Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b3a98bcc59829842b2f694e4de27d404_JaffaCakes118

  • Size

    11.2MB

  • Sample

    240616-qb5qksthpd

  • MD5

    b3a98bcc59829842b2f694e4de27d404

  • SHA1

    2dd9d085b61f8d02baa94c98252f84df01706c89

  • SHA256

    2d67d664a2e1b4881a71e5a6210152cf2b090438f37a40d9e1729c9fae67bcd5

  • SHA512

    45077ac7b74a49f535cefc0875b54e40e943ff6ec312acd8496aa805828d210705000b3264a557eedceb4eb035b107f2423fa1cbcdeb82ea9faed3f757cd2b44

  • SSDEEP

    196608:OCMGED9Rx6tjyd/8HupTmcY34EMiSafTdC9FwNdueb4p2kid7EJ3h84isvMKLVI:OvGIUt+OHupZKrMiHUuK2rI84ir+VI

Malware Config

Targets

    • Target

      b3a98bcc59829842b2f694e4de27d404_JaffaCakes118

    • Size

      11.2MB

    • MD5

      b3a98bcc59829842b2f694e4de27d404

    • SHA1

      2dd9d085b61f8d02baa94c98252f84df01706c89

    • SHA256

      2d67d664a2e1b4881a71e5a6210152cf2b090438f37a40d9e1729c9fae67bcd5

    • SHA512

      45077ac7b74a49f535cefc0875b54e40e943ff6ec312acd8496aa805828d210705000b3264a557eedceb4eb035b107f2423fa1cbcdeb82ea9faed3f757cd2b44

    • SSDEEP

      196608:OCMGED9Rx6tjyd/8HupTmcY34EMiSafTdC9FwNdueb4p2kid7EJ3h84isvMKLVI:OvGIUt+OHupZKrMiHUuK2rI84ir+VI

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Listens for changes in the sensor environment (might be used to detect emulation)

    • Target

      gdtadv2.jar

    • Size

      636KB

    • MD5

      cf57d4f9f2ccd86816c4f02989252423

    • SHA1

      6978f24478ba9baa004bf4d21db251fe67957ec2

    • SHA256

      e6df28c535e661d33a134407674c32555fb985a6a8f3bf8ec743150db61fa7ec

    • SHA512

      f759aea4c4fb91ce69f8238bd0e7c0f99b826cad04fc9c5f47c5afde2eceaf71d515d00f0e08b73c169e1a8bd21a17ddd3971bae27ddeb6960daaf5c5d719d4b

    • SSDEEP

      12288:lsocNwAPog24tsNbfevYHzN953QZlo5M0f+DMpP7x07S232vjUG:MNvPA9oYHzN953QEM0npDx0nm

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks