Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d96d18db475b51a229a0087a8a19b6d7a6daf0b90619a0785942f0d712939b4a.bin

  • Size

    212KB

  • MD5

    4974dc4cffbb7e3a32a826e02596c50d

  • SHA1

    a3792958b80d5c669dff086b58184b62b817fe37

  • SHA256

    d96d18db475b51a229a0087a8a19b6d7a6daf0b90619a0785942f0d712939b4a

  • SHA512

    9412a95c85be6456d03b2720fc83e33bdc551f45d4d70fbbd497d9b896f18b12a13d3a9b4c2758a58a8f65fd20d78c2c6619faf1af77d9d9ec4a2df9a3f93d6c

  • SSDEEP

    6144:Rh0pdP8xL2h0aY1F3WcVg5FBPczeJ3nx+qaUlj:RwdP86fY1F3Bg9gixlj

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • d96d18db475b51a229a0087a8a19b6d7a6daf0b90619a0785942f0d712939b4a.bin
    .apk android arch:arm

    gghibpm.uqgnhqfmd.jjygic.urvqhvps

    iev7.vikvbsm


Android Permissions

d96d18db475b51a229a0087a8a19b6d7a6daf0b90619a0785942f0d712939b4a.bin

Permissions

android.iabl.qzha.nkyepdhv

android.suate.bhnr.tpqiu

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS