Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a46685d937b9fe6cb1babf3bd96a6742_JaffaCakes118

  • Size

    11.2MB

  • Sample

    240613-h7gpmaygkh

  • MD5

    a46685d937b9fe6cb1babf3bd96a6742

  • SHA1

    8285d2d94501bbda5b71453fec1991bea7b4fa21

  • SHA256

    b388e52a6b3fcc3536dc5293dfa11aa9b9be0c874b657f158c01e8e3ecce93f3

  • SHA512

    f35a33732dd9190b20ba39ef5f89aab08411b7c9520262c2175c1d1fddbb68d3f6712b8fcdebdd03b990f2ac82eaa4dfde9f6a3bc68a63e3b7f83efc8c45704d

  • SSDEEP

    196608:r9QVEMwjoCDHTUmcOP/JCJx9NMkW1ak/flohPbL3bmIsfIgQ8EFqL4GjUPHGC6Bw:rif7ugmL/JCHYkSnXl8PvLmIsf7QvIBs

Malware Config

Targets

    • Target

      a46685d937b9fe6cb1babf3bd96a6742_JaffaCakes118

    • Size

      11.2MB

    • MD5

      a46685d937b9fe6cb1babf3bd96a6742

    • SHA1

      8285d2d94501bbda5b71453fec1991bea7b4fa21

    • SHA256

      b388e52a6b3fcc3536dc5293dfa11aa9b9be0c874b657f158c01e8e3ecce93f3

    • SHA512

      f35a33732dd9190b20ba39ef5f89aab08411b7c9520262c2175c1d1fddbb68d3f6712b8fcdebdd03b990f2ac82eaa4dfde9f6a3bc68a63e3b7f83efc8c45704d

    • SSDEEP

      196608:r9QVEMwjoCDHTUmcOP/JCJx9NMkW1ak/flohPbL3bmIsfIgQ8EFqL4GjUPHGC6Bw:rif7ugmL/JCHYkSnXl8PvLmIsf7QvIBs

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

    • Target

      alipay_msp.apk

    • Size

      354KB

    • MD5

      89c04e1ebcd58eca6dd93211628ed0bc

    • SHA1

      7d1e77ce25a635299704dbd95bd95c697572ea9d

    • SHA256

      ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117

    • SHA512

      3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01

    • SSDEEP

      6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

MITRE ATT&CK Mobile v15

Tasks