Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8734f17b88e36cf498e5f41eb10f3cf50b140af8bc268aea62feaddf3191f72f.bin

  • Size

    164KB

  • MD5

    c21fb11518ba0c4958b2c00e204b6288

  • SHA1

    66a8fecc42257821d9ab6a4b7a1bb1a29cecd1f9

  • SHA256

    8734f17b88e36cf498e5f41eb10f3cf50b140af8bc268aea62feaddf3191f72f

  • SHA512

    8eef5ee010e5a67f2141eb56d8a0f1259b28ba7a6085de3b992afcbca77e94094271594e3afd74a7ff6a93dd427d660c1b55b4b0113db2a399548c49f181e32f

  • SSDEEP

    3072:wfz63m+RrRaOlNMFc9H62h60/YNPhqnUYA76rVPPk6FdHq:wr63TMOD2mthONPhqnUYm6rVPPk0K

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • 8734f17b88e36cf498e5f41eb10f3cf50b140af8bc268aea62feaddf3191f72f.bin
    .apk android arch:arm

    zydzmeg.ojlwcmeqr.ugheqe.diskbhyv.dlumf

    dtg7.fmze


Android Permissions

8734f17b88e36cf498e5f41eb10f3cf50b140af8bc268aea62feaddf3191f72f.bin

Permissions

android.oqym.jisjobvy.uxoel

android.nivyky.dkkjx.qrgg

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_PHONE_NUMBERS