Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d7120e9f07c1851bb370c4c164f8f418_JaffaCakes118
-
Size
26.0MB
-
Sample
240909-zma5sa1flb
-
MD5
d7120e9f07c1851bb370c4c164f8f418
-
SHA1
5e9643be8cc7c610a56bdfaf40389ab3f2175812
-
SHA256
4befbc31a73490fd62a0e3a627dac2c0c5bcf4fa4bc1a077824757b873db490f
-
SHA512
9d7766cb700f1b9f6915d391c7f980bb748b42d28ee0ba7ead8aacd7bf44031d1020a708f8d723a4c5f3111d688bd1d54b9d881eb7f3e7e6eb5fddf10a869936
-
SSDEEP
393216:BcZCZ6PDBbr7l8eATTlz/boGotIrgnkHh+FJhXpZpfV1+oqNPqZSFO:BcZRPlbrieAXVo7WUe8PZZT1+otz
Static task
static1
Behavioral task
behavioral1
Sample
d7120e9f07c1851bb370c4c164f8f418_JaffaCakes118.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
d7120e9f07c1851bb370c4c164f8f418_JaffaCakes118.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Targets
-
-
Target
d7120e9f07c1851bb370c4c164f8f418_JaffaCakes118
-
Size
26.0MB
-
MD5
d7120e9f07c1851bb370c4c164f8f418
-
SHA1
5e9643be8cc7c610a56bdfaf40389ab3f2175812
-
SHA256
4befbc31a73490fd62a0e3a627dac2c0c5bcf4fa4bc1a077824757b873db490f
-
SHA512
9d7766cb700f1b9f6915d391c7f980bb748b42d28ee0ba7ead8aacd7bf44031d1020a708f8d723a4c5f3111d688bd1d54b9d881eb7f3e7e6eb5fddf10a869936
-
SSDEEP
393216:BcZCZ6PDBbr7l8eATTlz/boGotIrgnkHh+FJhXpZpfV1+oqNPqZSFO:BcZRPlbrieAXVo7WUe8PZZT1+otz
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2