Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    build.apk

  • Size

    265KB

  • MD5

    72df76fc2dfc0f7af375c724aadac0c6

  • SHA1

    51663b2b74107b2aabe550babd73696f7c7b8dd7

  • SHA256

    27318c0f5f2d28362d905e05cb7d46988ea8708e07b51a228f66b7f9fe4c192b

  • SHA512

    33a5833a056092408f591b871f84cf2aea06dc226646032b841be00829a048f7f7b24236046b524e97ac1014690dabe31a72b222598d8500008627e713b88921

  • SSDEEP

    6144:kKOi/9zXURxhfsf7TZbXtmM+qoYs+0gqxhcb8Awog0/iqfmurn890GNz:D7UHhUT9wodsdhOp1R/iqfmuI9T

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://195.211.101.219:22222

Signatures

  • Ahmyth family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • build.apk
    .apk android

    com.etechd.l3mon

    com.etechd.l3mon.MainActivity


Android Permissions

build.apk

Permissions

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS