Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6

dc4712f817...1d.apk

android-9-x86

10

dc4712f817...1d.apk

android-10-x64

10

dc4712f817...1d.apk

android-11-x64

10

Analysis

  • max time kernel
    3124671s
  • max time network
    134s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    30/12/2023, 10:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dc4712f817e553e8371df12013c9ebe027056bdbd2aeb56442b5b46ac71f321d.apk

  • Size

    1.2MB

  • MD5

    7c466ce81527867aa98ff5f187e54bc4

  • SHA1

    e394e2a93af3e746bbd87f2db3ecabf68ee45ba6

  • SHA256

    96d9021b3f63da9378e9208b640ebb670906718012db902a400ba101dbdbd3b6

  • SHA512

    dc084d7338b41c95b72fbd44c70f2c4dfd3864297eab96d173f58cf3b71d9bff9c068a971686cae8257d560143dd50afac3e1afcd807a5025eacc2631936cbeb

  • SSDEEP

    12288:CUZFO7Nq1wryobO83ubYZtsZcoc1IkcxxhtS/7iwbO+yq39DCn0yKLRrp8cWxgii:C6YqL83ublicCy+yq3kn0yIRrp83Gh

Score
10/10
hookinfostealerrattrojan

Malware Config

Extracted

Family

hook

C2

http://173.254.235.53:3434

Signatures

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook
  • Makes use of the framework's Accessibility service 3 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Reads information about phone network operator.

Processes

  • com.tencent.mm
    1⤵
    • Makes use of the framework's Accessibility service
    PID:4485

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    24865fa36781408152bcd6b794dd04eb

    SHA1

    c4801a6733d201dfa6cdab597edc01d8bec1a65e

    SHA256

    9d729fda505a5651cd36a3fb37163b256775e1d7851085b216f09050f9b964cf

    SHA512

    85d071e6cf5909c40a64ec9a2881533a323a42ca0d920909bae9777eeb9fa522140393fcd6b9ebcd61607fad94b6e18a78a23a92e89c9d13979abb7d2e8611fd

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-shm
    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    5f7a77bf43e53e06bfea3ec61b85d54e

    SHA1

    0ce621f5de24b38b3ba0c842d3d3c4ffa19c1f98

    SHA256

    8ee41351cb2475b31e3e44a944affc5ab5b46d48d2f37880ba64cb842c0d54f6

    SHA512

    d6052b73d6e6f73e7ffb722a7f806d3d296734bd8212cfbe191f9cf4ce558dcc7c1016b198f114a2ee2168c5068bcb64460a86e42f1505479fc4d23d79f34a60

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    e2e379736cc2f048eae1e860169693bd

    SHA1

    4d830b7b0f778c65c73c08fc86489da014b971ed

    SHA256

    920fa11b2413c6a97e07cf5a01f7076a6b5cf90b8be8c065ec5fe96a21dd5d6b

    SHA512

    1c34b4d69816528b1e2b5f1bebb7b8a08a868a3fe95b94bfbbf5dde588ff3535e0b7ded6cb794ec6b123741f00b4500cbaeddf9d7a40ac39972ea5a506fc3391

    Download Submit