Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Grab And GO v16.8.apk

  • Size

    10.9MB

  • Sample

    230802-er63sscg22

  • MD5

    51aee69a0f9979607e362fa5be4b0d2b

  • SHA1

    267276cf44243644fe42ff44ca9bf7368ffe870c

  • SHA256

    5f980366efce07fee51045379de692a11884d31b67dd67f83270e4527c7bf2ab

  • SHA512

    f141269167bf2dc1f5a1de93cfef0d9cf216699738834b509be9534cc41e681b76226a41b230ef111f1801482840d05096337312a3c941130302cea55e3dd75a

  • SSDEEP

    12288:7D+rIWQgL/R9EC5VwEUjB8qKbwvfBvrqvvUCnsU1+B3E48dD8vtXNEKCYc:WrIJgNhXUjB1zBzevuU1+wdoTEKc

Malware Config

Targets

    • Target

      Grab And GO v16.8.apk

    • Size

      10.9MB

    • MD5

      51aee69a0f9979607e362fa5be4b0d2b

    • SHA1

      267276cf44243644fe42ff44ca9bf7368ffe870c

    • SHA256

      5f980366efce07fee51045379de692a11884d31b67dd67f83270e4527c7bf2ab

    • SHA512

      f141269167bf2dc1f5a1de93cfef0d9cf216699738834b509be9534cc41e681b76226a41b230ef111f1801482840d05096337312a3c941130302cea55e3dd75a

    • SSDEEP

      12288:7D+rIWQgL/R9EC5VwEUjB8qKbwvfBvrqvvUCnsU1+B3E48dD8vtXNEKCYc:WrIJgNhXUjB1zBzevuU1+wdoTEKc

    Score
    8/10
    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks