Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d3097dd5a320c6ab6156e3aada64a33b_JaffaCakes118

  • Size

    27.1MB

  • Sample

    240907-28414atbld

  • MD5

    d3097dd5a320c6ab6156e3aada64a33b

  • SHA1

    f176a728e4cc3542cb4d3f29827b8e12e7958d3e

  • SHA256

    40dbfaae20bcec36a9f9c806bcb7448901e804c305ec4248cadbb3a3e1f0985c

  • SHA512

    e5254b764c659d63cde7a769323b3937b74e971a145f0f91e8621ae6c3987eb73d9dfc7122bd3ff06cd691ad2aef967d6bee4567ccba1f0b51780d26a9cfd6f3

  • SSDEEP

    786432:NB+QSq9C0MfF2M2v1HJnctV0OKuNLLdsFY:qQSzfIf9pncIMNLL+S

Malware Config

Targets

    • Target

      d3097dd5a320c6ab6156e3aada64a33b_JaffaCakes118

    • Size

      27.1MB

    • MD5

      d3097dd5a320c6ab6156e3aada64a33b

    • SHA1

      f176a728e4cc3542cb4d3f29827b8e12e7958d3e

    • SHA256

      40dbfaae20bcec36a9f9c806bcb7448901e804c305ec4248cadbb3a3e1f0985c

    • SHA512

      e5254b764c659d63cde7a769323b3937b74e971a145f0f91e8621ae6c3987eb73d9dfc7122bd3ff06cd691ad2aef967d6bee4567ccba1f0b51780d26a9cfd6f3

    • SSDEEP

      786432:NB+QSq9C0MfF2M2v1HJnctV0OKuNLLdsFY:qQSzfIf9pncIMNLL+S

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks