Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2656628s -
max time network
150s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
11/01/2023, 01:58
Static task
static1
Behavioral task
behavioral1
Sample
2dc8J3pZXd.apk
Resource
android-x86-arm-20220823-en
General
-
Target
2dc8J3pZXd.apk
-
Size
26.4MB
-
MD5
e3239df547764ae46a462ce8aa2bd46b
-
SHA1
a9bdbfd6bc9bc0588b81e9562089cb0af5372f85
-
SHA256
63cfb0691dcc420c025d9e33f531d784f3a8b1bf2706c66b088fca6338996a3a
-
SHA512
9046989de28730b644e7f1344058b91a039343fc73cda48f017c10622fe55a54ff748546ad14380878c7f7ca94e53d3db1af49e60315137d30c0303b50978d09
-
SSDEEP
393216:XVe3uEqqKp+Mq6HMLq0GRczGR1Tl7yEK7rxW17bcCKg9TGzHJg4FKn1URy+TSGT:o38qa+zS02cYIrx27gPg9TGyKK1UkQ
Malware Config
Signatures
-
Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
-
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.hippogames.ludosaga -
Checks known Qemu files. 3 IoCs
Checks for known Qemu files that exist on Android virtual device images.
ioc Process /system/lib/libc_malloc_debug_qemu.so com.hippogames.ludosaga /sys/qemu_trace com.hippogames.ludosaga /system/bin/qemu-props com.hippogames.ludosaga -
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.hippogames.ludosaga /dev/qemu_pipe com.hippogames.ludosaga -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.hippogames.ludosaga
Processes
-
com.hippogames.ludosaga1⤵
- Acquires the wake lock.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4162 -
/system/bin/cat /proc/version2⤵PID:4340
-
-
/system/bin/sh -c getprop2⤵PID:4358
-
-
getprop2⤵PID:4358
-
-
/system/bin/cat /proc/version2⤵PID:4662
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
232B
MD57f19c4be60b3c8b670639a5ae05ca3a3
SHA1b9373ecfd516dc1af16c2170c8e3331831487830
SHA25632ee536de865521d05bae220f783c4176614a8ecc6e1a425a1292934fc525bbe
SHA51206b3b88e792edd410114c2d9ea933de9ec205d683a466b9524faaa3a7a436b1215ae4133db405327339e1b1f1f72c259b7cd00fa14b0afa82c0da2b65d6d3c93
-
Filesize
2B
MD55343b21ad303bf1799629894deca13db
SHA14af17906b199ba689db52bad5e7b10c159afccf9
SHA256ce552f91e9dc79133d2c327dcc006de9fe02e1411e44d1a012f5e9451c0a34c2
SHA51258b2eaa0704ca3dd061d469cd691fc57314fe4e8b5e8922fa3549fd3549160d477d14b89cf742b963df42fdc6baa5d674da14f03063b16b823edc7094d20279a
-
Filesize
13B
MD54bb14c69a59dba957597f6765063fdb2
SHA1f3d52e38d3132c787ab59b16e58bf24bf9e496b2
SHA25601f12ce8b0ffdd69f6f4b1acb2b5de84875859d6e9387af788612a5b6758bd08
SHA512b24e69f4cd53b7e495431710588de2475cb360723b16b470125ac8e7531fe62175209c078c452e4be56e6a820a0adc18bb966ea4ae255cc1bcb5f10e04c957e3
-
Filesize
36B
MD59cf6cf3c28bcfc1294e81c6c72727e7a
SHA182eda60313f863d40d29f1115368c5a4e8ca661d
SHA256981abde9e112a23ba837d8e862f61223e34907f95854f9b34c3f862605f73842
SHA512f4fba9e5fccfafb14ab1ac04916f37e50b1616aac44f72e7822dd9920f871f64b506ae8e98d3bbbf7ff5341bcac3fc2678912d4719a2bc9e99aa86c44dee91b7
-
Filesize
13B
MD511ef49f0a011c2c9399c3b709ad10fa3
SHA1e91211668edf97eaa0c7cd5a232a8499b2885e98
SHA256903bf49167fd3b8184c46f230c110d0149a09fc69f1729fa86feefd712d1e9fa
SHA512033bb0e2f79395df1ffa8e7c7020c3786289173594dd890a92e2767e7e6ec4d33b368f826d6678dff9dcd7d46024ad33253bd134a911b85849f156a63711ae76
-
Filesize
36B
MD5bffffd690356de283ef2f68c1b0a551f
SHA17c2e31c5dc1c7f9eefb4d8e8aa081b6b01526d60
SHA2560e2f961bc00e1300d7442704de61fd7e4a774166148dd3ac1d6e7cf7a9a7c3b2
SHA51290e07e90c1e95399934c616fc57d923942130b1e6ecd8350981f63464b19d5629e49fc716815187a3303f9c7e7df02e672732d58080fbd295f3282e4a3dabc37
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD58fad60ced212b682714668dc9767935f
SHA1243f3a545fd131e0f15133c193964b5a2a8ca240
SHA25628437fd7b84a62c54dd0c75b6a9f1b230312e1f361fff0a36343480afa163798
SHA512dec24508336d756c7d591297ea175dd97d1be12ecd316e5d2f42e948098ddd308fea0abbf7c0c3abd3da4e7bbdcfd7fe28c02055e44dfa8bf36446e9acb71b8f
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
112KB
MD5d98030c0baabfd2ad86c6f7c45f8fb4d
SHA17f2fc839747799f4a3d9d3b66ff942e9d3ce57b2
SHA2566ba9ea21c8bc481f94066b2b4102288faa96f22f7d2cc08e6157c3befdcb3b7f
SHA512e8dc6e61bb4a18cc607706ee50a676f9456b3bd08dcd71885526f6caba67ea016e1492ab07e33c7a9dad4213fba654890d24029e4fe4062e9071f0724301785c
-
Filesize
270B
MD51e4b60141334bbe736ac01de422be92f
SHA15f9326e275fd1b470887d9aa9f329743d6e3d5a0
SHA256b72665aae516826ce602d0baf5799d48feec7d10924ea7db219838344bbacb62
SHA5124e93a7bd02d4f0b5d7b6cf4a09083310608eab08c50d9f7e158b52bdf615448dd69cdd9a9351b9ef9bb91c0b8e865da902be3076bb851d0d6877c2f385bc99bc
-
Filesize
469B
MD5548b7a2a067c9193a41f4bcd965719e2
SHA1b5fee7a535ddf0edbc6cf924ff55ff47fb1eabfa
SHA2567bcb8e365bc0861e7abe93200dddabb8fa76f1fbca508297cb1026de7096a1dc
SHA512a1cbcc80c9710c3f7f1dded4a782981e6768e899dce7b06e0673dd4d252cd0e196efaddb98bc83df093068bdf937c4a71c3340bd7afeca203a32a2a46b82b2c3
-
Filesize
1KB
MD5fc1674338d6271715c31002bb03ab8da
SHA1cb86585175f184f1b8ee947e75a9cf2b373c48ae
SHA2568c1ded73d47536aeb9e277ad81a8374684d08741319715fc710297bf715808b4
SHA512e7880fb3c815efee0b3e39a9591db75497645edaa98a516eed8fef8e11ab99d9934cddf81a8e6a496c958aa68f5e51b93591d5b4c12bf448a8a2ea78625407d4
-
Filesize
20B
MD5ea118161dff5bcf1728aea49188c0fcd
SHA16f80a4c2fbf3291425f46cf05d88ede48915535d
SHA25676ab9d75ba55614a109937335bc668658d155af2603419fae54ba4fe202585c2
SHA51228b326c4b594d3ecdca64a94b3a0e8297f71ebb11cdda419fcf00bf5614a7767a7823580ea55c2f4b1317d765263cf3afffd25e33d8b9cf9883a3e40ae7a32d3
-
Filesize
370B
MD55b9576cbf96d9db705fa8922597afcb7
SHA1c79699cbc2d5a87b64b1619d0f68be8dfcdf2c2b
SHA25619f529a5d986f6047d8ae219a3d3d6fe817045f44fa52af2ab3c539fcbf7cd8b
SHA5120a832eaef6941b40f01ab88a1ebcbe2de3dfe88a3a6bb7fc621d5caa20d858838eaa4067fbf29b3d586ce6bc58d8b8d678a7be16df9089f6e479821bfdcdf368
-
Filesize
11B
MD5e0234245cb00aa260ccfa99a9a0b235e
SHA11050253aec7b29caff644806927dabfa81406eee
SHA2568fe32e407a1038ee38753b70e5374b3a46d6ae9d5f16cd5b73c53abaca8f5ed0
SHA5126947ea2242462d4b9ce1e0456b68f5a75f979c67fff32db35305a389a3f44fe708f2c25086c54dc8d6e8e8046fc4057b401fa5f123272dd29dae738d162cfcb5
-
Filesize
11B
MD5e0234245cb00aa260ccfa99a9a0b235e
SHA11050253aec7b29caff644806927dabfa81406eee
SHA2568fe32e407a1038ee38753b70e5374b3a46d6ae9d5f16cd5b73c53abaca8f5ed0
SHA5126947ea2242462d4b9ce1e0456b68f5a75f979c67fff32db35305a389a3f44fe708f2c25086c54dc8d6e8e8046fc4057b401fa5f123272dd29dae738d162cfcb5
-
Filesize
11B
MD5e0234245cb00aa260ccfa99a9a0b235e
SHA11050253aec7b29caff644806927dabfa81406eee
SHA2568fe32e407a1038ee38753b70e5374b3a46d6ae9d5f16cd5b73c53abaca8f5ed0
SHA5126947ea2242462d4b9ce1e0456b68f5a75f979c67fff32db35305a389a3f44fe708f2c25086c54dc8d6e8e8046fc4057b401fa5f123272dd29dae738d162cfcb5
-
Filesize
11B
MD5e0234245cb00aa260ccfa99a9a0b235e
SHA11050253aec7b29caff644806927dabfa81406eee
SHA2568fe32e407a1038ee38753b70e5374b3a46d6ae9d5f16cd5b73c53abaca8f5ed0
SHA5126947ea2242462d4b9ce1e0456b68f5a75f979c67fff32db35305a389a3f44fe708f2c25086c54dc8d6e8e8046fc4057b401fa5f123272dd29dae738d162cfcb5
-
Filesize
11B
MD5e0234245cb00aa260ccfa99a9a0b235e
SHA11050253aec7b29caff644806927dabfa81406eee
SHA2568fe32e407a1038ee38753b70e5374b3a46d6ae9d5f16cd5b73c53abaca8f5ed0
SHA5126947ea2242462d4b9ce1e0456b68f5a75f979c67fff32db35305a389a3f44fe708f2c25086c54dc8d6e8e8046fc4057b401fa5f123272dd29dae738d162cfcb5
-
Filesize
2KB
MD5cbf1a362848110182401d5ded43fa843
SHA1c5d2b8f0136944ed4b7ae0f8f5740aa9e42fa2ef
SHA25637f751927d2e0124a6bb7550d197d0a6c75171714d4ec7e600e6b257654e5843
SHA5120da3ba3c569cb00046c995bb56396ca58c38b6e908a27dc3ec2b866284f80dbb63820a7e19b26d288b0fdf931b907d312cc8c5c2d03872fd379af40bd73acbd0
-
Filesize
165B
MD5ee1b07fafcc3570477987bb8399b81e0
SHA1f8f3087681b4aef170144949e2a8c35ae808da84
SHA256b20ab4065a83700dcb90814123533a670236d4d7385d3bb2efe0c9b85a72add1
SHA512b6fc22ff3322d324502f76905260206cbd07528028c1babd0fcaaaae63aa1d49da57794d9c54e106ba1ce69990fcc9542ef35d359b4232732d7fa55fd01cf5a8
-
Filesize
350B
MD54c88e10f6d802846e3c7752e37871ab5
SHA1d73b5bc11998c5e97c8a3c3e6227907b2eaeea67
SHA2566937281a56f8f61ac379f034e519aa4ed8a43bb7bc91f3c38f8a6ab18853ba66
SHA512339877647c1be9ac3b25305dd475eb4a88f1c6b463bf2079ead0659aa2c6dc2952e981c2b1383781f96db67d5e652763aa70087d9e9bafcf6f4ad8c43893bd3d
-
/data/user/0/com.hippogames.ludosaga/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
Filesize3KB
MD5d7c338b3e6a5cf423436b4fa5b6b7e55
SHA1c72eb18b73f2eca0401417fbbda46138a4bdfa96
