Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

base.apk

android-9-x86

7

base.apk

android-10-x64

7

base.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    base.apk

  • Size

    2.1MB

  • MD5

    546f45d13c9fec7c6f868758f698de38

  • SHA1

    8e7667971fd60f3973713f14ad12d809dbeb718f

  • SHA256

    be512e871fc1871314794ea0e83f70ebe6cd9e537883aca6ca41440b3032dbfc

  • SHA512

    1df39b5a44e7ba8f4c3adf75c399752d9d4e533d3d1dac7039b45bd48230c39f4e1024d4b356e1b05d8b901467690adb10582b740e7821eaad49b51bbeb480d9

  • SSDEEP

    49152:HVcdmzfrsVxjjx1Il4UwIfoCW6Zg28g00AD3Lt5nTKE0C:HJzfrsfjDUwIvW6l0tbtjl

Score
10/10
tanglebot

Malware Config

Extracted

Family

tanglebot

C2

https://t.me/anbsh26

https://t.me/anbshaa

https://t.me/anbshbb

Signatures

  • TangleBot payload 1 IoCs
  • Tanglebot family
    tanglebot
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • base.apk
    .apk android

    la.lasecurity.trbanking

    la.lasecurity.trbanking.MainActivity


Android Permissions

base.apk

Permissions

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW