Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

NITE-X-VPN.apk

android-9-x86

7

Resubmissions

12/05/2023, 08:25

230512-kbbjvaef3t 7

12/05/2023, 08:24

230512-kaxexscd34 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NITE-X-VPN.apk

  • Size

    28.9MB

  • Sample

    230512-kbbjvaef3t

  • MD5

    62a2a4dbc87ac69367ba640011265062

  • SHA1

    96de8fb641554a91ba7f302579ba5e0cdfc25a4a

  • SHA256

    07ba58e54bf23aa766bf439b61cdc73059ec1f53a0fac9570e3f3ccda69cc12b

  • SHA512

    09377d42578ebceeb470973419c8f532d391aadcfa83e020c0b6103a69fd6e6606718d092a4ac2ab8243e25559de3810006d897a560eabf5852515eab5436390

  • SSDEEP

    786432:C7uV9csCId/J+zPMH1ZpVGsanq8q/1oas1CvnzAFynXT:C7kycx4PCxVGs0OtoWzA8XT

Score
7/10
androidevasionransomware

Malware Config

Targets

    • Target

      NITE-X-VPN.apk

    • Size

      28.9MB

    • MD5

      62a2a4dbc87ac69367ba640011265062

    • SHA1

      96de8fb641554a91ba7f302579ba5e0cdfc25a4a

    • SHA256

      07ba58e54bf23aa766bf439b61cdc73059ec1f53a0fac9570e3f3ccda69cc12b

    • SHA512

      09377d42578ebceeb470973419c8f532d391aadcfa83e020c0b6103a69fd6e6606718d092a4ac2ab8243e25559de3810006d897a560eabf5852515eab5436390

    • SSDEEP

      786432:C7uV9csCId/J+zPMH1ZpVGsanq8q/1oas1CvnzAFynXT:C7kycx4PCxVGs0OtoWzA8XT

    Score
    7/10
    evasionransomware

    • Acquires the wake lock.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks