Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8f5b6808646b871caee4155b81c3219d483f21a2934fb7d02e69cb0c19e84d88.bin

  • Size

    212KB

  • MD5

    d2b197fde37fe51cee78a029ccacf8b7

  • SHA1

    d66da53f07cacde9c4d57ef958cbc00ea0f4de2f

  • SHA256

    8f5b6808646b871caee4155b81c3219d483f21a2934fb7d02e69cb0c19e84d88

  • SHA512

    bf09da0e6d0008be7e8e063b2ff87c43be74904cff17e0c9250377a2a632a811d0e481116981e8c42c6ecba4107be33e1b88d5aaa69340cbdf8879e282cf91e9

  • SSDEEP

    6144:cCAzkgMcr5CW+BIN24El0BQgo2mL7yJbkT1auTiW:cCAzg6lrEo1o2w7yJI3

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 8f5b6808646b871caee4155b81c3219d483f21a2934fb7d02e69cb0c19e84d88.bin
    .apk android arch:arm

    elusfod.xqnqcysyy.nkskhe.ktnanihx

    phe7.vcwbewd


Android Permissions

8f5b6808646b871caee4155b81c3219d483f21a2934fb7d02e69cb0c19e84d88.bin

Permissions

android.iqsie.hjgi.qbzawccc

android.rqxk.eago.huwkf

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS