Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7277e4e17c5...03.apk
android-9-x86
7277e4e17c5...03.apk
android-11-x64
7RainbowBridge.js
windows7-x64
1RainbowBridge.js
windows10-2004-x64
1ace.js
windows7-x64
1ace.js
windows10-2004-x64
1app_config.js
windows7-x64
1app_config.js
windows10-2004-x64
1bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
bridge.js
windows7-x64
1bridge.js
windows10-2004-x64
1c_cpp.js
windows7-x64
1c_cpp.js
windows10-2004-x64
1csharp.js
windows7-x64
1csharp.js
windows10-2004-x64
1css.js
windows7-x64
1css.js
windows10-2004-x64
1dom.js
windows7-x64
1dom.js
windows10-2004-x64
1editor.html
windows7-x64
1editor.html
windows10-2004-x64
1editor.js
windows7-x64
1editor.js
windows10-2004-x64
1es5-shim.js
windows7-x64
1es5-shim.js
windows10-2004-x64
1es_privacy...t.html
windows7-x64
1es_privacy...t.html
windows10-2004-x64
1es_privacy...n.html
windows7-x64
1es_privacy...n.html
windows10-2004-x64
1es_privacy...h.html
windows7-x64
1Analysis
-
max time kernel
221853s -
max time network
165s -
platform
android_x64 -
resource
android-x64-arm64-20230831-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system -
submitted
07/10/2023, 23:51
Static task
static1
Behavioral task
behavioral1
Sample
277e4e17c56306ab477fa1f53e092858412fa5d33ec754fdbf7864ec6b20ed03.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
277e4e17c56306ab477fa1f53e092858412fa5d33ec754fdbf7864ec6b20ed03.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral3
Sample
RainbowBridge.js
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
RainbowBridge.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
ace.js
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
ace.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
app_config.js
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
app_config.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
bdxadsdk.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral10
Sample
bdxadsdk.apk
Resource
android-x64-20230831-en
Behavioral task
behavioral11
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral12
Sample
bridge.js
Resource
win7-20230831-en
Behavioral task
behavioral13
Sample
bridge.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral14
Sample
c_cpp.js
Resource
win7-20230831-en
Behavioral task
behavioral15
Sample
c_cpp.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral16
Sample
csharp.js
Resource
win7-20230831-en
Behavioral task
behavioral17
Sample
csharp.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral18
Sample
css.js
Resource
win7-20230831-en
Behavioral task
behavioral19
Sample
css.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral20
Sample
dom.js
Resource
win7-20230831-en
Behavioral task
behavioral21
Sample
dom.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral22
Sample
editor.html
Resource
win7-20230831-en
Behavioral task
behavioral23
Sample
editor.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral24
Sample
editor.js
Resource
win7-20230831-en
Behavioral task
behavioral25
Sample
editor.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral26
Sample
es5-shim.js
Resource
win7-20230831-en
Behavioral task
behavioral27
Sample
es5-shim.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral28
Sample
es_privacy_content.html
Resource
win7-20230831-en
Behavioral task
behavioral29
Sample
es_privacy_content.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral30
Sample
es_privacy_content_en.html
Resource
win7-20230831-en
Behavioral task
behavioral31
Sample
es_privacy_content_en.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral32
Sample
es_privacy_content_zh.html
Resource
win7-20230831-en
General
-
Target
277e4e17c56306ab477fa1f53e092858412fa5d33ec754fdbf7864ec6b20ed03.apk
-
Size
29.0MB
-
MD5
f1e9f97abc3f92c8a6f86f32626eec40
-
SHA1
2febb96a7df38cd8950530f8b947766f22d69c95
-
SHA256
d00d35bc2bd07e9d6c8cb402b6c139b59798cea11dee80987aaa49575af60a62
-
SHA512
b34a59f873541ab791d8197d0c8cb5fec1262339d4bc5fdbdf1a54667440b1dc2156028ef17abbd93e053f199c96d8f1182c5747a3a31519558feca881ba56b0
-
SSDEEP
786432:RsOfyluqL6xJfkWqimfK42YtIvYWl8qZwrulR4u8:GOfyluqYJszimS42YtIwW9z8
Malware Config
Signatures
-
Checks known Qemu files. 3 IoCs
Checks for known Qemu files that exist on Android virtual device images.
ioc Process /system/lib/libc_malloc_debug_qemu.so com.estrongs.android.pop /sys/qemu_trace com.estrongs.android.pop /system/bin/qemu-props com.estrongs.android.pop -
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.estrongs.android.pop /dev/qemu_pipe com.estrongs.android.pop -
Reads information about phone network operator.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
31B
MD5843a4616267622ed809f58f255fe00e5
SHA172424d2243789a4fe0869f8fbdd5c7bd31787a3a
SHA25616dc9c950c778f9e858045f0adfdca21dcbe3965f86e893a09a2a3d36f6365e6
SHA512555beb12ad627f853c9ba38c0f859b0f8bc4a0a3adc53d00e32428fcc660b576d88c3ccb542a880a8b2ca477b5e9c40a3284efa64b09a7d3658823476ffe9df5
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
237B
MD5ba1de9a3fed459647a459c59fd3bd6aa
SHA19b8bc4ebabf37d55231988dd983d63adfc69bd98
SHA256082d4ac597cb4d6d06870ef7cdeda88addfa07a3c6295a8fd4e9964abc5aa7dc
SHA512f08d2180dc159d7dd78a49841fd264058b822ced9c31f9f3acef18ea7c0ee768bdc836dd48ea627838957393a63c5ab8f50e0709e7bfc6d9c645d4a9cd473714
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5efb8e24d62fd75e23cad4863889a8a9f
SHA1d910d65358ed560dda1c7c4bbf3031d278c8d3dd
SHA2568988fa3f396571ab848fcae09fbf2ddaa7d978cfb999c97a3041450ed3860a70
SHA512fd2d7fd6eda291cab65a32470f4673ef63210dcafddb0fd28f065e66dab2f95f01adea59055502da44ac096af63133ddac070e1c141d7243d3f1601797f9a683
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
88KB
MD50e517178477f93f258509a38b8b57a72
SHA198b27e6e624fa0b2ac9ed2ec72bcd26b48311e31
SHA256a78dc50188f632c6a883dc3b9197997db69acc140141a6b34eafc1f3599a3f45
SHA51225434f701d641519b3ec68769e4967a2f527b163d473e28f97db9f0c2fb012f2f2992638b36129a2c3321ef4cb0005e4e1db6dd735f66f0e5890084f99580e05
-
Filesize
16KB
MD56c8b522152f2dea23a6b6d721bde7abe
SHA10d3bdadc0e4b3cd055a852a5226748976ef7624b
SHA256cc6b53b41d6871aa2a8b7d01413c516e3cc3d04c60b0bbd84949a46506d73041
SHA512fe41ae114ab8caf1c8f827d2c902adc7a0f49002896f4a4391c007bf5684b85e3ae504d445be82eed4aad495e2ac45d8318651fbfbdc2fc23987fcf6758d23b5
-
Filesize
88KB
MD5806db7c2eba3f1b52be30e83b16649c4
SHA1b08cf0fa2deae4010ac38268a71e3a04833a41d5
SHA2564e996ddfc8d3f019d2bbe497523459ab88098468afa0cd03bfe01afe6e29f391
SHA512c1408d92dce0866c6c70cec076acaa1b71fa33a3ef1323b9d1bc7a8bbda507210cc380f8115b095045497a46f99446b6c566b3333b544b1e56dc016d44992276
-
Filesize
512B
MD5a4b6ba02b3f64e06e24ac6d217c2dfbb
SHA130b5de2dda1a3e104705ea93ae06f180a949d92c
SHA25634f7ddd5bc88a0ff15fa8b161a33f22ddf2cd7e83d014bb37fc7d47f68d7512c
SHA5124516a2279ae8b26621c48154ede6ab2d28e720cf868ac060aeef39b7ef9104fc7737ffe5aa33c19711afac96054140d1f268c3b38e32f60a0211a38fa3863c50
-
Filesize
8KB
MD55f7dcb370554f050d25a715d686657fb
SHA1132f2320808b42ccf50fa5a2fde9ef36d5d70bf0
SHA25656c91407b3535108ea88be1b3a190d85a64f2b36dd775cbde3de54bc1e5cb74a
SHA512373746d954ad53b273e640d29bf43d05ce8fc955f9cd2eb01bbd2d10b032b9ebff9803ecadae264e72f211aa2edbdff0516136b26e0c33ef8f480f57f5b54a9c
-
Filesize
8KB
MD5986145473edd9b15750216d0587c6d5e
SHA1152af0dc7a57385e329987c706c8865539754088
SHA2569368ca0d0eb228877e0ef187c884623ddcaf95e145ccbece9e6e751b09b92a6c
SHA51232f1ab89d437d92578f8a87b6981b90158b2d8407e7d072038910a6343dc38f00ecc936df472c9baaa0b85e3a454b4880f79100d56f0a84c9e90cf1853fef206
-
Filesize
8KB
MD52ce00cba9f9334b1d2a35dcbc3117c9e
SHA16e27859ec69577ddde80b7d23af7b0ab222d0bc9
SHA256dae54a1e9fc0cb0fe793ed7d7f949c20b5ee382123d3d4b9e04894acebd6940d
SHA51236202ff7fdc85d9363630a8b96104a550dbf5aee44c69d62e7027d161d38c8b0c4e10c408b1750f1162c78a31c0742243b6052427c47b6a5ebd9d24edbc472b5
-
Filesize
8KB
MD545bc30aa0ffc14db0e2188d41a06f1da
SHA147863c2732d108d153d780aea436a1ee6cf754c7
SHA2564e9a9a29da30bd625c6511a90823565a0ce723d83d533f083f6fe8634b4af59f
SHA5122cd3840f3b77a87eb1a89035eac398ab3a9b535c2c6769162eb32de1a23ccb4fc9fc9af5bec106b15300c277a29e2cc986af761b3cb8ab025109717550d0be4e
-
Filesize
48KB
MD5846829b93342a9e9a724f23068a5966f
SHA1529e09c5a73c02b831ee0eeb0d726a955ced48e1
SHA256892d9c2460e69b91aed9e391a2f1201d545c456686b90643cf96d591741f42c8
SHA512bec11a0b69f53674f932f9eb261d8c4e409a3e3ef450301cf58a019b0642d53144c8790275617297938d6f944c15a5719de7e7e0ab7d9cd297421e77ad138a5f
-
Filesize
20KB
MD54baddc1d411bb22002e4e299a15e6eda
SHA1299d9c01a03d2ae96499fa68fa005cb6f9dac7f8
SHA2565b9b667cfc6f2e4ae3239b794bc717360f32fde7c6f8e08699ef9b21b9e801ed
SHA512c32749066269a62994759c19cc0d18a0487c0da53f1aeb78fc83488a5bc57019fe5b4b16e998e06bfc14741af7114e630e6027ecad0e5283bb5b3c14dd8ff591
-
Filesize
20KB
MD567b3f1dd5236b39b3d3fbe8f8242a224
SHA1ef0a448a0487a54a2439dd6580b1efdf4ebe4eb7
SHA256207b799b27f04087377faeb8f3e8e272d99cd9b30ff2611d88817762ba5e3f17
SHA51291fbf6523d3d66466fbeb21ae536cae22718df8bc7f4d843f669e419cd7a3879b85263513279fc458d377f6830c8d57c07734f086e7019c0701d2e38baa10b24
-
Filesize
20KB
MD5ae4ae92b4d250fa1396875ab1bc4ac38
SHA12bdc635e48c723c04067d4a5475c443e07e5341d
SHA256cabce979ea0215afe9db6aa3acc815c215482e56391425748e5e7d99230f1224
SHA512e26d397fd670b2b3fc7c7f747e6643b9f221db88b1a530e6e1256918809c409c129912e61c319242d34db6ebdeaa96892776f752c4f915b0e4a5fd632689ed55
-
Filesize
512B
MD5d1f6946197c8f96b9e9ca3ba37cebdc9
SHA10533a060f66beeef30fadbd73dd78f20ff66c67c
SHA256ef6ba0a31c1a4769f5e7fae3e035fa3b1c5dc23f8bd61ff6206abb9eeba947fe
SHA5122a6a10d6d149f621fca58c5ea275374fdf4655365e6446bf5eb1292b4ff4dba17ae8f9b6c2888902f235d800c79fad4ababb8e40198bdf1878fc30db2565820a
-
Filesize
8KB
MD574c79f2766e6642a19225c724e6769f7
SHA189526274f65c91e011ccf8030a9dd796de98205e
SHA2560ca3016d2b2492cb8b2b750f4790c9f5de44b41bdcc223b37ec0ab59902c9e13
SHA5123c29d3f15f19ed1c12e1d195b8a92650ec74a8d426508c7bbea91fec062927219516def11ebce27b15497d69d17f328129657c659496c94b9e28a2feb956421a
-
Filesize
8KB
MD547938cb36191673842eeafa0f5a44f1a
SHA1840b2a4e0c6892345c3e0b15fb6ec63cdf904c7e
SHA2567c231ace85c4e20df0bed18ac15b5260180abedf10986f379d8a08b61e797a67
SHA512aea6c3f67306132b025f91750c7b4a3d4fb5d81be8ca1662c9546ea219ea41964cd5111efcb794e1b65a19bba12fea1221f260a95297936d82d9b9985671578e
-
Filesize
12KB
MD56715614aa62567978dcfd5a1fa892904
SHA1d0e086549042c9422e4d7cf860cfc02f827e779f
SHA256e29bdf3185fae198b79a16667dcfd17a3a4971260eef7e60e98a58f78505cdb4
SHA512a3c0d3979b85a7cd7f3f5928b175e66c82ed83a22b2927e25f3a3a6992e84f705f34b38ece185c0872f6c86fef3dc868d69ff1ef84e5889c84bfab00abb162ff
-
Filesize
12KB
MD5261c7fb231350de2cb953ac7b377c916
SHA1dd2ea9aa8c3d29826727601e64ccaa24ccfebb8e
SHA256a61473d87f0f1ed163b9934e424e9a1aff184aa296b62551e7f3dfc809ecd1c1
SHA512e7f60626b567a1939f9de226e7c108db6c692c349eb19eaa213353ea5f80073c39f743c016ba4dc7ea1a655851ac804a5154a39e2f47cfbf3ef856464f5c128b
-
Filesize
108KB
MD546bae5e4497ae887667ab2bd22b79e96
SHA12b9f8c35e5e53c341e3438253882baf98dad5f8a
SHA2567451d77c6b158782a493b0da00585657d20d27b7798898be61b8125f3d4a7bfa
SHA5122e50b315281c38a795408815cd0e0d2fa4b7c3aeaedf70a092dd689c9ca64d716e2e59c85da991b6cf34e1dd01b85652a5f47375511c71a17659dedfee2bf5b7
-
Filesize
512B
MD5f982b6e8e352a5216d5ee9a890712097
SHA1ff374b958aa1bcee794d0575cb632cadb2d6209f
SHA2561eaa973d104495965e0a225fb87b1eec98119b19779a2025ae5930ebfc0f624f
SHA512895f36da78a2fb4ed80887469c5059672a6b4a560d6b5d5f55934f23ab460d67b7e977f44e88a5694429333523c599deab29fae78a3a0550969831966e808039
-
Filesize
8KB
MD553ddf3d06b40ae3a7d7ea4ced5235f7d
SHA1b0675757da1c05bed5182e2fc5f655ac40fbaa7f
