Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4e0a69bf232a9c12ec915bac7dd6789adb2116927b51f10e4bd996cbde854682.bin

  • Size

    2.1MB

  • Sample

    241009-1ylakazbjg

  • MD5

    db2b8d9e6a63938611648554990c4554

  • SHA1

    b11c00bf6f049c3ee2b54d5372340d1c30191ddd

  • SHA256

    4e0a69bf232a9c12ec915bac7dd6789adb2116927b51f10e4bd996cbde854682

  • SHA512

    9dded3680a1425d12cb8bea30918626b8373566ac32b47fcb757ad960be2532009430fab2ce4fcd63f9c041f17a65b3c6f8b8d07022c98587fd250d9be0370ce

  • SSDEEP

    49152:yrm0ADPDFE4z5V+ek1i+qzyd4N/h5uKgWR:yCt779kPiu8

Malware Config

Targets

    • Target

      4e0a69bf232a9c12ec915bac7dd6789adb2116927b51f10e4bd996cbde854682.bin

    • Size

      2.1MB

    • MD5

      db2b8d9e6a63938611648554990c4554

    • SHA1

      b11c00bf6f049c3ee2b54d5372340d1c30191ddd

    • SHA256

      4e0a69bf232a9c12ec915bac7dd6789adb2116927b51f10e4bd996cbde854682

    • SHA512

      9dded3680a1425d12cb8bea30918626b8373566ac32b47fcb757ad960be2532009430fab2ce4fcd63f9c041f17a65b3c6f8b8d07022c98587fd250d9be0370ce

    • SSDEEP

      49152:yrm0ADPDFE4z5V+ek1i+qzyd4N/h5uKgWR:yCt779kPiu8

    • Vultur

      Vultur is an Android banking trojan first seen in March 2021.

    • Vultur payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks