Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2882859s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 12:43 UTC

General

  • Target

    15411975487deac77be2b16da6b9a718930a337d5e0f40e58155db4c41a34507.apk

  • Size

    3.5MB

  • MD5

    2bac94834c960774fc0908f481efa731

  • SHA1

    aee50f952de4e193ab790a5a9aa44a1292e43cca

  • SHA256

    15411975487deac77be2b16da6b9a718930a337d5e0f40e58155db4c41a34507

  • SHA512

    a41ffac16534df839bd24e9ceda7ceb2c4f7a57ccc4bb786e82025dd4d652cc9aac3dfa3283636f468b26985c2d897ad504b29504c413ccf2398244b65157b6a

  • SSDEEP

    98304:4BRKDl6jkr0mBnObkt8BDnFluuRA9ZLXFG:40Dl6juBnCkt8BLLHRn

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.migrantstars.golharestaurant
    1⤵
    • Acquires the wake lock
    PID:4985

Network

  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.250.187.200
  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
  • flag-us
    DNS
    cpnl.golharestaurant.ir
    Remote address:
    1.1.1.1:53
    Request
    cpnl.golharestaurant.ir
    IN A
    Response
  • flag-us
    DNS
    cpnl.golharestaurant.ir
    Remote address:
    1.1.1.1:53
    Request
    cpnl.golharestaurant.ir
    IN A
    Response
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    142.250.200.14
  • 216.58.213.14:443
    tls, https
    1.7kB
    40 B
    1
    1
  • 142.250.200.14:443
    android.apis.google.com
    tls
    12.0kB
    10.7kB
    32
    34
  • 142.250.187.200:443
    ssl.google-analytics.com
    tls
    1.3kB
    5.8kB
    8
    7
  • 172.217.169.4:443
    tls, https
    431 B
    40 B
    2
    1
  • 172.217.169.4:443
    www.google.com
    tls
    14.0kB
    8.3kB
    27
    29
  • 172.217.16.238:443
    520 B
    10
  • 142.250.200.34:443
    520 B
    10
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    140 B
    86 B
    2
    1

    DNS Request

    ssl.google-analytics.com

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.250.187.200

  • 1.1.1.1:53
    cpnl.golharestaurant.ir
    dns
    69 B
    69 B
    1
    1

    DNS Request

    cpnl.golharestaurant.ir

  • 1.1.1.1:53
    cpnl.golharestaurant.ir
    dns
    69 B
    69 B
    1
    1

    DNS Request

    cpnl.golharestaurant.ir

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    142.250.200.14

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.migrantstars.golharestaurant/databases/google_app_measurement_local.db

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/com.migrantstars.golharestaurant/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    295e1129922d4e4c5d4053e051f0ed37

    SHA1

    a67ad0942fba78c59d1a19b21c8dd9b264419109

    SHA256

    0d9045c4c381dbb8abc19b825518939f8f23bb5ea453f923ab0b9e6ac825b6e9

    SHA512

    ec9ebe1c9e5668bea4917f05ddbc594db55f4d7bf57273750e194ccf09fe5a7c68af84668c463f02d4ce7a51dc1076c86369dda981287060a98a60f90dc885ec

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.