Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2824978s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    24/11/2022, 02:43 UTC

General

  • Target

    47acd67b09186454464741c3134d3c0f20ac2ad7c60f6b1da9bbd3852289edb7.apk

  • Size

    44KB

  • MD5

    3d8372fc5d6105880ce36e5f9c9f6567

  • SHA1

    a489c21dbfed8f1641e8141cdca147b0478678a7

  • SHA256

    47acd67b09186454464741c3134d3c0f20ac2ad7c60f6b1da9bbd3852289edb7

  • SHA512

    92a36bfa9ced74dfec1137a2ed44bc29eac4b2d6e29b8d4a7a3ad4c89020bb1ddfcffad31e376012d511c6b4578a7594fba10d52a72610739b1ce602548c246d

  • SSDEEP

    768:xbxRIfJ61qOe2Y6trtZVBl3jwK0IIXhzw9trkYG1QLp5C16SvcLdSEz/c2gSG4AE:dIf01qd2YeJZp3/0jSykp5CkGcZfY2g4

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • com.android.system
    1⤵
    • Acquires the wake lock.
    PID:4501

Network

  • flag-unknown
    DNS
    infinitedata-pa.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    infinitedata-pa.googleapis.com
    IN A
  • flag-unknown
    DNS
    infinitedata-pa.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    infinitedata-pa.googleapis.com
    IN A
  • flag-unknown
    DNS
    gambit-it.ru
    Remote address:
    1.1.1.1:53
    Request
    gambit-it.ru
    IN A
    Response
  • flag-unknown
    DNS
    gambit-it.ru
    Remote address:
    1.1.1.1:53
    Request
    gambit-it.ru
    IN A
    Response
  • flag-unknown
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.251.36.40
  • flag-unknown
    DNS
    gambit-it.ru
    Remote address:
    1.1.1.1:53
    Request
    gambit-it.ru
    IN A
    Response
  • flag-unknown
    DNS
    gambit-it.ru
    Remote address:
    1.1.1.1:53
    Request
    gambit-it.ru
    IN A
    Response
  • flag-unknown
    DNS
    infinitedata-pa.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    infinitedata-pa.googleapis.com
    IN A
    Response
    infinitedata-pa.googleapis.com
    IN A
    142.250.179.138
    infinitedata-pa.googleapis.com
    IN A
    142.250.179.170
    infinitedata-pa.googleapis.com
    IN A
    172.217.168.234
    infinitedata-pa.googleapis.com
    IN A
    142.251.36.10
    infinitedata-pa.googleapis.com
    IN A
    142.250.179.202
    infinitedata-pa.googleapis.com
    IN A
    216.58.208.106
    infinitedata-pa.googleapis.com
    IN A
    142.251.36.42
    infinitedata-pa.googleapis.com
    IN A
    142.251.39.106
    infinitedata-pa.googleapis.com
    IN A
    172.217.168.202
  • flag-unknown
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    216.58.214.14
  • flag-unknown
    DNS
    gambit-it.ru
    Remote address:
    1.1.1.1:53
    Request
    gambit-it.ru
    IN A
  • flag-unknown
    DNS
    gambit-it.ru
    Remote address:
    1.1.1.1:53
    Request
    gambit-it.ru
    IN A
  • flag-unknown
    DNS
    gambit-it.ru
    Remote address:
    1.1.1.1:53
    Request
    gambit-it.ru
    IN A
    Response
  • flag-unknown
    DNS
    gambit-it.ru
    Remote address:
    1.1.1.1:53
    Request
    gambit-it.ru
    IN A
    Response
  • 142.250.186.174:443
    tls, https
    695 B
    40 B
    1
    1
  • 142.250.186.174:443
    android.apis.google.com
    tls
    999 B
    4.6kB
    8
    6
  • 142.251.36.40:443
    ssl.google-analytics.com
    tls
    1.2kB
    5.7kB
    7
    5
  • 142.250.179.138:443
    infinitedata-pa.googleapis.com
    tls
    897 B
    5.4kB
    10
    7
  • 216.58.214.14:443
    android.apis.google.com
    tls
    5.3kB
    9.4kB
    21
    20
  • 142.251.39.98:443
    40 B
    52 B
    1
    1
  • 142.250.179.131:443
    40 B
    52 B
    1
    1
  • 142.250.185.228:443
    tls
    40 B
    125 B
    1
    1
  • 142.250.179.195:443
    tls
    40 B
    125 B
    1
    1
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    infinitedata-pa.googleapis.com
    dns
    152 B
    2

    DNS Request

    infinitedata-pa.googleapis.com

    DNS Request

    infinitedata-pa.googleapis.com

  • 1.1.1.1:53
    gambit-it.ru
    dns
    116 B
    116 B
    2
    2

    DNS Request

    gambit-it.ru

    DNS Request

    gambit-it.ru

  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.251.36.40

  • 1.1.1.1:53
    gambit-it.ru
    dns
    116 B
    116 B
    2
    2

    DNS Request

    gambit-it.ru

    DNS Request

    gambit-it.ru

  • 1.1.1.1:53
    infinitedata-pa.googleapis.com
    dns
    76 B
    220 B
    1
    1

    DNS Request

    infinitedata-pa.googleapis.com

    DNS Response

    142.250.179.138
    142.250.179.170
    172.217.168.234
    142.251.36.10
    142.250.179.202
    216.58.208.106
    142.251.36.42
    142.251.39.106
    172.217.168.202

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    216.58.214.14

  • 1.1.1.1:53
    gambit-it.ru
    dns
    116 B
    2

    DNS Request

    gambit-it.ru

    DNS Request

    gambit-it.ru

  • 1.1.1.1:53
    gambit-it.ru
    dns
    116 B
    116 B
    2
    2

    DNS Request

    gambit-it.ru

    DNS Request

    gambit-it.ru

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.android.system/shared_prefs/com.google.android.gcm.xml

    Filesize

    113B

    MD5

    e58a5ade1f5c69d76650a4f4fb0431ed

    SHA1

    6cedcbc7cf4046072e35c0bfe6609f996c7f1cdb

    SHA256

    cfde5214d8e07e36226a65397c9a93cceea6b73475326e0a8c0387afcc5dcba0

    SHA512

    cff99b96d94517370182b82f4f75bc203e559e3490e8cc3530a3bfbdb1c64e7298752d6394f2c36b0c92cd246ad3c55a735ea0718c7a475b2c80f20a333d1bc1

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.