Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9b263f4511c3563b290105505ddd0692f02f6a8a5f6a4751619caf692464c5fb.apk
-
Size
9.3MB
-
Sample
240421-bltzhafa88
-
MD5
64488a966380c39d1b5359c6e532a1d3
-
SHA1
876d45c9b1c9616c92b2f3a0d4dc6f118a6a34ec
-
SHA256
9b263f4511c3563b290105505ddd0692f02f6a8a5f6a4751619caf692464c5fb
-
SHA512
6a811fa37181a075c29ddebd218da6d358ca7d5314da4e6131b41dc0503fdb936ff89fdca4a05cbd784953c88bb5887aa53f7e96eaf279c46cbc981ce7fb8abb
-
SSDEEP
98304:YbhT6G4uHwhT223pmOus1RG7Yrti8L5HnKmz3zB8Tt0tgkgBN:Yp6G4uHkyipmOus1RG7Yrtp5nlzOiwN
Behavioral task
behavioral1
Sample
9b263f4511c3563b290105505ddd0692f02f6a8a5f6a4751619caf692464c5fb.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
9b263f4511c3563b290105505ddd0692f02f6a8a5f6a4751619caf692464c5fb.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
9b263f4511c3563b290105505ddd0692f02f6a8a5f6a4751619caf692464c5fb.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Targets
-
-
Target
9b263f4511c3563b290105505ddd0692f02f6a8a5f6a4751619caf692464c5fb.apk
-
Size
9.3MB
-
MD5
64488a966380c39d1b5359c6e532a1d3
-
SHA1
876d45c9b1c9616c92b2f3a0d4dc6f118a6a34ec
-
SHA256
9b263f4511c3563b290105505ddd0692f02f6a8a5f6a4751619caf692464c5fb
-
SHA512
6a811fa37181a075c29ddebd218da6d358ca7d5314da4e6131b41dc0503fdb936ff89fdca4a05cbd784953c88bb5887aa53f7e96eaf279c46cbc981ce7fb8abb
-
SSDEEP
98304:YbhT6G4uHwhT223pmOus1RG7Yrti8L5HnKmz3zB8Tt0tgkgBN:Yp6G4uHkyipmOus1RG7Yrtp5nlzOiwN
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Input Injection
1