Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2261342s -
max time network
160s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
19/12/2023, 23:47
Static task
static1
Behavioral task
behavioral1
Sample
6e683a41bd2b206bd5a820ea6bf60a6f3c279b23c719e7a796af8700a0cd94b9.apk
Resource
android-x86-arm-20231215-en
General
-
Target
6e683a41bd2b206bd5a820ea6bf60a6f3c279b23c719e7a796af8700a0cd94b9.apk
-
Size
12.4MB
-
MD5
728f5d56276ca08e5b6277d33fec368a
-
SHA1
bbfbb41ea90a60f9f3bf788184aac17d25edb1bb
-
SHA256
6e683a41bd2b206bd5a820ea6bf60a6f3c279b23c719e7a796af8700a0cd94b9
-
SHA512
01ca55052cafbdb87b24159b0f925591998a098b2e35446ae935c832f7588eb32ec11b863bd7935381a829e3ce632dfd9e19940cf0eaa4469d2af9118c56d856
-
SSDEEP
196608:TkdBVcCUwiJbPUwKkNlNIC2URVqsncNl3QiDtPSWPpEoQFFzL7n9wMEUcl8:Ad7iJbPUmLIfURV/nC7ZPAr97EUK8
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
description ioc Process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.fangdd.mobile.fddhouseownersell -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.fangdd.mobile.fddhouseownersell:pushservice -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.fangdd.mobile.fddhouseownersell Framework API call javax.crypto.Cipher.doFinal com.fangdd.mobile.fddhouseownersell:pushservice
Processes
-
com.fangdd.mobile.fddhouseownersell1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4241 -
/system/bin/sh -c getprop ro.board.platform2⤵PID:4305
-
-
getprop ro.board.platform2⤵PID:4305
-
-
/system/bin/sh -c type su2⤵PID:4361
-
-
com.fangdd.mobile.fddhouseownersell:pushservice1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4294 -
/system/bin/sh -c type su2⤵PID:4428
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5029078a45e72e0ce12a6537aa68db599
SHA12cd0c7d85f94110bc0e7b30fcd4f4bf62fbabf4e
SHA256cc2b0c02fcae111c261474bf04265017c768e7909187bb45fadcac051941cb60
SHA51299b2f717cae621eb9ba2961b9cc24cd9cec3644f9a16d27f4d1cf3ece7d0682425814ef9d3f3c1231e21310815066d236d2037eeec283345af1e7db429fbd62b
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
56KB
MD55d8a03aae5b17cc9399e4ec69c6ad07d
SHA19c07ff37de6912d2b58c322fd86f12c33029ffce
SHA256ac787127f081e4ff20859babee671311e81721f79f94aa4d335e48b85e8a24de
SHA5126b437792f549dc42ebba82e53afc5aa5e6c96b71a2ddd3a6b71a50ac3205b48fff2bb8f2944897c82dc5626606ebeb2d6e3d6df851a5b3dc09a95fe38179da20
-
Filesize
525KB
MD59f4e9951995a017a9f96db441b855f04
SHA1f54882ac1a13cac2e4191ee0da4e4d67399c68fa
SHA256c6dffb5f55e87791e94b4b33c94324b0c52314978caf90c7dd9d80a8bb874c49
SHA512a9f96cc803f2ef177f704c48ef17d614e5f0341a5995bb51de98fbc90c9063a4ebdb548cdccc322c6052a2baee143a32c902acbe55348c792ee5c06560f751d6
-
Filesize
512B
MD5969dd347c78c205de34a4f6b63a1aa3d
SHA128480762ed6cc2c6ac92eea3802860dbd2980ed1
SHA256f9929ee9d664ecb6d42d9afcac3d1b8ee7db700afb83f4778605de3e2afe7f95
SHA512126b54b6bfbd141d954d65ecda46d2ad72cc9b1d31736eb9b78f3a41f5c66c41c0e31e5affd6bd56b87392c260fa076d01b5a59608112fd03bcd047b71f1d679
-
Filesize
80KB
MD55f50cbb099a06d665e395850101b0d94
SHA136912dd9cc0773f07c5cf67c32b5d89237961837
SHA256a7250ed2fc0c75f199782379889414099c3b2fe5aed884b8892564f460165387
SHA512e40760a89327be901e73000b38d4fd8113e360310d931d34346e22b498302e1d87d71a2275c26c4f7c20dbf7928ba099bf8c441c401cfdebdab082b8251f7abe
-
Filesize
625B
MD55a7aecef8e18e6aaec6e5c88095321b0
SHA170a316619feaa4e8744b432e6aa7b5b30ba4dbe8
SHA25647df47b6cffb310090768dcc47000d0f42151256747f424e6c4b02186663cd1f
SHA512e412b7cfcd8371b9ec6a0af838c7f6865f41ba69c62d7b94cd6d0f454519032bce174c3e467cea94680d6ee017ca8e2ee48b4438a9706b562d64d29426fa6342
-
Filesize
162B
MD5316932d3ccc53e27047500b41e2bbd97
SHA1f40189f02320069ba45aef83bd8aa3f1d5b0407d
