Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4b41f7728f70dc46fcb53621c9a38f37_JaffaCakes118

  • Size

    26.3MB

  • Sample

    241016-d9ssfs1brf

  • MD5

    4b41f7728f70dc46fcb53621c9a38f37

  • SHA1

    2466f82d930ee98ffb3000872684cd366f33e24f

  • SHA256

    fa06ff88a64f89f522b511b73940230417c62eeaf19ccee2f577a8ca7170b68f

  • SHA512

    2af67979a5122b2039907e110a68bb05f2ce90b031874a45cd70c2e9a83df93dd3f8671ac208a31573c3e7124372091b5e97e48784bf566e25d6669bec0a833a

  • SSDEEP

    786432:jVY9aFNeWkkfjtzEVPYQfmhlPJfOBlJiP/rlaww5Jsv:jVXptQVgQWyiPjUwyA

Malware Config

Extracted

Family

mobileorder

C2

com.android.mms

com.tencent.mm

Targets

    • Target

      4b41f7728f70dc46fcb53621c9a38f37_JaffaCakes118

    • Size

      26.3MB

    • MD5

      4b41f7728f70dc46fcb53621c9a38f37

    • SHA1

      2466f82d930ee98ffb3000872684cd366f33e24f

    • SHA256

      fa06ff88a64f89f522b511b73940230417c62eeaf19ccee2f577a8ca7170b68f

    • SHA512

      2af67979a5122b2039907e110a68bb05f2ce90b031874a45cd70c2e9a83df93dd3f8671ac208a31573c3e7124372091b5e97e48784bf566e25d6669bec0a833a

    • SSDEEP

      786432:jVY9aFNeWkkfjtzEVPYQfmhlPJfOBlJiP/rlaww5Jsv:jVXptQVgQWyiPjUwyA

    • Checks if the Android device is rooted.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

MITRE ATT&CK Mobile v15

Tasks