Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7277e4e17c5...03.apk
android-9-x86
7277e4e17c5...03.apk
android-11-x64
7RainbowBridge.js
windows7-x64
1RainbowBridge.js
windows10-2004-x64
1ace.js
windows7-x64
1ace.js
windows10-2004-x64
1app_config.js
windows7-x64
1app_config.js
windows10-2004-x64
1bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
bridge.js
windows7-x64
1bridge.js
windows10-2004-x64
1c_cpp.js
windows7-x64
1c_cpp.js
windows10-2004-x64
1csharp.js
windows7-x64
1csharp.js
windows10-2004-x64
1css.js
windows7-x64
1css.js
windows10-2004-x64
1dom.js
windows7-x64
1dom.js
windows10-2004-x64
1editor.html
windows7-x64
1editor.html
windows10-2004-x64
1editor.js
windows7-x64
1editor.js
windows10-2004-x64
1es5-shim.js
windows7-x64
1es5-shim.js
windows10-2004-x64
1es_privacy...t.html
windows7-x64
1es_privacy...t.html
windows10-2004-x64
1es_privacy...n.html
windows7-x64
1es_privacy...n.html
windows10-2004-x64
1es_privacy...h.html
windows7-x64
1Analysis
-
max time kernel
221849s -
max time network
134s -
platform
android_x86 -
resource
android-x86-arm-20230831-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system -
submitted
07/10/2023, 23:51
Static task
static1
Behavioral task
behavioral1
Sample
277e4e17c56306ab477fa1f53e092858412fa5d33ec754fdbf7864ec6b20ed03.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
277e4e17c56306ab477fa1f53e092858412fa5d33ec754fdbf7864ec6b20ed03.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral3
Sample
RainbowBridge.js
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
RainbowBridge.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
ace.js
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
ace.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
app_config.js
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
app_config.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
bdxadsdk.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral10
Sample
bdxadsdk.apk
Resource
android-x64-20230831-en
Behavioral task
behavioral11
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral12
Sample
bridge.js
Resource
win7-20230831-en
Behavioral task
behavioral13
Sample
bridge.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral14
Sample
c_cpp.js
Resource
win7-20230831-en
Behavioral task
behavioral15
Sample
c_cpp.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral16
Sample
csharp.js
Resource
win7-20230831-en
Behavioral task
behavioral17
Sample
csharp.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral18
Sample
css.js
Resource
win7-20230831-en
Behavioral task
behavioral19
Sample
css.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral20
Sample
dom.js
Resource
win7-20230831-en
Behavioral task
behavioral21
Sample
dom.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral22
Sample
editor.html
Resource
win7-20230831-en
Behavioral task
behavioral23
Sample
editor.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral24
Sample
editor.js
Resource
win7-20230831-en
Behavioral task
behavioral25
Sample
editor.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral26
Sample
es5-shim.js
Resource
win7-20230831-en
Behavioral task
behavioral27
Sample
es5-shim.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral28
Sample
es_privacy_content.html
Resource
win7-20230831-en
Behavioral task
behavioral29
Sample
es_privacy_content.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral30
Sample
es_privacy_content_en.html
Resource
win7-20230831-en
Behavioral task
behavioral31
Sample
es_privacy_content_en.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral32
Sample
es_privacy_content_zh.html
Resource
win7-20230831-en
General
-
Target
277e4e17c56306ab477fa1f53e092858412fa5d33ec754fdbf7864ec6b20ed03.apk
-
Size
29.0MB
-
MD5
f1e9f97abc3f92c8a6f86f32626eec40
-
SHA1
2febb96a7df38cd8950530f8b947766f22d69c95
-
SHA256
d00d35bc2bd07e9d6c8cb402b6c139b59798cea11dee80987aaa49575af60a62
-
SHA512
b34a59f873541ab791d8197d0c8cb5fec1262339d4bc5fdbdf1a54667440b1dc2156028ef17abbd93e053f199c96d8f1182c5747a3a31519558feca881ba56b0
-
SSDEEP
786432:RsOfyluqL6xJfkWqimfK42YtIvYWl8qZwrulR4u8:GOfyluqYJszimS42YtIwW9z8
Malware Config
Signatures
-
Checks known Qemu files. 3 IoCs
Checks for known Qemu files that exist on Android virtual device images.
