Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6

656b5b491b...ef.apk

android-13-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    177s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20240910-en
  • resource tags

    arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
  • submitted
    06/03/2025, 22:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    656b5b491bb6edf396db2f252503b1da091cfdeefd0b3e6ad7c6146c1c3b8def.apk

  • Size

    284KB

  • MD5

    6c2d717ac77a95f724e1400e1c605d9f

  • SHA1

    3e312fabff5e8f28e49d9052145b840df970780f

  • SHA256

    656b5b491bb6edf396db2f252503b1da091cfdeefd0b3e6ad7c6146c1c3b8def

  • SHA512

    c30f93dea8953983cbe4c6e7c77978118ce9c25f4164bd6d89fe95ae9fd4cc1a9a1b4b2eb3ea9a2999b798d481f767d324ffab9ae317753c53254369e04fdf8a

  • SSDEEP

    6144:2qO2X0usLaONTrsGD4/urPlDVXxF6t3tPdSB7qTV+BcE0j:zV0usLTwaiQ91KVdSBCE0j

Score
10/10
xloader_apkbankercollectiondefense_evasiondiscoveryevasionimpactinfostealerpersistencetrojan

Malware Config

Extracted

Family

xloader_apk

C2

https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic

https://m.vk.com/id728589530?act=info
Attributes
  • user_agent

    Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36

Signatures

Processes

  • sq.lin.qoub.otaqmp.etg.ll
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Reads the content of the MMS message.
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Requests changing the default SMS application.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4522

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/sq.lin.qoub.otaqmp.etg.ll/files/b
    Filesize

    509KB

    MD5

    56cdeb711771883abba58bf795547d6b

    SHA1

    b8681cb2081046dc3c6effebd4aca20fa35833dc

    SHA256

    e29751533b08a75674acdf64a56219c35364c62a4559e18ca941821c21af304d

    SHA512

    079dcc4c8000f74de910b9477919b595315181531cb804587165d8ebed6777f86c0379eae4409804035870d1468b6101883acf35d394638afcd79163d41b4a4d

    Download Submit