Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

04/06/2023, 10:57

230604-m2nyzace5y 7

04/06/2023, 10:52

230604-mye7nabh78 7

General

  • Target

    XCIPTV5.apk

  • Size

    83.9MB

  • Sample

    230604-mye7nabh78

  • MD5

    6b5ab731d719e0a4905030d578f84e17

  • SHA1

    bcb968fd99ed46a6fd711af0cbbea9872009be51

  • SHA256

    3f609767212de7480a3132db63ce90d75ef254df39b1e645179fad52dbb4c221

  • SHA512

    87a292fa0c588276be1f307b548584b6288350d6461c5d914bab8f476134d0b46347ecfb0c3972d1ec7ad549afd77027129a2cc3981133e6de347d6ce24944c6

  • SSDEEP

    1572864:mjwkweo4Hg4QDC2+LXZETiYxtGCUUHJ7WN24otofjEMRuBgJnkXdh6ehOaOmKaYY:0w9f4ATqLXKrxgk6N2Po4cJUyeh/BKa1

Malware Config

Targets

    • Target

      XCIPTV5.apk

    • Size

      83.9MB

    • MD5

      6b5ab731d719e0a4905030d578f84e17

    • SHA1

      bcb968fd99ed46a6fd711af0cbbea9872009be51

    • SHA256

      3f609767212de7480a3132db63ce90d75ef254df39b1e645179fad52dbb4c221

    • SHA512

      87a292fa0c588276be1f307b548584b6288350d6461c5d914bab8f476134d0b46347ecfb0c3972d1ec7ad549afd77027129a2cc3981133e6de347d6ce24944c6

    • SSDEEP

      1572864:mjwkweo4Hg4QDC2+LXZETiYxtGCUUHJ7WN24otofjEMRuBgJnkXdh6ehOaOmKaYY:0w9f4ATqLXKrxgk6N2Po4cJUyeh/BKa1

    Score
    5/10
    • Uses Crypto APIs (Might try to encrypt user data).

    • Target

      nopie_openvpn.arm64-v8a

    • Size

      7KB

    • MD5

      f29fabdd5a2ab78bcb5df67471b01df5

    • SHA1

      4b653cef825f5971573ff9c2d52c45d60931864c

    • SHA256

      d63b5a7fd3d4ca332dc43af541374295189f24fcaaac7a7efe70ba255e03142e

    • SHA512

      6fb541ede794a8b184e9a0049463a7afd8937e83f235b114b0e8ed37a6c74999edad16f31d2d5339fb3b79c0f28f85a04c633d825e998e292ed3f42667a68ec1

    • SSDEEP

      48:QYUtEy5+x7aHLkbd81bdp2dBv0Zgb++pUetc3UfcgH:7UtEyg74Jpcv08yscS

    Score
    1/10
    • Target

      nopie_openvpn.armeabi-v7a

    • Size

      6KB

    • MD5

      ab8e86a693c074def9c857ab7d357d2c

    • SHA1

      570528d245ecc631c2639ace1d37c3987de6f375

    • SHA256

      3fe15202ce1b6bf74369e1397725e509a0a159e03e9425500fd04746e68447f0

    • SHA512

      ad64bd2070d4963267109bd22c993c9119b639cc91692cdf12b161365eac6c98d41afa64303dfa99887d47a4e1208d0d0872f5a0233aae3c764a9f2920738173

    • SSDEEP

      48:+/6ij2OoR6rJ3rivPLbd81bdSjoiSls+sHIdQQ8HxmpcuENly/837/i:GLoQbpCofEIdMkpcuMlV37/

    Score
    1/10
    • Target

      nopie_openvpn.x86

    • Size

      6KB

    • MD5

      7908b2d5faa39f652566cc1a93381682

    • SHA1

      7feec939c86aae17a1c05d310c4f62df791bdcc3

    • SHA256

      784a08906af464080e7613e692bba3e94990b9446c9c72552f83056225764863

    • SHA512

      4a8b62d272631fcb879bcdfdfbd275774d3393186ad7a9e5f27a52b668988328e4557866325e85d5e6e5aa590bc4fc8e3fabe335547fe64688409db12a548f49

    • SSDEEP

      48:KD/PPbwIthRaW8tbd81bdSjVl+/5GWd9/a5xVrqSlbiuNNdK:CXUSaWTCG5JIprqmbNPdK

    Score
    1/10
    • Target

      nopie_openvpn.x86_64

    • Size

      7KB

    • MD5

      5fbf6c1417286f8cc12f9127d160894c

    • SHA1

      76c185b9a208d0e61e59edc2fe1fe229215f2b12

    • SHA256

      0f3b1de4b64c70c6f5d2863a3cc2db7bf349abfe42e32869e005505cee430527

    • SHA512

      b8f01788b67e46bfaf061e17f925e6c009e86e6fff5de32bc9cc99fafb6d9a47df39ad9ffb31982918c4f67e224120d109b53ba08d154c34459b0f2ca1d94593

