Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    026960441976b2c10f734812713e7e32_JaffaCakes118

  • Size

    4.9MB

  • Sample

    240930-vpz5gazgmf

  • MD5

    026960441976b2c10f734812713e7e32

  • SHA1

    c8251dedff0edfaecc90524d3e510dda5bfa75e8

  • SHA256

    9811df28f2e0404a99b3de5aae3d888e3898083b9aa98e15309a28169c77f3f7

  • SHA512

    d651a4499237cda00cbe6b39239b94d0bf43aa7487ad1e8bd5046b5aad142bb1e08bac2d02b9d518e386869ad022de7c4c5a48235ff2a468f224d3d4ae0c4ed4

  • SSDEEP

    98304:yJtAQEY6PHv5lvnGsJbOkNZNkt2TLhENUOHudezPbXafuN2Ny:28DuwhfNktuLhENtOomWc4

Malware Config

Targets

    • Target

      026960441976b2c10f734812713e7e32_JaffaCakes118

    • Size

      4.9MB

    • MD5

      026960441976b2c10f734812713e7e32

    • SHA1

      c8251dedff0edfaecc90524d3e510dda5bfa75e8

    • SHA256

      9811df28f2e0404a99b3de5aae3d888e3898083b9aa98e15309a28169c77f3f7

    • SHA512

      d651a4499237cda00cbe6b39239b94d0bf43aa7487ad1e8bd5046b5aad142bb1e08bac2d02b9d518e386869ad022de7c4c5a48235ff2a468f224d3d4ae0c4ed4

    • SSDEEP

      98304:yJtAQEY6PHv5lvnGsJbOkNZNkt2TLhENUOHudezPbXafuN2Ny:28DuwhfNktuLhENtOomWc4

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks