Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2356310s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
-
submitted
20/12/2023, 03:11
General
-
Target
7fc4b6ea5ab3025173e0b7c1863e505567d8b81e93817eef315e5fdcd5b0cdd2.apk
-
Size
19.0MB
-
MD5
f902b7b488a9323f6870ef97334d35cc
-
SHA1
a2f3ba138dcf4c93336e82d69ec0427f8863a94c
-
SHA256
7fc4b6ea5ab3025173e0b7c1863e505567d8b81e93817eef315e5fdcd5b0cdd2
-
SHA512
6041f88b12f970afd4a4f1a6a4c8c03c8d0d457233399b68cde315dbcbaa249e606f031cd869db07374b672d7b7c56d5427f3901291035e56830fface59f59bc
-
SSDEEP
393216:Qy+E/C1AM36L8q+uaKZis7WEcB2YCFtIS5l8GN/:Q3EoGL8q+unTM29FtIS5lH
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
-
Checks known Qemu files. 1 IoCs
Checks for known Qemu files that exist on Android virtual device images.
-
Checks known Qemu pipes. 1 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 2 IoCs
Processes
-
com.zuanzyouhuiquanw1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zuanzyouhuiquanw/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=146 --oat-fd=148 --oat-location=/data/user/0/com.zuanzyouhuiquanw/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zuanzyouhuiquanw/app_SGLib/libsgsecuritybody_312768000000.zip --output-vdex-fd=162 --oat-fd=163 --oat-location=/data/user/0/com.zuanzyouhuiquanw/app_SGLib/oat/x86/libsgsecuritybody_312768000000.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
-
com.zuanzyouhuiquanw:remote1⤵
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
507KB
MD5bec24c3968fd14fb7b61cac9e34e42cc
SHA1049a01508d829c284ff08e61c819e9c5b4c18b6c
SHA256783b491a29835cdf0f400e954b15bef25597f352c833092fcdb9016f34bce0d4
SHA512dba83f01291b4eec66af6074d85e7a680926dc1b19e3f9f520ff846f3845b6b53bd56b8b72374daeebd37133785b5416cea0754dad5378838f493bf9032fbf35
-
Filesize
169KB
MD5dc8ccd573300e869911b4cb9f456bf46
SHA1492abe5cc85dc00cd37aa09e1787f561bd556b8a
SHA256a15ff3c3bd74dce6e24400d9a02b2a44d0ab9153ef0d3e755dcabec784cdc1a2
SHA5122946eedc57b77697b7efb38b2097eca4e2c1a6242d8624a8b8e34ab7814cd8c4166984d0f324aa767b25f1d4dcfd9264b7ff70d298fc66a1f1159bc7d3173792
-
Filesize
512B
MD5e538887c37fd9b160d62ff3003894c9d
SHA1f32ff0ee13781fd9cd5d45e42e7f51d84684869c
SHA2560ba96a2b09aa3c996c5052d1b38fc699b54a68cdca2fa2f78785faf19ce8eed4
SHA512fa45a19138eff8b0fec6d5914eb807633dfe7f9e56945ca2280de78d901e27c2593ee1496baf966f600e7ef58d1bb2582d1773080bcfc2e3aae664e3374fb477
-
Filesize
32KB
MD5a4f06887a203042ac24cb921e0c8011e
SHA12f24424af3cc3705eb803d87e7616f6e6bff7ac5
SHA2564f21f809b7085d3249bcf9ca516bd52697f57767e2e0c2c39394105d17d4796b
SHA512d7669ddd5b01e1c87cc88508ab49a66a2b839b7d1256e1362535de39c8264d4c1faf65eed0967b8a2699dade21cee6bae2c929b454ef98eed6b5b6c67d285f48
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
20KB
MD57e729fc1dc8ba9ed84d0712f1815aa4e
SHA1ec013c79f7c27cc0d091e1774f8687bb19ebaccc
SHA2562bcb3d27c535ef0e80264471d0a69e7e4e28638a00d590041dd61661d0ebcf29
SHA51223334ce86d928feb1427dc7ec29fd9c610e4e2b7904745d22d85fd9326e23a44ec32cf55d40d9f15534280e927697a24bcf2f9b32d315ec75ef3910e4d56d0c1
-
Filesize
28KB
MD5badf54c527cab8c9d5da86df84b0f365
SHA1772b669e0333b08762d2b856a9cd322b10d7a0fb
SHA256fe8dc3e44942248c04e6b83e7285f674629ca17d5500778c60eb11ec5d01e9ac
SHA5127b59319c3cb42536e05efcab09fd81eff9ccc06d072897064b2c28d4e96ddca1b3c172c7074aebd7b82ed7a482f2a301631bb166c5e371d748403231d99b3600
-
Filesize
512B
MD58b6104d03da938d240f270686f601f38
SHA1f24cd3b8152794e2e8028012a3c5aeb3ddb491ad
SHA25621d34192bc8145f17c35ce43f595d8321e0e29bbae05fe619198dfeffacb7015
SHA512a80f91a6b9b59a138ecd379a5dd6fa3ee246a7a975bf88ad725a6200a188316c04a57358d3cd82f8c7abc7b6b48f28527424f5b4c4cc8168fbb973d9b9ba69a0
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
32KB
MD58c6dfd869ebec226220ce26f9171df39
SHA1a106b6f02eee1cf32c4f3de14bf40b5a4ef8a1fd
SHA2563f03f804ab47d373473cfc0267c22b508660d7f605dc197930bffbaab511b36a
SHA512dfd33ee9de505c5c97f454cc744003803f7d438cc62728515d52b7de8dae43969c275fb5449b8793385dc54a90497698fb9ea2d4a7ecadf722f573ea1c602fe0
-
Filesize
8KB
MD50210656a29c2f8fcb59ef9ee229e67b7
SHA1f1e04b5130bbfc2d33cd6170a4916909fdb83cfd
SHA256fed057ec15d2fc4ec6e1e7022b3ac630f0c4f14acb9d4320e88de6bcb0556add
SHA5122211144789ab02dea2dd7a728e785e53012817ebb663777d897b7e6aefe0b563abc099fbfc9adecc7278af8e3b8449d10decfff815c7f22126f4c2000df6a65c
-
Filesize
24KB
MD567162b772f8f7ca2b18c467d8b90d9b7
SHA1f5e39d5cd4aa466f69ccac520b8e13c1854275e1
SHA2562182adef9194d367667638ada81e3bb0d2f3c9489ac1a03736c847ff48490b54
SHA512331187a44b550265fa94343c6bfafa4340572238ba98ae6ffce693d07e6f912a6c7011dec736aee25edaefa050b3356dcc1f868e616559cfe0cdd33235ba7de5
-
Filesize
40B
MD58e06dd6b6fb8cb23bf147f9a8f81cd12
SHA1a3510d7ac469a8e3990bf19b635d3f27766cf8b6
SHA2567df4c957bbce3a15d1c1384185ab88f18dd6183ec9ff79146031a8c00685b4ee
SHA512b6cf406fcb4de4b60f492db6dcfff8b0bffbdc67a0e7ba78d2b0cabaa3d560ac19fbd2efffde8fa73a7ec0acf9a259d55d9888ee6d3e1298177837d210b2a094
-
Filesize
16B
MD5b1e6aab35a15c12bc9b6afc27f2e47ed
SHA1a6731aa41ad4dec2f64703bcdf1e4a1d1d1df9ce
SHA256393f31dffd7edde43cd52ba78ea7f3eb3cd88a13b08a64ce88183b9bc5d43533
SHA512ebfff5986bd2588dcde7883b79120de50ed455e04a9c1bf96fa03288c99b839f47c59b6aca61fb9cd0d0c77ec8e7b0503f0d6f74b718fcc200b486fd63fe6da4
-
Filesize
72B
MD5f58f13d0fc991322df1eec4c68481464
SHA1fac54fd6dfb4fa6e0b0f548eb024573dca8cd259
SHA2561d3ba112a38305e67ffb1aa4a0e0e70b3a22809904675efecec0c949d0b76396
SHA512e1ef5bbe84095b5ed02d1d9b23bc7e034b67715b3535473553a2d797b86ddbb81028e0cd5ccc457be1828893413eb368e04f29b7c3a2878f933a025153cca535
-
Filesize
143B
MD5e226bf9446849dc009baa24a537ac74c
SHA1b6b4de6d0febe5a29c94656ddbf85823f20d6204
SHA256f4748057d8d507d1ff277a03fdef8184f0e215e4be2de5315b48c647fb0d8a19
SHA5120acf633e9b926ee1c43ba5f11357a9f31524a62e7487fe95b70feee27740197a4cf725c3a0aaeadb2fdc441ce4af69e0800ae23bb7a64c7525e7044ed49c6541
-
Filesize
189B
MD56a8863dd4be7802445180fb86132a879
SHA1318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768
SHA256003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08
SHA51221c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780
-
Filesize
262B
MD50438489e26550304ace8e365664531ae
SHA1cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4
SHA256a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb
SHA5126e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4
-
Filesize
334B
MD52ea2b97e20110685ba6ea9011337aa9f
SHA1ae372b96b8d744669647b8e6dc96ca4eb437dfe5
SHA2561dbb3efdd52819faa31840323b479763c9d5516cd5717f3bde3ed2498d445d17
SHA51280844de182c6f947dbeb36faa21e15fad5bb401f0e1c087670ab0b07ca717164d7eeebc0e67b380e09373c66c59eedaa669df54494b0cf86a549302bda17048f
-
Filesize
414B
MD5e90146e1477216032c6f7f05594232ab
SHA180840720b407bdac7b2e78525a91f53aa4459ccf
SHA2568b25ce5b5edee9337460779c974d58be163acca8b0f7727c945505aedabaa44d
SHA51281fca2776458c089c185bc7a740201436c506d51ecc9f2eecb590bbd9872ffd6e298b53e9ff9bf3311d93bac562f53fef7b04a213d37d33865296a3c3a7467f4
-
Filesize
159B
MD50dee05eec0622c6392e5e8f071507f31
SHA12d6fdfefc54e9fbe1ce6906de17d9847ef8c4700
SHA2563bad85b343c13a70a0b154c48ea035359d973838a8e1e7c2f863fc3899063a74
SHA512fa5a97b2d7d929e10d112441fa2c21d7f0f5e47e194e9346c6345809412fb4c2bf6d81f8d722f30afbe61831985f71cc1152efa299eee038cd2f758e1b8b607e
-
Filesize
65KB
MD50c2f2989749ff3910446998637c28286
SHA1054aba5cdeb4e66a4473b0a81680bc50f6a0cfc3
SHA256f3c52a07c3cb0a749aa880b5819ce43a5b76065396037f5f50c4577ae522d49d
SHA51272acb607e89f7dd62c21e9449ceba58c8917afcf4dc32c789f515d6a866e6549b2fd53e90cffbdfb7a62d577534bd9eec052d1ec9a912321f9bf25e7f719a70f
-
Filesize
65KB
MD5522947eaa37b029a247e3973f3be3621
SHA131c88e0d7c9b51904c0f598e80245bba41b1c7d9
SHA256d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156
SHA512f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c
-
Filesize
10KB
MD53204fcefcc0eefb1fa76bc6f0fda6264
SHA1b5a5fa1723ecc6c531d7728163489d72ab20cf6e
SHA25615da7c769b4a6b8c48e85a27c3e052d6b2c88c53e4098ff4713f5afbc591102c
SHA512a7ae4bcc5dec798d8b6934a361068698bba74aaae0e4443b73ed31f9696ca6f1953349e385172a5630f587ed64a17801ed3e1651c3a20d7b20ff3b6b33711a2b
-
Filesize
10KB
MD5f59597732a9069b73e16c027faf78d05
SHA1e3558f4e5041a6c6d4372001bed847f2ef77958c
SHA2569e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6
SHA5127a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2
-
Filesize
111B
MD548f46b5e67e72de62b4d491c07272674
SHA1d79d2cf6188884c825589dd49f939ff91b4e7edf
SHA256a1a11718fa039419e38814d54db9bdaa62397eab939f8027a13c86dd829bac49
SHA512e409ff35cec0fc3a542b271fc352a79c95ec5877eb0344133d5f5e6cea15f3ed255658c402f9c9b1e5afc001174d9bae5d33107cdd1c4a7064e1fee26b939465
-
Filesize
213B
MD535206f9203afdc32c70155cc778cd277
SHA1cfefc8cd1cecbbaf0a088053483d117277a7d923
SHA25674a4a7e06061d07ec4ea5b33a4134acc265250c6e60e680ad45bb74f734d6c65
SHA51248358161f204779a60f5ce52b7f37afa8382e7b1e3beffb772d96df2d599202c2a1aba719c0f195654fedd77935cb395f501f69f81959f69391bab42a61ac182
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD5a746631e81cba4cacd03f21d05292d0c
SHA10f3e980bbf157c720c3e6bad7a6d3ec3f3f19e79
SHA25688b16dcc87964179ee8758f4360b4c6f9f532d2fe961c37ec6f1814e49e18290
SHA5124ca24049040dec65d3d42e4b45aac94cac128497b8129315478833520600d5378a39e108773b6ba8d4d221de7c2d361dfe2f325d86c48a7c9accf5b9403ac130
-
Filesize
167B
MD5432816565665564b581d136e04257f57
SHA12cd149d31687679553efa7d3db99347fbaf0ff71
SHA2562e4c37d4633b7591128e92902bbe54080ea28459edb9883fb7ff94923927c48d
SHA512d9487581504bdee56e05d75bee29d87a6c5fdc630531b63fc8f8fe3a6f9707d64d6c933e7d6bd605b41d15ef9183d29b5f4724469476600c511fe1cae5a0472d
-
Filesize
512B
MD5e0f2679f1a96ddb4b1f24cd66df08325
SHA1eff3d32d8ef996ed67bf127cb0119f37b5fa5b83
SHA256e5314978d79710a91d013d5cfcf448c3cae5da6246369844be72b202556431c8
SHA5127bd5eee31fc4e67693fb5c503624e8a3603372223f6a6004ed9821894a9df9fa4dccda5660967d1aef15230066c3da1c6ee00db1bdd1a41b95ce2a0e41e68adf
-
Filesize
202B
MD591962e349ccb585d2e2f45d883a45132
SHA1287fefc7aced856ee029de3643ded152a614c538
SHA2567c94c2aba9193d34309b15f791e8bb7d6ad11b90231d5a58643164260f25a3e3
SHA512b82cb70e3a6552b440018e69ccd8b443b5f09cb92df129b5fe4b154f00cb4fc86ad6d4466382ddbc753f98b5c7c296e20bf6038b92d3050c083c09d3d7ca12fa
-
Filesize
32B
MD5a802e858fd7adf6e4ffa41404e4da01a
SHA1cf6ea885e5fdfcc1073b0d944e25718c6ed91efe
SHA256dfe0ce79f32be1d70f27a24e965c325da0c56c8b3a3281f70f55d8f1bfa631d2
SHA512a0069f8c0dacf410bba017a39a847945ecb2eb58319da0f87c052f0b1db7c4d39709fae170af96f8f0db7f4a3367a550a65a9e7104e52c483bf9ac8a3373b826