Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5ac0516a1c4876afaef78a9463a5311e250f780563924ce36518621906ac9451.bin

  • Size

    4.5MB

  • MD5

    7de05fc6e00db0fe4b5054fc55be0c2e

  • SHA1

    8f3c46b091e54c1aaba0dacdd2133b655b4a804f

  • SHA256

    5ac0516a1c4876afaef78a9463a5311e250f780563924ce36518621906ac9451

  • SHA512

    2d36d4353992a4350c9c0e44e0da19e19ea244f33aa6dd5504904d7151bed316a9c82b8e6a2a9c53ca080b06486b02d816476ecbe0c196893c7ab5095b0345b4

  • SSDEEP

    98304:XMTwrB/orDVlA4MSYGnOohCLLowWdBnyL+lyxgId3:9orD3dqTWXlyxv3

Score
10/10

Malware Config

Signatures

  • Irata family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 8 IoCs

Files

  • 5ac0516a1c4876afaef78a9463a5311e250f780563924ce36518621906ac9451.bin
    .apk android arch:x64 arch:x86 arch:arm arch:arm64

    com.errorforcode.netix

    com.errorforcode.netix.MainActivity


Android Permissions

5ac0516a1c4876afaef78a9463a5311e250f780563924ce36518621906ac9451.bin

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.BLUETOOTH

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

com.errorforcode.netix.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE