cfe56ef7ad4f474c84b1eefbfee0212a68205713e3d91e204830c9f9e90129e6 | Triage™

Login
Reports

Overview

overview

8

Static

static

6

ru.trashbo...96.apk

windows11-ltsc_2024-x64

8

ru.trashbo...96.apk

android-15-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
ru.trashbox.tapk-v1.9-6696.apk
Size 5.5MB
Sample260905-fa5dbabh49
SHA256 cfe56ef7ad4f474c84b1eefbfee0212a68205713e3d91e204830c9f9e90129e6
MD5 b3e3ee28cab226c820655e165a298dbd
SHA1 788429ee98ff8d175fb0cbad2813554a2e3d5321
SHA512 9e10a5d625c54030211440d2b51002d7acc23124b8b924812563d54ec08c6d64d9e2e14da87273fd42cd5e5e18fbc2bff993efa7a770fab906d139bdbd1b4597
SSDEEP 98304:Sldru4B4fWL+USWOCDFzZ74AW7lUdUM+ZXyEpt+pNqh1duYIYhh47lErLrh2k:8a4qfWL+USrCDFzZ7wxUdJ+ZTta8h/uc
TLSH
T16E46F187F7A8592FC87345B28D5E177116AB4C258E83AB173C543B1C28B36E81F59BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware android banker discovery execution impact persistence ransomware spyware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ru.trashbox.tapk-v1.9-6696.apk

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral2

Sample

ru.trashbox.tapk-v1.9-6696.apk

Resource

android-35-x64-arm64-20260325-en

android-15-x64

2 signatures

900 seconds

banker discovery impact

Malware Config

Targets

- Target
  ru.trashbox.tapk-v1.9-6696.apk
- Size 5.5MB
- SHA256 cfe56ef7ad4f474c84b1eefbfee0212a68205713e3d91e204830c9f9e90129e6
- MD5 b3e3ee28cab226c820655e165a298dbd
- SHA1 788429ee98ff8d175fb0cbad2813554a2e3d5321
- SHA512 9e10a5d625c54030211440d2b51002d7acc23124b8b924812563d54ec08c6d64d9e2e14da87273fd42cd5e5e18fbc2bff993efa7a770fab906d139bdbd1b4597
- SSDEEP 98304:Sldru4B4fWL+USWOCDFzZ74AW7lUdUM+ZXyEpt+pNqh1duYIYhh47lErLrh2k:8a4qfWL+USrCDFzZ7wxUdJ+ZTta8h/uc
- TLSH
  T16E46F187F7A8592FC87345B28D5E177116AB4C258E83AB173C543B1C28B36E81F59BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware execution persistence ransomware spyware banker discovery impact
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

adwareexecutionpersistenceransomwarespyware

behavioral2

bankerdiscoveryimpact

© 2018-2026

Terms | Privacy