Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d4e5050878c5d8c08b80939d0c17d11e
-
Size
22.5MB
-
Sample
240319-b346ssdh54
-
MD5
d4e5050878c5d8c08b80939d0c17d11e
-
SHA1
cb057deb89ad33f4f1be2b1b4508853dff202266
-
SHA256
3517a35450864ee6d39aba71e29d7203b036b7a472a1d193841826a028b8b2e8
-
SHA512
d5e39bfca8282eb07bb909c5f37281152c6cc5b06be104b1ed54b6542f63d4fea6d4ba96fe421c2039ca1aa43fe5ce92784bebd364d58aa5a27cfdd4fd81f18a
-
SSDEEP
393216:vQXmZVfO1+cVvpPPbUsMjSUylbz5Zmicp+r2tF9YM3c7gf/dgMRGY:vWmZpi+kFQjkp3mpF95sc2MAY
Malware Config
Targets
-
-
Target
d4e5050878c5d8c08b80939d0c17d11e
-
Size
22.5MB
-
MD5
d4e5050878c5d8c08b80939d0c17d11e
-
SHA1
cb057deb89ad33f4f1be2b1b4508853dff202266
-
SHA256
3517a35450864ee6d39aba71e29d7203b036b7a472a1d193841826a028b8b2e8
-
SHA512
d5e39bfca8282eb07bb909c5f37281152c6cc5b06be104b1ed54b6542f63d4fea6d4ba96fe421c2039ca1aa43fe5ce92784bebd364d58aa5a27cfdd4fd81f18a
-
SSDEEP
393216:vQXmZVfO1+cVvpPPbUsMjSUylbz5Zmicp+r2tF9YM3c7gf/dgMRGY:vWmZpi+kFQjkp3mpF95sc2MAY
Score8/10-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Requests cell location
Uses Android APIs to to get current cell location.
-
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
-