Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    oxygenapp-v1.0.35-api1.apk

  • Size

    2.7MB

  • Sample

    240526-n26dpaaa7s

  • MD5

    ba5321a8daca25db3dfebe2f4a22bfa4

  • SHA1

    9455d01c733bf519b6e84d0d44d3c2b95f1ec0eb

  • SHA256

    9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7

  • SHA512

    0f2f8a0c68567c03d7a6c71d010038c8293451ad47aafb20484ca5df51145f862dc561e73ca0af4c8f852cce61dfd2d3a1bfdb9de64ba1fd67b5ff9162c7c717

  • SSDEEP

    49152:/E1fnbIRMziyU/Hf35aM5Rbhe8EwRClVFWzZwlg/Fpmh0CB:YIRM7UHcM5jOluwKmh0O

Malware Config

Targets

    • Target

      oxygenapp-v1.0.35-api1.apk

    • Size

      2.7MB

    • MD5

      ba5321a8daca25db3dfebe2f4a22bfa4

    • SHA1

      9455d01c733bf519b6e84d0d44d3c2b95f1ec0eb

    • SHA256

      9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7

    • SHA512

      0f2f8a0c68567c03d7a6c71d010038c8293451ad47aafb20484ca5df51145f862dc561e73ca0af4c8f852cce61dfd2d3a1bfdb9de64ba1fd67b5ff9162c7c717

    • SSDEEP

      49152:/E1fnbIRMziyU/Hf35aM5Rbhe8EwRClVFWzZwlg/Fpmh0CB:YIRM7UHcM5jOluwKmh0O

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK Mobile v15

Tasks