Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    707679dd546b35ab3b73be124554a7e4.apk

  • Size

    5.1MB

  • MD5

    707679dd546b35ab3b73be124554a7e4

  • SHA1

    503cdd605d15596085e34b4ee1b236836fa7ca95

  • SHA256

    577b64df4dd378e2d2a7911c7e0a8ba511a9d9e5c60eac19d29b5c7fccef0756

  • SHA512

    a83b20203794e8d7744a96f0eafc267896827223831223f344c4d347181e07739a2ef431688f9574adda704c70a881e89c6dbc579881b5b813022d11041de0d2

  • SSDEEP

    98304:66uH23bsT9ICBQ5a5Ih/0TC1QaFdSz9HTLNqVLNfRlKLaYZURkDBF3HOv:zuHQAT9ICBTIh/0SH2BHXNqVLNfRliaP

Score
10/10

Malware Config

Signatures

  • Axbanker family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 707679dd546b35ab3b73be124554a7e4.apk
    .apk android

    vbl.juanztj.yci

    com.example.img.SplashActivity


Android Permissions

707679dd546b35ab3b73be124554a7e4.apk

Permissions

android.permission.INTERNET

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.CALL_PHONE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.WRITE_SECURE_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.BIND_ACCESSIBILITY_SERVICE

vbl.juanztj.yci.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION