Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2543249s -
max time network
137s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
23/12/2023, 16:20
Static task
static1
Behavioral task
behavioral1
Sample
486b38aed8100ec0296e9883aa1b48c7c13273b46a32bdeef5aeb64cb51e4450.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
486b38aed8100ec0296e9883aa1b48c7c13273b46a32bdeef5aeb64cb51e4450.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
486b38aed8100ec0296e9883aa1b48c7c13273b46a32bdeef5aeb64cb51e4450.apk
-
Size
22.7MB
-
MD5
b07e063055465c5f07484336b625af41
-
SHA1
8c8c0bc628bdd40ce1f53661a48308f0210af400
-
SHA256
486b38aed8100ec0296e9883aa1b48c7c13273b46a32bdeef5aeb64cb51e4450
-
SHA512
422b57a3a3c468289baceeabcc917419713d2d6915fcde55f4ca0692fdb52f8f9713fe931276850cb6068ea460f83b6cd4b0b61e6ee7e0bb2e8e9716827b2334
-
SSDEEP
393216:4mvVIKfq043mXw2O+gHVO3Iop+QHbmitPpA1BrdTikiWqroVoTmh:4mvV9h436Ot7ZWtu1B5iki0MQ
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/net.eagin.software.android.dejaloYa/[email protected] 4515 net.eagin.software.android.dejaloYa -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock net.eagin.software.android.dejaloYa -
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener net.eagin.software.android.dejaloYa
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/net.eagin.software.android.dejaloYa/[email protected]
Filesize2.2MB
MD53c2b50d5e757a23a7bbaf25f366793e6
SHA1dc2b637697596b4c812d2dba629d89c5d9984947
SHA256cb4fa2085445849b0830572cd77fd7472cae1bca0f7af6ea37c46c4730b46923
SHA512f790b52cabb7e711b0928ad01eb65627ab600255fdbdbe95902e39fdfd3449637896ff330deee53e66d7a2ce457ce2d79d8b7fa526127201a0b1a71473b2d000
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
28KB
MD560ae3555b60853ad5a921e6f0e489e7f
SHA1707ea120f60037bddac28635b5f3c0d74a69dfc1
SHA25668be1e675b68f8a894c80caa952c1205e292c427657bb79a58b9b366934d1d8a
SHA512550cfd40a3a3bc7be604a81c9c9c879078033d12282cf32ca6464851479823febd12ed2162ca6241b01a03ad52cd80cf3fe3c0252591e68cb11a8ceb682f2f39
-
Filesize
512B
MD56e11188c438d7a3583c2cfaa6ad1b578
SHA12ed64ee00d6d1819c9a24a67cf8bace985291ab1
SHA2568be924798401326550eb99d5d493b99651344fc55276ea12924538cfc0cbef5d
SHA5120f290aa6fa384cdaf5e7b3ec6b32855eba4fbb9fdae6710e2eb99474b3b76311154b1dccd14dba62508409196cfbc404bc76c0cae9fa43f98d479fdb65cc8ad0
-
Filesize
8KB
MD53f325ea2732affe28d5482670ba69ca1
SHA1350b67cfcb3db6749f82cb244f1ad6833e2ae8f5
SHA25683719310ef8e7e5baaa4a92261f6afee4ddeacaab2beb712cb8d46d96fba2493
SHA5125a4a7e75fe7f1344b5e00b76fc7ed3731fcb92383d9e29067b41c029f34e26c209806c7096ff32a0d325123eab123ebcceb1acfc48c0968224510dd1619853d5
-
Filesize
4KB
MD5e69e076b97e1b2d5c886b8b46a4d6e25
SHA1a6a10cb0ff81dc833eaa9ed5d64189db384b50f1
SHA256e9343cb6c1d3a276b05fd02741369eca630dcb0f465175193570cb021ff4c8c2
SHA512787181c6ae3cc67bdcb5cce4c2479223e60a5354c507088b3e9ca1f66c98efb90c9ae3333a64a9bb9ee802cfa722b29d328a4e96e99a70a5fc8ec9edff154504
-
Filesize
8KB
MD560dae9a38f81c057182c7b6f9b35d41e
SHA1a902a4bc67b9149787a81699b9aa396281bf4f3b
SHA2562d6c9590182dbf27789a36180565779904a563f6d00caeb6e0efda1d2d255876
SHA5124f3a0eba97de53e077b2f17cacdebf2c4def06b8d48f79a0d29c02544dbf73fc2c3282e34db0503c8cbe23d613b71bd311b4a2c820bab973747101135f2fa6cb
-
Filesize
8KB
MD57e07f1340efd187bcb734ed68b3a203d
SHA13dcbfd873a0d952bb5a96c9e31204afa8692decc
SHA2568483a41d3657e5e7c029558319221b61288a61247efc12855044a6d53c9e310a
SHA5128c8086155f3d3dee31b8e8f49d7c79ed03c5acd8be2b7b2660049c426813bf67c22a6bd464b060b58919b5cbbc5435e2f7ce5c891471248f5cb93b1c86ec7553
-
Filesize
12KB
MD5fe145606ec6a0db692a2b8c467d93f98
SHA1be19e553f6f8c492ecb2f6a974048c1715652e7e
SHA256d1e9627dac81f6ca1f7e521d60a6e4a63b4090ab6a1e4c8acccd3ec699e35a6a
SHA5122d964e36c49827a141355ad2a7a2e4f145a37ce2b6b6bb8364d3c5ca9778fc9a576e56c3e2d174a3fdf5fd945caa29f97f77ebf36a19954f53be13c6eca5b508
-
Filesize
16KB
MD594fd9e37713c9804936ad339932c7182
SHA159085c1122d8ff369a73cceb1c69a70157af7c96
SHA256f7fca5c257f4c33312559ef8be34fbd69f250d79da78cd4ffd796dacc1a0f309
SHA5124aca31ecf14f65177fd93f9b7f7c3d1a5d3251cf72170f282895e6fdc1bced2907e34642f861670f56af4b02b05379164235039db48030742ad20a837bce0d22
-
Filesize
16KB
MD5a4b24c4beac9bdb1bfb8c45202be5540
SHA1116f240d8503f9ca333b822eedb9e273801b52e9
SHA256d4d180b9049cb8f3827e103d0fce9199a09a35bd38e20aff65a565b2dd67bbe0
SHA51278541e43b5bb93aa2307697f49947aaf2d726d41eace67d48636eef3a104955e4b38d3083df0c87125eb8e0999d6eef8d9667a1f788f41a2f630d542636a71dc
-
Filesize
16KB
MD5dc19cd921a8c65189b1b27cee0a51312
SHA138ef28c6931c6f9d08c944764e97012bfb1555f4
SHA256121b5e5c0885440c6053f4fdef7b716c72a50b9f3e4c091c042c04f24fc2d78a
SHA512ebf7eeaebe67846151e0631c3eecc7a57d76b91b2e4b4bdae5a7f04a60188ad8081618e314ddbfa588b388183514f8983bde0fb101970ceb1ac8e65e88bbe878
-
Filesize
16KB
MD581989943fef76beac50e92ba66005e31
SHA13febd0a055ca2966f6e659b68cbbb9ffd25f1cbc
SHA2567f21875282f60a84fb505c68dd4aef1a6694288ca0b7446620aa3091120e3cd7
SHA5124053e940a4c295f941f5553569d1a45e48a9b9ba87a0425116fe58fa8d5144afef0ea7dca5b85429f2d356f7c912c5b70b6dd9945cec22002f18254190034629
-
Filesize
16KB
MD58088a7059098efaf1068ab715056bbc1
SHA13081cb065d2e00cbb9be86a49e419f47349b27e2
SHA2568c602e3aaeefaa0e5e319fb4e28ac6935dc3d9dc3680a561dd65cbde2132411e
SHA512614959ae99f8112f3137dd635804770973412a3e42b105c3749715f1cd782c377a9d69cec273fdc4f6c5386df8c06afbedb4576fa04c902f157b890af5d1b55f
-
Filesize
12KB
MD52e8d2b7e3b1a8758ee427d301314b7ef
SHA132bcf7c03fd4934e1224feaf2114df2ae56d0551
SHA25667b1e827a498e60301f0b57d15e0e342027c49266e8be14c7441dc7f774c299d
SHA5122a7acd5dff858b159ad5ddd05f8392dda9a0d2185dd5b2b4b20ab660d8946bd3686cdaaaeff7317d717a23a2da1d86e5e42e0221e20e55cc020a2d9a16b0869f
-
Filesize
8KB
MD52e8701f67309bf88aa1e26d45b6329d2
SHA1edfbce1c3a1a56e2a65d0ae8c1251bbb30a49d87
SHA256171b2c8d3dcce26b43145e5f7b13d87cd23e1213d49d53a54e13979e661aa8ea
SHA512b3ebe49b2288dbedb1bbd116a882fc7fe9aad1d91fbe8053109f4d6c93afdabb1205aa6c9dad462bd0fc379ca171c3d04bc61c982bcc60a9b28876c83dbd6898
-
Filesize
8KB
MD5c50b6761dcd38a620e59427f41565e4f
SHA1ce0c7f7ed1d7f0c7465e7ea632eb4637b7603ba7
SHA256badcb95bc3e5f073215609df17a580e4899eeb8e548499561dc311de3e68162f
SHA512dcd638bf2f74109ec9204691a4adf736e239278270f1d68f96d47e05c1bcfefc92f241498a617d6cfc4e8ec594b6781cb5671c05827fcd95005a3d260f8ac51e
-
Filesize
512B
MD5abb7f8c1f277e405a4d6d808aff9a446
SHA119a6b007fbf555ef1d454884f1e5f0798718d841
SHA2562e9442bd591279ee0df60179a18b49301b68c17a181e34d9a62f83a6ec8d2e6f
SHA51215ed6cc81264eaf535f200cda18fb90d7b67ed345afcae400d50e8bf773487722b88870152963e91f6142eb4ba2f2af1a52361e09ed1372d464336f5fa425e90
-
Filesize
8KB
MD50d7af4c2fd6d1c8f5fed03364fd3f96c
SHA1698c275ad9c81d6342b10237b61d786aa8bdec55
SHA25627de8dc6aa627be0bc87ef5feb9677e6b4a2cc386f1ef9d2029e873c399b9479
SHA512721d53b6a6e5dc0337eb2fa5d5113eb914a5052d2fc12d09cb8ee0d7c5360d6bf7ca937d0e69d5543dc58e4531edf41aeb91eb5865bd2e145759258f9b631bdc
-
Filesize
4KB
MD5d31567c056bd5e0046ea331e6d9fc3b1
SHA110de23889defc1d6ffcd20e5955a11b0f792a465
SHA25660f5a4981f6d2acccf3590d9631db955994beb8bbc88e499f5199ac6d16754cd
SHA51254d2056539a21380d94ea0f2a7a340280c01e887907f6b6c20b86683f3c53a2850ae835fc0184917a4a3dc9661154da9d891981d72841506d5bc1d11ba47a383
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65870F8100F9-0001-11A3-9211342865A8BeginSession.cls_temp
Filesize77B
MD5d31b66184cef24c9807b236e8b4a23b8
SHA1a52fa2fb3625d7ec3acaa9e911e2a6feadb7b4d5
SHA2569ea280303168b4e7b17d38e25dbad76f3dc18089a6540c84b191931fbbaab5b1
SHA5126e1fff605489f1b6288c2cc1852cc2ef85b0445cbc015357b0d7761e258b6fa853a0f33682c2be331e8b870e315705cac2513e4328a450fb5b5c3ba2a79d7373
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65870F8100F9-0001-11A3-9211342865A8BeginSession.json
Filesize132B
MD58cbdbc8f1fc1ba1eafa301096fa253d1
SHA16bee09de06e6220495de98f1c38889c0421b203f
SHA256de8db9beb193fbebb14ed725e49031067819587934d730bebf58a7b107c23208
SHA51234eaeeeda35b049fd7fc21e5f5006cee146263119bc57a6a7a3009f1a2c0055e29ec8b8b0912096d5e78a3d062886f38abbf695521d52c08061dd8a8ea3f1bb8
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65870F8100F9-0001-11A3-9211342865A8SessionApp.cls_temp
Filesize138B
MD58435250eb212e5ae223ee5c2c5b638c9
SHA1ca0fa25c805cfe3571a12bab9c6939155b832def
SHA2565fc3961b578822cdb2b75c08515178d7467f4f3afd1cd7cddbcce0237d9e819a
SHA512bc63c080380d2ac1cc99169c3edc60d9e6b7b9b647333bbfb9f6927bf11706546c95662f97b7fbecce6da12383674ee5000ecdd143e89f8fbcd34e4eef394b1e
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65870F8100F9-0001-11A3-9211342865A8SessionApp.json
Filesize251B
MD50a2c7bfcccc9472563f2b6e09923c2dd
SHA161703ed8d206814e6ec2d966a89cf7581ccc9815
SHA2565fd46a6693764ecd8d789a229ffe4f902c6c37e4aa624f8b06a7bee14a5eb3d9
SHA5122d8bca7c24c6b610d6ab6ce4980d2b7fd218941f227c1aacfbfeac1ea9e11b9519fb86920cbf47d9b63817fa10bc5af504fcf416ddf8fe6ae077f74e8eff94ee
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65870F8100F9-0001-11A3-9211342865A8SessionDevice.cls_temp
Filesize48B
MD5fd6372364a5c5c9cf8945ac3ea7a5d94
