Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    56451550aab2f05905162d3b20688a07ff90cb12eb23f92869c240b49beb3b55.bin

  • Size

    260KB

  • MD5

    bfc034f9195ab9843d9f60df6cdfa08a

  • SHA1

    486ba2a2a69f0ee4073737a47bfaa2fb7df806e9

  • SHA256

    56451550aab2f05905162d3b20688a07ff90cb12eb23f92869c240b49beb3b55

  • SHA512

    0f26161e02eba02914e8aa5203bed40a8c03d0fa2cb81dc2e053891b0d6b54bcc34db08892eb9db379a40ede1f7e8ddac0576bcdfe6b7e635cc3eb01a93908ed

  • SSDEEP

    6144:/XusBtNd/sMoRQiIXvT96LjbPe5z056+IxMMMs45yGX:PrtN67WvyIX4ci

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 56451550aab2f05905162d3b20688a07ff90cb12eb23f92869c240b49beb3b55.bin
    .apk android arch:arm

    lfldtqv.fftzmhphz.ogoupf.twoaymyn

    hpe7.aswsnqq


Android Permissions

56451550aab2f05905162d3b20688a07ff90cb12eb23f92869c240b49beb3b55.bin

Permissions

android.ilohvxi.uwlt.jkdjocdn

android.zvrsmlyy.izae.woxuv

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS