Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

CoinSpot.apk

android-9-x86

7

CoinSpot.apk

android-10-x64

7

Resubmissions

02/04/2024, 07:18

240402-h5dvysbc72 10

13/04/2023, 13:04

230413-qaxzcach6w 7

Analysis

  • max time kernel
    2058850s
  • max time network
    22s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    13/04/2023, 13:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CoinSpot.apk

  • Size

    3.6MB

  • MD5

    382e4022f901ebc2fa15a168a8dc5a20

  • SHA1

    a8afa19a4aa30b144387101a58e7f52335f24eeb

  • SHA256

    153410238d01773e5c705c6d18955793bd61cb2e82c5c7656e74563bb43b3ffa

  • SHA512

    891b38c568d56325a51394c8676e9553534dc470b8272cdbe610ff530f63ca15b03436143f4af23141ef9580a9a90ec4d6fd1448ed5ec93130290de242162c4a

  • SSDEEP

    49152:0CEMb7Wdu21EpCPOzbGHYBLJ/Oys84q9rsljigY2a1WQOqvauFOJ+AIibJWhL9Bt:FXb/VUP2GHYBJOyI3l2WaUqCKYSKJLRE

Score
7/10
ransomware

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.top.omit
    1⤵
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4795
    • sh
      2⤵
        PID:5093
        • /system/bin/sh /system/bin/pm list package -3
          3⤵
            PID:5114
            • cmd package list package -3
              4⤵
                PID:5132
          • sh
            2⤵
              PID:5156
              • cat /proc/self/cgroup
                3⤵
                  PID:5174

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/user/0/com.top.omit/app_DynamicOptDex/dmW.json
              Filesize

              1.2MB

              MD5

              0e6e8f70702bceb278745e19c2ac2b14

              SHA1

              e6ea5dba97c3c1851882e120d13e43460385de01

              SHA256

              9e1417946a05655869642d9c560605fb8cad248f86e276f894ab0744bd428f7a

              SHA512

              13382ce1800d5a658a159c07c81afa5cd595db812e265d218272b26e6822f1d5975c9bfa8212d6dc11e42c406bf2bca35729eb2d18415b820fd5b7cf12179c3c

              Download Submit