Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

16/03/2025, 03:52

250316-efh7latrx5 10

06/10/2023, 08:12

231006-j3vlcshh7x 8

09/09/2021, 12:48

210909-p13rvagbf2 8

General

  • Target

    up4net-Xwakurk-1-0-4.apk

  • Size

    15.3MB

  • Sample

    250316-efh7latrx5

  • MD5

    ae866cd8ff9ad51b09bc2799fbdef3d2

  • SHA1

    43f36c86bbd370884e77dfd496fd918a2d9e023d

  • SHA256

    2a4cf22220b95ad1f802efd1ae8abea56e83dc598d66eb073d75882d20858e39

  • SHA512

    3d70132d84524a0fc4f98079471c0ab9c59dadabb14a353b22e678d8b96fe38a6115a3acd6a0ce00e17eb55a26be34b54f74af4eb57ad7ae9caa67036d317fc7

  • SSDEEP

    393216:zV8ZRS/ppA21NdpalnK/VndDjJK29KGOeuAhKXaJ6M71k2zmz48:JWRQpR1RmK/VndDjJQGOjAQXa0Mppzml

Malware Config

Targets

    • Target

      up4net-Xwakurk-1-0-4.apk

    • Size

      15.3MB

    • MD5

      ae866cd8ff9ad51b09bc2799fbdef3d2

    • SHA1

      43f36c86bbd370884e77dfd496fd918a2d9e023d

    • SHA256

      2a4cf22220b95ad1f802efd1ae8abea56e83dc598d66eb073d75882d20858e39

    • SHA512

      3d70132d84524a0fc4f98079471c0ab9c59dadabb14a353b22e678d8b96fe38a6115a3acd6a0ce00e17eb55a26be34b54f74af4eb57ad7ae9caa67036d317fc7

    • SSDEEP

      393216:zV8ZRS/ppA21NdpalnK/VndDjJK29KGOeuAhKXaJ6M71k2zmz48:JWRQpR1RmK/VndDjJQGOjAQXa0Mppzml

    • 888RAT

      888RAT is an Android remote administration tool.

    • 888Rat family

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Requests dangerous framework permissions

MITRE ATT&CK Mobile v15

Tasks