Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e23991bf368067467b4d155da9091e70_JaffaCakes118

  • Size

    900KB

  • Sample

    240915-l291rsxhjd

  • MD5

    e23991bf368067467b4d155da9091e70

  • SHA1

    5603b4bcae698b1339db77bf83d3de8118130d04

  • SHA256

    042545c2cc5ff14e5b6cb9865d61481021952d897795b4522b33ecf832207a5b

  • SHA512

    a03ad66d7c6230ae9c52f53f4b8deb7c9a02fc5df8f85554a2a69aaca7280f788d0d8a5a56f065efe4e4c64adad18dce10687106756ca119682c90e00003fb3b

  • SSDEEP

    24576:Di6LvaF3zlck94/DkPEaDH8H6s5luk1iW08g0i:lzaBzCky/YNcas5lTM8g0i

Malware Config

Targets

    • Target

      e23991bf368067467b4d155da9091e70_JaffaCakes118

    • Size

      900KB

    • MD5

      e23991bf368067467b4d155da9091e70

    • SHA1

      5603b4bcae698b1339db77bf83d3de8118130d04

    • SHA256

      042545c2cc5ff14e5b6cb9865d61481021952d897795b4522b33ecf832207a5b

    • SHA512

      a03ad66d7c6230ae9c52f53f4b8deb7c9a02fc5df8f85554a2a69aaca7280f788d0d8a5a56f065efe4e4c64adad18dce10687106756ca119682c90e00003fb3b

    • SSDEEP

      24576:Di6LvaF3zlck94/DkPEaDH8H6s5luk1iW08g0i:lzaBzCky/YNcas5lTM8g0i

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks