Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
DDABE5999DBC9FFBC8B804A7EA6BB61415BC88E346B2D2C0D53BFFF9DCC88D32.apk
-
Size
4.0MB
-
Sample
220925-rhvdvsgcaj
-
MD5
23e49cc28a5feeed4b9e362aa43e158a
-
SHA1
dede2bbf3c768f425f8aa33e4cc84b54d2c420de
-
SHA256
ddabe5999dbc9ffbc8b804a7ea6bb61415bc88e346b2d2c0d53bfff9dcc88d32
-
SHA512
cd823991e244861ab11d9157406e2a8fc10d0818670524766a1b26090848b2ad269aa3e9e305bcb79672c609486818a2eb4c63258835aa5e0c845696aa70c678
-
SSDEEP
98304:znWe8B4SyAR3u9E48GT3WC9ricWgyqTG+IicpcpYUBvBON:T829GmE4T59ricWgDTGjn/UBvU
Behavioral task
behavioral1
Sample
DDABE5999DBC9FFBC8B804A7EA6BB61415BC88E346B2D2C0D53BFFF9DCC88D32.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
DDABE5999DBC9FFBC8B804A7EA6BB61415BC88E346B2D2C0D53BFFF9DCC88D32.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
DDABE5999DBC9FFBC8B804A7EA6BB61415BC88E346B2D2C0D53BFFF9DCC88D32.apk
Resource
android-x64-arm64-20220823-en
Malware Config
Extracted
joker
http://meglivesdk.oss-cn-hangzhou.aliyuncs.com
Extracted
teabot
http://51.38.166.153:80/api/
Targets
-
-
Target
DDABE5999DBC9FFBC8B804A7EA6BB61415BC88E346B2D2C0D53BFFF9DCC88D32.apk
-
Size
4.0MB
-
MD5
23e49cc28a5feeed4b9e362aa43e158a
-
SHA1
dede2bbf3c768f425f8aa33e4cc84b54d2c420de
-
SHA256
ddabe5999dbc9ffbc8b804a7ea6bb61415bc88e346b2d2c0d53bfff9dcc88d32
-
SHA512
cd823991e244861ab11d9157406e2a8fc10d0818670524766a1b26090848b2ad269aa3e9e305bcb79672c609486818a2eb4c63258835aa5e0c845696aa70c678
-
SSDEEP
98304:znWe8B4SyAR3u9E48GT3WC9ricWgyqTG+IicpcpYUBvBON:T829GmE4T59ricWgDTGjn/UBvU
Score10/10-
Makes use of the framework's Accessibility service.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Removes a system notification.
-