Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b.bin
-
Size
3.8MB
-
Sample
250327-16xzbs1mz8
-
MD5
ecd4e73b9808f5f4fd4939a89edc32d5
-
SHA1
fd7dc39cbeec535d7389d48d6a760665ad39f105
-
SHA256
4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b
-
SHA512
85fbb9e6ed4abb4617af680e5a8a6328edcd1dab047327b9834f46cbbde5a5cdb3894b83776860d7be1095d9acdd2692e9b9236a1fa3c114329bb7a8b8c4cd07
-
SSDEEP
49152:6i3g92oEfLR79tVN54Y1DOnHzlKW1iRGHlzjZz3YNwfXHrDCX+PV5K3LcBruClcb:6tEfBd4FNtzIif3w+64Bvlcb
Static task
static1
Behavioral task
behavioral1
Sample
4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
haha.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral3
Sample
haha.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral4
Sample
haha.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Targets
-
-
Target
4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b.bin
-
Size
3.8MB
-
MD5
ecd4e73b9808f5f4fd4939a89edc32d5
-
SHA1
fd7dc39cbeec535d7389d48d6a760665ad39f105
-
SHA256
4855970aa460909d3e7aa57251a89cd83864900a4ed1c011311c8e87a768b46b
-
SHA512
85fbb9e6ed4abb4617af680e5a8a6328edcd1dab047327b9834f46cbbde5a5cdb3894b83776860d7be1095d9acdd2692e9b9236a1fa3c114329bb7a8b8c4cd07
-
SSDEEP
49152:6i3g92oEfLR79tVN54Y1DOnHzlKW1iRGHlzjZz3YNwfXHrDCX+PV5K3LcBruClcb:6tEfBd4FNtzIif3w+64Bvlcb
Score6/10-
Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
-
Requests dangerous framework permissions
-
-
-
Target
haha
-
Size
2.1MB
-
MD5
7513f1e7073f370baaeed7474834599a
-
SHA1
68889c85521d10d27ca31c20b72c4bb3061ab6a0
-
SHA256
baa6ffe5ca25c9d67b4944b8f0049a95adf79284236261ee0a6924def87c677c
-
SHA512
e755a7c98b8753915cab5ae87eaba17f9909972ce20c9ce75de484b5d1cb19568e69aea35306566e149632c0c2d0722df96557cc2c37865590c1af40c29d0148
-
SSDEEP
49152:C3g92A+0sJLNSCZs55W187bbJbG30TVkSD2YE:R+06NSus55WK73A034
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-