Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2850463s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 14:34
Behavioral task
behavioral1
Sample
31865d5fbc2114653c611898ebd52b8857627e4e275234b7d0cf0cf75c8fed34.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
31865d5fbc2114653c611898ebd52b8857627e4e275234b7d0cf0cf75c8fed34.apk
Resource
android-x64-20231215-en
General
-
Target
31865d5fbc2114653c611898ebd52b8857627e4e275234b7d0cf0cf75c8fed34.apk
-
Size
25.5MB
-
MD5
4b590043e27327d1c89c88e4e592ab8f
-
SHA1
865a3696e4279422dd4b8674ab4a2cd7f9d47647
-
SHA256
31865d5fbc2114653c611898ebd52b8857627e4e275234b7d0cf0cf75c8fed34
-
SHA512
af4c966ff798cde0520334e40ce6767d8f10eb66136cac0964a86bae734069d95b2a24438e07beb926cab25eacf36a332fba30a96072800707c92ee83dd2366b
-
SSDEEP
393216:V339DGfhhW3Dmlmk9VIhz16ZWr0g91uLCOzzl9Jb5AsyHPsHxmPA8fnz:N9GDoGBZWQa1gCwl7b5AsyA2fz
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.qp333.car
Processes
-
com.qp333.car1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4246 -
chmod 755 /data/data/com.qp333.car/.jiagu/libjiagu.so2⤵PID:4272
-
-
chmod 755 /data/data/com.qp333.car/.jiagu/libjiagu.so2⤵PID:4321
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.qp333.car/.jiagu/classes.dex --dex-file=/data/data/com.qp333.car/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.qp333.car/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.qp333.car/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed2⤵PID:4343
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
MD5be2be0a59c0ddbc57ac9cee28e2216e4
SHA105592c856586ee8bee57e72574c4a066dd0f5c9c
SHA256660733a5c590492db7ef9c269c5fe959fe75dc934cabe0310565ddb5d365ca9e
SHA5129812036bf4e0084d156b6237f68b6b702f3d30a7e05ddc1d038d673b464023eaf1a14dff85c83301f4e696b476915a541dafdf9406d99d2565e945143ac58c85
-
Filesize
382KB
MD5d44f82b16e45a099a9ce6821b85f91bb
SHA190ce0ed3ea5cadd3c51df92e6d8baa943f9e7e65
SHA2560b516318fa4823985eb298eebbd0889b540494eecf5c28028590e33b1d182a95
SHA51298c76a388e53b8b48db0663d3cf65581a0cc76bf7b3469b64367419429c67a29d5e0287e43fc29dfe90624c3b2c431191982db3e8ff62f918e9bf685a4fdc1b9