ioc Process /system/lib/libc_malloc_debug_qemu.so com.estrongs.android.pop /sys/qemu_trace com.estrongs.android.pop /system/bin/qemu-props com.estrongs.android.pop -
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.estrongs.android.pop /dev/qemu_pipe com.estrongs.android.pop -
Reads information about phone network operator.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
30B
MD5c207d806d2a4251a6f57eb0c511701d1
SHA192fc84d1f99f1e1c8ee0097fdce5f0eed7994d70
SHA256d87e3864ac2d3856a305ba4e0b1486e70ed0bbe85eda39d6101a30a9ba90f52c
SHA5121b45db86e3fef3d5ff1d38b50819660f2d29ccc7cacd31edf49e9ec118e16609d25b69216dae63806dd20d61e2c6e39e4609a520a1161b21b54bd22e48207b83
-
Filesize
243B
MD5c2277946a0acbd3753b1f907c37e61b9
SHA1742d806eabfd2366850cacc808a2d5b85a6cacfe
SHA256aec6cc7f546be38c26393caae04e9e3e7d1b697bb7a1fd3cc8d69fc0264dbb78
SHA51248a69400e345d99f23cb8cc52e3df474ae46deee480824fcafa997cd1e3d8d7d709a73e1e1cb4ae46551962f3fe66ecfed514c40f20388c233128d4d16e8fbc2
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD52a7ca8970c02108b779bf1e3502101f9
SHA145d91360d72ec9a393aed524bfbc2369e03c824f
SHA256a9ed0d99cea13226625a3e1e764024fe6d3bf518b5ee0a99959d2ebc8c3706a0
SHA51222c9f5ae72eb2c970e60f483cf1481977e9733e4245f524d3f2201693b0742c18aeb0aa1b2471ba40840494a6fcc5989696478d165a4e38477ba83e670c54493
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD59c7d8a12e347df5c1be6f7209d1a17f9
SHA12f0f13b8197c8822591962d59d0673aaddc89249
SHA256eba546dcefa261f4f13ed02677afbb5cc2d4169a1094fcb7127f7f9c4080f6ca
SHA5121f7a4f8cbcb92e81409463017c8e822232b811b85c1e1a475f043d5b2ebe227fb1695a7d5fff58524f8cdebdc09c4dca4727e11bdcd426c57a6c25f28c547df7
-
Filesize
88KB
MD53827e8a288b0adcbbf4234bb76123c4a
SHA1740933992a29d194f0bf38d0a4b6ac4b79cc8550
SHA25656fa086427544cfc0aa393a8e99cd1b7e05dd98dbfc9c00225c8b8d7812d1614
SHA512b5231c492fd7d22403894be19f08a1e1c6624a27a994679bdddf58ac35100103a14fc94021cc37ceff28002fe00d7590f20faa89c449e7f4dffbb309882de728
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD53ec64ed4c44e7102d8b6e13119089cb1
SHA15f608eb28d2268d9406bdee3d5ca722f8a7e593c
SHA256f05b7b9de8c2b78b11e4fb8bcc2dbaacbd5cc66fe89a5e5a9384e6ecf6553abf
SHA5126b447bf335997df7cb5dff84738468020e3ccb96715ff7f7dc06a4d4b51e14503d12fdf070147fe4198425cf5dd15186e8b2a7581c85b0627f759eb9b7504b6f
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
273KB
MD569a911e966be6814d1e70d2d7a611da3
SHA1a1cd150a5ae75c9a5022df603094fea8ab00cb40
SHA2564dd318ce7e6da12bccd99ac1a8e832ce97e87f2c0ba63ce98ad984c2a3bd3dd4
SHA5120e1460d53f5eaeb52578354b6339220a6fddf8c993579f89cb7e5ac75abaf9eb9e309555d4974d885fd6ad981049d239fbfbb174e462b5ec20981ed67b67b838
-
Filesize
20KB
MD50cc56c0ab1fb80270cf08b9c32285865
SHA1825dc01f9ca4798a666603df048e192fc2fce720
SHA2567ceda035c3a38d8c675bdb33eef78cb6f7ce806615fec3a9663b61bdd0cb67b6
SHA51251f1e658a8c68a42423cd9dda44e7a1b4529e17753b133b23dc8eafd511178d74d4f16e2ad3cd445ea32d569bd80c1b866b76e1c8684936e95cc33c3d741a2f5
-
Filesize
20KB
MD58968d187b84ed0bef0185baeee3495f7
SHA1e4fcf886ab2d6f1f9db8b1cb012eaafd15413a71
SHA256630b8eb25cf027faa2e118ab821831fc61c43d36c2679124c593a1229116fd03
SHA5120ee7fb568eb21a622a9c5ee444692fa91b59d1da56e31f209895a396c97195fb7c16099329cd2d859efd061574416733c1fe383c326cb7a5abd66423e7479988
-
Filesize
16KB
MD5ead18384ee7ba2d4445074c63e50f7f3
SHA1565c56475a2fe6cb7b6f0a115ef6d2813c161db1
SHA2564812284235876d93b1310554eeae3429a1114f0aec5164ab24e77e6e40ea1f75
SHA512c75609f5647a261e7515ad8864b88e7393013115538e32097c7104be5389dd54d1144f89e7cd55015fe325fe6c9c8b46ce8776c026cd579e2b76843694dfa98a
-
Filesize
16KB
MD5ead18384ee7ba2d4445074c63e50f7f3
SHA1565c56475a2fe6cb7b6f0a115ef6d2813c161db1
SHA2564812284235876d93b1310554eeae3429a1114f0aec5164ab24e77e6e40ea1f75
SHA512c75609f5647a261e7515ad8864b88e7393013115538e32097c7104be5389dd54d1144f89e7cd55015fe325fe6c9c8b46ce8776c026cd579e2b76843694dfa98a
-
Filesize
16KB
MD5ead18384ee7ba2d4445074c63e50f7f3
SHA1565c56475a2fe6cb7b6f0a115ef6d2813c161db1
SHA2564812284235876d93b1310554eeae3429a1114f0aec5164ab24e77e6e40ea1f75
SHA512c75609f5647a261e7515ad8864b88e7393013115538e32097c7104be5389dd54d1144f89e7cd55015fe325fe6c9c8b46ce8776c026cd579e2b76843694dfa98a
-
Filesize
20KB
MD5adc44f0a038bb57bf160f5caf6be4f7d
SHA1f07b7b987398dc26b2b64600f0f4864ca3b755ca
SHA256e8a6564a1e13232b31e2f14ddbbaff11263b88decc157cfaddf8bffbd74ec7d1
SHA512fcff9bafa086a5e77c0d2f6d45bd4e6077a920c09c27da7a6e59509273a039f0f2cd64b6a915c2bf259c3f64171bee381b6651d11e33d411243989b328c071be
-
Filesize
512B
MD507807c2364742f3663fa14e37c4d7488
SHA1d98e419563ff022708ad1506910e9f552bf396d1
SHA256dd104bff22773c441d62b25edc643a4d7e5076ee7f919aca1b641bc5e97d6d88
SHA512283bf22999cd08896a9077005d3617afb80b7459bd6eeb036bf9d787e4764bbc71043e753982d7db4aa44be846776a4853d0ab5eaddabcf22c06382395dcfbff
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
32KB
MD536bfe833a2af7f092516c5c427ae8804
SHA1380b8eebee8a8a3ac77fd2d26ddd6ce64fada44b
SHA2560fe5985ff8c512f9773817a61927cc09eb69f0b5b266b941860dfc47509bc930
SHA512e4d29c00364c68ca437bd0c9ef1cf1d4ef335366bbea8b3040d284a848807eb4eabcac74f4d5286c724b578c932c246223f23fd543efb5073db8d6070fef28dd
-
Filesize
8KB
MD5d0174f2c023c66744943b185bb18fc07
SHA1026fd61ae49d20add02c52eb72e7f0f2c367f179
SHA25642204e405527ac037513d4cce6198e0f681fd18fba59eaa3930c58b9e43acfad
SHA512cd7de8444a5ae22484a6456dc7dbbfefaa7feda6ec29eed448d8f19bf626e8ac75af192fc561e76d3d36ae08fd16f1d1b6f4a4b140c30eb8a0dfac76847c2211
-
Filesize
4KB
MD56728f6f18f47b2f06794481e9a2cc814
SHA10fb2f0e0b9e104b96eed29fc834b3adfd1838fe6
SHA256bc6bb23b349b794ed363b572e44d2e043bd155467e026b204b50c4dfa0322304
SHA512634a01b8e9f5fca9606e2644ba6087cdd74bd784ad7c302394586aaff9b802a0a3defb1f4cc6942aae54b2b024e6da072ca8d2d74bb7f00e8d38fb3eb5a996eb
-
Filesize
4KB
MD534cb07106c87a97964f35a44b8747b5a
SHA114a901de8585df4a6d8d38b6100df34be7740622
SHA2565e5c6dd370e576ff2a37bf8261bd3dd6171ea23d730a4541211ab8d7ed86a55c
SHA51291094ad8c22632a0a4ef2c940111cbe2fcff30bafc4d8d5435f736e7895a7f1f7e98ac6a1c9595976e4dab080bc545e0bba0366b8eed7c3e2136a62ec04608bc
-
Filesize
4KB
MD51427960b440e739d1b8198078ef05b35
SHA1ba5d1954c5da035f043eabdb5ae805cf2fe09246
SHA2563f8d51e4a04c4cd3c6d119cace6fa4c80b34914a2bb373e6cef05599dfcbb229
SHA512270e5e1b3d52ef68dac006c2f458c8810053212670ba779b0b522c941eaff921e8478207c05900ee617d5cf7fbb6ee46cb227cb02855dd629159136a09bc821b
-
Filesize
8KB
MD599ef77b5d3062549236f1cf8226cc388
SHA1698f90ebada5e58d35903b14e6f58f0f705aebb8
SHA25619255ac21e464a18cd2c2607592149568bd035977727ba167729d598624d51fe
SHA512280191ceb63eb020d00a5bf0af1d7c3580d9ee40d228b665665a995d6b66155d6dbcf4733739ca79d720e2b7663fc46d0e17db43108f5150f68f10268f0ab563
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5830442793708906f998ccacc321ce8b5
SHA1f866f9a3e3e3f30d7195e46ce328cc086d97eeca
SHA2565f5faa8ece1a5cb3844b184172b687c0d428420bae8bc886093984eb39db8629
SHA512006a22faa3b4c37d122afd4d4e248652b404675eacd50a025cde84bca6facd3757192b79ec0501fbb219df0314ca8d964b00cc255e7e477e750802af4a6c42a2
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
289KB
MD5da0d5faa222318f9d6c50158f21ab087
SHA120862617493fd15cdcd36c436975f4294d85ddc1
SHA2567f4006628ba79b8f49c9ec380fae28f8fea00419ff1b8e63cbcd138c4502844d
SHA51229350512a00f3bf6d3f7da5b7524a7ec9216d33b542db1894523d5b9f80faf5e1c78a9298ed61efeaa814f964f766f6dcf70f53a0eeb0d17836a3b0bd92d8e90
-
Filesize
303B
MD583a8519d90a58ef0887d991fc43b25fa
SHA1aa8d82cd0b90524823a4bbf4c465dd72e28c688b
SHA256a2f89be1dabd3cd98475506e8ef273e93097ee5178e6ce06a695f48ae51522ab
SHA51252a5434d3ff7b71d52d689c66252c498c8f2c764cbc404b2fdd873603370c35339d50ec58c9d138d68dfe7c00fe412557241d96c1a3fc640b8a13af8f50f008c
-
Filesize
162B
MD5a2aec69885275b5a78e10c01320d1e0c
SHA116a924c432fe76d83e4f4b550d9e726a87d5b709
SHA25688a6d1eb8374e36e7a1db7ea8a92cd9865bc69a4688fe99cacadfb352aed85c4
SHA512d3896bfad9d4c4b2423417d02e10a9dc9b15c0b6742520717beb878366d5a6d4576abe2931bdba23b03f30bf694395c00c6bd0d2a010e1eca62d549877afe859
-
Filesize
56B
MD58f5dc003b87b2ca4a422339bcce9c80b
SHA1c50f3dcdae313053a2bb1015073e993afda649e6
SHA2569df9c8df5997082db4e5e04f69407bd9ae54977bedad5b0f81397a7d45d84bca
SHA5126a5835e646c58aad236e4737ec5edb417418f474539582d4b27b77c75dd00163db09fd95142122a17d1e16a012e2eb0b997175c4b35403dee62892f6a6f287f5