Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

f948fda777...58.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    336670e8dfe80292f8c2b994ce926422.bin

  • Size

    20.6MB

  • Sample

    230419-bpwx9sfd75

  • MD5

    ab6100698dc086538ab248e4aa71af2f

  • SHA1

    93f6e6b66a17cedcec276d9576d25cf2d1d342c2

  • SHA256

    e5d278e3ba72b53c8a7dd84a9bf8fbda05f475d2530e5a1d7e3ae650cb40959e

  • SHA512

    bcad5cf537cb10fbacd5afab77f632931dc98047b0c2e7610a50ac3e48a4b818c5be9a2e9642060b57c7a7e39a388f1e495d7b05a7fd76b5fc9a5a78499dd4bb

  • SSDEEP

    393216:Wr0nH2AoE5aYS643e4BBd82s9HsZbTuJY0ec7LUawt:Wr0Kgalveyd82s9HYyi0ej9t

Score
8/10
androidbankerransomware

Malware Config

Targets

    • Target

      f948fda777fcc7b3e5d7829e6a50d31b4a81a62f5d2a377ac630d7fabfe3e258.apk

    • Size

      26.9MB

    • MD5

      336670e8dfe80292f8c2b994ce926422

    • SHA1

      4dcddc160ec5137ddd841377a5864e026233c4f7

    • SHA256

      f948fda777fcc7b3e5d7829e6a50d31b4a81a62f5d2a377ac630d7fabfe3e258

    • SHA512

      492862b5bf0bae9afee248b7e4a4dc0fb7cf21cfe1efe2daf7b9f229a49c096ee473dcc46e91c53dcb47d72cacf6b2c79e8cef778726d6f398128d4b2c9c81ac

    • SSDEEP

      393216:ZzFKmbjZhnDccjjDVMEuiZc5Twr3dIL4DklTHrd9XPUsUei5iPWjYI0:hYivDrCkriLSklTHxxPUsUei5lsH

    Score
    8/10
    bankerransomware

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Acquires the wake lock.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks