Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

5ebdd95b2d...18.apk

android-9-x86

8

5ebdd95b2d...18.apk

android-10-x64

8

5ebdd95b2d...18.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ebdd95b2dcd8ffa3f4bd05bbb928ed8_JaffaCakes118

  • Size

    254KB

  • Sample

    241019-z9xx3azdld

  • MD5

    5ebdd95b2dcd8ffa3f4bd05bbb928ed8

  • SHA1

    70e9a82e0b669038d0fbfbb87a4c8b099ae3b492

  • SHA256

    77417aae6d66a86cec1584f22031c96d76ac7b695b96578fed2c70bba8410ac6

  • SHA512

    bee83a7872654665063f564d1074a933948e158568cf4590023bc108c47f11bf85d5fc83d5a197fea164bddadb119d35467a3d7861591d0ea8ba5f3b0c0fae36

  • SSDEEP

    6144:HyCp4k3/JC6AsY8/AUR3gJvBc+FFFpen7EYU:SncCf8l90RI7EF

Score
10/10
sandroratandroiddiscoveryevasionpersistencestealthtrojan

Malware Config

Extracted

Family

sandrorat

C2

egytiger.myftp.org:1337

Targets

    • Target

      5ebdd95b2dcd8ffa3f4bd05bbb928ed8_JaffaCakes118

    • Size

      254KB

    • MD5

      5ebdd95b2dcd8ffa3f4bd05bbb928ed8

    • SHA1

      70e9a82e0b669038d0fbfbb87a4c8b099ae3b492

    • SHA256

      77417aae6d66a86cec1584f22031c96d76ac7b695b96578fed2c70bba8410ac6

    • SHA512

      bee83a7872654665063f564d1074a933948e158568cf4590023bc108c47f11bf85d5fc83d5a197fea164bddadb119d35467a3d7861591d0ea8ba5f3b0c0fae36

    • SSDEEP

      6144:HyCp4k3/JC6AsY8/AUR3gJvBc+FFFpen7EYU:SncCf8l90RI7EF

    Score
    8/10
    discoveryevasionpersistencestealthtrojan

    • Removes its main activity from the application launcher

      stealthtrojanevasion

    • Acquires the wake lock

    • Queries information about active data network

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Mobile v15

Tasks