Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
02/01/2023, 14:46
230102-r5cgkahg9y 702/01/2023, 14:45
230102-r4z68sef68 702/01/2023, 14:43
230102-r3z5vahg81 702/01/2023, 14:43
230102-r3k1xshg8x 7Analysis
-
max time kernel
1928390s -
max time network
24s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
02/01/2023, 14:43
Static task
static1
Behavioral task
behavioral1
Sample
com.snk.acassk1_1.0-APK_Award.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
com.snk.acassk1_1.0-APK_Award.apk
-
Size
49.4MB
-
MD5
95b99846b68ea682fd661b4294bfdcb3
-
SHA1
97676b5623a8b5e454f2d220d7d86d7abdcd64a5
-
SHA256
e24b06960d208a3081192db547f0aba93f4681ffe10121c8800e8901329952b1
-
SHA512
a988af8ea7091a3c0b25b3f0ed29460152ff55333bedaa8ffa6b827a0d9878c40b06401876b1e04d3416af7d522b522cbee039de91de1a6abb93ba97510fd294
-
SSDEEP
786432:NK4upFCpcoijvYBcIZk2ZmHgH1PleFDeYkajIm2ZsgVvEKzOf9AN/nYtK+6TR5:PDdoHgxkDeH1m29LzO2BoK+ER5
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 6 IoCs
description ioc Process Accessed system property key: ro.product.name com.snk.acassk1 Accessed system property key: ro.product.model com.snk.acassk1 Accessed system property key: ro.product.device com.snk.acassk1 Accessed system property key: ro.bootmode com.snk.acassk1 Accessed system property key: ro.hardware com.snk.acassk1 Accessed system property key: ro.bootloader com.snk.acassk1 -
Checks Qemu related system properties. 9 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: qemu.sf.fake_camera com.snk.acassk1 Accessed system property key: qemu.logcat com.snk.acassk1 Accessed system property key: vendor.qemu.dev.bootcomplete com.snk.acassk1 Accessed system property key: ro.kernel.android.qemud com.snk.acassk1 Accessed system property key: qemu.hw.mainkeys com.snk.acassk1 Accessed system property key: ro.kernel.qemu.gles com.snk.acassk1 Accessed system property key: ro.kernel.qemu.vsync com.snk.acassk1 Accessed system property key: init.svc.qemu-props com.snk.acassk1 Accessed system property key: ro.kernel.qemu com.snk.acassk1 -
Reads information about phone network operator.