Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8d0d5320c9016316de26412f32bb92a988e9c967ed83bae0b2de36d5b953e0a5.zip

  • Size

    12.1MB

  • MD5

    f0b5a0a0437867b234da31dcb57b511a

  • SHA1

    a1ed48017766c9581ecbb9682ac87db0f25382a8

  • SHA256

    8d0d5320c9016316de26412f32bb92a988e9c967ed83bae0b2de36d5b953e0a5

  • SHA512

    71dd8465c8f56bfa0cfa58502fc6e1d3d519a53a4f99600f72b410a4cf881ebc892ca550032b5523115cfd2e00bb0b63ec4861781b6fde43606232e2378ba0f4

  • SSDEEP

    98304:gm+Qx2blgIQUX2zy/fmzHzBdTv0twjkjyDPV+L43l1LD/VOFFYRs4GKvuNKXctPQ:94bQs2zy2zjgSslGP2bryiK4Q

Score
10/10

Malware Config

Extracted

Family

spynote

C2

3.tcp.ngrok.io:23649

Signatures

  • Spynote family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • 8d0d5320c9016316de26412f32bb92a988e9c967ed83bae0b2de36d5b953e0a5.zip
    .apk android

    com.appd.instll.load

    com.appd.instll.splash


  • childapp.apk
    .apk android

    television.streaming.stream

    television.streaming.osokjgliglzmolfmodvdvgynlmaerwmjonajcoepmjmjjdawyh2.ndzywvsfttoymwrfqeweeralmnjotdpmyteaynievhhxdtgytp31


Android Permissions

8d0d5320c9016316de26412f32bb92a988e9c967ed83bae0b2de36d5b953e0a5.zip

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES