Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

6

3e4c784764...18.apk

android-9-x86

7

932.apk

android-9-x86

7

932.apk

android-10-x64

1

932.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e4c784764f406d2f3f83e04dc3f4929_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241013-g7hq9axdrn

  • MD5

    3e4c784764f406d2f3f83e04dc3f4929

  • SHA1

    074e39923a69794a02036ad255f34ebe97fd5a8f

  • SHA256

    d6fb5f8f0c6c5301e2850a1f3ea9d64e15c74f043705e4cc48282f6edccec0af

  • SHA512

    e6b179545ff09acc2bfc93574d7436a52bbbf0983ba278411ed78a48d4e3386e1ec4dd0ab392bfaec0d800d7d41668f2ab475b52e1e030903e553e5a43f90778

  • SSDEEP

    24576:EpAQOEehrQErTzLEY93dgUcy0buRLWIHN6mk/ttj7ncXWeER8HB5I:ZQOfr3EY93mUcyquRLWok/Tj7ncmes

Score
7/10
androidbankercollectiondiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      3e4c784764f406d2f3f83e04dc3f4929_JaffaCakes118

    • Size

      1.1MB

    • MD5

      3e4c784764f406d2f3f83e04dc3f4929

    • SHA1

      074e39923a69794a02036ad255f34ebe97fd5a8f

    • SHA256

      d6fb5f8f0c6c5301e2850a1f3ea9d64e15c74f043705e4cc48282f6edccec0af

    • SHA512

      e6b179545ff09acc2bfc93574d7436a52bbbf0983ba278411ed78a48d4e3386e1ec4dd0ab392bfaec0d800d7d41668f2ab475b52e1e030903e553e5a43f90778

    • SSDEEP

      24576:EpAQOEehrQErTzLEY93dgUcy0buRLWIHN6mk/ttj7ncXWeER8HB5I:ZQOfr3EY93mUcyquRLWok/Tj7ncmes

    Score
    7/10
    collectiondiscoveryimpactpersistence

    • Reads the content of the SMS messages.

      collection

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the mobile country code (MCC)

      discovery
    behavioral1

    • Target

      932

    • Size

      146KB

    • MD5

      6f2cbd63ab58e1b19df25b2fa53bfa50

    • SHA1

      7a3f0381a68ce5ce0f79a781d197488304521917

    • SHA256

      d06a6b816db1572b8e1d4d9f0b688f4dcc0daac721dd7ad777cd5d5f2b8b4476

    • SHA512

      b627b592d6ce09ed7fc6c7343394d277bb9cc50aa75d14f331c070a503f8bbf447298396cff767ad93a8398f50b079388c72a814ed53ec0c5f80d52405c2c736

    • SSDEEP

      3072:ch9FXmi3Efq59bp2ETOn/xElXK39XEa9pZBSnSJ3+4kgVlyG75bX:cRWi3Gq59tdOZeX49XEOpHUKhlNNL

    Score
    7/10
    bankerdiscoveryevasionpersistence

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Queries information about active data network

      discovery
    behavioral2behavioral3behavioral4

MITRE ATT&CK Mobile v15

Tasks