Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ddae921fe4c3f308b49720e0e5de5373_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240913-e6zbhavbkm

  • MD5

    ddae921fe4c3f308b49720e0e5de5373

  • SHA1

    4d5565280fe8aafe3a8cbdb5cabfae699c3e581d

  • SHA256

    2ae8b9266e6fd8e2a840692ffa3fb5728332660be61ee80e123605fd28922912

  • SHA512

    48cb90790269a1fb00d3febac770b127af3c137d40f8aae661e2dcbcfbb32fe41317142f3b06059b15e9a3d59b7a39e9d09bba81010356469d59db6f4195c559

  • SSDEEP

    98304:Q0JZyHWsnx/Qg4WjhVKn85gVNanW8tP7x9xS8062G:dZyHp4WDKNanTP7xLt062G

Malware Config

Targets

    • Target

      ddae921fe4c3f308b49720e0e5de5373_JaffaCakes118

    • Size

      3.6MB

    • MD5

      ddae921fe4c3f308b49720e0e5de5373

    • SHA1

      4d5565280fe8aafe3a8cbdb5cabfae699c3e581d

    • SHA256

      2ae8b9266e6fd8e2a840692ffa3fb5728332660be61ee80e123605fd28922912

    • SHA512

      48cb90790269a1fb00d3febac770b127af3c137d40f8aae661e2dcbcfbb32fe41317142f3b06059b15e9a3d59b7a39e9d09bba81010356469d59db6f4195c559

    • SSDEEP

      98304:Q0JZyHWsnx/Qg4WjhVKn85gVNanW8tP7x9xS8062G:dZyHp4WDKNanTP7xLt062G

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Requests cell location

      Uses Android APIs to to get current cell information.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks