Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

3ee0b5f142...53.apk

android-9-x86

10

3ee0b5f142...53.apk

android-10-x64

10

3ee0b5f142...53.apk

android-11-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    14/03/2024, 08:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3ee0b5f142884ccd460b619f7a536b4c68d0d649e34ce477cfe97d18b9620453.apk

  • Size

    2.8MB

  • MD5

    db6463dca0973bb704ac9fce68a1dd23

  • SHA1

    c35ffe6ab3797981da3b8fd830d4d0b3f3b24e2e

  • SHA256

    3ee0b5f142884ccd460b619f7a536b4c68d0d649e34ce477cfe97d18b9620453

  • SHA512

    bdae2fe17fb616a22c8559083e30d23ae5030923bb3dd95f7bab6e7ba38d19a22fa3140048f6cd222b2bbdb5087c7b9524fd695877734b3f64c5c809144f4fd8

  • SSDEEP

    49152:9OcwHfICXpT/JVb0Tnb3fj29kgzpWUYCHBSZyL1xB07DsiHDwJAC6lg/Go:cT/ICXlvb0/PjakgPYCHBSZC1XCYiHC1

Score
10/10
hookcollectiondiscoveryevasioninfostealerrattrojan

Malware Config

Extracted

Family

hook

C2

%INSERT_URL_HERE%

Signatures

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook
  • Makes use of the framework's Accessibility service 2 TTPs 3 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasion
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs
    discovery

Processes

  • com.tencent.mm
    1⤵
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    PID:4285

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    58c40c7abe4d0d21bbe3418db55699f9

    SHA1

    3459402b27190f1f1e19a9b666c358786a4e8432

    SHA256

    62e773476d2fbc0b81500e095efe73a6b8f39a96f0c7ea06d86317d72ba34c63

    SHA512

    45327ff00744be1350cbda21a492091293361aee174911134fb1c450d39f34c841e39a35127745c2c27a299d2461610d9b702d2258670c0b9ab36e07ab6cf717

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-shm
    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    a1606e1338c1ceefed78c0d932746f4e

    SHA1

    9c34b05a46219c23ad675a93a6cc028fbafbaaf9

    SHA256

    9bcec124a7c745f2301ff9cd032d57eb105e2e5bc959e8740cf1ecf283bfc0d4

    SHA512

    57b90e8da80de17229ef502ea434c4db0c700d0fe7eed6a77eab4d318a26de5d0e3dfe80a3f7e6a252e012235ffd403593b9308df2297717673b477076fb8e41

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    6632402fcb79ff8398d15df9c9541734

    SHA1

    0d1b08e64bf95348c8e30a42cbc669f9dc7368df

    SHA256

    e12c7faf718886975ced6f21e268f0a7acd2f7f8409c7ad6963f2570dcb0781f

    SHA512

    43276be300a00483f2489dacfd53443cb1566e5c0b1ea2bb7d616982feebbe1bd066d06dfd4c84feb3397b7656544e50dcc1372a281bb22b0368cbb3e1a35347

    Download Submit

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal
    Filesize

    173KB

    MD5

    bb72769f26c0f729e0f96d818bdf6de6

    SHA1

    fdb4561fdf521c2f06627a59cdadca3b11440893

    SHA256

    fe2499218d86386b38ab28e8a698721b23058f194330a7a496a57ca86f107a73

    SHA512

    cf7cdcd5ec76aba44d2c6f68e76aa4f032db7c14e445ca640c44397c9325a36f5465a3bf5a198c4614610fe43ed8b1f3ee2773743ed89ade9a3f43c8b8e2e8c7

    Download Submit