Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    kingportal.apk

  • Size

    6.6MB

  • Sample

    240526-pvgbnadc31

  • MD5

    0d766757642107fe49634670a7f65e44

  • SHA1

    2ffce3146559383dfdd22ae3c25bf1640a7cf592

  • SHA256

    71abd10cd9e430ac39aa0ab26b28337e4bd65a44345a493be7801927d5468f8b

  • SHA512

    9c39e8dc774b65300946768db0150b148fe3a45d445b05f68613db20fcbd8d54063eaece0b21ea8d54c3e782d946daff21d6d42ce54b65c3d25cbd394e49c456

  • SSDEEP

    98304:ewaRZ+YAoVOHy1Gc2Ah7TYenMCcZy2h77M9sEkQJXH+EAjiQ2W5Oo+AlpIqws0Ac:ewaRZ+DqcQ9jDcZPusW+EQ55OWC+fhE

Malware Config

Targets

    • Target

      kingportal.apk

    • Size

      6.6MB

    • MD5

      0d766757642107fe49634670a7f65e44

    • SHA1

      2ffce3146559383dfdd22ae3c25bf1640a7cf592

    • SHA256

      71abd10cd9e430ac39aa0ab26b28337e4bd65a44345a493be7801927d5468f8b

    • SHA512

      9c39e8dc774b65300946768db0150b148fe3a45d445b05f68613db20fcbd8d54063eaece0b21ea8d54c3e782d946daff21d6d42ce54b65c3d25cbd394e49c456

    • SSDEEP

      98304:ewaRZ+YAoVOHy1Gc2Ah7TYenMCcZy2h77M9sEkQJXH+EAjiQ2W5Oo+AlpIqws0Ac:ewaRZ+DqcQ9jDcZPusW+EQ55OWC+fhE

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK Mobile v15

Tasks