Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
151s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
-
submitted
21/01/2025, 22:00
General
-
Target
eed200e27810e20e0d9320a5510005b7f22a7fa432a1d10b921d322ccda0d67e.apk
-
Size
760KB
-
MD5
4bc2e7b96129e42cc2c5eec037d692ce
-
SHA1
be161d9211d0e71b163d8ff64d0100812b6dede9
-
SHA256
eed200e27810e20e0d9320a5510005b7f22a7fa432a1d10b921d322ccda0d67e
-
SHA512
58efe2963213aa73d617d8c7efcb473e6ad75a86621cab85ff325159fbd40e2d5a292ed13d9f9e0bb68f9d5b75826f21030859f50eb7c8103a47ae5c80906ba1
-
SSDEEP
12288:FRV695jja1a8LdePvL3Dg8m5WmpYshXZPbGwidNpgN3:F36Ha1a6ePjDg8m5WmD9idNpm
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
63B
MD54ca4e9daf4ad8d5036771d6b974fc578
SHA1d1063ef221042ac45431c7acffbe61eea3109189
SHA256affe00624d94878c8395fbe34c27e674a4eba93bc51f186365cb1f61200885a3
SHA5121150ac55eeeca607c617ae4462419982e097441f542d4e48abf4957bdaf9726418c4b7ce463bcb72813e25f9a6f69b4ea1a8264d981fb12d866b649ea8290ba4
-
Filesize
230B
MD55675b64809069ce63f4abb4191daebcd
SHA1be055c3ff328875aa343a06e428bc6a354cf11eb
SHA2565dd4141eb76b555115262e0dc7805c2dcb6a958c5412d6c9636fc247da469619
SHA512bc42cb15de457179bb90e5aaeabff66477296107a4fd63a07eb2920da89627177260764583212d0fabd1ea9db905668271e3511dc08615cad5a51165e4a1b7b2