Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    45d42cdad4fa46ad86f485729b87d2ae_JaffaCakes118

  • Size

    16.0MB

  • Sample

    241015-e17qpayemm

  • MD5

    45d42cdad4fa46ad86f485729b87d2ae

  • SHA1

    1578e6683bdaf1e1edc8ba7abc3237fcb815207f

  • SHA256

    95a4090909a131caa9d4163812fdd0ed9a52f3a545374dd55c4207ba44c614ad

  • SHA512

    1848d0808e7c84b3369c2faeae24c741989bd7c67424e4a12185819e1b66ed53633ae2eab3d8f7fc884fbccdbe5f9584222e55d5f173f1bd078ce3ec52a16fd1

  • SSDEEP

    393216:d1VLtasGigul9H8wzJPB83aPRSlVKlPRRO:d1VLtapruliw9Pd5SlVwpw

Malware Config

Targets

    • Target

      45d42cdad4fa46ad86f485729b87d2ae_JaffaCakes118

    • Size

      16.0MB

    • MD5

      45d42cdad4fa46ad86f485729b87d2ae

    • SHA1

      1578e6683bdaf1e1edc8ba7abc3237fcb815207f

    • SHA256

      95a4090909a131caa9d4163812fdd0ed9a52f3a545374dd55c4207ba44c614ad

    • SHA512

      1848d0808e7c84b3369c2faeae24c741989bd7c67424e4a12185819e1b66ed53633ae2eab3d8f7fc884fbccdbe5f9584222e55d5f173f1bd078ce3ec52a16fd1

    • SSDEEP

      393216:d1VLtasGigul9H8wzJPB83aPRSlVKlPRRO:d1VLtapruliw9Pd5SlVwpw

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks