Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    41e17c149328b8ff9a6ef357009f47d1f3baba27875aafe333a5a23fb0d2e9e0.bin

  • Size

    260KB

  • MD5

    8919317f7f32980a697cd97ae21843b7

  • SHA1

    1f73f9487de58ea8e3a24435a89408937131f03d

  • SHA256

    41e17c149328b8ff9a6ef357009f47d1f3baba27875aafe333a5a23fb0d2e9e0

  • SHA512

    4c7e8ee6bf115a2e817488b5049f39c56709f493995774863755281b699a3f7b86a67c886672f02d58471d6f0efed8adf783f8a3a2ec7a3d2ad18b049523b1c4

  • SSDEEP

    6144:MgYsLEeBwZjPHpjXYUEaAIXvF96HLbPevz056kIxMMMs+36h:MPssYRZWvUIb5

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 41e17c149328b8ff9a6ef357009f47d1f3baba27875aafe333a5a23fb0d2e9e0.bin
    .apk android arch:arm

    jrvisah.nzpvwxlzs.jrunez.vekrfyfn

    ewi7.gotkuln


Android Permissions

41e17c149328b8ff9a6ef357009f47d1f3baba27875aafe333a5a23fb0d2e9e0.bin

Permissions

android.jakltw.buhf.jnpanlrk

android.yydz.mnti.szacl

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS