Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2872346s -
max time network
160s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 15:10
Static task
static1
Behavioral task
behavioral1
Sample
3a0e9f08008ee86dfa19dccf84fb465f03b1006a06921dd8fcc7891056305827.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
3a0e9f08008ee86dfa19dccf84fb465f03b1006a06921dd8fcc7891056305827.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
clean_robot.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral4
Sample
clean_robot.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral5
Sample
clean_robot.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
3a0e9f08008ee86dfa19dccf84fb465f03b1006a06921dd8fcc7891056305827.apk
-
Size
13.2MB
-
MD5
653fe96292cc7e6075bbfaacd3455a95
-
SHA1
830b32d0a61c33fc166074b4be987f33eb7f22bb
-
SHA256
3a0e9f08008ee86dfa19dccf84fb465f03b1006a06921dd8fcc7891056305827
-
SHA512
67a1e7eab2e0e3c7cbb61922dac6abb47794621199924945e87282b4b089727686b00a1f46a15f7bf6bdf587cfec532061787fd8bb98f4784ece822488ee2eec
-
SSDEEP
196608:B06oQ4gEyTby6I/n6WLTJvlvUUBdW0VQv4qBxyh8lyFSxKBU6AhA9INKitVoIrMC:B7L1EU3I6WHPsJBx+83s2vcIA044F
Malware Config
Signatures
-
Requests cell location 2 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.mobiletool.appstore Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.mobiletool.appstore:channel
Processes
-
com.mobiletool.appstore1⤵
- Requests cell location
PID:4245 -
chmod 777 /data/user/0/com.mobiletool.appstore/cache2⤵PID:4275
-
-
chmod 777 /data/user/0/com.mobiletool.appstore/cache2⤵PID:4324
-
-
com.mobiletool.appstore:channel1⤵
- Requests cell location
PID:4628 -
chmod 777 /data/user/0/com.mobiletool.appstore/cache2⤵PID:4655
-
-
chmod 777 /data/user/0/com.mobiletool.appstore/cache2⤵PID:4681
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
235B
MD534a3671fe6d95bc49f64165369c4ff1f
SHA183fcf4d201493b313f7df2d73397f49d41d72e21
SHA256b00e5c794f019085fb5257099e77cafa8953bc8738a476df8b4fb82dc2b80447
SHA512093289624d292c0e202c08e2e244a0f3208092e04fca672f44222eb8b0ed8136d8e5e7af8842350ac4a512ef73d5b5a26746f92da728c17f70c3fb53855fea72
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
28KB
MD5b354a3798d70ae0a36c4359aac6a5a58
SHA1591bf4d73a4ea2ede29f25db14d53f0a63b0323d
SHA2569e3ca451e62c6db03da38f24710d89f83aaa89b5278cecaee6931edb367c249f
SHA51296a1831defe9bf18c8a1b5b22e7c102da6f63c2e42b30ddc9a428fde7a986d877f0fa848ba8d860946007557146c7d94a87ca9e967dde46e53574b56318eea96
-
Filesize
4KB
MD5960636a8c8d5a7dab17abc34ee4dd2d0
SHA15ff1900dcc6f3daa7e82f9d24d0d5009e6b4d1f5
SHA256c1a1f9dfb87ad2c2b7780da0b3f1179c15a5e30f4b0f981b27e32bb2e700a038
SHA512f0be71c329f1e6a9388ad90138aabfa3fd6935867a393b3a970e31096743686cde0c9d219c145cd52c8f6febae5d656be2a4286b73e6988834bd5fb94433db02
-
Filesize
68KB
MD507e4e744061e24bddac26050422dee55
SHA133fa1de6e93d94e9bb687a4a1fdd75f4890b3f3a
SHA256a286c5bd1e975b6126ef3d45ce1608142927fd2ed2a5e9c411a97a71f2f4ad2d
SHA512e8f16979426c06066a345f4e394c17e448a3bd6eccb081d2264f8c4186eaab6aea9c9846769c330c6671012151149e4d464fd0c307c7825544a5b76422e06f4a
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5b5c7ee44d942aea5c1f32ab24c130676
SHA19c960729bcecd75ebcbef3cd1d438e8dd06a6f95
SHA25612f57db3f545de4844d7725c8e7dc126929985bcaf407b391b9f9f2451d3dd58
SHA5126d519501408811feed823b6cbf350ca65f6f4dd863c46e94bae8750f56b34c6b565287dc901292b0e37a85917aaf16b22a71ca44dc90806decd18e6e59320a9f
-
Filesize
16KB
MD5b7efa934761ed2068002e443abbd69e7
SHA15a3e39ee60cf67b24511659ebbbefff7656f91b9
SHA25662c68b6742797baff86b78f09f975aa5e03cd798375d0071f378f30190b9b44f
SHA512bc5ff560e589d6042b3066ef3a0c9f83ba8c09a34c4b5a0f66859d239ec00e3bc390223aa67c662055a463691b1affb09a5a6fa706132111b768d0b18501ce7f
-
Filesize
512B
MD526eaa26dd38d927630238b0676e7596d
SHA15853449d0711c63bc148101fe60e0c03c005f113
SHA256caf929a7f094f392a5fc2773c83ec40e07a9dfd26454239d2d19e91a2cfa80ed
SHA51269073ce6636524a039d1596eda55a70a5e169197e337386a6143432f7420551b4d3f80361cba74233434de33b9df0483a5178b891f367c0775918eb2f747edcb
-
Filesize
16KB
MD52168dbed58a5d90d681189faef7178da
SHA19d6b0153adf75eee6fda8cef04479fee6b31e9a8
SHA256797066fcdcce663028a0cf79dc0e66d9678862b05fe2c7a437bc0085eb7f7614
SHA512bce54565de61ee03f39ff44f2acd41724416eb8b8f6631675ac652db6b17f8d178b166dea9d0d365b1a83ba2826b571f3353cc476feb817495ef014c76ef1824
-
Filesize
124KB
MD53a507e320d6aecb067d3ceaac535efe5
SHA1d0d598c5f24f4aa1da489180eeb73ca1c263b18c
SHA256ba74f6e3f6fac95eb4cd1666ff9993d0c84149af6123ed81f1ede3c49670a523
SHA512bec2e8ad90a39a3d01ed88609ddb0f9d1f723a9cb0d878b573eecff01167b99c439415fbf5fbee74b7faf20f1fa838cb02d6aa137de8d64d65815edcf2eecd56
-
Filesize
28KB
MD5a2f1053ebe56bb023c333e56b2ee9732
SHA150c350acb0cac74de2a98520f71eeed5cbedb698
SHA2565d7cac6253f4cd068ecf32803bae4dc72c35b027dc3d0290c727806db6ae7716
SHA5124eb18fce6db61271dd02e571ebdcc2f833e4f6a7d2ce8406e40bbc363fa3b3a36738a5de0ec5c44993979f0178e44ab01e5751ce9e92e896a7829f0a1ccac386