Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    be512e871fc1871314794ea0e83f70ebe6cd9e537883aca6ca41440b3032dbfc.apk

  • Size

    2.1MB

  • Sample

    250110-egkrta1lhv

  • MD5

    546f45d13c9fec7c6f868758f698de38

  • SHA1

    8e7667971fd60f3973713f14ad12d809dbeb718f

  • SHA256

    be512e871fc1871314794ea0e83f70ebe6cd9e537883aca6ca41440b3032dbfc

  • SHA512

    1df39b5a44e7ba8f4c3adf75c399752d9d4e533d3d1dac7039b45bd48230c39f4e1024d4b356e1b05d8b901467690adb10582b740e7821eaad49b51bbeb480d9

  • SSDEEP

    49152:HVcdmzfrsVxjjx1Il4UwIfoCW6Zg28g00AD3Lt5nTKE0C:HJzfrsfjDUwIvW6l0tbtjl

Malware Config

Extracted

Family

tanglebot

C2

https://t.me/anbsh26

https://t.me/anbshaa

https://t.me/anbshbb

Targets

    • Target

      be512e871fc1871314794ea0e83f70ebe6cd9e537883aca6ca41440b3032dbfc.apk

    • Size

      2.1MB

    • MD5

      546f45d13c9fec7c6f868758f698de38

    • SHA1

      8e7667971fd60f3973713f14ad12d809dbeb718f

    • SHA256

      be512e871fc1871314794ea0e83f70ebe6cd9e537883aca6ca41440b3032dbfc

    • SHA512

      1df39b5a44e7ba8f4c3adf75c399752d9d4e533d3d1dac7039b45bd48230c39f4e1024d4b356e1b05d8b901467690adb10582b740e7821eaad49b51bbeb480d9

    • SSDEEP

      49152:HVcdmzfrsVxjjx1Il4UwIfoCW6Zg28g00AD3Lt5nTKE0C:HJzfrsfjDUwIvW6l0tbtjl

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.