SHA2566c9990783493f3299d8987b3e67e5ef3629b66879386a84f040ceaafbc4ca3aa
SHA512f971a1b0415643fc9fe088c9b28243324cbb27b15749376ec1412d6988534073d55abae15efec23ba2ce250113ba07f65cb201daafb7283d0f0c9fed0ca74176
-
Filesize
525KB
MD50357e8edde36315c0e0a4f5385de625f
SHA12e6c6f15010e88dac5078f34e31a8ddf5e032f2f
SHA25644764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d
SHA512497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93
-
Filesize
248KB
MD546a9f9a5221dbe4ff71bfcd2ee045c5c
SHA1915cb3bc2f0096dede38afc1cd7f09c8782360a9
SHA256ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9
SHA512185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2
-
Filesize
166KB
MD53f1348cd6165c9a66a9892565c917ca1
SHA196f0c939438c494cf3fd89246d458e92c0c7203b
SHA2565fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a
SHA512405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023
-
Filesize
4KB
MD56a86f30539dfc9332cd235fc48fcb62c
SHA15c202003f6346edb85175b8df7c460793f5512c6
SHA25634bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f
SHA512f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235
-
Filesize
69KB
MD54e9eab735928758b860e48b2f9befd7b
SHA17223dfdd00f8059d3b83c28c6f7d78d2dcaa0569
SHA2561a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4
SHA512c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599
-
Filesize
10KB
MD5c16f5ca1517683c46e02a6b71aab3c00
SHA12d09a048d1b8d556d89d4d723947e9e234b5e59b
SHA25613d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9
SHA512a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b
-
Filesize
1KB
MD5883c30365d5d377966125dd0c079debd
SHA1d296ec1e3f4badb6e3e6166c1473fb55d4265761
SHA25650112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa
SHA51200b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f
-
Filesize
86B
MD5298924848d2517a508f43ff0cc51bd3b
SHA1b9fcde7b86653ead6deb57280a6049cf87745710
SHA2560b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b
SHA51263b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342
-
Filesize
69KB
MD565685a117c72fe8fbf5a92b07073c99e
SHA1b115b527f74e4c291edcaab19b316a446aca8f5b
SHA25619bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8
SHA512e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253
-
Filesize
10KB
MD5cc3fad9057e0940ad4d4c7ad27922023
SHA1403cbbcd7b819733b5caf49ed2a58d654441e99d
SHA256f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864
SHA512ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21
-
Filesize
1KB
MD51c6abcbbd253448057930ad1cc59ac75
SHA1a5845d1c4bc87b8b4785b456d76edcb8309eda4e
SHA256a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136
SHA51271aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631
-
Filesize
127B
MD5d54b7b380a5ff46c78283013a07d8e0f
SHA1f697c5f7028ba2679a96d6bc5291c38ff96d7982
SHA256c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c
SHA512ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4
-
Filesize
310B
MD5b7efa8e7db71da28d7ad00eb9628d970
SHA156c9d3a0a20dc0a32aa09ffad89456e03cfec37f
SHA256ed3dfbb67b3adecb2f85a3115e4689460a628ceee60ebebd0055e2112bb69bb2
SHA512fc291a21a84c5f8f12ecf4fb6af24efae08e4efe18aacdabf140319342f5d5fc926b8807e06817797f2dc2c648c0b055bc2143bd0e553373bfe593db005c6615
-
Filesize
6B
MD58e31aa8d6b61e8b044ac3346e87098d6
SHA170e4050667039f00eb5231bd731b9f3cb5daf00b
SHA256d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b
SHA5122935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
89B
MD54b03a2665f99b01b20f54128bbeb1838
SHA18860bb256bf2272603bcbc0ad5b565d84e2d277c
SHA256d7e9b3f6ec12a37ffcf98a320e1afd08e0ccc378e0e16ff93b93efe50f339c40
SHA512c3ab5e08513312296f534d7415f179476c960878f3b6d239cdcab5fb1ec47671cf66d9ba3af36857742551852b8c62b33143fd9393255bd3c7b2a929ad9c7b34