Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

09bdcd05d4...20.apk

android-9-x86

8

09bdcd05d4...20.apk

android-11-x64

8

__xadsdk__...__.apk

android-9-x86

__xadsdk__...__.apk

android-10-x64

__xadsdk__...__.apk

android-11-x64

gift_catch.html

windows7-x64

1

gift_catch.html

windows10-2004-x64

1

github_mraid.js

windows7-x64

1

github_mraid.js

windows10-2004-x64

1

libwbsafeedit

debian-9-armhf

1

mraid.js

windows7-x64

1

mraid.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09bdcd05d4e2fe3976208ecddb33e49459fd4e207ddc3544737225d7c6554320.bin

  • Size

    5.0MB

  • Sample

    230918-1wnynsch6y

  • MD5

    81073216f595f2e0eb8161b5ae43c089

  • SHA1

    5e7766582f9d0ec8cab13dbbb6be798f19d762b5

  • SHA256

    09bdcd05d4e2fe3976208ecddb33e49459fd4e207ddc3544737225d7c6554320

  • SHA512

    167d1a1ac740a6db232ca5074c855a754f4733720544ff27b0d82561bf51d3c1784d7af4b9f33e9416712e20b6728f930109e0cbfcad100a5fd66bbdde27539d

  • SSDEEP

    98304:yaQT7OiV3NgMyO5CUjZZOThI6GBFEFF54xpno+C/3/RUBcCZtrgIDyl726:xQfNV9gM6Z1I7qL4xpnoDqVtUpl7D

Score
8/10
androidevasionstealthtrojan

Malware Config

Targets

    • Target

      09bdcd05d4e2fe3976208ecddb33e49459fd4e207ddc3544737225d7c6554320.bin

    • Size

      5.0MB

    • MD5

      81073216f595f2e0eb8161b5ae43c089

    • SHA1

      5e7766582f9d0ec8cab13dbbb6be798f19d762b5

    • SHA256

      09bdcd05d4e2fe3976208ecddb33e49459fd4e207ddc3544737225d7c6554320

    • SHA512

      167d1a1ac740a6db232ca5074c855a754f4733720544ff27b0d82561bf51d3c1784d7af4b9f33e9416712e20b6728f930109e0cbfcad100a5fd66bbdde27539d

    • SSDEEP

      98304:yaQT7OiV3NgMyO5CUjZZOThI6GBFEFF54xpno+C/3/RUBcCZtrgIDyl726:xQfNV9gM6Z1I7qL4xpnoDqVtUpl7D

    Score
    8/10
    evasionstealthtrojan

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Removes a system notification.

      evasion
    behavioral1behavioral2

    • Target

      __xadsdk__remote__final__.jar

    • Size

      83KB

    • MD5

      607e65052147713115dd87f0866d504c

    • SHA1

      5ff2a1c2ebedeb61236c56edfde6406828a05c6c

    • SHA256

      fe2fe2810faab43ae935927bfde6faafb8c74532f760afbecff9585d4404e741

    • SHA512

      2bc7144ac0c6dfbcf097f778ee110405d9c58f4fc4901356c2cf2622d7a4f6b12ce30a51f168962a8c81fbab9c46a65c2b219633dd2a80cc345dbf255cebf2a1

    • SSDEEP

      1536:eKSS1UbomStT19s4G0/GZzgrF2nPOgfbexVK8RV+0XUv5VzUxwh3MPeUivu5iy:DSYsStT1ZT/ugrFsmgsHWzUxq3MPeUi8

    Score
    1/10
    behavioral3behavioral4behavioral5

    • Target

      gift_catch.html

    • Size

      834B

    • MD5

      23db43a9bd33df3efb720ca95d124244

    • SHA1

      e0cf03b4772bd6139dc87dbb218517a524733d83

    • SHA256

      db14f7f53f4e02dc02dd14d9bdf7f7b7b569eabcfcf27d8f019e0460d46f37c3

    • SHA512

      34d540a1e7dc104659c1df4866b7a651db9a550903dcc3665c9a1fe5053b0e695225aa9b134c322a9c918422768973d121a9bb50787a3d3036fca35219156f7f

    Score
    1/10
    behavioral6behavioral7

    • Target

      github_mraid.js

    • Size

      25KB

    • MD5

      b5f1fc1973cdee77383a48c34595d216

    • SHA1

      3e89afd323289e5f4165ddfc3791eb892e6440c4

    • SHA256

      8a6092ff056f144c483976ea0ef45dc75882bc13e63b0a87888f92cff488bd98

    • SHA512

      5ca8a9be80eef1cb32a897f9e9a4eeac3bd9b872940aa9157c80cb6c84577beacfbfa6e844b585ea03ed844e796d033ea36899eb57d03a3c7f2bc5ecd921ed96

    • SSDEEP

      384:EsoxySeWRWa4JKtU0bDqDnUoMHEcREmukPo6ER9nTetXp0UA33Io6oZhhMHJhhMq:ovaDUDHEwEmgfnTer

    Score
    1/10
    behavioral8behavioral9

    • Target

      libwbsafeedit

    • Size

      17KB

    • MD5

      aec96f5dd76213dc87c7200e439c2f70

    • SHA1

      d62a8a53d7cf6829bbc3d52c8d8042dfe31d855d

    • SHA256

      f663c531d179b50d76383f764621a8ae03d0faf98c116c4d7686b7f290317428

    • SHA512

      49f88b097cf0c1c4c0b2bb738f5f6aaaf6514e1f90d44287a50860d72cbd2718eb227812d184076b57049fa83e1c384cd7b13b42bb8a71b3e816e3daa1efd4dd

    • SSDEEP

      192:Jds5+qUXzAVseRKCTEdcZdQciesPRgErQMjGxMTuweLvdOxG1Jc:jsLkCTEKqdPi8eLVOxeG

    Score
    1/10
    behavioral10

    • Target

      mraid.js

    • Size

      26KB

    • MD5

      3fe45220654b91408a3ec8df8ddacdb8

    • SHA1

      66194e23bf6894f5b01457c05d02eacb2bcbcc22

    • SHA256

      739eb27184295428c3a3f4c9554ed57e00c43983affa87f92975efbc86f4cd1c

    • SHA512

      0e582a9c2cee7cfcdb646f0f55866cb585b330ea34c2dddee4fa209ca1bca0ed8adafd782c8244871881abd2c596e2c8ed175d75e456a1016d8ee72379a9efef

    • SSDEEP

      384:C2ood7qIy1Mj4zFHTxmMFANRkNAv02HiruM9NhvzpxCgxPY8YpDepjK4:Iod7q91S4zFYNRJTzSxy8YpDsK4

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks