b0e

    • SHA1

      60053d493feb0b2ae17b19fae112496dedb4165b

    • SHA256

      b6d9c4c42b04bb365ba4247ce223ec551c608fe7997215c702ad4d2cf56fe565

    • SHA512

      786555f7f804ee3394ecad4a7cb86198e9ac38cc7d55b85d01611d7f511041f701687e1ebc6eb15a7570633de53fff49d2b6ba95b4594dd4bb8420f70ce5f95d

    • SSDEEP

      196608:g9BSjcO+XESTp+UIDGb6u0t3/Cl/hitZaDoVj1EcXk3:KM7++UI+6GaHEcU3

    Score
    7/10
    discoverypersistencecollectioncredential_accessimpact

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery
    behavioral1behavioral2

    • Target

      __xadsdk__remote__final__.jar

    • Size

      77KB

    • MD5

      a0d83efe88f8d15fcc2161c638abadca

    • SHA1

      ee52fa8cc7b26cad91b173b5a19889c2b1dab5b1

    • SHA256

      746d1c6ed5ce1bcede110f33c1681a8365ea650462e8432eccac683926610aa5

    • SHA512

      0831c5c6d26a10e5b736ff707c6a028b223e7305ba8bb55cae5bbdbb1a49fe1e9e7ce42d0ead5d29efa715aa8e6b255428eb982cf6db6f8f738b961561e7e2fc

    • SSDEEP

      1536:kfLm+f3i21jG9oxfeSyjgbApYxeTOP3JxIOtN7iC9OA+PCC8I6ctsHiR0:kfLm+f33jGwJyjg0pweS/Jpt1iwOAola

    Score
    1/10
    behavioral3behavioral4behavioral5

MITRE ATT&CK Mobile v15

Tasks