Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

6

27c2a4ea1c...18.apk

android-9-x86

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27c2a4ea1cf21f193df078f58a74c7fd_JaffaCakes118

  • Size

    21.5MB

  • Sample

    241009-atnl1stcrm

  • MD5

    27c2a4ea1cf21f193df078f58a74c7fd

  • SHA1

    8718275e5e5f9272f0816f5e114bdcedb6517bbf

  • SHA256

    4061f447dcf2f600f9c7403e99bb8b0b674cace4ceec14948bb70e4701a25488

  • SHA512

    72d34335a240cd3f74721961a25a74443288ea0caf72b63e10d72f2ddc7b18b9c3ad9b5b3476177b2377fb90a54e3b6b9281861ae51af38d564fdbe8d0bc74f7

  • SSDEEP

    393216:RRmYKyTniawndd4cxZAsowGLOrbksjaLZwFHcbhD0D6GEKdl8bdaMah:RjKy7ivndfxZAsowGLOvjCZwOeh8bd32

Score
7/10
androidcollectiondiscoveryevasionpersistence

Malware Config

Targets

    • Target

      27c2a4ea1cf21f193df078f58a74c7fd_JaffaCakes118

    • Size

      21.5MB

    • MD5

      27c2a4ea1cf21f193df078f58a74c7fd

    • SHA1

      8718275e5e5f9272f0816f5e114bdcedb6517bbf

    • SHA256

      4061f447dcf2f600f9c7403e99bb8b0b674cace4ceec14948bb70e4701a25488

    • SHA512

      72d34335a240cd3f74721961a25a74443288ea0caf72b63e10d72f2ddc7b18b9c3ad9b5b3476177b2377fb90a54e3b6b9281861ae51af38d564fdbe8d0bc74f7

    • SSDEEP

      393216:RRmYKyTniawndd4cxZAsowGLOrbksjaLZwFHcbhD0D6GEKdl8bdaMah:RjKy7ivndfxZAsowGLOvjCZwOeh8bd32

    Score
    7/10
    collectiondiscoveryevasionpersistence

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks