Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7telelatino...DW.apk
android-9-x86
7IJMDal.data
windows7-x64
3IJMDal.data
windows10-2004-x64
3InteGration_4.5.6.ttf
windows7-x64
3InteGration_4.5.6.ttf
windows10-2004-x64
7af.bin
windows7-x64
3af.bin
windows10-2004-x64
3alaunchec.dat
windows7-x64
3alaunchec.dat
windows10-2004-x64
3alauncher.dat
windows7-x64
3alauncher.dat
windows10-2004-x64
3bicon.dat
windows7-x64
3bicon.dat
windows10-2004-x64
3icon_max_d...yy.png
windows7-x64
3icon_max_d...yy.png
windows10-2004-x64
3icon_titl_...ed.png
windows7-x64
3icon_titl_...ed.png
windows10-2004-x64
3ijiami.ajm
windows7-x64
3ijiami.ajm
windows10-2004-x64
3ijiami.dat
windows7-x64
3ijiami.dat
windows10-2004-x64
3image_icon...ed.png
windows7-x64
3image_icon...ed.png
windows10-2004-x64
3libijmData...ion.so
debian-9-armhf
1libijmData...x86.so
ubuntu-18.04-amd64
1localinfo.png
windows7-x64
3localinfo.png
windows10-2004-x64
3sign_verify.png
windows7-x64
3sign_verify.png
windows10-2004-x64
3signed.bin
windows7-x64
3signed.bin
windows10-2004-x64
3tiktok_data
windows7-x64
1Analysis
-
max time kernel
2909648s -
max time network
8s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
12/06/2023, 02:26
Static task
static1
Behavioral task
behavioral1
Sample
telelatinomobile_TVNDW.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
IJMDal.data
Resource
win7-20230220-en
Behavioral task
behavioral3
Sample
IJMDal.data
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
InteGration_4.5.6.ttf
Resource
win7-20230220-en
Behavioral task
behavioral5
Sample
InteGration_4.5.6.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
af.bin
Resource
win7-20230220-en
Behavioral task
behavioral7
Sample
af.bin
Resource
win10v2004-20230221-en
Behavioral task
behavioral8
Sample
alaunchec.dat
Resource
win7-20230220-en
Behavioral task
behavioral9
Sample
alaunchec.dat
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
alauncher.dat
Resource
win7-20230220-en
Behavioral task
behavioral11
Sample
alauncher.dat
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
bicon.dat
Resource
win7-20230220-en
Behavioral task
behavioral13
Sample
bicon.dat
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
icon_max_data_encrypted_xxxyyy.png
Resource
win7-20230220-en
Behavioral task
behavioral15
Sample
icon_max_data_encrypted_xxxyyy.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
icon_titl_last_encrypted.png
Resource
win7-20230220-en
Behavioral task
behavioral17
Sample
icon_titl_last_encrypted.png
Resource
win10v2004-20230221-en
Behavioral task
behavioral18
Sample
ijiami.ajm
Resource
win7-20230220-en
Behavioral task
behavioral19
Sample
ijiami.ajm
Resource
win10v2004-20230220-en
Behavioral task
behavioral20
Sample
ijiami.dat
Resource
win7-20230220-en
Behavioral task
behavioral21
Sample
ijiami.dat
Resource
win10v2004-20230220-en
Behavioral task
behavioral22
Sample
image_icon_constructor_encrypted.png
Resource
win7-20230220-en
Behavioral task
behavioral23
Sample
image_icon_constructor_encrypted.png
Resource
win10v2004-20230221-en
Behavioral task
behavioral24
Sample
libijmDataEncryption.so
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral25
Sample
libijmDataEncryption_x86.so
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral26
Sample
localinfo.png
Resource
win7-20230220-en
Behavioral task
behavioral27
Sample
localinfo.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral28
Sample
sign_verify.png
Resource
win7-20230220-en
Behavioral task
behavioral29
Sample
sign_verify.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral30
Sample
signed.bin
Resource
win7-20230220-en
Behavioral task
behavioral31
Sample
signed.bin
Resource
win10v2004-20230220-en
Behavioral task
behavioral32
Sample
tiktok_data
Resource
win7-20230220-en
General
-
Target
telelatinomobile_TVNDW.apk
-
Size
38.1MB
-
MD5
0d4227a509c678e5dc3fc885c812227c
-
SHA1
36e1e8c5e35e9130a7e66ad869003b68417a315b
-
SHA256
97407f534fdc551ed2b568c7bf7b6df69c984fda5c03c518499fee4af7f6bbc2
-
SHA512
44cf032ad855fd1efc3af2f429babd1ab440fb565e898ad6422c26da9b5fea6b3708965f318ff81bc1f2322c18ba65ec00f444db72b16f61a109ef2fe984bc08
-
SSDEEP
786432:fU5xzWq3IfxsV7SzWq3IfDADCZnDGj4eAuJjgmZvjZMwonu0cdaMbDYhn0Vc5dLz:c5dn3esBen3EADCZGj4JuMwSu0e5Vodz
Malware Config
Signatures
-
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.spanish.latinomobile /dev/qemu_pipe com.spanish.latinomobile