Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d03206189788f7f2780b7c1668d6e19e_JaffaCakes118

  • Size

    3.4MB

  • Sample

    240906-w43dta1grp

  • MD5

    d03206189788f7f2780b7c1668d6e19e

  • SHA1

    3146ccf56d12b313723b878e374926f4a4ec31bf

  • SHA256

    1f97af5141574e01bef06ffd23fd374530b5aeddd63d3c69ab0e875eb659760c

  • SHA512

    7b29dab7f5c3c39e0a9f320c693b83e67bcf6d4cd1363385b1aa5fb949a889b667341be5973e7d5bdbd9efe31892dfc979fcbfbf54fbe877c9543a707a151fc5

  • SSDEEP

    98304:pdGrAdMGjbRROjBFcnBa9vRQGogBB1xFQZtw:pkoWOn6RuW1xOtw

Malware Config

Targets

    • Target

      d03206189788f7f2780b7c1668d6e19e_JaffaCakes118

    • Size

      3.4MB

    • MD5

      d03206189788f7f2780b7c1668d6e19e

    • SHA1

      3146ccf56d12b313723b878e374926f4a4ec31bf

    • SHA256

      1f97af5141574e01bef06ffd23fd374530b5aeddd63d3c69ab0e875eb659760c

    • SHA512

      7b29dab7f5c3c39e0a9f320c693b83e67bcf6d4cd1363385b1aa5fb949a889b667341be5973e7d5bdbd9efe31892dfc979fcbfbf54fbe877c9543a707a151fc5

    • SSDEEP

      98304:pdGrAdMGjbRROjBFcnBa9vRQGogBB1xFQZtw:pkoWOn6RuW1xOtw

    • Checks if the Android device is rooted.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks