Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2453796s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
20/12/2023, 08:42
Static task
static1
Behavioral task
behavioral1
Sample
97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd.apk
Behavioral task
behavioral2
Sample
97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd.apk
-
Size
1.7MB
-
MD5
02d4b2588d3d2e4ad03562ec0955d88e
-
SHA1
dea93eb4c74040690f9cd403b2c2826e30b03a1b
-
SHA256
97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd
-
SHA512
debfce813e2e461cca3d281b068a98b1fd918ec57c439de2a855d3b2da29d30f761a3208cdd2b8c31c837d2383bf2412f99127636ba40ed5ac3efa922485e6b5
-
SSDEEP
24576:ffFbuKEuZtzs7WZFIvMstvniClTGW0cWHrXek5DEhpMjKaOFpiW773tmX9NO:ffHEuZpsOIvzniYKcWHrXn2u4LvtmzO
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/04f9786e.dex 4784 com.herocraft.game.lite.st_ussr_usa -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.herocraft.game.lite.st_ussr_usa
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD53cd9e0f51794ba56c6b658620c4a776e
SHA11a4c8b4baebf348297d3ffad7dc164208c50243d
SHA256501b7371cfad19d926f53de991d54259fa0674618efcf344ccb0f2787d9a21b7
SHA51236191d3e6b6a1cc90a5bb8cb49eb4269a563fad34c1f523ebb3eecdc98b4783e067296beee01959b46188621c2ba5732ead240c70daecc52fb3bf577e6e4d6fd
-
/data/user/0/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events-journal
Filesize512B
MD5dca514ae87fe2bb9974d8fbc236b0a5d
SHA1f3118453415121ce45c8b616aaba8870f20387d0
SHA2565ea475358165c4a8ac83eab9cf45e21cfccfbb7ab168905e0f237e8012df64d4
SHA51295733918ae720a3ccb3c6fb2ddc74e9d417d21ded606f1d67acf6488f0c0a6e816aef36f58af5e7e4285d5e48408bd951e43a6db7f333a4a7ca2b736c724a8f8
-
/data/user/0/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events-journal
Filesize8KB
MD5a1e48f9d0fad7f264851097f313aa7ea
SHA11d98211e2077f543a34e1b7639a5ee23f82f3487
SHA256bab78d031a47648623d2d6021634bfcfa994bd0ff588574a876fe2b9ad2d5b56
SHA512c0e207b3f29ec76bf231838d6fc711774699749516f01f8c136add1ad68b90f901a1a6eb9d90873c9def923fd32d75fecfc4d400cedac68d53cbe9d811b1d970
-
Filesize
262KB
MD51001c5f7faeb180f386908d4ecb0bac4
SHA1dd588f7c7afec9d66d964346106a21fc49ced7cc
SHA256609b1b84bdfde433d00d4b5ea376bffddc59ff3a66f982b8b7dc6fdec4e17781
SHA5126652c992b637e66ae761ea1567e2dba53b8b5e3bbe017d8eca7de44dffef28fa97813dce0c91287990ce2dbc35417d5792d2c3f21938f611a3e21c8f9a9df5fa
-
Filesize
614KB
MD5b28b668926d59c1ed00e0643327a5735
SHA118afbb75569fc70c9f789a3c2bab3d70f016e172
SHA2566859effa324baf7b333005f3d205aa6ece5a19c4d74698769d75c62af031ee55
SHA512477002c55c173f7e11bbc4d64c831748d82a5edc3cd803b5989995d2b28847aeb6c0b612cad3c59d8e879d669323769e408d2f0096624c00747a69f704e33d3f
-
Filesize
504B
MD52416497af418b6aa2de9516148c8a80e
SHA1d63b4df4d14a4db9ecba91ea97c7f4d3be0c85fd
SHA25610dac127b164ec5f32a5b8e9fcb30296117fabe0995eeda688e0337fbce3bfd9
SHA512dcfda7271be7d540b6be77368aeccbbb82e37ad1d201b6c20dfcffb642bdefff2bcf07c87ed29a9008253e37d256e58b3ca2c559728e1eb29dc2a56a9cf720c3
-
Filesize
740B
MD59c8ab429a1b6f1dedb181ce6f592b6fb
SHA14ef873829cc0c3c6ac82442eca7f781e2ab124f4
SHA256b82c104827e1b735f364606e69efcb8a97988d3001e4b94f9ac6ca503bf80f4e
SHA5128815bc157df8ea9bef5e3eeb16c98f1f81c9d8316aaa3647e3ca8d4829a51bc6ff6232a646b95644c0de7f704505c299f23f887dc735c12cfbdb237c37389300
-
Filesize
569B
MD50edab236dc83bf519950abde02e7c629
SHA1a3f86c998e222b2c9cae52ee6736263de721c855
SHA2568a85c4527aed03a5294e34d7c219d38fa8beb00cea212b0f32d9cdea7fc516cf
SHA512cd650991db53834f86f37d89c76c7f59e70bb92c5697a7d91f2a82eb9a4e9c31d7ddebb254e8e85c7015a8a6f4972e805297471f891fa477fbb18033153012fd
-
Filesize
336B
MD57d83f42aecf265017b06a348a6a2e1d9
SHA13dee8d2e93c3dacbac5455ca3cd8aed137a036fb
SHA256db061fc9bb1dc4a4cd7f81f350c71967f41d81ca812ea71513c409f7f73e9560
SHA51211e946bb3cf51525fdc0d250445d29b40010900382d68efc908e247cbc8902d440763c3902a4d55b3a11ecb3dabe8a3c1c59c53b4dfbf9e148f753f926434f0d
-
Filesize
336B
MD541d5a04a25e6e819b95a520be49f23f8
SHA16a3448e72a4882a0177da1e0d6280bcdec59d76b
SHA2565e98a17a741546b27780eaea9f9b1fbf0d4eb8d7a90aa94f2a81a19f33f83ebd
SHA512b276ed355c406560829c605abb75be18e6c81f7a15186d719713c7892dae5b835d668d285e31659f803b7e50ddc6ca2ff33132e19da69569604ab97fd80e5ebb
-
Filesize
336B
MD5cfee5c240ef2b2de73d3c0724da3f0be
SHA1ff47eb28b57a435882ec890b2823a6fa92dc369d
SHA25619905235d67a54d10b995858ef8410df5f92393fc10ce23a29a18fd1c9ada2c3
SHA5120ba5bd43f05ec70a0c59b63cd9b0ff75bfcaa354b279b14badff77715707ce67091ec3bc2097dea9c53d8e585d87a9246d5a31602ad154b730061808b7c6d41d