Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1.20.73.01_arm32_arm64_patched.apk

  • Size

    297.7MB

  • Sample

    240520-j2s15sbg4s

  • MD5

    e9638ca4990088700d8bb89b1b7775e8

  • SHA1

    1197339b5a6409021195b1a3d458f5b397ebb8f1

  • SHA256

    2be61c527f8cd72224214ee693777e5ec387724f4ead7e3c07ad6a3f03537384

  • SHA512

    83e71aa8ebc02ca203e631cc31af44dbf56ef1d09c6147c014d1e2714969bb440d7cbc68e622fb594964defeed90957ed4e285c94c220b9bc68f26ff98767b0d

  • SSDEEP

    6291456:SNbnTouO70YKQ7RIUM5MQ5/DXHSqzU8SEwa30RcFIw/uisVZV:SNTTou80YKQ7RIdGQ5/DXHzY8SEw42KI

Malware Config

Targets

    • Target

      1.20.73.01_arm32_arm64_patched.apk

    • Size

      297.7MB

    • MD5

      e9638ca4990088700d8bb89b1b7775e8

    • SHA1

      1197339b5a6409021195b1a3d458f5b397ebb8f1

    • SHA256

      2be61c527f8cd72224214ee693777e5ec387724f4ead7e3c07ad6a3f03537384

    • SHA512

      83e71aa8ebc02ca203e631cc31af44dbf56ef1d09c6147c014d1e2714969bb440d7cbc68e622fb594964defeed90957ed4e285c94c220b9bc68f26ff98767b0d

    • SSDEEP

      6291456:SNbnTouO70YKQ7RIUM5MQ5/DXHSqzU8SEwa30RcFIw/uisVZV:SNTTou80YKQ7RIdGQ5/DXHzY8SEw42KI

    • Checks if the Android device is rooted.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

MITRE ATT&CK Mobile v15

Tasks