Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    com.android.cts.permission.apk

  • Size

    3.0MB

  • Sample

    250106-tmceys1kes

  • MD5

    66273a5b1eb1207be4c828e86f74f9ad

  • SHA1

    8e8428f50bbee3383666870ecb31203d9d6cfe6a

  • SHA256

    47df247774e408e8ab4d33040b2fb768cecc2a6f0ac9628aeacfda94d4d7b713

  • SHA512

    264004f2cbf8d95247c32f2c70d324a17c0b09795f63cb78b741117f8edad438240efbe069420dd19bd9bdb20bed6b215e79192a7c168373ebeec53643941c16

  • SSDEEP

    49152:MisH7k/L/cqyT5EZ/WOHPNkWZQOAl79ujJVPzbMPqYXS85DgAIy3rMrc00:M7HccLVC/WYlkqQOAHujJVLbwqM+W00

Malware Config

Targets

    • Target

      com.android.cts.permission.apk

    • Size

      3.0MB

    • MD5

      66273a5b1eb1207be4c828e86f74f9ad

    • SHA1

      8e8428f50bbee3383666870ecb31203d9d6cfe6a

    • SHA256

      47df247774e408e8ab4d33040b2fb768cecc2a6f0ac9628aeacfda94d4d7b713

    • SHA512

      264004f2cbf8d95247c32f2c70d324a17c0b09795f63cb78b741117f8edad438240efbe069420dd19bd9bdb20bed6b215e79192a7c168373ebeec53643941c16

    • SSDEEP

      49152:MisH7k/L/cqyT5EZ/WOHPNkWZQOAl79ujJVPzbMPqYXS85DgAIy3rMrc00:M7HccLVC/WYlkqQOAHujJVLbwqM+W00

    • Removes its main activity from the application launcher

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks