Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
49s -
max time network
179s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
13/08/2024, 22:04
General
-
Target
8d96e3f4c2a10a6b242b0520f494bd5ad1b0d6fd171dae26a033b63504ed691c.apk
-
Size
381KB
-
MD5
318d3e72a9a6a1e09b6ef9ecb95fe827
-
SHA1
0b6d3d97ffd8ad93648b0ba0096426c90206b108
-
SHA256
8d96e3f4c2a10a6b242b0520f494bd5ad1b0d6fd171dae26a033b63504ed691c
-
SHA512
24c81586b2d08e9d4aa88afdc0cabdfc98e3dce441f1b281ea2c1b291cea3497802e51cdbd3cd0df16925c2cd47a2835e49fa47124669ffa938fe90b4baf2154
-
SSDEEP
6144:qA4K2hj7Q7es4aVrT74sVfMJ4sVfM34sVfMW4sVfMZ4sVfMX:qA4K2hXwnjT74yfm4yfy4yf14yfM4yfE
Score
8/10
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes
-
wocwvy.czyxoxmbauu.slsa1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries the mobile country code (MCC)
- Listens for changes in the sensor environment (might be used to detect emulation)