Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

WhatsAppPlusv1736.apk

android-9-x86

9

alexmods.html

windows7-x64

1

alexmods.html

windows10-2004-x64

1

changelog-ar.html

windows7-x64

1

changelog-ar.html

windows10-2004-x64

1

changelog.html

windows7-x64

1

changelog.html

windows10-2004-x64

1

clockDarkTheme.xml

windows7-x64

1

clockDarkTheme.xml

windows10-2004-x64

1

clockLightTheme.xml

windows7-x64

1

clockLightTheme.xml

windows10-2004-x64

1

faqs.html

windows7-x64

1

faqs.html

windows10-2004-x64

1

ic_content...on.xml

windows7-x64

1

ic_content...on.xml

windows10-2004-x64

1

ic_content...ck.xml

windows7-x64

1

ic_content...ck.xml

windows10-2004-x64

1

ic_content...ck.xml

windows7-x64

1

ic_content...ck.xml

windows10-2004-x64

1

ic_content...ld.xml

windows7-x64

1

ic_content...ld.xml

windows10-2004-x64

1

stella_e2e.xml

windows7-x64

1

stella_e2e.xml

windows10-2004-x64

1

stella_wa.xml

windows7-x64

1

stella_wa.xml

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WhatsAppPlusv1736.apk

  • Size

    55.9MB

  • Sample

    230611-xl7q9aad3w

  • MD5

    4f2a4bc9c7bb37a4b4f05728fdedfddd

  • SHA1

    003aa72cf8662028f3a41b626c7aaad65b2a47d1

  • SHA256

    4c4d3d04b830b66d4a8c17fcb27f2e4b30b96f63c128308776478bf7ee8ae377

  • SHA512

    4f6ef4373b3af32b3ac79c9a2e9c567949b31099474856751b41c21b98b2d5a764ef0b45c9f3eedf5643e61fe19ba24706f51445941da04d75425d7678898325

  • SSDEEP

    786432:AwoeDwcIxzH/xBJX9yEix1BRSZFEV+i8r9E/3+46pNtrybaq2p+Y4KRDbgcDPfP:AwiXlHxX9yJoCPvN6rt5q2p+2Pr

Score
9/10
androidevasionransomware

Malware Config

Targets

    • Target

      WhatsAppPlusv1736.apk

    • Size

      55.9MB

    • MD5

      4f2a4bc9c7bb37a4b4f05728fdedfddd

    • SHA1

      003aa72cf8662028f3a41b626c7aaad65b2a47d1

    • SHA256

      4c4d3d04b830b66d4a8c17fcb27f2e4b30b96f63c128308776478bf7ee8ae377

    • SHA512

      4f6ef4373b3af32b3ac79c9a2e9c567949b31099474856751b41c21b98b2d5a764ef0b45c9f3eedf5643e61fe19ba24706f51445941da04d75425d7678898325

    • SSDEEP

      786432:AwoeDwcIxzH/xBJX9yEix1BRSZFEV+i8r9E/3+46pNtrybaq2p+Y4KRDbgcDPfP:AwiXlHxX9yJoCPvN6rt5q2p+2Pr

    Score
    9/10
    evasionransomware

    • Renames multiple (70) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Acquires the wake lock.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

    • Target

      alexmods.html

    • Size

      745B

    • MD5

      0476768f5038570fa7b56ba4915b1b0d

    • SHA1

      65ded33f1ebf397801fb8f9aca1312ab24da011b

    • SHA256

      69c8f03902206ef8bc08fab244bf30c4243a75e119a5b14e9a1f36ce60e6437a

    • SHA512

      4b5a6425f072e7af9f10886a9fedbaf2380d192817c2f266692135b0aa05eefda4be682ecbd704fc5fd5acbe53c6a52efe9974bb12ae41fc9f1b98424569161d

    Score
    1/10
    behavioral2behavioral3

    • Target

      changelog-ar.html

    • Size

      30KB

    • MD5

      2758a0f12bded8acfce9118c7459811f

    • SHA1

      6e2f9586d6f6ad0710ce7d480dd679c826ecf456

    • SHA256

      8c43aeeaf3aad3aabbc0ec0eede864ffc74f2eb0841994207ed942005a1bc8fc

    • SHA512

      78ecc5a172b74199b1ebc96ca9b47463db25bc1005412d7794f294d6e0e432c976e4a9a189e0d739bba5b4f4d6e1cb2ffcf78b80ddfa2d8e623b8d0ae9b886e2

    • SSDEEP

      384:F1rXMPedk/1e7hCxvtF4GO7ptnttSAy0jS5Zcw+EOs1a+i:FJXK5e7QxvtFXUTttSAy0jS5Zckva+i

    Score
    1/10
    behavioral4behavioral5

    • Target

      changelog.html

    • Size

      31KB

    • MD5

      a28785e87b2dc201c32d736c533cf3b2

    • SHA1

      e42903b396599f710de5c16b78a76bc2e3d63363

    • SHA256

      74dfd92cc9e3ef63b01ef926e8c31d863b5fee64564a2ff3cc436fe898d73608

    • SHA512

      2502c2c6a76e1e6c2f14c7603bc50f780ea86f5c5a305f12afcc40f652677bfab548c2bce1e4acd22fdd3066a28b2e7310e9494253b76bb13cd1fe0809ddc9b7

    • SSDEEP

      768:AUYfX7Az9MZ1c+OAcVknRLyQLi5v7HTPSZ:AUYfX7Az9MZzcKnRhLCv7HTP4

    Score
    1/10
    behavioral6behavioral7

    • Target

      clockDarkTheme.svg

    • Size

      1KB

    • MD5

      663e33bfbbb0d14830694114d49c457d

    • SHA1

      3231baf54a3c1f336f1b11d9a7011bc5502a9d4a

    • SHA256

      43b0cd84c7344f57b2656d66d5bf215a4f1d1713a8117e0ecf92226b8ce1a200

    • SHA512

      c116ffaf6c1f8ad9bd6a1d85de318c9ca2c3b6d4931a1aa165dc7ef7351c80fbddc7ca1371c81dee35b3e12720fee2d3146d7a510b54026c3aba9202dee5f1b8

    Score
    1/10
    behavioral8behavioral9

    • Target

      clockLightTheme.svg

    • Size

      3KB

    • MD5

      2235609a58ada82f2110d941341a720d

    • SHA1

      d3b06251eb8f131034ba1ea3b0db982cb31bd813

    • SHA256

      d89ab1d4bc636a73d64ef1d8976d517f13449a11af28d70e88ca3d0c40e114a7

    • SHA512

      ff7543b27941add4a92579f1a55f3b40a16cd8ec8cc43b678b229be38a3878267fcdbb80b040e91132fd938082c47e6e237f62ac3903422ad9499cf7164228d5

    Score
    1/10
    behavioral10behavioral11

    • Target

      faqs.html

    • Size

      2KB

    • MD5

      c12ec59afc6fe4028d4d5abe11c8abf2

    • SHA1

      9ffac4d117000d82ae2127074c532ad6825588d0

    • SHA256

      e6938b495a3f15bf358c4a99421bc93cf2ee3e22e616e33b656a89b15cc8fbd8

    • SHA512

      6628d03d553a90ca7b501f224a6948e245967cfd651d63b09040e07102b4141f8d7f428675eea2c54d12860b80663af724a8fdbcf3739f734c023d4484cbe16f

    Score
    1/10
    behavioral12behavioral13

    • Target

      ic_content_sticker_location.svg

    • Size

      1KB

    • MD5

      4e1bfd935af6c3abdbde4cd2eba4a72b

    • SHA1

      a698232554fe0e28e65556549d97977a4fcf375e

    • SHA256

      b887e3205ff5b8e38c1ad986ea7f534c73c2a28f989639fc1f4fb672521e1e3a

    • SHA512

      697f7b42c02f1ce5fde22474c5c10cc1adc838eab76eb47269cccf4c7fc1cdebbe3de1f81d231c87cc3c8bf090502c4e405fba92ccf345163644d17d17baf84f

