Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3fa30b2678a73b1efbb0d25bfa1138cd527ae8d39a952eeb3e39bedf113326b2.bin

  • Size

    212KB

  • MD5

    8985e32f4db4b646ee1bc86c8663d5f8

  • SHA1

    53eaf415d0673de78ca3ec0ff95c43263e297373

  • SHA256

    3fa30b2678a73b1efbb0d25bfa1138cd527ae8d39a952eeb3e39bedf113326b2

  • SHA512

    224d70caa9b95f7b8bc747eb332610d2bdf3fa494fe55bc35623dbdfe6373100e076b93d9be41dba7ec1309d559edbed683a1418c74c890f17fd674cdd097574

  • SSDEEP

    3072:eHwBDGIHz3LMAOD9G+KdILU4VEl59nqcABp0J8igOJ6DxmLo2yJb33EwQ1a/+lSa:eHkDGSQ24El0BQgo2mL7yJbkT1aEBP

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 3fa30b2678a73b1efbb0d25bfa1138cd527ae8d39a952eeb3e39bedf113326b2.bin
    .apk android arch:arm

    wmgceag.cxkvwxlev.cvdspt.kqkqaclu

    abr7.seyhqhd


Android Permissions

3fa30b2678a73b1efbb0d25bfa1138cd527ae8d39a952eeb3e39bedf113326b2.bin

Permissions

android.denafnn.dimm.zwrbntog

android.ptkvxepg.awzb.twqyv

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS