Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

26/12/2024, 13:32 UTC

241226-qtbv8axjbn 10

26/12/2024, 13:31 UTC

241226-qsfssaxjap 10

General

  • Target

    dcf5e261143d0f9f95bab39a037cafdcfbc32aafe574f4fdd2a4844e72976545.zip

  • Size

    3.8MB

  • Sample

    241226-qtbv8axjbn

  • MD5

    03ad0efb5dd380e9fb5190634bd96b4a

  • SHA1

    9507fc640ff77c39e7cbad8aba66487f6771e495

  • SHA256

    137fd24758fc6bc825f45e0f1719ee98cd7360812ad55096167623fc1d894107

  • SHA512

    fef8e606e387efdaeedfbbfd7a2153481db6cd42a1844e13042b87d9d2f77b7371fdc4a6e7bf0abf2d5c9d44062793d2b0b1eed0c3bc806b1a2373a8f2be9a6d

  • SSDEEP

    98304:NpAtb4d9yNg7xiH54scUCiLrYT+NdBiQiOfCweaa9:NpHUgQH54saiLI+N+QiZn

Malware Config

Targets

    • Target

      dcf5e261143d0f9f95bab39a037cafdcfbc32aafe574f4fdd2a4844e72976545.apk

    • Size

      9.5MB

    • MD5

      d01fb368fde611624b442937b0ea21f7

    • SHA1

      f82d1cac49a0dd7e8714fc6a0bc4d74473c97c10

    • SHA256

      dcf5e261143d0f9f95bab39a037cafdcfbc32aafe574f4fdd2a4844e72976545

    • SHA512

      476e61de68dd64477a1449db51646ae0e6b9b0c5f9d95ceed491d51975b602a771c17ad2bc7c374420990a71db988432fbaec97d3a99e26449df47f0b17f51ef

    • SSDEEP

      98304:XKL5O5Pudk+nD+2R456BjII/D1vybK9aj+sr/mzEwzBOT00tEEnu:XldujDXu56nDX9ajvruzEdnM

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.