Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    29/01/2025, 22:07

General

  • Target

    934f401a1ef339172866e9e8f8ea7976edfc5bf02d67325e41ddaba41405b492.apk

  • Size

    3.8MB

  • MD5

    7acf6b8e7d5a2c5faea0de3fd31586fd

  • SHA1

    fab98ff8cdb33162ff999665825e8d750bace1b2

  • SHA256

    934f401a1ef339172866e9e8f8ea7976edfc5bf02d67325e41ddaba41405b492

  • SHA512

    50f30e0033e4a8bf7b829e9d84f4287b4278ce133dd985e21d28a0153a512437ac8ea631b58a86f60b09da51106a5d5607948eac013072073948b755d947d3b4

  • SSDEEP

    98304:EvaFjykSnkdwSYHGQ6MwcmBbsKU5kO2DKC1hJ5Bu2X:hjykSkdwlHGQ7wcObZU5kO2h1hJ59X

Malware Config

Extracted

Family

tanglebot

C2

https://t.me/+ZJAj-vCkxkE4N2E0

https://t.me/+jz7SONzTmCI0YmM0

https://t.me/+saoiPgiTyD1iZDBk

Signatures

Processes

  • bcsi.llxp.kkumaps
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Performs UI accessibility actions on behalf of the user
    • Checks CPU information
    • Checks memory information
    PID:4588

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/bcsi.llxp.kkumaps/code_cache/secondary-dexes/tmp-base.apk.classes1643644381189724863.zip

    Filesize

    455KB

    MD5

    b77a333853efe267314ee723d18135b6

    SHA1

    4c9352be0a1bcc59d79379ddca3beeeabfad327e

    SHA256

    eb3b7e43c87b523a90e36d3e3b0d50033f522e4f3587a4f83d476c94a591152d

    SHA512

    933a2714929ae16df400ffa47b082ed16416df4b8da153b693c71daeea2d39887c11b0b21b2e87a795040f75dda8a944a19e253f8223d4edbe548513850a2c8d

  • /data/user/0/bcsi.llxp.kkumaps/code_cache/secondary-dexes/base.apk.classes1.zip

    Filesize

    949KB

    MD5

    debac9202fddd8f8ab2deb6e0f488c98

    SHA1

    3e08f9ac6808caf530474545a598163f6462204c

    SHA256

    e77fb899562f87956feb2a03df8eee16627249f717f945bd0db3e3c43ea07cf5

    SHA512

    aa71e732842f1af62e59896f538c87a8ae3aa38502fb15d8cd6831378c057ee60b37274ecc53afe65eacc03bf4381f682c1008eddfe8776881e0e605cb8fcbfa