Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c3fd36103f617324d4d2fa833989096c_JaffaCakes118
-
Size
4.9MB
-
Sample
241204-xwcc4askhq
-
MD5
c3fd36103f617324d4d2fa833989096c
-
SHA1
f12b9d0c224e0130e33af012b883c6405bb32503
-
SHA256
0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870
-
SHA512
8d4b97982f18c67d90f074c518ea496ce2ba3add85529903108acfe266de02c9aa4c93b93e1fbba99a08658a78fb788450760a2d9c7983e65ed9a9eb195ea00e
-
SSDEEP
98304:U7pojb8O89LBkmUVyt1CXzTAy6ndf8GDLPGNw9PSqflLO0iX:U7pTO89K/VOCXfm98GPuq5PS0iX
Behavioral task
behavioral1
Sample
c3fd36103f617324d4d2fa833989096c_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
c3fd36103f617324d4d2fa833989096c_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
c3fd36103f617324d4d2fa833989096c_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
smsfactory
http://smartlink.mobilelinks.xyz
Targets
-
-
Target
c3fd36103f617324d4d2fa833989096c_JaffaCakes118
-
Size
4.9MB
-
MD5
c3fd36103f617324d4d2fa833989096c
-
SHA1
f12b9d0c224e0130e33af012b883c6405bb32503
-
SHA256
0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870
-
SHA512
8d4b97982f18c67d90f074c518ea496ce2ba3add85529903108acfe266de02c9aa4c93b93e1fbba99a08658a78fb788450760a2d9c7983e65ed9a9eb195ea00e
-
SSDEEP
98304:U7pojb8O89LBkmUVyt1CXzTAy6ndf8GDLPGNw9PSqflLO0iX:U7pTO89K/VOCXfm98GPuq5PS0iX
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Smsfactory family
-
Checks if the Android device is rooted.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator.
-