Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

6

26abb8b11b...13.apk

android-9-x86

8

26abb8b11b...13.apk

android-11-x64

8

Analysis

  • max time kernel
    2818597s
  • max time network
    136s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 13:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    26abb8b11b762467eb5c3ff9ae6dfb4cf421d6d164d4c2344826098e10549e13.apk

  • Size

    10.9MB

  • MD5

    06f2490eb7a9940c2ae75632e5b99eab

  • SHA1

    228bdf339f364d8a71531a1ef3dfba4bd6c02e40

  • SHA256

    26abb8b11b762467eb5c3ff9ae6dfb4cf421d6d164d4c2344826098e10549e13

  • SHA512

    56818d60e99aa397c789f7916948d2fce2fac0d33eb19275b82b27016ac62ec2170be8b33bbf07f0b22cccc5a137e8304cbebc6e1cab8781b9b240b40aeba996

  • SSDEEP

    196608:A3kMCW037T2ElcNOqCBDMPCN08sS8v/yZsp3Ipbcbrb8bebu5y/WVo+UxylNhu6A:AUfW1ElcNMB4F8sS8Tp3q5yOebL6A

Score
8/10
evasion

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
    evasion
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.sloan.framework.jdzt
    1⤵
    • Requests cell location
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4261
  • com.sloan.framework.jdzt:remote
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4331

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.sloan.framework.jdzt/files/lldt/hst.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    Download Submit

  • /data/data/com.sloan.framework.jdzt/files/lldt/hst.db-journal
    Filesize

    512B

    MD5

    8555e3431bf0675402cad9913304f6b0

    SHA1

    97e7ea946796d2857dacc074e760f2fd42b6f300

    SHA256

    f209ae5fa18095dab4a39f9f0e25d9b062ec67b13e8f4236fcf17be6c8db9b7d

    SHA512

    b419193e3a9693b0ce3d16e5b1f64ebab97a53ec1d329295007b3fc13d4f6074ec023f9f6b0ba2ba619ca56d0d2d134203370277278f57f41abb66d5d8f1f36b

    Download Submit

  • /data/data/com.sloan.framework.jdzt/files/lldt/hst.db-shm
    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    Download Submit

  • /data/data/com.sloan.framework.jdzt/files/lldt/hst.db-wal
    Filesize

    36KB

    MD5

    fae03f5544e01b8b98915de3025b1591

    SHA1

    dd691abd2978232ceaafc64f6c3d0bd5def77149

    SHA256

    8c39582f9345e77099879201a98f468575fba1b74f0a466126caf9770bd691c1

    SHA512

    ec23c6b128f885aa5cfc54aec42240b65e7ef756e207ef1f0e9cc8cb36745bc86a76dbb2a326717f33677e70adf51d618e1aa5feaedf792317192146da74bb5b

    Download Submit