Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Spotify_v8.8.36.522_MOD.apk
-
Size
62.4MB
-
Sample
230602-djkzxsaa5z
-
MD5
91c6625302986368cacb66b46dbe6540
-
SHA1
b91aec97a4c3d28d800bf2b7e28fe28407c8bbcc
-
SHA256
ecad2c3086a346bf34336d4f625fe0b9a68ebf226a7476dde03c64a92ff737d8
-
SHA512
f6bbd3145971bd48ba89b7b00a362a81a533feeb42fa518b70e83e3d960a27e8767aaf32af7ac823912d71accd3fd441f57670d32cd7a872a21b14830ab82c52
-
SSDEEP
786432:aFrigdu2tfGd2RspU+AkhtJ5+s2pUURCZl9uJnjPIhQ5peGUj39wpe5Er:Wriwu20d2R8Rv+lYZlZyjeDjeear
Static task
static1
Behavioral task
behavioral1
Sample
Spotify_v8.8.36.522_MOD.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
licenses.html
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral3
Sample
licenses.html
Resource
android-x64-20220823-en
Behavioral task
behavioral4
Sample
licenses.html
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral5
Sample
quicksilverCardAutomationInterface.js
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral6
Sample
quicksilverCardAutomationInterface.js
Resource
android-x64-20220823-en
Behavioral task
behavioral7
Sample
quicksilverCardAutomationInterface.js
Resource
android-x64-arm64-20220823-en
Malware Config
Targets
-
-
Target
Spotify_v8.8.36.522_MOD.apk
-
Size
62.4MB
-
MD5
91c6625302986368cacb66b46dbe6540
-
SHA1
b91aec97a4c3d28d800bf2b7e28fe28407c8bbcc
-
SHA256
ecad2c3086a346bf34336d4f625fe0b9a68ebf226a7476dde03c64a92ff737d8
-
SHA512
f6bbd3145971bd48ba89b7b00a362a81a533feeb42fa518b70e83e3d960a27e8767aaf32af7ac823912d71accd3fd441f57670d32cd7a872a21b14830ab82c52
-
SSDEEP
786432:aFrigdu2tfGd2RspU+AkhtJ5+s2pUURCZl9uJnjPIhQ5peGUj39wpe5Er:Wriwu20d2R8Rv+lYZlZyjeDjeear
Score9/10-
Renames multiple (60) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Acquires the wake lock.
-
Reads information about phone network operator.
-
-
-
Target
licenses.xhtml
-
Size
1.8MB
-
MD5
b6500d8e3ac02b6262591bcefff77996
-
SHA1
01a74227afe2164d615291a22f44256d78024530
-
SHA256
d417b850b2e75f6416ba9618107b31a0eedd4fef611f689c904ff1b7a2e9874c
-
SHA512
953206c92eabf7b33de68beafdeef56e8459d739629c1087b2657df533b419ca7a5a25e43e36c1bbcf5574fab3de095918f21d5d929df160f5d3b5a7e2540ebc
-
SSDEEP
12288:s3V3e3P3D34353/3q3q2w2FDS303w3e3w3a343H3S32323+3n393C38303J3l3fh:47q
Score1/10 -
-
-
Target
quicksilverCardAutomationInterface.js
-
Size
2KB
-
MD5
21b3acc1f1b722c2f3509d8a3ee06f47
-
SHA1
0e537ea7ca9bb24d50cad2cd6c42a2cf959132ac
-
SHA256
122af0775abfe1885ebb036ef34231ff4a9e170bc301c42919802c6c87118b67
-
SHA512
df290df1e5462a8113a3ea5426cfd11ab9b8983e1880a9967667e0bf1e5734e6a1025021cbe53781c919371fd40b3411bc1470196b08a6a431670072d9bf533e
Score1/10 -