Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

67430833f9...5f.apk

android-9-x86

8

67430833f9...5f.apk

android-10-x64

8

fyb_iframe...l.html

windows7-x64

1

fyb_iframe...l.html

windows10-2004-x64

1

fyb_static...l.html

windows7-x64

1

fyb_static...l.html

windows10-2004-x64

1

libwbsafeedit

debian-9-armhf

1

libwbsafeedit_64

ubuntu-18.04-amd64

libwbsafeedit_64

debian-9-armhf

libwbsafeedit_64

debian-9-mips

libwbsafeedit_64

debian-9-mipsel

mraid.js

windows7-x64

1

mraid.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67430833f94c8062f52b0619ef12e5ee531c314f3f0bf46a73d5a7b98693565f.bin

  • Size

    4.6MB

  • Sample

    231029-1w4zwsbc48

  • MD5

    3c41c4c9bfce2d80e6223f5347d55f56

  • SHA1

    c373286a8da3e59d03c53a67b25482bd7e271766

  • SHA256

    67430833f94c8062f52b0619ef12e5ee531c314f3f0bf46a73d5a7b98693565f

  • SHA512

    968d3f8fca53950d19406f958be4f63529edf14b2055eaa56cefcb254a85d6e3263e92dc1053b9b223b1b950ca1f626b5573b39aef8a94c6360f90d2cc3deb4e

  • SSDEEP

    98304:DvfYCMfBYdBovPtpZW+W+uDuvEEJ/3wKibsr/HGWKXc/r/uZ9lbh9tIH:83fSc0+W+uDI91//HGWQZ9lV9SH

Score
8/10
androidevasionlinuxstealthtrojan

Malware Config

Targets

    • Target

      67430833f94c8062f52b0619ef12e5ee531c314f3f0bf46a73d5a7b98693565f.bin

    • Size

      4.6MB

    • MD5

      3c41c4c9bfce2d80e6223f5347d55f56

    • SHA1

      c373286a8da3e59d03c53a67b25482bd7e271766

    • SHA256

      67430833f94c8062f52b0619ef12e5ee531c314f3f0bf46a73d5a7b98693565f

    • SHA512

      968d3f8fca53950d19406f958be4f63529edf14b2055eaa56cefcb254a85d6e3263e92dc1053b9b223b1b950ca1f626b5573b39aef8a94c6360f90d2cc3deb4e

    • SSDEEP

      98304:DvfYCMfBYdBovPtpZW+W+uDuvEEJ/3wKibsr/HGWKXc/r/uZ9lbh9tIH:83fSc0+W+uDI91//HGWQZ9lV9SH

    Score
    8/10
    evasionstealthtrojan

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Removes a system notification.

      evasion
    behavioral1behavioral2

    • Target

      fyb_iframe_endcard_tmpl.html

    • Size

      520B

    • MD5

      7844cba73b7b4b439b587dd501e92d82

    • SHA1

      25a452bc6886d0e05d4a73da785021fd4c477a04

    • SHA256

      e042e304cecd19bb6816de0150d3895e2717e66dda91f7e189610687c049dae6

    • SHA512

      f54c2d7c0b265aa7c6feb18b8fb6740e01c9e3aeb19bf420d39832737fa59eed8fb959c8aa8a99c0efc87ca3399a244a918f0b4e90b0ee831a87e8afefdf2711

    Score
    1/10
    behavioral3behavioral4

    • Target

      fyb_static_endcard_tmpl.html

    • Size

      3KB

    • MD5

      d18fb1787ce0e84567496b8564e452aa

    • SHA1

      007033d0824685600611af6992060577e127dd23

    • SHA256

      2ae5e0576febb1a1cd63b10bf71644f99fcfd0fe7fb1f2d19525594165294e51

    • SHA512

      ba5225a80941e3ee4ff18401b910968a6cab47634914ecb68213599b96fd4b39c8722e82bf2883faf355d9416a6f2acaa36151a5d8969079cfcd4c6795f6003b

    Score
    1/10
    behavioral5behavioral6

    • Target

      libwbsafeedit

    • Size

      17KB

    • MD5

      aec96f5dd76213dc87c7200e439c2f70

    • SHA1

      d62a8a53d7cf6829bbc3d52c8d8042dfe31d855d

    • SHA256

      f663c531d179b50d76383f764621a8ae03d0faf98c116c4d7686b7f290317428

    • SHA512

      49f88b097cf0c1c4c0b2bb738f5f6aaaf6514e1f90d44287a50860d72cbd2718eb227812d184076b57049fa83e1c384cd7b13b42bb8a71b3e816e3daa1efd4dd

    • SSDEEP

      192:Jds5+qUXzAVseRKCTEdcZdQciesPRgErQMjGxMTuweLvdOxG1Jc:jsLkCTEKqdPi8eLVOxeG

    Score
    1/10
    behavioral7

    • Target

      libwbsafeedit_64

    • Size

      13KB

    • MD5

      d8cf518b12d6792cbba5271094753840

    • SHA1

      76855a7d56e3c140d4645646f4eaeff1fbf3f667

    • SHA256

      7716c311bb3f164880d294943dbd6bbd4b99f9086514d880d17d3d5cf27134ea

    • SHA512

      1d1773f81012b1c0387186ee90ecc6f73edfc1c90f827121152dbbccc6fb4a49758e5497dac440a9e3a10d0ea0bdce8310e61a180c73b3d98be2cc708e040941

    • SSDEEP

      192:nV+SAyMbn69qMOv5Dpbvcg0OSWmNyExd4ilIXhQ:nASAytqMs7buObS+Q

    Score
    1/10
    behavioral10behavioral11behavioral8behavioral9

    • Target

      mraid.js

    • Size

      26KB

    • MD5

      3fe45220654b91408a3ec8df8ddacdb8

    • SHA1

      66194e23bf6894f5b01457c05d02eacb2bcbcc22

    • SHA256

      739eb27184295428c3a3f4c9554ed57e00c43983affa87f92975efbc86f4cd1c

    • SHA512

      0e582a9c2cee7cfcdb646f0f55866cb585b330ea34c2dddee4fa209ca1bca0ed8adafd782c8244871881abd2c596e2c8ed175d75e456a1016d8ee72379a9efef

    • SSDEEP

      384:C2ood7qIy1Mj4zFHTxmMFANRkNAv02HiruM9NhvzpxCgxPY8YpDepjK4:Iod7q91S4zFYNRJTzSxy8YpDsK4

    Score
    1/10
    behavioral12behavioral13

MITRE ATT&CK Enterprise v15

Tasks