Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

4ce0cba3bf...83.apk

android-9-x86

6

4ce0cba3bf...83.apk

android-11-x64

7

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

Analysis

  • max time kernel
    2550059s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 16:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4ce0cba3bfb54a91a0317d0b6baf1a937ce3699f8ebb60b96ccbdc6b75304a83.apk

  • Size

    22.7MB

  • MD5

    02f0b7f827166807de35341b5045bce4

  • SHA1

    77b0910eae3bb41a68343d007321e58057f8451f

  • SHA256

    4ce0cba3bfb54a91a0317d0b6baf1a937ce3699f8ebb60b96ccbdc6b75304a83

  • SHA512

    826c3aa23c0938f8005138f04a838fd7b9780763553276f0512ba104c84d3bde8ac62ab1ce26d061164cb8b02f218dc29a065aa57b312a457d878d654cce7a47

  • SSDEEP

    393216:n7TMdiYzvlCTH2h2k7TWBx7dgP9v4OsLC4TZd5BlsxbjCTAS7y9irf0qso4Ker:fMduHxkH0xgQRZd5BGxRabrf0P5

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • io.dcloud.H5A88A7ED
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4619

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.dcloud.H5A88A7ED/shared_prefs_ext/test_app
    Filesize

    24B

    MD5

    c0f1ae0d1d3681e0059280d1ae2e86af

    SHA1

    8ea9deefcab30d1d41b8b0f3cf75a9ddc0a73fef

    SHA256

    f808685ef2029101cc0230675311a1cfdcd8f381bed6a9b8f9ec4a898925172d

    SHA512

    d02acdaa0f3bc5f88cea28cbcdb2d77d530926db99eb43a7928cbc9d79d97d71ccc0f344d1156f90e654bd7bb4662386b2e9c77478e88932918f4ebe4c26f4c1

    Download Submit

  • /data/user/0/io.dcloud.H5A88A7ED/.00000000000/A3AEECD8.dex
    Filesize

    63KB

    MD5

    ed73a80eb949bacc52428b8d5a087fa5

    SHA1

    07e973549a2cee61ffeeb6439abc419cd8a489a9

    SHA256

    f0ead1ad60e0cc310c1a40685c28fc7a69aa346604552816c51dd3c1718a1e76

    SHA512

    4bc26c18ca3a2edfe38ca1e14ad1e1415268b4a69cdff3c0f8e2b8fa910c67c2e4bc4f32c21274e586e8e139122ea3dbde7ec507c4722b4a9a778ee2598090b8

    Download Submit

  • /data/user/0/io.dcloud.H5A88A7ED/.00000000000/A3AEECD8.dex
    Filesize

    63KB

    MD5

    5061e4948844f7d366972ac8005e9f13

    SHA1

    a2b79a1c79afb095ddebf0f16a1f9db64482bcaf

    SHA256

    3aa6caecfcd101531539147e01382bc530b4fdc61e98937d63cc4648793c6a45

    SHA512

    223d18ce248912df18cdea3c8e864ea5e6ec058ca42cc5fde738188c54abcd260d7f24ac53d4987d3e32f4ae3e1e40e01354054d035bb100eef51b2d695f5299

    Download Submit

  • /data/user/0/io.dcloud.H5A88A7ED/files/.imei.txt
    Filesize

    32B

    MD5

    49b3115dea6c5c4514f53ca8ac106d74

    SHA1

    cfe5d99051c362747f120530a5cc24d5e51dff72

    SHA256

    9096df215ecec542ccdd34b9daeef4dbc9766f225cd35e9de4b2ea683f7329ee

    SHA512

    fc07db5a3b653ac498a63aa92c9b11e4e24177af3a21323cd438c18c3e35fbfd6d0f83e3ff1b45f8ebcbfd56a4a3a22df671d94eac7047003f1e7561ea5ab1e9

    Download Submit

  • /data/user/0/io.dcloud.H5A88A7ED/files/cnc3ejE6/eje3cnc
    Filesize

    39B

    MD5

    7769d4507985f59116153463f09235a2

    SHA1

    b081e84d14300ac7a7947aade9c025fa83bc17fb

    SHA256

    5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf

    SHA512

    ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

    Download Submit