Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    kuguxwus.apk

  • Size

    260KB

  • MD5

    1076e897776249ea4ad876f63751b9aa

  • SHA1

    3c0dc58f3c3f1f51e18bfb94840f8b74fa3aeb6c

  • SHA256

    c7332be17fe9675291e0cf9351db43964874fabcbd3bef08642aa5305cfe79f4

  • SHA512

    36fe7693a891956b46a1513c836eae54841feb89484155059820bb84f173cdb52a5910d376ebb5134e462f95da5bf6889c251b62124c6358d0e91397c860c621

  • SSDEEP

    6144:MFTeBV/72WeM5YCmGu8HGLGAnjje4pqbpnwg6coe4tRC:0OF72/B8AnfeM2pwg6coe4fC

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • kuguxwus.apk
    .apk android arch:arm

    wlnpqht.fxavfodmo.gwxgal.rnualfiv

    weh7.rgolrom


Android Permissions

kuguxwus.apk

Permissions

android.rshproc.pqec.cuyhthjk

android.atengl.ahil.auubb

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS