Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2897985s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
27/12/2023, 19:20
General
-
Target
dc4712f817e553e8371df12013c9ebe027056bdbd2aeb56442b5b46ac71f321d.apk
-
Size
1.2MB
-
MD5
9c71138391b46bdc409b2127c7c9baa7
-
SHA1
ea7d6c968f085c84e2790a49986635cced746666
-
SHA256
dc4712f817e553e8371df12013c9ebe027056bdbd2aeb56442b5b46ac71f321d
-
SHA512
1951e1057e337f4a50a8d7b70ef45bba826096bb8064337bc78d30e07894f0ffce63b07d97d131602d219818d2f0ed94e10ddebffa3c08f9d239714edc5a67e2
-
SSDEEP
24576:sWTVd0Vv4B/nQz321KE9nx7olQmY32g/E0SMtS:saVTB/n432Usag/u/
Malware Config
Extracted
hook
http://198.186.130.12:3434
Signatures
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
-
Removes its main activity from the application launcher 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
com.tencent.mm1⤵
- Makes use of the framework's Accessibility service
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5d9992345e273efe1212f38298a5f5a6f
SHA1205d31dfae709e1ff00256b44429a8567de85bf0
SHA256b54fcab96879c03a78472f3366b96e04dfd959c166fd16ca4063643d3e85e60b
SHA512f76334f3c69f4e71858155afc9c6a62c6947dd8913680d6007402b5f23cc32ea4fdb6d5d369e065d28435742fab40aa9f436757bc6292173dc98a0bb8cbd78fb
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5085f3fe18247d54efc77dd05e995a19d
SHA1a2528aa73ac815ad297c1e0a1c89c73c4604df07
SHA2560baab24b85145d42b20e90eb2076f77f16b52597b4739e0d48214b4a22ac0c9d
SHA512a98bcc147ea2f814d6ca3d417a2843db6a00b8b84620a1181c4014c1c5c3a3c7de32a325945675aa231abe85d0f7d7917ea405fd27715c5425b00f006d561da2
-
Filesize
108KB
MD50d79186830eb8fd37bec329202a1dd2d
SHA17b7877c7a71507fa54a0096c383ce1b892b0a931
SHA256ffffc804551c364e504e8f59e2db69a632327d53e6aaa6e598a4c19e814e3a70
SHA512bfeeffb11916eda75e869e96ea972f2a4cc532e36d6d2cbedb4bd1e5be8470da8d8f8a120c5c5a07fdbd3897457f76a2d6c4bcacfb2cbb29c21f4fe521523c95
-
Filesize
156KB
MD5534348e587b6034859eae2547f4e7a9e
SHA18d6b3af2bbab25bae10942b1451e0af09c17d0ce
SHA256cffed7e94d4f69fafe0ac84cc094379a0dcc4808c7e02cd0dba19f4f4515e619
SHA512e586bd0717fe5510cc22a747ebee86737d8ef4feb9bc61e49f1ed423f5caf615aa17de79387e216c269c696ee05449e4942dd2b1db69bc2e7226be1866d2db9f