SHA13c798cab71f6ae7a81e71e58712368231230588a
SHA2567400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
SHA512a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65870F8100F9-0001-11A3-9211342865A8SessionDevice.json
Filesize202B
MD5eeeb942571fa704cf8ae49731fbe9789
SHA1b5989c4cb932ffc779ee25bb3f7bfb79cf720427
SHA25678809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
SHA51271e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65870F8100F9-0001-11A3-9211342865A8SessionOS.cls_temp
Filesize15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65870F8100F9-0001-11A3-9211342865A8SessionOS.json
Filesize55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize455B
MD543a937c0107cfedf540b7528e4dd741a
SHA1f721b5a73f4af04dd3647acf92bcd7a539e9a81b
SHA2561189edadfa4b292ade6fcf87c3f06724a95ee4516a20105acf2cbe183f336037
SHA512427c90a5d1698d2723f44bf55eaa3600baa4e8a97ce9dd9b4b4169262593d64e1279e6a0775e506ac823a5ae567b0a66e08f794e6ebca046f2decc026a52bb1f
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize2KB
MD5d44dfb33c4b8682d0f293d6d3ff10379
SHA107ca7c608cced7a48dbdf710d32d42c0180f4020
SHA256cffcbec34b1fca91f75519b6361003ee76e38b77f4af2e662259e2fa54194623
SHA512ed0727373b92a119ce36aebd5bbb4a013da943c639fcf58ae991f16ac1c0d805c564ab9be580eba5ba2cdef67c3616a80a97934c1a9b1ed59e719d5b18abcdd0
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_dd4b7229-2e6a-4bdd-981d-5cabaa3ae276_1703350150910.tap
Filesize363B
MD57d1d9fecf57cc5d1039d2cdcf31c0949
SHA1f41aa5a7d411ebea2503b18d7213403d5501faff
SHA256fb3bb9617a090000a7f3b8cb6b2724572594d6ae5d90e8c1d78f6350e106995c
SHA5124638df024507218c2d779c53b1c942974e88e905143852a912d052c74db3fe47cf52e9e1a24687e7a7a53b94786ea1599db4aaac5909f97f752cc511b0284eca
-
Filesize
298B
MD5faaf842c03c632ff4b2669c443f58775
SHA181aba421cd81d4a41ceee2bc36e2f14cb3153321
SHA25649721f548f88cbf965efcbd267809188b12ed33089dc5e6bbd4f0f997829d5a7
SHA5124f7facfa965d9690279310d7a5184bbe882e568e828614311c669ad9a097fa79d77dc841f120b997f49127d79bad84c412caae66024766885bec418605c3d92c
-
Filesize
32B
MD5b78fe99b2dcf567a0c3e73e550d2ba1f
SHA19b59a7f355c2ccab4975ea1c82e831766dc5764b
SHA256d222283ce76602db1a4f0240d4fa679583ae6bfb52e5dbbe47e64f977d2a4f18
SHA512e472f0f053c1b743b73dbf6041496787365d81f01d781ba37c76fbfa66592947b85ba160878f0ef500048082f43034d23d5bd22c52d40f1519fb2556cbda5690
-
Filesize
63B
MD5078f77aa3c16eba8643f32132ce06f52
SHA1856459f02a66a01fa27a8e974467d7e0a85963d6
SHA25641b526c0938685c0bded61659b328a7a516dab5f5036515f33642b4464a1c7af
SHA512c8091049ac6be729fb6985fd4a9f89900523858e34207a4a0873f5e1ac46348c2251f42620b89309e32250ef5a0b36ef071d449cafdb2d03543d70247fd8f6fd
-
/data/user/0/net.eagin.software.android.dejaloYa/oat/x86_64/[email protected]
Filesize609B
MD53a0076c6ee79df5b9ca222adbeb577a6
SHA1238ebb31137762e2fd58f7e56b32b2d7d7570d5f
SHA256b04f6dfd287df8485425b8e295caae552a85356c245c13009e5ee62b9a194d7b
SHA512fb9e24034c7510e75fc60e73e1be59e497513856d6d0d959beede2c1adbf863c698ca0b5c6d7fb50b21fddb95cf9a4667bb7686542b0a3a2e785a9c077d0cab5