SHA256af1163b3fd7affd09733a052be2865cf8bda4a67f967e4dd76886f4e21e5abe1
SHA5120aa1721b1bf80b2bc66d05ffdd9b97251f73fd8abf32fd6c621d02085306e55046d906eb15ef98b182ad3a8bf09d52df19428cd752d8d84530c4b559926111c2
-
Filesize
8KB
MD5330169c4aea659486a46e081f8391b88
SHA1becc6626fb5414f215eae9eb0f0415de28742a0c
SHA2560f2b1737fc07d04e5191fbbe1a87c8488fe04b83277f9e773c54dc709f9839b6
SHA512725e4abeba65edf1b54f011af2655262c2d1d58c568a592ffe24f8c910ade38029ccfef24c72adbc8eb8d94f3825a4fa88b9aa243bf6942b45835bc9a7de9385
-
Filesize
16KB
MD54d15ddd10f185ee07882f813db421213
SHA1f36648e6b59c404d17e7d38538a509b7ce3ac1cf
SHA256a918fe55b2701d3142736e34cd8312c2696f239728eb308c73f8f804a59c4bd1
SHA512eb8b4b3116bbe0ac3f6e2a68235fce03afe98ec9b801d46550123b9362edc8f0308f75b1c6a9370ad691b8f6b7455f71fd5216c154aaccb7d098a87e55000d5d
-
Filesize
16KB
MD5b64e8e767984f2cae09131c5348a5e52
SHA1ec1b2073a9a38d667082f16d4cf61f60c7446fac
SHA2562602c9c2b3d7ea9117abada256bcd855f48354aaf2f6fc36175fc873b62e493e
SHA512c20435609b6daf57b535f3fe54189a08b22dc873dd815b123a4a537547b8127c3729762d81ad19ac7fcaa0f8c4121793af8a84c3579820c48bb97968e96781f5
-
Filesize
24KB
MD53711d5d960cd53c6dcca99d03506945e
SHA15567999b6d67906b742e0a4c427151edd6dcbd0b
SHA25610688c71f15096afb2af5918de4ba4629f91994d0ed3a1bf42d96ad7cfcb5370
SHA512304171f8a26bd1ff7946391802e854a131295ec2dbcfcded8e7d1e60d1fc9d132c8844052fe6f29b6027d74e88b723e4c24efd180dab51f311e4d3d3bd73369a
-
/data/user/0/com.estrongs.android.pop/files/.envelope/z==1.2.0&&4.2.6.2.1_1696733890506_emNmZw== .log
Filesize303B
MD545e277c85d323297a907029d016b6f0c
SHA1af94c1b25b4d373fe5337d4c68413b68ef38070e
SHA256867be1b82700b43d7480acb5f983acccc4d1173ff4fe4bbd347cd6b74955939a
SHA51294106686dcf9518b19568876a71d512b1582c9df717e9e6ef88ac4593dfb3f4ce6fedb9dbae644a6106bd32106dda893744dd13cfd7abab644d48f243e697437
-
Filesize
162B
MD5fc7eed78a61bfa860af3c5d6c61c1015
SHA17230f9e501fff494061b44de51ecc4ba6dc80e1e
SHA2569fdfdfd14510919054b53f15cca9f67273c29605bc04b9ff2afabe5b0465123a
SHA51284e5730f65672242f3c77cf6978990eeff0a1d056e39becb205dc1fbbfc38ffbbe0e8aaedf478195b927583a40c5688fa7b9b729c2e60ae472ebba3c09b206ff
-
Filesize
56B
MD58f5dc003b87b2ca4a422339bcce9c80b
SHA1c50f3dcdae313053a2bb1015073e993afda649e6
SHA2569df9c8df5997082db4e5e04f69407bd9ae54977bedad5b0f81397a7d45d84bca
SHA5126a5835e646c58aad236e4737ec5edb417418f474539582d4b27b77c75dd00163db09fd95142122a17d1e16a012e2eb0b997175c4b35403dee62892f6a6f287f5