Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4590f826de070cca7daa802ee156afa2e42cbb97f391d5493cb610c7bd0692e4.bin

  • Size

    212KB

  • MD5

    252e59089b263de2f5421a6b2a54f9e2

  • SHA1

    1d20856eb83033d8e1ea85b5f13edcc4a0cbbd3f

  • SHA256

    4590f826de070cca7daa802ee156afa2e42cbb97f391d5493cb610c7bd0692e4

  • SHA512

    7cf689ab2ef175d45c60c5b2266bd1ced2dd7c60785d8da02b6b9e5a0f747926e9d160916d306bf4002ce8556c66b45b28715a9dc9a44ec56320d062fcbbd8f1

  • SSDEEP

    6144:8XA1fKVvRlV2uElGBmgoImL7yfbkB1am1eD:8w1SVvDBEafoIw7yfI9MD

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 4590f826de070cca7daa802ee156afa2e42cbb97f391d5493cb610c7bd0692e4.bin
    .apk android arch:arm

    knhnkdq.hligoropl.mntjut.fovqofew

    vzs7.gggdemy


Android Permissions

4590f826de070cca7daa802ee156afa2e42cbb97f391d5493cb610c7bd0692e4.bin

Permissions

android.iskpmdzh.wzet.hbdydpen

android.hvwieyl.neqs.acoiq

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS