Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
128s -
max time network
150s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
05/10/2024, 22:09
General
-
Target
0a2837dbcf44524256346dedcefe9faa83512cdfb0409ab97af059fac9e4f934.apk
-
Size
78KB
-
MD5
53285ac39a5024b36c7ef68aa7bdb7a9
-
SHA1
9393f366a2b5f3e6449331085001f24e6790d303
-
SHA256
0a2837dbcf44524256346dedcefe9faa83512cdfb0409ab97af059fac9e4f934
-
SHA512
7338d55a3212782ecc04f961398c469270a939f5031cf715daa661bbc32ab82e49fa417e48db91f58ecc2e0037ca22cf30f8e01946c8f8af156f0a816b4b9dbe
-
SSDEEP
1536:WbP9qmWHDW8Etc4WEFr9LsCweHdpf7KJ1AjQEKwi1UI8FNwyTtkMe+YYpL+oXN:MP90jWtcR8rZs5Kdpfi1AkEc1UTJkHB2
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.spy.note.ecy1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Performs UI accessibility actions on behalf of the user
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
173B
MD5aca23e2d3cda1500bc27e71c9b4089df
SHA1d613ca0b9e7f95974536ba7d1fe95265a7262762
SHA256b51472aeb7cfb88030ea59b6b11e52e3f0d56362e88ea9571b2df64f3923e810
SHA5125722229d2e526655d372c2e532790f80648cc8161f33eff42f5f378a3aa584eafe8da746fceed1060fbc011439443fe13a8cda1a9ffb23d4fe0624735155a51a
-
Filesize
122KB
MD57d9ce10875dd6ab60e62e7433ccf5897
SHA1fbb9ad1b47879bd6578634eb3d411e065acf4281
SHA256e44d0f11a476f8c2a50c051e7804edf646cf016afd725bccbbdc133b452bae38
SHA5127d79f1ad57a1ed890a3d6e79e8b313e9aa6a1b4bc9eec5242a6ca0205da14959f9f1793afe1ebc86e039d2946f1a7917123c001ed31f233229cf225698aec53e