Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3403044s -
max time network
153s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
-
submitted
02/01/2024, 15:38
General
-
Target
96d9021b3f63da9378e9208b640ebb670906718012db902a400ba101dbdbd3b6.apk
-
Size
1.2MB
-
MD5
7c466ce81527867aa98ff5f187e54bc4
-
SHA1
e394e2a93af3e746bbd87f2db3ecabf68ee45ba6
-
SHA256
96d9021b3f63da9378e9208b640ebb670906718012db902a400ba101dbdbd3b6
-
SHA512
dc084d7338b41c95b72fbd44c70f2c4dfd3864297eab96d173f58cf3b71d9bff9c068a971686cae8257d560143dd50afac3e1afcd807a5025eacc2631936cbeb
-
SSDEEP
12288:CUZFO7Nq1wryobO83ubYZtsZcoc1IkcxxhtS/7iwbO+yq39DCn0yKLRrp8cWxgii:C6YqL83ublicCy+yq3kn0yIRrp83Gh
Malware Config
Extracted
hook
http://173.254.235.53:3434
Signatures
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Reads information about phone network operator.
Processes
-
com.tencent.mm1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5737f2626bab388abe4c495fd8fbed09e
SHA12ca3b4aa9c1a646fdba40984c22bffec41dfcacf
SHA256c5e7e0ba20bc2d58121ca26f07cbb4181e7f1cda06a783379f9c13fc00843470
SHA51279f9e2f5a7458b5b15d284b55428d56994ce688271c5d609303d6de210323e5cd8040bbc7ecefcd8702dd37e0dcc35be65fd42a9047080eed9c156b1301ab47e
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD5f0acd42170e7b70e8c0ddbceb7d948b2
SHA1b735a0534ce77d86ac12e93e1f1cdca77788d6ca
SHA2565ebc8ff3b220367b97402fccfec76364ece11a294a0494e984f2e937f849fed7
SHA512d1141cad6b6c2c91576a259bcc33f0e23cfdfe0a14d31502b3c3ce413ad7f4844c40396395cda4b2683dbe14370edf037c1dad92f14f4d5a1371f4751d371c8b
-
Filesize
108KB
MD51d0b4a1cea67eba8037a77b61d799720
SHA1b7c202fd27867a22744301e174803ca846d8b9ac
SHA256f4e2fc969ed0ce3db7477c20f47c93f538e7e5380da555a27e79126890884ace
SHA512748cad7d5c79373047ad03b6e8c46466596240a1ee537b02134fac0ad24d3e257b4019be8464f82cc76e85200a2099094f9e5d7d5a2024e7c6e1d4e711ac761a
-
Filesize
173KB
MD54a6d7b6fc2b62957139e0b60851a668d
SHA19cad28db3f6fd00ad750e94264b60f77f55f42d9
SHA256baed980379c2ff9fa69a19284b100094002c5b95edf788da6f4250648b6cf447
SHA512e53a53c4a134492953e6a1f2f58e16f93c829ce579f7bad83f429c54dfb4d68cc0b77d698ad9fb29f43669cf3365d6324916581a9f1f00567aacd392a80eb8d6