Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
14/03/2024, 08:53
Behavioral task
behavioral1
Sample
3ee0b5f142884ccd460b619f7a536b4c68d0d649e34ce477cfe97d18b9620453.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
3ee0b5f142884ccd460b619f7a536b4c68d0d649e34ce477cfe97d18b9620453.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
3ee0b5f142884ccd460b619f7a536b4c68d0d649e34ce477cfe97d18b9620453.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
3ee0b5f142884ccd460b619f7a536b4c68d0d649e34ce477cfe97d18b9620453.apk
-
Size
2.8MB
-
MD5
db6463dca0973bb704ac9fce68a1dd23
-
SHA1
c35ffe6ab3797981da3b8fd830d4d0b3f3b24e2e
-
SHA256
3ee0b5f142884ccd460b619f7a536b4c68d0d649e34ce477cfe97d18b9620453
-
SHA512
bdae2fe17fb616a22c8559083e30d23ae5030923bb3dd95f7bab6e7ba38d19a22fa3140048f6cd222b2bbdb5087c7b9524fd695877734b3f64c5c809144f4fd8
-
SSDEEP
49152:9OcwHfICXpT/JVb0Tnb3fj29kgzpWUYCHBSZyL1xB07DsiHDwJAC6lg/Go:cT/ICXlvb0/PjakgPYCHBSZC1XCYiHC1
Malware Config
Extracted
hook
%INSERT_URL_HERE%
Signatures
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service 2 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.tencent.mm Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText com.tencent.mm Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.tencent.mm -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.mm -
Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD558c40c7abe4d0d21bbe3418db55699f9
SHA13459402b27190f1f1e19a9b666c358786a4e8432
SHA25662e773476d2fbc0b81500e095efe73a6b8f39a96f0c7ea06d86317d72ba34c63
SHA51245327ff00744be1350cbda21a492091293361aee174911134fb1c450d39f34c841e39a35127745c2c27a299d2461610d9b702d2258670c0b9ab36e07ab6cf717
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD5a1606e1338c1ceefed78c0d932746f4e
SHA19c34b05a46219c23ad675a93a6cc028fbafbaaf9
SHA2569bcec124a7c745f2301ff9cd032d57eb105e2e5bc959e8740cf1ecf283bfc0d4
SHA51257b90e8da80de17229ef502ea434c4db0c700d0fe7eed6a77eab4d318a26de5d0e3dfe80a3f7e6a252e012235ffd403593b9308df2297717673b477076fb8e41
-
Filesize
108KB
MD56632402fcb79ff8398d15df9c9541734
SHA10d1b08e64bf95348c8e30a42cbc669f9dc7368df
SHA256e12c7faf718886975ced6f21e268f0a7acd2f7f8409c7ad6963f2570dcb0781f
SHA51243276be300a00483f2489dacfd53443cb1566e5c0b1ea2bb7d616982feebbe1bd066d06dfd4c84feb3397b7656544e50dcc1372a281bb22b0368cbb3e1a35347
-
Filesize
173KB
MD5bb72769f26c0f729e0f96d818bdf6de6
SHA1fdb4561fdf521c2f06627a59cdadca3b11440893
SHA256fe2499218d86386b38ab28e8a698721b23058f194330a7a496a57ca86f107a73
SHA512cf7cdcd5ec76aba44d2c6f68e76aa4f032db7c14e445ca640c44397c9325a36f5465a3bf5a198c4614610fe43ed8b1f3ee2773743ed89ade9a3f43c8b8e2e8c7