Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2499547s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 06:16

General

  • Target

    8a9fa40942b9a1ee4269a796ab41eb4a07e8b9ed12bd1ec5e7a982811e941f71.apk

  • Size

    24.2MB

  • MD5

    29f8ca9f05c91b9f11cdd63632c5635a

  • SHA1

    4d9ae398a2521fe9d009b0beb4dfec3c5bb7bec9

  • SHA256

    8a9fa40942b9a1ee4269a796ab41eb4a07e8b9ed12bd1ec5e7a982811e941f71

  • SHA512

    2f2e45ba09d01b04167334a5ce590c06c9951b1e0394b558ee1844b276e04fa2beed028d565b223752d06d59b2db9f50dc9efb30c187ff5b825a52aa6609e1d8

  • SSDEEP

    786432:jEjfF9p4IY2MHwV78VGjIIitQEpula+jN63wncI3tcxvT5hM:jEjf95qQV7+MIwEpu4+jNk6tQg

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.poker.bobei
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4255
  • com.poker.bobei:pushcore
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4298

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/baiduTTS/bd_etts_common_female.dat

    Filesize

    102KB

    MD5

    7039838ed9e3d69a1d5812cc06266b6c

    SHA1

    4eaedab66e16fd84cffb4d070da1e77e99e43317

    SHA256

    80d429d741f667f4b631518aaba6a4df43b5a2419370f78b6a0b3d0a95bf4c06

    SHA512

    a53349360431aae1a08029250bc583b8d74badd05dcee2de53703378e8acb2a0e2f980352bd87a0fadbe48d16c1cc4d603cd1a6155987971bf64f5f9c185b9db

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    32B

    MD5

    728f1cba18955a5fe3ee30a216f2c4e9

    SHA1

    6fc1654401c53bcae8e1857c05a12f744eafe852

    SHA256

    e224b78c662f8c9f354479bbe004ab44f1c46915c621006e51b22db44d5304bb

    SHA512

    9577e72a727a2ef03e9177a343e4dd1c80d7835736628152a35238e95934e6b919cf7f651781e2078579a8b3e982c29f251a7b1d48f0d82aca12acb4b9f4bd6f