Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2544108s -
max time network
160s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
23/12/2023, 16:24
Static task
static1
Behavioral task
behavioral1
Sample
491779be7f05d9fb3433f53a9688534e16add49e86b3ad01dc19d9d937c0470e.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
491779be7f05d9fb3433f53a9688534e16add49e86b3ad01dc19d9d937c0470e.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
491779be7f05d9fb3433f53a9688534e16add49e86b3ad01dc19d9d937c0470e.apk
-
Size
15.8MB
-
MD5
4124cd43bb8acc62bfed5c6553c0f3d1
-
SHA1
0f251d5794f54cb043502dc20941fa7e7316d01d
-
SHA256
491779be7f05d9fb3433f53a9688534e16add49e86b3ad01dc19d9d937c0470e
-
SHA512
2ad4bce576f0c471a1e6a5fa5bf191b4dea3baf0f84a0740e868a397058bb16030d174523c43560dce76eac702607189d9c5f2abeb82ad314a68129762dd5bcb
-
SSDEEP
393216:7Qa8RRSaum+aRfNsiRP6tIQdHGLpzrQ+X0oMAkOxRgYj2O054fo12KA:7P8SaEaRfNLN6tIQdmLpdXxjrw55UKA
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.Multigold.CunJinBao -
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.Multigold.CunJinBao/.jiagu/classes.dex 4629 com.Multigold.CunJinBao /data/user/0/com.Multigold.CunJinBao/.jiagu/classes.dex!classes2.dex 4629 com.Multigold.CunJinBao /data/user/0/com.Multigold.CunJinBao/.jiagu/classes.dex!classes3.dex 4629 com.Multigold.CunJinBao -
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.Multigold.CunJinBao
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
307B
MD5a368403c71a3a3fabc1501df397fac4d
SHA13c522366df92264b0fd477b86e896ef6be00eaca
SHA256ba8a2b02c30235874fef35392bfefd782e863d607f67254bb042d0cf598e9af6
SHA5121aa4d8589e459aff2806eb5bd8d84db3a7c631e1ea26511415fbb85cb2313bcc999c3a09535dd1352eb8c2c7f0907255432dea7f7af8ceff3258ab02848106a5
-
Filesize
32B
MD5f11ad0193c3cbe4501c298a3e04c27e5
SHA1ca120bb0fb2e63e62e9bb5534feb01e5c2557062
SHA2561de7c4c28ec38dbb660cb12d5d90f8870cd596b3cd9c2f721ee20b67d8dd1116
SHA512644819c9a84309766a66065d8cc4ef1146c1970fcce1bc1428ecfa45482a3eab1d3bd4414ede6aefbd094b35e9a6659a982ca520612c778efd8cd581b3b1a601
-
Filesize
32B
MD5633dbc6687b1a7d377096ca8b3170af9
SHA1c9b3f41a71f7c585c22b89ba24c74d105193ed90
SHA256bb973e830ab68c6b216cedc11c5ff5b7ee522448e17eb5b267e31d4a335d57a9
SHA5122539da1441d7bbfdb4b9fa1a22b0b6e29f5a80e0066bd34e3cc7a5569b3fb1787a41657bc11800711aa64832e96f9ff9dc14346505bfedb393a0cd7bd15f17e0
-
Filesize
5.7MB
MD5494b2d7e64baadd79934c32cc2e8c1fe
SHA108f4865309037622d3db59167ee5f10b68548029
SHA256ab5ca19197dc93e5e424900d79879e7e9affe115577a681780e57714674c5707
SHA5125c2bc0a5b8df1eaac04adacd0599993112d535984a3ff0ecada052c544d91a817f57fcc0f527898b6799bdbb5b01972984cbe5e4bb4b4e61b7ac5df81628f578
-
Filesize
6.3MB
MD5a50ec94b7563dfd9d8ac459bd7779acb
SHA1fc5694cdc31c367073b0f4b578e7800caa25cc88
SHA2562d1d1d6cd890bcb31eaced93d5e972420e1d0df0cd3d37262412c2dbcc9a1023
SHA51220d2d40559474dc98da70569d39fe4f196111eed4cf7c8a19ec960454736110f56f6afb04ffa7bbca34d89b38e6aa008cb3081ab74c7fda44c60c968c25465f3
-
Filesize
4.9MB
MD5b355dfdd3e42d9380dafad884c93b684
SHA11cb690227bd9ac6d9d3dc4e954de2e4b75787224
SHA256c18688196880dfffd518fb1e5d41892920b32fd4812463f577f3875593a1d64b
SHA5128b56891c095795ec68ed41b312a40b98fbf93c46bbafe73020d6ad33280ca37057b00684e6770c6de70060e3b70ff1eb44ed817d6873b01b9e4916868c471c50
-
Filesize
487KB
MD5610a895c4a71bbeeaea16eddb1422bbf
SHA19f919de42ed1e80bfadfef48f8202b202166f869
SHA256baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217
SHA512ef4173ba32309ef1257b75bcff28fd44ab14398577b4fb3b6b95323035c964201ed39546cda3b7115ba5025781f3b9c018443e7932edd50a25b1be60359f80f2