Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c10e7309ccc11dd346304ee701902583_JaffaCakes118

  • Size

    30.9MB

  • Sample

    240825-s5ahms1grd

  • MD5

    c10e7309ccc11dd346304ee701902583

  • SHA1

    072083d6fc3989ef03892c59ab6d9660800bc052

  • SHA256

    617c6cc516b7aa200e6c2d8a7cc4557748539fa548fd9d9cd6e32d611eb04ee1

  • SHA512

    495e107e0aeecae34c889968014d4efcde130e20b0260ccc9d4e4616a326ef960cf1c23d5716cae5c2e1872251dcc6f9995e4f31cd8e44d9eedf1e46a7872b9b

  • SSDEEP

    786432:/ihRbEiLLOTQO9jjXOhkoMyn38e2qWYmAn4DXoq:/ihRJLqsajjXOj38eJJn40q

Malware Config

Targets

    • Target

      c10e7309ccc11dd346304ee701902583_JaffaCakes118

    • Size

      30.9MB

    • MD5

      c10e7309ccc11dd346304ee701902583

    • SHA1

      072083d6fc3989ef03892c59ab6d9660800bc052

    • SHA256

      617c6cc516b7aa200e6c2d8a7cc4557748539fa548fd9d9cd6e32d611eb04ee1

    • SHA512

      495e107e0aeecae34c889968014d4efcde130e20b0260ccc9d4e4616a326ef960cf1c23d5716cae5c2e1872251dcc6f9995e4f31cd8e44d9eedf1e46a7872b9b

    • SSDEEP

      786432:/ihRbEiLLOTQO9jjXOhkoMyn38e2qWYmAn4DXoq:/ihRJLqsajjXOj38eJJn40q

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Requests cell location

      Uses Android APIs to to get current cell information.

MITRE ATT&CK Mobile v15

Tasks