Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    WhatsApp.apk

  • Size

    104.5MB

  • Sample

    250312-m5j47aysbw

  • MD5

    b64bf3de446ffa633b8b13d5af319615

  • SHA1

    ade81fd4a0ffec8eb61381b889aa637a06fdc946

  • SHA256

    a27fb8da94763c29b8c954c308381ecd762ea929b5d551402b920b837daf175b

  • SHA512

    9a45f1ca647f8ed23aecd3ebf6bed0c02445d5a122c22b112c0640d9f6c2adc9456404651533f181fbced0c8d2694b4a970e45c7c1695eb5365ec5298018d86c

  • SSDEEP

    1572864:10Mf943lLMfTD+tjHVruKewp/Hz52M+P9vMw6XyjKigtjV9Q4Ao:K89Ot5uKl/T5PuBMjyjKigpVpAo

Malware Config

Targets

    • Target

      WhatsApp.apk

    • Size

      104.5MB

    • MD5

      b64bf3de446ffa633b8b13d5af319615

    • SHA1

      ade81fd4a0ffec8eb61381b889aa637a06fdc946

    • SHA256

      a27fb8da94763c29b8c954c308381ecd762ea929b5d551402b920b837daf175b

    • SHA512

      9a45f1ca647f8ed23aecd3ebf6bed0c02445d5a122c22b112c0640d9f6c2adc9456404651533f181fbced0c8d2694b4a970e45c7c1695eb5365ec5298018d86c

    • SSDEEP

      1572864:10Mf943lLMfTD+tjHVruKewp/Hz52M+P9vMw6XyjKigtjV9Q4Ao:K89Ot5uKl/T5PuBMjyjKigpVpAo

    • Patched UPX-packed file

      Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Queries information about active data network

    • Reads information about phone network operator.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Mobile v15

Tasks