Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    53ca791226d75afd350885621b4726a68c3324c203fc93331e35cd67e3606dac.bin

  • Size

    2.5MB

  • Sample

    241011-11cq7swfnb

  • MD5

    497f49638b227f7571dc6dd0933971f3

  • SHA1

    67eec33a8ec616111c6b874c516e42ff84b07298

  • SHA256

    53ca791226d75afd350885621b4726a68c3324c203fc93331e35cd67e3606dac

  • SHA512

    282e218c54b8d86ef4392c5ae984ba086beb40e85657c528a146f0b1f97d9e7121ab37aeb1b8e5e0ed257a7e98635d8d6330f4f2cfd03bc0dd91352ad9c783f5

  • SSDEEP

    49152:uaUjVJKnItH/937beK+uYIQDGMPUn66fKqlcvnJQn2eVEjnMG22+wsBxF:BI26H/h7C2zpMPU6fxQ2GEjnMGXszF

Malware Config

Targets

    • Target

      53ca791226d75afd350885621b4726a68c3324c203fc93331e35cd67e3606dac.bin

    • Size

      2.5MB

    • MD5

      497f49638b227f7571dc6dd0933971f3

    • SHA1

      67eec33a8ec616111c6b874c516e42ff84b07298

    • SHA256

      53ca791226d75afd350885621b4726a68c3324c203fc93331e35cd67e3606dac

    • SHA512

      282e218c54b8d86ef4392c5ae984ba086beb40e85657c528a146f0b1f97d9e7121ab37aeb1b8e5e0ed257a7e98635d8d6330f4f2cfd03bc0dd91352ad9c783f5

    • SSDEEP

      49152:uaUjVJKnItH/937beK+uYIQDGMPUn66fKqlcvnJQn2eVEjnMG22+wsBxF:BI26H/h7C2zpMPU6fxQ2GEjnMGXszF

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests accessing notifications (often used to intercept notifications before users become aware).

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Requests enabling of the accessibility settings.

    • Requests modifying system settings.

MITRE ATT&CK Mobile v15

Tasks