Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
179s -
max time network
186s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
08/08/2024, 21:19
General
-
Target
burlaplayprotect.apk
-
Size
4.4MB
-
MD5
6be7a0365bedfb6a47d801f4b43df7b1
-
SHA1
4a234cf09120ef29f0308921d749bc70a794c5df
-
SHA256
9c403a126032455b730e69886bf4062255be43013d50fb631f16a95eb68114ff
-
SHA512
acb39cab91357489939a4c05e6de191f0425470b51f17f17c3b44b7eb98eda7960d43d0a6b9cf5185479ecb8807ea995dbca18109a77cae3825d21718ae7520b
-
SSDEEP
98304:3yezBXTomz7p0t8tIXfan71TY43qaqkwT/kqIAKU8ZvGqZ2wqL0u:rXz7G8ofanZ84sk4I7UQvGq/u
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
trained.equity.encouraged1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
25B
MD56a073085afb0a4d6fb679ac7dc985c1f
SHA144eca5eb9bd6ef5f9d6bc195f8b447702fd19e0c
SHA256b6bc3fecf515d96b74526d41f05d0125d12af7fd322edb05048981978d4f5715
SHA5122d09b972a207354c13fa2006f02a3da8a4d3984ac6e6b8a971ad1ca97c212b9ea8e26936b253c7bbbba91e0b7949718a1b2e76354ee8fa92fce156e8600ad5bb
-
Filesize
41B
MD5c4660f3240a89a64a153ad55c41abdd4
SHA10272e8705a726baaf62590825b8138d2bcd7cfdd
SHA256c764c60f6662b3c8eaee0f38a4598b2f7500b8768c228936110c8deec309873e
SHA5121c64ab8d96b9f7bc3afa739554f48699818bc72ddec56b5502f672755b499c51914ead74e01226f03b7243f581d791bdd78780e389bdf59ce03e4dbf503d6bce