Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time network
    8s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    28/09/2023, 03:33 UTC

Errors

Reason
Payload did not run: unable to install sample: Exception occurred while executing 'install': java.lang.IllegalArgumentException: Error: Failed to parse APK file: contours.fs: Failed to parse contours.fs at com.android.server.pm.PackageManagerShellCommand.setParamsSize(PackageManagerShellCommand.java:528) at com.android.server.pm.PackageManagerShellCommand.doRunInstall(PackageManagerShellCommand.java:1282) at com.android.server.pm.PackageManagerShellCommand.runInstall(PackageManagerShellCommand.java:1248) at com.android.server.pm.PackageManagerShellCommand.onCommand(PackageManagerShellCommand.java:184) at android.os.BasicShellCommandHandler.exec(BasicShellCommandHandler.java:98) at android.os.ShellCommand.exec(ShellCommand.java:44) at com.android.server.pm.PackageManagerService.onShellCommand(PackageManagerService.java:21646) at android.os.Binder.shellCommand(Binder.java:929) at android.os.Binder.onTransact(Binder.java:813) at android.content.pm.IPackageManager$Stub.onTransact(IPackageManager.java:4603) at com.android.server.pm.PackageManagerService.onTransact(PackageManagerService.java:4305) at android.os.Binder.execTransactInternal(Binder.java:1159) at android.os.Binder.execTransact(Binder.java:1123) Caused by: java.io.IOException: Failed to load asset path contours.fs from fd 313 at android.content.res.ApkAssets.nativeLoadFd(Native Method) at android.content.res.ApkAssets.<init>(ApkAssets.java:302) at android.content.res.ApkAssets.loadFromFd(ApkAssets.java:173) at android.content.pm.parsing.ApkLiteParseUtils.parseApkLiteInner(ApkLiteParseUtils.java:238) at android.content.pm.parsing.ApkLiteParseUtils.parseApkLite(ApkLiteParseUtils.java:226) at com.android.server.pm.PackageManagerShellCommand.setParamsSize(PackageManagerShellCommand.java:522) ... 12 more

General

  • Target

    contours.fs

  • Size

    2KB

  • MD5

    25ac5c7d2bdf571a607fcd4b27e932b9

  • SHA1

    294754dc537ac362d288f88f7f02a5a8e38bd0fc

  • SHA256

    65a0d5ed5506cd03bee3d978f8589bfbf876bb79c5a1c1d604fc0a52c1b055f6

  • SHA512

    c82f9883ef259a908816a4fc9e32a6b31adbf4b2d74cf8d314c9be59fe2964b335140675ae9e9d87aa7e3362978bf44e927412d988f00aff794b086ce582fbea

Score
1/10

Malware Config

Signatures

Processes

Network

  • flag-nl
    GET
    http://play.googleapis.com/generate_204
    Remote address:
    142.250.179.202:80
    Request
    GET /generate_204 HTTP/1.1
    Connection: close
    User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36
    Host: play.googleapis.com
    Accept-Encoding: gzip
    Response
    HTTP/1.1 204 No Content
    Content-Length: 0
    Cross-Origin-Resource-Policy: cross-origin
    Date: Thu, 28 Sep 2023 03:34:10 GMT
    Connection: close
  • 142.250.179.202:80
    http://play.googleapis.com/generate_204
    http
    485 B
    414 B
    5
    5

    HTTP Request

    GET http://play.googleapis.com/generate_204

    HTTP Response

    204
  • 224.0.0.251:5353
    1.3kB
    5

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.