    Score
    1/10
    behavioral14behavioral15

    • Target

      ic_content_sticker_location_60_percent_black.svg

    • Size

      1KB

    • MD5

      a3c9e4e574c26a244e4660e3412d803c

    • SHA1

      98c4d769e0efa91892b72887ff5075944b3547a6

    • SHA256

      1b6c02ff1e1e60d73f6b31c1c53faebe6d1f57782e3caf3c4328a65b4929648e

    • SHA512

      f0660665f035131c70589a70955b2bfa8c7c8b9c45053f914bad335be06a2f8c23246c24348e3e469a03ae4449811796e39843a07a275cca1806dfed10df1610

    Score
    1/10
    behavioral16behavioral17

    • Target

      ic_content_sticker_location_black.svg

    • Size

      1KB

    • MD5

      fb77f4f57cfc4c4a6016d10c56e879d9

    • SHA1

      d98ed1a853a61e722f35525e47b16616d5b56fce

    • SHA256

      c6f4e62c0d25cc789058a5563bcc546bd10f492f2e95fa5cd3824951680f1b1b

    • SHA512

      78ec21798b9adca5822ac03446a8e66017281c6767d99114e524c57952942c745699e58e3228441e54ba42654f91156ee5a26fd8025afbe4e5543e053d63f627

    Score
    1/10
    behavioral18behavioral19

    • Target

      ic_content_sticker_location_emerald.svg

    • Size

      1KB

    • MD5

      aadfe32db3ccc31c96197f0591e0fa18

    • SHA1

      59ce2e9a22fff2e9a1b68578c429f5d710463d0e

    • SHA256

      71d43fecf9f2ef6e37022c8446194d74f11b7c05816ce321f6a84279c870b4fc

    • SHA512

      914f19b03527d440752bc284fa46af19ae7cf9f4d2c11cb7bb2753fd50526181e6ca5abed68c695236227b5d8e39db1b5f9359c2d0470a4eaa147c244cc91ddd

    Score
    1/10
    behavioral20behavioral21

    • Target

      stella_e2e.svg

    • Size

      4KB

    • MD5

      deb02e17bcc92fef2298a466d71f9457

    • SHA1

      e4259e3c073d4cb4af07bb3a2147fb1e8d7943cb

    • SHA256

      83d0ffc0ea968c3b71c194ecb47bbeb4512137a06e8f7ff7b3973ca23dc467bf

    • SHA512

      cda1fc10cba541658d1f826d735641c2058fadbaf42a9f05e1d8cd3b25fe146db53187548b131bd248e56f34dfebeb3e7b2c1d53784dbe88c8266731aa7401cc

    • SSDEEP

      96:38fSxf3sWhw3h0A+sJCxox9rxT57OxjrWthy9xFnNLWtEy8PM+cRSjOA+Ay:OSxf3sWhw3hysJCxoxHtSZ6tMNoaPsAw

    Score
    1/10
    behavioral22behavioral23

    • Target

      stella_wa.svg

    • Size

      9KB

    • MD5

      4ee3c0dc45185231589902397c7a4c38

    • SHA1

      28a4882e91c2bbb68562fd9373efe43d24dce3ff

    • SHA256

      8fead4d413917d70a317375083a0cab7bcde24530fed6d9eb39de05bf14348f2

    • SHA512

      c22274e0cfe22cddc65f0d258ec623360ba34d8ddeb09a2e7c88290d949cb20f76cb6e8ba8f02c7f5ee7ef4ab551d2d61f680c1dfa0b9acb30143f76d908eec5

    • SSDEEP

      192:OCxf3sWhw3hysJPiaJfdvLZacjO/SbEgle3iVIept8CMei3ttdLx7Kx:Oa/sW63hNJPV9VZvjbj03ISpei3ttdLI

    Score
    1/10
    behavioral24behavioral25

MITRE ATT&CK Enterprise v6

Tasks