Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

97852d1a8c...ea.apk

android-9-x86

1

97852d1a8c...ea.apk

android-10-x64

1

Analysis

  • max time kernel
    2791620s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 22:30 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    97852d1a8cdad9ef22c418b6c489a2e5318727861b808f7cdf867ee87289d3ea.apk

  • Size

    24.7MB

  • MD5

    f19c98a977cfec964a1bf0ab168c2022

  • SHA1

    8d97e55f544f8e05c7629fb9d280d4402200f493

  • SHA256

    97852d1a8cdad9ef22c418b6c489a2e5318727861b808f7cdf867ee87289d3ea

  • SHA512

    d275f7a3ae0fdddd697ff6776830769ab646a4af89b9d20dfa79db2167058fcf014d3c1166f52526b7fafaa80c420ffd29d3f7ef76ef99b9a4f9f32cbe8fd02a

  • SSDEEP

    786432:+dquFwBgAGre9a0lh7qiyNRY42oBn4ittxRN8Go7T:yhwJGuHlh+Do4VnxrO

Score
1/10

Malware Config

Signatures

Processes

  • com.globalscanner
    1⤵
      PID:4271
      • chmod 755 /data/user/0/com.globalscanner/.jiagu/libjiagu.so
        2⤵
          PID:4296

      Network

      • flag-us
        DNS
        semanticlocation-pa.googleapis.com
        Remote address:
        1.1.1.1:53
        Request
        semanticlocation-pa.googleapis.com
        IN A
        Response
        semanticlocation-pa.googleapis.com
        IN A
        172.217.16.234
        semanticlocation-pa.googleapis.com
        IN A
        142.250.200.42
        semanticlocation-pa.googleapis.com
        IN A
        172.217.169.10
        semanticlocation-pa.googleapis.com
        IN A
        172.217.169.74
        semanticlocation-pa.googleapis.com
        IN A
        142.250.180.10
        semanticlocation-pa.googleapis.com
        IN A
        216.58.201.106
        semanticlocation-pa.googleapis.com
        IN A
        142.250.178.10
        semanticlocation-pa.googleapis.com
        IN A
        142.250.179.234
        semanticlocation-pa.googleapis.com
        IN A
        142.250.200.10
        semanticlocation-pa.googleapis.com
        IN A
        216.58.204.74
        semanticlocation-pa.googleapis.com
        IN A
        142.250.187.202
        semanticlocation-pa.googleapis.com
        IN A
        216.58.213.10
        semanticlocation-pa.googleapis.com
        IN A
        172.217.169.42
        semanticlocation-pa.googleapis.com
        IN A
        216.58.212.234
        semanticlocation-pa.googleapis.com
        IN A
        142.250.187.234
      • flag-us
        DNS
        semanticlocation-pa.googleapis.com
        Remote address:
        1.1.1.1:53
        Request
        semanticlocation-pa.googleapis.com
        IN A
      • flag-us
        DNS
        android.apis.google.com
        Remote address:
        1.1.1.1:53
        Request
        android.apis.google.com
        IN A
        Response
        android.apis.google.com
        IN CNAME
        clients.l.google.com
        clients.l.google.com
        IN A
        216.58.213.14
      • 142.250.200.46:443
        tls, https
        1.7kB
         40 B
         2
        1
      • 216.58.213.14:443
        android.apis.google.com
        tls
        4.8kB
         8.7kB
         16
        21
      • 224.0.0.251:5353
        3.7kB
         11
      • 1.1.1.1:53
        semanticlocation-pa.googleapis.com
        dns
        160 B
         320 B
         2
        1

        DNS Request

        semanticlocation-pa.googleapis.com

        DNS Request

        semanticlocation-pa.googleapis.com

        DNS Response

        172.217.16.234
        142.250.200.42
        172.217.169.10
        172.217.169.74
        142.250.180.10
        216.58.201.106
        142.250.178.10
        142.250.179.234
        142.250.200.10
        216.58.204.74
        142.250.187.202
        216.58.213.10
        172.217.169.42
        216.58.212.234
        142.250.187.234

      • 1.1.1.1:53
        android.apis.google.com
        dns
        69 B
         109 B
         1
        1

        DNS Request

        android.apis.google.com

        DNS Response

        216.58.213.14

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.globalscanner/.jiagu/libjiagu.so
        Filesize

        351KB

        MD5

        6525dc34d4a2656b93c41bc4223fddd2

        SHA1

        5c2333cb8ad87abc747d13d6352d5f19dc18997b

        SHA256

        744cdb26f7cf86d52fa8b214813a346952fc7476826400b85a3db96356f5047c

        SHA512

        b98dc08115cdefc31b2c0679d046a34e788936f985bcd70bb789b1828dcd59d949b023388a3b56ef017bafac31e79c12ebd6f6b623f01a38ea0e6e04a9fd1fc8

        Download Submit

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.