Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

26/07/2024, 06:14

240726-gzqrws1ckn 8

26/07/2024, 06:08

240726-gwekfstglf 8

General

  • Target

    vtbonline.apk

  • Size

    133.7MB

  • Sample

    240726-gwekfstglf

  • MD5

    d697e2447c963c634351d5f6a658fcdf

  • SHA1

    1d3973c3b437622be779503fc3617926afe2dd8d

  • SHA256

    7240543547b9e7091c557b3033e01ae975d4a99486ed57fbf5b0e25de8dc9a15

  • SHA512

    32d2025b8bdfab1e646bd1b22cf8d68501fb81e5051a1690c03db519537d4032a7ca5ac61c42e877ea85d500651637d3ad5e552746b1f42627cdb29123e00740

  • SSDEEP

    3145728:Fr/JV5cbbW5hnbu+H6drrNNHdKcz13z5fd2nBELjPrTgPJ:N/gK5hnbu+HINHdjRFfdMEPPkJ

Malware Config

Targets

    • Target

      vtbonline.apk

    • Size

      133.7MB

    • MD5

      d697e2447c963c634351d5f6a658fcdf

    • SHA1

      1d3973c3b437622be779503fc3617926afe2dd8d

    • SHA256

      7240543547b9e7091c557b3033e01ae975d4a99486ed57fbf5b0e25de8dc9a15

    • SHA512

      32d2025b8bdfab1e646bd1b22cf8d68501fb81e5051a1690c03db519537d4032a7ca5ac61c42e877ea85d500651637d3ad5e552746b1f42627cdb29123e00740

    • SSDEEP

      3145728:Fr/JV5cbbW5hnbu+H6drrNNHdKcz13z5fd2nBELjPrTgPJ:N/gK5hnbu+HINHdjRFfdMEPPkJ

    • Checks if the Android device is rooted.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

MITRE ATT&CK Mobile v15

Tasks