Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b.bin

  • Size

    3.8MB

  • Sample

    250327-16xzbs1mz8

  • MD5

    ecd4e73b9808f5f4fd4939a89edc32d5

  • SHA1

    fd7dc39cbeec535d7389d48d6a760665ad39f105

  • SHA256

    4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b

  • SHA512

    85fbb9e6ed4abb4617af680e5a8a6328edcd1dab047327b9834f46cbbde5a5cdb3894b83776860d7be1095d9acdd2692e9b9236a1fa3c114329bb7a8b8c4cd07

  • SSDEEP

    49152:6i3g92oEfLR79tVN54Y1DOnHzlKW1iRGHlzjZz3YNwfXHrDCX+PV5K3LcBruClcb:6tEfBd4FNtzIif3w+64Bvlcb

Malware Config

Targets

    • Target

      4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b.bin

    • Size

      3.8MB

    • MD5

      ecd4e73b9808f5f4fd4939a89edc32d5

    • SHA1

      fd7dc39cbeec535d7389d48d6a760665ad39f105

    • SHA256

      4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b

    • SHA512

      85fbb9e6ed4abb4617af680e5a8a6328edcd1dab047327b9834f46cbbde5a5cdb3894b83776860d7be1095d9acdd2692e9b9236a1fa3c114329bb7a8b8c4cd07

    • SSDEEP

      49152:6i3g92oEfLR79tVN54Y1DOnHzlKW1iRGHlzjZz3YNwfXHrDCX+PV5K3LcBruClcb:6tEfBd4FNtzIif3w+64Bvlcb

    Score
    6/10
    • Attempts to obfuscate APK file format

      Applies obfuscation techniques to the APK format in order to hinder analysis

    • Requests dangerous framework permissions

    • Target

      haha

    • Size

      2.1MB

    • MD5

      7513f1e7073f370baaeed7474834599a

    • SHA1

      68889c85521d10d27ca31c20b72c4bb3061ab6a0

    • SHA256

      baa6ffe5ca25c9d67b4944b8f0049a95adf79284236261ee0a6924def87c677c

    • SHA512

      e755a7c98b8753915cab5ae87eaba17f9909972ce20c9ce75de484b5d1cb19568e69aea35306566e149632c0c2d0722df96557cc2c37865590c1af40c29d0148

    • SSDEEP

      49152:C3g92A+0sJLNSCZs55W187bbJbG30TVkSD2YE:R+06NSus55WK73A034

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks