Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1343408s -
max time network
156s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
14/02/2023, 14:14
Static task
static1
Behavioral task
behavioral1
Sample
Download.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
Download.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
Download.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
Download.apk
-
Size
2.0MB
-
MD5
dfcab9bed533d1a2c1c3aef5bf5593b1
-
SHA1
b3588eea35f3357bac205efb502246f2ce9e866e
-
SHA256
5f7ddfea1ef181280da7a294421cbfb808397cc683dc17f3c968af9cd31a5342
-
SHA512
2347d3a41e1c62c609dec91dbe1a71c8ccd0a0121b1d41c3301d4ef44eb6b2e53ccfe674d1845e170f36fc5a6d4e8f0a57e1fbe65f8aa6663f2272a51a0dce64
-
SSDEEP
49152:SqRu7fO3CvvWu/EPiD69b5BfML7wRXNK7FxqEjB:NM7mSvL/uMEb5pMPqdiqEjB
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.montecristo.linkto8puzzle.nearme.gamecenter -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/21c78a5c.dex 4059 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/21c78a5c.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/oat/x86/21c78a5c.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/21c78a5c.dex 3992 com.montecristo.linkto8puzzle.nearme.gamecenter -
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.montecristo.linkto8puzzle.nearme.gamecenter
Processes
-
com.montecristo.linkto8puzzle.nearme.gamecenter1⤵
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Removes a system notification.
PID:3992 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/21c78a5c.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/oat/x86/21c78a5c.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4059
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
Filesize
1KB
MD5ba85a8d5fb7b7b297c837148ad5c4672
SHA1ee837c1fabde8277a08dffc0c11e07e52b1126cb
SHA256443c9c1982f316f001d54059f9bf4883ec90490da889bc2e3adfdb96ac634c05
SHA5124536297cc8c52cfe6952580b5b9b905780860136bdc468b3ffd563ffff95a620f161f6c19ec14a1078c84a171aba73b3c04bf7b27c7937736483b1944101e090
-
Filesize
36B
MD5c41756bd18f7459ee17ef98256604801
SHA1935d539a8c326c6aa59f95c52aded15ecd7ca87d
SHA256d2c04032178d1e626e152f489041ddfba0f325b0921974174634fa2d1e3d17c7
SHA512466f56b6bf3f63384892b142e40f135634dc2115d61daab7bb2f53d35463baeb2c117a7654404b0eeb47cb0045532c6af61430adaa0e8205bc04a90f43b02bcf
-
/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/databases/com.google.android.datatransport.events
Filesize4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/databases/com.google.android.datatransport.events-journal
Filesize524B
MD54b34ddec3bc65b7c3c39b1ca370c8462
SHA1bda96d5aa963e702007d735893ab515c64fd1e42
SHA25678b60b0c92bf8eaee44e4904bda7cc25d5c883f771d65379cb6fbe6f4359489e
SHA512c13c9fb8ef9ffacbd5f1c6894974871848e424e3df4910a41d91621d4007197b7fd63327bd1b0322de5c5465e29cd6a27ad36157d6e6fa1014d8c3a9fc2ca600
-
/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/databases/com.google.android.datatransport.events-shm
Filesize8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/databases/com.google.android.datatransport.events-wal
Filesize68KB
MD51237122bdc8a76e424c7bd3f89f21646
SHA12d6f1f244bf786ed24ab8704e54b54efb4c8c9a5
SHA256eff1d55aa65b232db6fcefe34ebe2c3e83e0cb4f183eae249413edba0a2a5f98
SHA51264e436ed876bed949003c0e09a212a0122f2c9bc8e22eee2069e16b95d5c62398609eefed0b0e54aae30b33de8a9e393de1d09a4e973afb1d971a23c0e297135
-
Filesize
2.8MB
MD58b67d5267957d9efb8fe3bb0a458be6d
SHA188833da94c4dba7c5c707a8caed401303da6ab27
SHA256981287219198d43803af26648efd84d1dbf5699cf09a3f93414b31590e7e5d9c
SHA512600eecb56d1abbd4a52534e51000df5b5b87685b05a13bc6bf03e3095a9834c4b30a74e0ec25d5e98537a03133af02320d3c8ef529aacd22227f58733fd1cdd9
-
Filesize
2.8MB
MD58b67d5267957d9efb8fe3bb0a458be6d
SHA188833da94c4dba7c5c707a8caed401303da6ab27
SHA256981287219198d43803af26648efd84d1dbf5699cf09a3f93414b31590e7e5d9c
SHA512600eecb56d1abbd4a52534e51000df5b5b87685b05a13bc6bf03e3095a9834c4b30a74e0ec25d5e98537a03133af02320d3c8ef529aacd22227f58733fd1cdd9
-
Filesize
428B
MD547607a6376ab70b265b9687890b10fe2
SHA12a8617fbfe5d53c9b55da1e8188c7c8e95aaf901
SHA256846045962348a15279f50a46582f66eb2cc6d015fc9011da907c17ab93594c06
SHA512bdd0dbe5a976b5eca25ca0e7d8a6ffffe7428e89c034d0c0fca011ea2979becae0ca81e26a2f5c3ab40bccde25390929a39c1fb9c58f78d2843711ddc7feaf8f
-
Filesize
231B
MD523a18d2146f45200e4238fe067945388
SHA15502474af1fe0af30101cad6c99587dcd96c0c03
SHA25619ca81c9085d2a7e68a39afc180ee61634eea4f0aefe563c676522a1c50ea85a
SHA5121481ed1000c61c7d8c99a48f7aa2ed5fd3fdd246cfe5b86932e418f40ba88f4c5db270965c872067ab4193601d27534b7f8c64617e7b891ae12285d1752a4077
-
/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzkzMTczOTYzMzg6YW5kcm9pZDo4M2MxNmQ2MDZmYTllZmQzZjAyM2Vi.xml
Filesize519B
MD59cd7614164960caaab08781a34d2059a
SHA1242ffec231f8c985f2dbf4a64b5df62af630a430
SHA256906750c1e38d638863ed687d50804fb3a42f1f5a8c0cf1137ce2d1a0b0d272de
SHA512fe7f5ea6346e4e9fe041a242c5da826e03143f9fdbecb952c06039961c7b7263d84416863e653bc49ed59ea51c74e613c34dfafa442539871bc3097ed4845c4c
-
/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzkzMTczOTYzMzg6YW5kcm9pZDo4M2MxNmQ2MDZmYTllZmQzZjAyM2Vi.xml
Filesize178B
MD554c043976a68fcef3e3c241f59fec934
SHA195691f27f6a22fa5057b19b9f197a46a2876764d
SHA256f628162a1034a9ca76557cabf3dd36cb99c5b7f20c14f3e758daa829cae8a187
SHA51294319064fbd083c9335b2648d556af0168bd0344b9b6f4100637b238498e89f3106f7753a69a6fa94f8775a979d9f31cfd958a973bdfceff3a237ca08a5a9c0c
-
/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzkzMTczOTYzMzg6YW5kcm9pZDo4M2MxNmQ2MDZmYTllZmQzZjAyM2Vi.xml
Filesize465B
MD5a77c9e9abb8a8b3306476d09ccee6f3b
SHA1034223e93ea6f0e09c3866c7cdafb88691686e74
SHA256b406705df660388068d752aaf21730d167635af44ecb26b5d5de6f0aa89b73ad
SHA5128d5dad180bce57e02734c03739766539f640cb36e8adc02f62b26ad2c448dbb2b21e123e957f018c4468d7a10c6dc3d93b3fdd8bebedef1f6b9699a87631242c
-
Filesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/com.google.android.gms.appid.xml
Filesize387B
MD52071348f568f40e95bc54c583cee2963
SHA1e51f2a315b39b1e89aa4f6c0d617e7b5f3c9f643
SHA2563b73327f514be965c72dad07ee8f54f5b8745b68b24a88265d8254eecb14c9d0
SHA512bafa38115dfdaa579c42ce6acdaeedaf6ea80c38769c008664701b8de2013c0f6da166c55742462228c74c095ceb3cc799e56484821569c978ec22200757c51b