Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2024, 22:00

General

  • Target

    2024d43e0c9f64c4b19db4813506a7a8f3b97fe2568f6dc41022e8955745f186.apk

  • Size

    1.8MB

  • MD5

    65e90a78ebe6ac108d5cdc39094c08d0

  • SHA1

    ac9b7d55913bb44bdb4ddba3e4ee5550f62f83ff

  • SHA256

    2024d43e0c9f64c4b19db4813506a7a8f3b97fe2568f6dc41022e8955745f186

  • SHA512

    92cf4e6b0101681eb184566422422353fe6663a4b8cf7fa7fa34f5a181186af055b5de728ce94c100bd1f7b390dcbef2b8f1ed4a96518a9357dfb1c76e7521fc

  • SSDEEP

    24576:aSkHeuJgMiBvHIIJlAXA4+T2hosWAP7rTmxHV01zzZ6X2+HtfsT/9YkgjgQ7hMzh:aSkOMyoIH2DmxH8ZjXT/VgjbhG/+m

Malware Config

Extracted

Family

tanglebot

C2

https://icq.im/AoLH58xYS0_leBOpXFI

https://t.me/unk22k2k2k2

https://t.me/unkppapeppappe

Signatures

Processes

  • com.rdyxvyhyuiynu.ncggqrmsikupzntz
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Performs UI accessibility actions on behalf of the user
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5060

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.rdyxvyhyuiynu.ncggqrmsikupzntz/code_cache/secondary-dexes/tmp-base.apk.classes991168900961754302.zip

    Filesize

    455KB

    MD5

    bf1bee6ed3f78ab2fdc24246e8dcfcdb

    SHA1

    0a7e2e1c34a19bc2ca62a97f0717311da17f0268

    SHA256

    e02a0ae5b9a13be91c4e82f1d722b9de56f8c9ed2f65ccdd2db4b23e72ad94b0

    SHA512

    b76fa6bd56397f89b8ac050ca8ef53e8a045167e16b67c4c4df2196d29f1054befc9ed175e61804ab0f11ba8d9113db60f2fd14221cae59e63b1c98ece4b2466

  • /data/user/0/com.rdyxvyhyuiynu.ncggqrmsikupzntz/code_cache/secondary-dexes/base.apk.classes1.zip

    Filesize

    949KB

    MD5

    4482f2fcb8cd383f0757bdd933c150c7

    SHA1

    70892375a28d89430cf3f2b6f681fed3e74bd554

    SHA256

    11e34879facb696c5516fa8878a0dd14b57478f047472b859dcf908192fd2e8c

    SHA512

    2796ffe6bd6ce9d4cfcf123286b8613c89a7e59041b2a30593313764978e2dac030a2f17042236df319fbbb9155bf3593b84458185f1ed230471952ee803289e