    • SSDEEP

      96:RlV5l/El/i6tChESuWl/Gl/yIdnU4BftldK:RlV5l/El/imCySrl/Gl/ygnU4a

    Score
    1/10
    • Target

      opensourcelicense.html

    • Size

      58KB

    • MD5

      931a4494e5c771e0cc1a0c45f14184d4

    • SHA1

      39035ea604a97b42b05579fe63ca5c74a282c2d2

    • SHA256

      86452afa94b065223a17749621baf3ae62f27cadb5ac62bff7713be6f40a0fda

    • SHA512

      3b684c21df219b2f3538dffd606e7c8829eabd14512fab72051a126d8eb950dfccf9936f116fac88bfabdfdd1e8ca5b219c9c80d98ec95f2e7d14ed62a7b9d33

    • SSDEEP

      1536:O8HE5N7PhcmCGUZjTXOrfeI4oQaO1iVyGBpXEuTc23aWQNmYyLrDh:OmqN7amC3jSR3QaO4jBmx4YyLrF

    Score
    1/10
    • Target

      pie_openvpn.arm64-v8a

    • Size

      7KB

    • MD5

      f29fabdd5a2ab78bcb5df67471b01df5

    • SHA1

      4b653cef825f5971573ff9c2d52c45d60931864c

    • SHA256

      d63b5a7fd3d4ca332dc43af541374295189f24fcaaac7a7efe70ba255e03142e

    • SHA512

      6fb541ede794a8b184e9a0049463a7afd8937e83f235b114b0e8ed37a6c74999edad16f31d2d5339fb3b79c0f28f85a04c633d825e998e292ed3f42667a68ec1

    • SSDEEP

      48:QYUtEy5+x7aHLkbd81bdp2dBv0Zgb++pUetc3UfcgH:7UtEyg74Jpcv08yscS

    Score
    1/10
    • Target

      pie_openvpn.armeabi-v7a

    • Size

      6KB

    • MD5

      ab8e86a693c074def9c857ab7d357d2c

    • SHA1

      570528d245ecc631c2639ace1d37c3987de6f375

    • SHA256

      3fe15202ce1b6bf74369e1397725e509a0a159e03e9425500fd04746e68447f0

    • SHA512

      ad64bd2070d4963267109bd22c993c9119b639cc91692cdf12b161365eac6c98d41afa64303dfa99887d47a4e1208d0d0872f5a0233aae3c764a9f2920738173

    • SSDEEP

      48:+/6ij2OoR6rJ3rivPLbd81bdSjoiSls+sHIdQQ8HxmpcuENly/837/i:GLoQbpCofEIdMkpcuMlV37/

    Score
    1/10
    • Target

      pie_openvpn.x86

    • Size

      6KB

    • MD5

      7908b2d5faa39f652566cc1a93381682

    • SHA1

      7feec939c86aae17a1c05d310c4f62df791bdcc3

    • SHA256

      784a08906af464080e7613e692bba3e94990b9446c9c72552f83056225764863

    • SHA512

      4a8b62d272631fcb879bcdfdfbd275774d3393186ad7a9e5f27a52b668988328e4557866325e85d5e6e5aa590bc4fc8e3fabe335547fe64688409db12a548f49

    • SSDEEP

      48:KD/PPbwIthRaW8tbd81bdSjVl+/5GWd9/a5xVrqSlbiuNNdK:CXUSaWTCG5JIprqmbNPdK

    Score
    1/10
    • Target

      pie_openvpn.x86_64

    • Size

      7KB

    • MD5

      5fbf6c1417286f8cc12f9127d160894c

    • SHA1

      76c185b9a208d0e61e59edc2fe1fe229215f2b12

    • SHA256

      0f3b1de4b64c70c6f5d2863a3cc2db7bf349abfe42e32869e005505cee430527

    • SHA512

      b8f01788b67e46bfaf061e17f925e6c009e86e6fff5de32bc9cc99fafb6d9a47df39ad9ffb31982918c4f67e224120d109b53ba08d154c34459b0f2ca1d94593

    • SSDEEP

      96:RlV5l/El/i6tChESuWl/Gl/yIdnU4BftldK:RlV5l/El/imCySrl/Gl/ygnU4a

    Score
    1/10

MITRE ATT&CK Enterprise v6

Tasks