Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
55s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
-
submitted
25/01/2024, 00:10
General
-
Target
73393c85cc6e01a7a9d6cbccbc66ae1c.apk
-
Size
144KB
-
MD5
73393c85cc6e01a7a9d6cbccbc66ae1c
-
SHA1
7d0168c57094d35d22d48b60a95c89dd81439767
-
SHA256
9c157af9c0f9a2234e5670133e420b78a8329125cc6699151cfa9e0d205e4415
-
SHA512
05aafec7afee8a31a86a7e5592f35dfec847eecfd4816d020ac8a27e50908e37a65c2d549e286ed650f2614712e15bc04d091491a40650d11e59eebd2001fb5f
-
SSDEEP
3072:DBa5aeyj9kdWoM8pmPUZF+U7El8Z5lP0ZlsepJx+9AeP:DBeaewedWauUD+Uq85m2Z9AeP
Score
10/10
Malware Config
Extracted
Family
cerberus
C2
http://185.203.116.123
Signatures
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 IoCs
-
Tries to add a device administrator. 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
Processes
-
com.hyiyxseyeblfd.kkygauuvdknult1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Tries to add a device administrator.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Listens for changes in the sensor environment (might be used to detect emulation)