Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20240910-en
  • resource tags

    arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
  • submitted
    08/02/2025, 14:19

General

  • Target

    bc6e1a73941828b3cd3dd565aba5bf0bf62b177c28a477c4606e4178dbbbc35f.apk

  • Size

    8.2MB

  • MD5

    04d851bd51056d465c8fecffa00c8db2

  • SHA1

    5606bec9482d5dd08368353973334585bef40974

  • SHA256

    bc6e1a73941828b3cd3dd565aba5bf0bf62b177c28a477c4606e4178dbbbc35f

  • SHA512

    96298691799ad7adf244a22d2af34b722479f03a8e6483c868e078565a1cfcd1bb3d21f65341e9bb3f47d5f9ab336bf5f4ba5f27294d70fe24cdafb248d288f3

  • SSDEEP

    98304:FIKgOhLAEBqjvgtel1KrFyFWVKybqAj7aRs7QUN5iSRGn0xW:0OhV8j6HU0Fj7aR/UNre

Malware Config

Extracted

Family

octo

C2

https://2a88253511735028fea71e75917fb77d.shop

AES_key
AES_key

Signatures

Processes

  • com.story_extraaj3
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries the mobile country code (MCC)
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4449

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.story_extraaj3/.global.com.story_extraaj3

    Filesize

    48B

    MD5

    046a414913add6f5bb60072c7db819b6

    SHA1

    451ee4f6809260aec622d772fd329c7d0297a842

    SHA256

    b66c1320cb063a1d391c94273572ea6edae76c8c8b0a07f8d75c88686f0df72a

    SHA512

    4e6355f3051ed5e811ab030abde1f5be7f5e1cf33be99cd08477e9b6c015deb1d8bd75a09fb9c7176b8511c5ad0a67abc0902a3531e97564ccb6afc57496a47c

  • /data/data/com.story_extraaj3/app_view/iFxP.json

    Filesize

    1010B

    MD5

    91db85d117601bb842f9012a141debc2

    SHA1

    62ac73b10c5c1d527ece841df8eed19f8d03ed8e

    SHA256

    9882ca34e3c1180eb7f40b19f65ce0307d34c0ae73589fed18325a50f14f1c6a

    SHA512

    33e64f828f76adf5dbbfd51a5539e6737603612f8d0781ebe8e33ff39cd094539fc42cc4ef5bcbc36f855e4d7b8ec9901b63b07e50ea47527cabeab24c41247d

  • /data/data/com.story_extraaj3/app_view/iFxP.json

    Filesize

    1010B

    MD5

    7c08dcda940871e73e836b9f42b93830

    SHA1

    bfbdbc2a7cee88f3c39270f44db41629d2ce9f9e

    SHA256

    64ef637b7df870f89716c1e583a64f75021411019b34cf26022a55a21f01b8b5

    SHA512

    04ffefd7a55351b3fa6266fefef5501edd98a74739350dbd5d8fb9c5baf0faf05812986154998ddd3b915acf797978a981bc42aef25e88381544f67250b20a5d

  • /data/data/com.story_extraaj3/files/.q

    Filesize

    322KB

    MD5

    77dc50489b9323274732d27dc8a4e803

    SHA1

    0e02a3595b62489d0739d771881da8604d117c65

    SHA256

    c5684e792d1ebefea6aac09fed45911703fd58c899f8a08133d49dd91429a820

    SHA512

    0684a92f3e9c525384cfa53f531afba61e5930e1c27032a7e27e3315f72761b62e122dc34768d8162ba08f9bed53d148aa8dc034b46456bdd211f230637eba58

  • /data/data/com.story_extraaj3/oat/x86_64/[email protected]

    Filesize

    13KB

    MD5

    4a2c894e2bcd3531324108de054aae93

    SHA1

    dde303dc289d2af25da5ad88b37d0530de62c9b9

    SHA256

    004ad6768df999ffa62852d6068b50ec0bdf1e468815f2fe455f660cd5db8920

    SHA512

    d47b2471a307e1bd1442aad8749cf2b6268f67e2c7d663c3c3ac9fce37bf8b998c063874ee225be64bfdcc2af1de6a481669e892f230a46e19471d1fda56b1db

  • /data/user/0/com.story_extraaj3/[email protected]

    Filesize

    525KB

    MD5

    4d427cc543fe7535f96d9c677ad65526

    SHA1

    0c0c0c879c5fc9d5757f32676a3e51e84455b141

    SHA256

    69462ad628d9ef816d68c260ae0ea91ab10e12b25232eef34a347dbd613c4497

    SHA512

    537bc3e276fb56a2db1921915bfddfa90c06725972d6f472e453c7f063f944710b5aca2816d46085424c482a1b9dd4ff451c35b3f634bbaa58aeeddd8b40e8af

  • /data/user/0/com.story_extraaj3/app_view/iFxP.json

    Filesize

    1KB

    MD5

    79cf6457fe307d604361e5e10ed59680

    SHA1

    07e5dd5ccaf1e3a92c96d25df41961bdd3ecae84

    SHA256

    19d22d03e814c2c810ee07c244e98e98d7c289403037394b9e6b2b52e6ef4f52

    SHA512

    6480b872edee12aa39f7aacb10b12a96a42d75b78aafc054cf0c730a03c34fb80f59c77f294eb0df3648387287dcf1198a6aa284e97ec5fe031f41ea7ddbfc79