Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ead17cd0397afa3913d88ba1d32488f2_JaffaCakes118
-
Size
5.1MB
-
Sample
240919-hx7haswfmc
-
MD5
ead17cd0397afa3913d88ba1d32488f2
-
SHA1
bd7794c1ee9c9ff6f516f2140a38d7f598db9486
-
SHA256
11f447443530b52f63c6c372d51e50cbedc549b75d26ce4bf8d6b2c51e8e0fe2
-
SHA512
61cf1394e0592fde5a9949a9107cb9f86107795879ce4bf2d60c1bdc06228ca80abdb9b61730e16d01c302b945fc8ec5f1457c14aa8a0679cba6aa1f4ac24a98
-
SSDEEP
98304:qVCqcWJn4QtJ/9m8pBzu3gCVYpWazc3GsHGX/7h7/d3bvULXyWPsajXik8k+:q7yeV9C3NVYtQJC1BYm1C6k+
Malware Config
Targets
-
-
Target
ead17cd0397afa3913d88ba1d32488f2_JaffaCakes118
-
Size
5.1MB
-
MD5
ead17cd0397afa3913d88ba1d32488f2
-
SHA1
bd7794c1ee9c9ff6f516f2140a38d7f598db9486
-
SHA256
11f447443530b52f63c6c372d51e50cbedc549b75d26ce4bf8d6b2c51e8e0fe2
-
SHA512
61cf1394e0592fde5a9949a9107cb9f86107795879ce4bf2d60c1bdc06228ca80abdb9b61730e16d01c302b945fc8ec5f1457c14aa8a0679cba6aa1f4ac24a98
-
SSDEEP
98304:qVCqcWJn4QtJ/9m8pBzu3gCVYpWazc3GsHGX/7h7/d3bvULXyWPsajXik8k+:q7yeV9C3NVYtQJC1BYm1C6k+
Score7/10-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Acquires the wake lock
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-