Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NITE-X-VPN.apk
-
Size
28.9MB
-
Sample
230512-kbbjvaef3t
-
MD5
62a2a4dbc87ac69367ba640011265062
-
SHA1
96de8fb641554a91ba7f302579ba5e0cdfc25a4a
-
SHA256
07ba58e54bf23aa766bf439b61cdc73059ec1f53a0fac9570e3f3ccda69cc12b
-
SHA512
09377d42578ebceeb470973419c8f532d391aadcfa83e020c0b6103a69fd6e6606718d092a4ac2ab8243e25559de3810006d897a560eabf5852515eab5436390
-
SSDEEP
786432:C7uV9csCId/J+zPMH1ZpVGsanq8q/1oas1CvnzAFynXT:C7kycx4PCxVGs0OtoWzA8XT
Static task
static1
Behavioral task
behavioral1
Sample
NITE-X-VPN.apk
Resource
android-x86-arm-20220823-en
Malware Config
Targets
-
-
Target
NITE-X-VPN.apk
-
Size
28.9MB
-
MD5
62a2a4dbc87ac69367ba640011265062
-
SHA1
96de8fb641554a91ba7f302579ba5e0cdfc25a4a
-
SHA256
07ba58e54bf23aa766bf439b61cdc73059ec1f53a0fac9570e3f3ccda69cc12b
-
SHA512
09377d42578ebceeb470973419c8f532d391aadcfa83e020c0b6103a69fd6e6606718d092a4ac2ab8243e25559de3810006d897a560eabf5852515eab5436390
-
SSDEEP
786432:C7uV9csCId/J+zPMH1ZpVGsanq8q/1oas1CvnzAFynXT:C7kycx4PCxVGs0OtoWzA8XT
Score7/10-
Acquires the wake lock.
-
Checks Android system properties for emulator presence.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Reads information about phone network operator.
-
Removes a system notification.
-
Uses Crypto APIs (Might try to encrypt user data).
-