SHA2563de7429b0a705970bf6fbe88ca0690d19e62fd705b9e7012c2ba7b38f838f2f6
SHA5129a7b61796d80478bd435c8106749c25833d93bcbfc2d5c5de6c0c7c3e8072ab7f599e227c86fab3e7f75fa474bca09424d54610cfe6f539478fbd5c794fecb64
-
/data/user/0/com.hippogames.ludosaga/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml
Filesize951B
MD5cf3d6f13eecad931303f4d1ae937342d
SHA19aa29f7699feb0dcbbdf71e03abf45d3b72e9ba3
SHA2567f20ff52bff05017fb0150cdba458453e55fb9c05ae2c4796a31497a88598e63
SHA51252f12e1b3e48410688442707ec3d1bc4e00d9145b5aab077647b3b17228fd8b786a1c72ddbad50d9654adc91e5bda95cd1623f0ddabfe1a9750abb66792dcb31
-
Filesize
133B
MD5db259b398853f411694ade5cc6f5c741
SHA1d09d04c1eeaa9cf87fb3d9081e523d125ce0cf88
SHA25612c88137efa8c728469af7c48e409a18fcfe01ca2d54280a82cbe663e3b007fd
SHA5121057e2cd3745223010a10f501e57fc38f5d69786c481d9bce008a1a2fbd9c3b321ee0c9d2993ff0d575382fc1f6fdfee8d68368b624d593dd5d6f8df598c19bf
-
Filesize
2KB
MD57c3bf3170e1725f280eb2c2c0492cf1c
SHA1b406c0d38d24fb1276de1cdf8b0093f6b87507e9
SHA25682d3c700e53587061c73d427dccd66ce91aeea0cd115e422edd561cd888283a9
SHA512bd0488d283097604f329b107b5ea732188735c25d56ea5895780290723bf4fd9e6e3f7f0b0363c9fe217a38e6153ffba1cc117a590bfb9cacfab18cac031923f
-
Filesize
2KB
MD5bd953a2e982c88905496e8b5090b3cdd
SHA134f540f07ff6191fb02de04b07a2c1653473bcb4
SHA256fdc4b850a7222f1ef3d27f1c3072da2cb8ed337d60420a841f315b8a932c2547
SHA512fb4d7377275d36f23d460b6fe0d9c055745d0b4ea0dbe6c2a8c60a6337f8b63e179efd72ea1bc4364d5908b3bc09075c4a9cb0b7a36883bbb1a1c716468900f3
-
Filesize
2KB
MD5c371ec9342de4ef29819723aba34eceb
SHA11f41528ac97c5ca58f67cacc13c54695810c3c3c
SHA25684bc20f48ae75c72abf37a10f55fd2884d7e3b7511f48fb6682337d475645738
SHA5123a9b0871454c8b593f113dd5226d0c06ff613cc18ae08f2c4a20c722cbf74dfa41a10a6554573164c565070d95bc68db5eb6d46a02ae50d1f06ee8eb0772fe9c
-
Filesize
523B
MD52af6dd3e9195479c76148b7f41ee2ea1
SHA165218afc6c47db3904ec193e0dc6db56a1a744f7
SHA256162a7a951e9d78e791ecee18c6523cd6441a9ff84b3e2727edd56de34a518cc5
SHA512e9045349496292c1b8d2deb291993de239960e301ae174ed5323639ed3b5067023f4d823c558f15a8d4f8b58de731775db091a5007293404c93e7eb920565bad
-
Filesize
600B
MD5b310fd740271c27dc1f61f87c49d25ef
SHA1a383b7eba4d4230d908fa447d21b1d0b99900dd7
SHA256b8adfed3edd25f27600de987ea7690cc002887ad017930a63dde6525cc3cd863
SHA512beab0dd8060378185f867259882658dbbd32a35b57b6566629306b08af236b44d63928049662face06b35b487dc306a48e2e46fd521710a8477ac539e5c8539c
-
Filesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
Filesize
661B
MD54130742644416160ac5b47aa22135a63
SHA1789aed7f645afd94e8b4bff07f3b483f5293c814
SHA256d2a4cfb28b60198301ab74c9553c3f6d5cd83ec9772c962d7856f089fec7cf71
SHA512779693ef5f8f68ed5743b7a681d2c8d29f1a1e9ef08164523d01f048acd10d4df440dfe1e5371041db6cde9545797e5672adad0c993f330f34a099ea2c0a85fd
-
Filesize
662B
MD53f68098ad0ca03c66b5f95f6927637c8
SHA10e9efbafa5a029757f113bbfe2337c98a3ce995d
SHA256d960610eb381e776fc1cd52f6c0892ec341fe9716e34b29b46be8275e37d6d1b
SHA51255bf6dd0ee4114b1141e4fe6c67d8050fe130cfdcfedb6bb457f665ba2f1fb52286146db2bc59be5a6b270eb54302c5987d48874cc5faa4fc4e3c1c6a08238e1
-
Filesize
662B
MD5ee09e1b042d5a3ec39722f24f068e2e4
SHA199b190b068f5658b9413c1781f8f18ddf9ea4e14
SHA256a7d15bf06397224cefea9b33c399d90283c15fb42ac4cf0b6e11c72519d7537d
SHA51221bec118d83e732ff60179bce3811dab50961e1c6d9ff6023e2b4ec0089a1f6be0a2ba561be748d7b1544d7ff444c5b3ed8725412c80539680adc002d3998b9f
-
Filesize
427B
MD5415e1661095fa5004841d0bceabc6035
SHA18c172e258634fbb64491a4475fe9d00544de78a0
SHA2562c57d535c03866345610ba05989dba2931fb7e8c9106d25bbeacf1f87d5f7889
SHA512fdf3b782a6d261f83f325c6dfaa69cb140c3b703560e104f2d07b5d93c5b13234e6ce3f63adbc816d8c57bb59694212f80cae44f0e07e4d704b330551ed561a2
-
Filesize
116B
MD5df7085c1f112d1197a6da8936d47e7b2
SHA19e6e22bcd8c8da80e40d40a25a9dbfc3227bb443
SHA256c32144358dd9313dbe279605a3658a01cfd0b9a8d993000954456166b982746f
SHA5120ad3f44d3266a951da8f333a82bf9135d31b614659ac83ed44d95062476548d5a47abd12326fd63088eabb8d977a3b39c12679f107f3e6d08ef370656955fca3
-
Filesize
448B
MD5e1d82817f1b5cb73af025ad81fc824de
SHA13377b08c2c74b092092dd8463cb0f830dce66ea8
SHA2565fcd7b9ae8fc3ccc7622b31c33bc2f6443afeae404f13f00770522053aeefcb3
SHA512124a49b762831810be0daee4a4ea627b266094481443fde82ff239df0bf0f97e1a878eaf9be36a02d01edecefb1a20d7462fd1756791979436ed9f42fa2f6482
-
Filesize
135B
MD5a9669be86cd81302745d345e547fdb1a
SHA1cdeb97a558b71b690fb83d1c18c4060a9c9fb3a6
SHA256240e2ccd4481b4816e9d59ce0b96f8c5ba3369995423ae82bbb4e904988bd44c
SHA51233039bf096ed2a686a0ba4fa6e4945927b77d92310d48e230711619179f674b03692b0c870930d4d3a5d9d47209598cce922fb4b0a92caed00bbfab48bb58ff9
-
Filesize
117B
MD5dd298ab77773e03b24ce0dc120b923b5
SHA15a8724fbc5caf5e27c8e009f5678381bdd62ed48
SHA256ae67489efcbeb156de0d3ed5bce0db924b97886c8d04a22631f8c043f0a9243c
SHA5123956c3f98879d61f4b9df415551b9c27d91555e2fb532b04e6db40872c456aafb6cfe13f52fc878e5b878ba525a77438e90c65eb2b27dc85ae271fbda0d3f05f
-
Filesize
177B
MD57deaccd5251e54f5eceebbc24ecc58bc
SHA17a89a1d321a433b569c87ef131f36247cad6852b
SHA25659e7328f87cee4d82d2bb00451b44e263fd18cf9c5f03d99eebd32021297b0b2
SHA51212fd286f45c5a4d8b20515e3ab011b5557eff68ec53d4862e1ca048879798f397453a060f27d1a443509f380185011eb6403776022fd7b74b3bcf4da5ae68b88
-
Filesize
242B
MD57f0cd8ee41999f88a00584a416c5d433
SHA122f443241db2725b6cc337e758ef148d57760e8f
SHA256356a1c599026696e85af349bb8c9bbc5d74c79140b8167c596ab0a59c939a9c8
SHA51249a7930832c515803fb099a2160df6d0ec995f0d1850e4cfa43ec6e7bf333fe788b847d3e28cdc76c729c6c7d8f5b4079e16e8920fd203907afa504094fe3939