Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    157s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    07/12/2024, 22:05

General

  • Target

    7d692decd7b9d8efd98c53183d44269c0aaaae4b8a4941348d6017712bbdd710.apk

  • Size

    4.9MB

  • MD5

    efb4f7615947dfac5b09926450ff8756

  • SHA1

    ad0f6d4ab2aa88caa166e80d6116807c47436a0b

  • SHA256

    7d692decd7b9d8efd98c53183d44269c0aaaae4b8a4941348d6017712bbdd710

  • SHA512

    e533837a2f1974a2474cb152b6cba95d9725b7e8e9711c6adaa18fd39a060dede371da6c6ad6a6ea5bdbeaa66012c1b97bbb75fb2d10354717e2cc512787decf

  • SSDEEP

    49152:sSRsEXeHnKtoj7I45iS7xrGDvngRUt5jVKScYNgShcxuW3274uFmEnHV9isQf:5RslnAoj7x5iSRGd3VKe+tAZ8EnHV8f

Malware Config

Extracted

Family

octo

AES_key
AES_key

Signatures

Processes

  • com.server_tagd81
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries the mobile country code (MCC)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4781

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.server_tagd81/.global.com.server_tagd81

    Filesize

    48B

    MD5

    046a414913add6f5bb60072c7db819b6

    SHA1

    451ee4f6809260aec622d772fd329c7d0297a842

    SHA256

    b66c1320cb063a1d391c94273572ea6edae76c8c8b0a07f8d75c88686f0df72a

    SHA512

    4e6355f3051ed5e811ab030abde1f5be7f5e1cf33be99cd08477e9b6c015deb1d8bd75a09fb9c7176b8511c5ad0a67abc0902a3531e97564ccb6afc57496a47c

  • /data/data/com.server_tagd81/files/.c

    Filesize

    322KB

    MD5

    77dc50489b9323274732d27dc8a4e803

    SHA1

    0e02a3595b62489d0739d771881da8604d117c65

    SHA256

    c5684e792d1ebefea6aac09fed45911703fd58c899f8a08133d49dd91429a820

    SHA512

    0684a92f3e9c525384cfa53f531afba61e5930e1c27032a7e27e3315f72761b62e122dc34768d8162ba08f9bed53d148aa8dc034b46456bdd211f230637eba58

  • /data/data/com.server_tagd81/oat/x86_64/[email protected]

    Filesize

    346B

    MD5

    c0db5c92ee40684f776b8eb64c4379bd

    SHA1

    17596067e6e0a77972a4024647d1dda67cb395ee

    SHA256

    989c3167d289073cec1b56583fc3e9a14ace62c7c04c9c1204217fdb5cb41e06

    SHA512

    3b2210fc412cc7d2be1ebdfafbaa5be13149e3bd3e0104b6dce042a536c715f160990ba76d7df605365a226c5a345936137ad2df3b357ae9a917f0ce801613e9

  • /data/user/0/com.server_tagd81/[email protected]

    Filesize

    524KB

    MD5

    9e96f8481b9584ef20eefbce52521225

    SHA1

    e39fa9ace27f2a9b55cc6682ace714a4732dfa61

    SHA256

    f53a6a781b3fba62c011caf6f9485f59ca4c5bc8d7aaa65e57682ac987499e42

    SHA512

    22b6602d590a79970b28be522119a607c6a268a7266ada997db2816059b869f1c019258032ee7fd441da5a27959d49db35465dee38ce03f7b53aa4d3e0363d0c