Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2635295s -
max time network
160s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 18:25
Static task
static1
Behavioral task
behavioral1
Sample
66a77dcf64603f5f0b3aa2172dc3165cb7cfb9de68aadb9f4fd2c137bd4924f0.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
BaiduNaviSDK_Resource_v1_0_0.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
BaiduNaviSDK_Resource_v1_0_0.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
BaiduNaviSDK_Resource_v1_0_0.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
66a77dcf64603f5f0b3aa2172dc3165cb7cfb9de68aadb9f4fd2c137bd4924f0.apk
-
Size
11.2MB
-
MD5
e8e59a90a93e514c26ee8148be50f3bb
-
SHA1
31ff0649ec4124c3bc42e9a6ef2e85c282060cb9
-
SHA256
66a77dcf64603f5f0b3aa2172dc3165cb7cfb9de68aadb9f4fd2c137bd4924f0
-
SHA512
9829cd9d6638725f5d1e742025090a4e2996d3104bd9f92081b30871e289f5effc6642ab9f098aca8db8638a3a8539769481f500fd0b4e8d11baafbc1d610eed
-
SSDEEP
196608:ZLALb9OLXxU1MQ73lJf0EKN4GTXbTB02NzQQNjbD4aH6g+1sHDIJsMUI:Z81zxJMEVGTrNnzXNL6MMJdUI
Malware Config
Signatures
-
Requests cell location 3 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation org.simple.kangnuo.zjlo Framework service call com.android.internal.telephony.ITelephony.getCellLocation org.simple.kangnuo.zjlo:remote Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo org.simple.kangnuo.zjlo:remote -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener org.simple.kangnuo.zjlo:remote -
Uses Crypto APIs (Might try to encrypt user data) 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal org.simple.kangnuo.zjlo Framework API call javax.crypto.Cipher.doFinal org.simple.kangnuo.zjlo:remote
Processes
-
org.simple.kangnuo.zjlo1⤵
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:4273 -
/system/bin/sh -c getprop ro.board.platform2⤵PID:4318
-
-
getprop ro.board.platform2⤵PID:4318
-
-
/system/bin/sh -c type su2⤵PID:4374
-
-
org.simple.kangnuo.zjlo:remote1⤵
- Requests cell location
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4339 -
/system/bin/sh -c getprop ro.board.platform2⤵PID:4407
-
-
getprop ro.board.platform2⤵PID:4407
-
-
/system/bin/sh -c type su2⤵PID:4437
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD51a66ec91db9e30f2d5c1c6bd4ac2b132
SHA179a53910edd83bbecc0c96b61545e52c6538580d
SHA256282e32b8fa7f50a9aab43623f9b78ebffff372d8952e4ed875d5e0dd8ef44682
SHA51221adfa5893da60cf09d9d055122a122f292a5eacc40bd47e6688e32b7f803ff681d15285487f65f5cfc6b7e226e14cd56ed21c2d67d986e576c5617ddc6af5f5
-
Filesize
68KB
MD50527d719a21e3b7961b914fcec7b2afc
SHA1e6609a2a91c71a11db52c242632ca7fa7198c610
SHA25669cb3ad1630a383b748cec5106069823ed1fdfdde3aa7f13a285abdcedccb0a0
SHA5121d7580d125f4e45de65d0e9dabce0a6db1d10dd510594595c9fdefa32f00cbe0b10446bca6a4d98bcfb88a213b4b898b4d27849e812b0280d0a8b6ca2e60c2f3
-
Filesize
16KB
MD5dd103a913f48c73e0d4a35299949698c
SHA1debe4aca23d5ccdb36fd8751feb189dc41fcb0ff
SHA25628c1b3c3c33eb06190705cbb401057f2052ebc007952e0db4e1dcff87b500122
SHA512c75008bf5658339c7dff5e435931c4ca999acc28cbfe80ce18d76a64662bb2da1fc25248ac19163a5017600ed7e0a576e553eb936122863c38104ec7f5541e39
-
Filesize
525KB
MD50357e8edde36315c0e0a4f5385de625f
SHA12e6c6f15010e88dac5078f34e31a8ddf5e032f2f
SHA25644764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d
SHA512497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93
-
Filesize
248KB
MD546a9f9a5221dbe4ff71bfcd2ee045c5c
SHA1915cb3bc2f0096dede38afc1cd7f09c8782360a9
SHA256ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9
SHA512185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2
-
Filesize
166KB
MD53f1348cd6165c9a66a9892565c917ca1
SHA196f0c939438c494cf3fd89246d458e92c0c7203b
SHA2565fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a
SHA512405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023
-
Filesize
4KB
MD56a86f30539dfc9332cd235fc48fcb62c
SHA15c202003f6346edb85175b8df7c460793f5512c6
SHA25634bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f
SHA512f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235
-
Filesize
69KB
MD54e9eab735928758b860e48b2f9befd7b
SHA17223dfdd00f8059d3b83c28c6f7d78d2dcaa0569
SHA2561a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4
SHA512c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599
-
Filesize
10KB
MD5c16f5ca1517683c46e02a6b71aab3c00
SHA12d09a048d1b8d556d89d4d723947e9e234b5e59b
SHA25613d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9
SHA512a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b
-
Filesize
1KB
MD5883c30365d5d377966125dd0c079debd
SHA1d296ec1e3f4badb6e3e6166c1473fb55d4265761
SHA25650112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa
SHA51200b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f
-
Filesize
86B
MD5298924848d2517a508f43ff0cc51bd3b
SHA1b9fcde7b86653ead6deb57280a6049cf87745710
SHA2560b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b
SHA51263b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342
-
Filesize
69KB
MD565685a117c72fe8fbf5a92b07073c99e
SHA1b115b527f74e4c291edcaab19b316a446aca8f5b
SHA25619bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8
SHA512e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253
-
Filesize
10KB
MD5cc3fad9057e0940ad4d4c7ad27922023
SHA1403cbbcd7b819733b5caf49ed2a58d654441e99d
SHA256f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864
SHA512ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21
-
Filesize
1KB
MD51c6abcbbd253448057930ad1cc59ac75
SHA1a5845d1c4bc87b8b4785b456d76edcb8309eda4e
SHA256a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136
SHA51271aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631
-
Filesize
127B
MD5d54b7b380a5ff46c78283013a07d8e0f
SHA1f697c5f7028ba2679a96d6bc5291c38ff96d7982
SHA256c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c
SHA512ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4
-
Filesize
1KB
MD53df945bc783da59e9ed5676ada06b3ee
SHA16e6908af95b60e9e3ecee3edb64a278ab193e431
SHA2564cf136d8dd014b3000a8a69125cbfed3374c397ace915ebd4c80247ccd43a2ca
SHA512cd7021557e76fd836caae5448f7034f08c5fa4c9e267994643bc8ac33864e293667d92af63ad831ea8224337eb00c16b26d26b11e6f4e51844875cecdd8e7d76
-
Filesize
86B
MD593139bff9c6d25d64123f2f83016ea94
SHA161fd6b34f42fe570082b8c1e593602f7ded659a6
SHA256103f5490306f9de2cbe42a436ca98b123015e851ad0e66247eaa7f2df087bb66
SHA512fd22c151ef23419929c27867497f12c5a3eb51ef3a93c679d0fd28da3dd729ab4b588797fcf1fff71dbda997d634a67588420bfbe7569116cad7cb9330b1a4e9
-
Filesize
166KB
MD5fbcb00ff8383a0f581234e12b5c04f8e
SHA17d6887635e2daf2a23b833c58022c6457f37558f
SHA25698a13e017259cafba9332be1226e3713b20741ed24039953d9a53e0ce30792c0
SHA51298b42d0e8f057ed2ef07e8ec71bc3a23eb9f702895375e4ad19a0c83bd26d3b9c4d524d3c828be5291fc7299d675c23e55fc93fc39e2a77d6d3855155bdba916
-
Filesize
10KB
MD584300321cc6f044d1c0f5db384e5801b
SHA1c77499aaefbcdd20dff73911ceec1b5a82ecb498
SHA256a47ac311790e966b67906c5c570e3af56b30a0a937e954b7ffd6a406123b8151
SHA512321177c919be4b6076fa9a05f2ef34f43740b54a7e99f339d26255b0ba23c69f731ec56f25a49d7e9b38ce8110d20f2924f3b60d9f4751676f4b66f7d12dac2b
-
Filesize
48KB
MD5d0199a475405ec6c27e32b6c50c8e2fe
SHA10364facb4bb292e17e0a4a4f0843217eb1b3f1c0
SHA256d0b9080ce92a6c47ae77dedcae9d32c45ec1876d958dccb695009d15b377b877
SHA5128296f15bd665f40f56d89278e4bc8e4adf605bcc23e53820c4344d17e9fc714d5438ca4b6b003caec9b2bb4e407b72a961c38e26e14e6bf16b1dc8be5357a6e7
-
Filesize
512B
MD5559910fbb822de08d00bd04de840636a
SHA1037f8b48955d1f7cca64d349701155915ee0704a
SHA25622bf3ae06f802e044c4f023c0ebe1b78b8624f8f4bd3b27778d8843c29d720b1
SHA512fdfa2c53ad397ebac050eff8d2a17b59d077c7a940b3cdda226624b50020676ebe224acc99de9f0d603b516fe35741910ae07aed3b6fe55c35e08c709c20b91f
-
Filesize
69KB
MD58223834b70b769e4676f333e1cfa6471
SHA1b2bbab8892a5f456f47b0d30b36b7bd28688c0b3
SHA256b501bbe7d0918e219f184bbac091186349b017508419c24a50da3456a8041b19
SHA512a6a3e8b632f5543ddbbdbcd89827a4485bbb66438cbdb097b47a481d0185f8f1323ddcb332443bb665b1044d4594b204750c3a7750fa03e2eaf20b2ea3507b03
-
Filesize
156KB
MD5a93624fe1a2e6a860629b65fcae372bd
SHA1613671d2c11a150935b2e4858666bbfc5b723675
SHA2562cde36683f743490685aac0fb5f94c0b48dc0fb01351b2be0a2f44ab1f83361d
SHA5120399702de9b554f1d8e183c57887fdac6b679ae7860c4c7a2336a87ff414bc4f26325693108f1ef559ffa09bc91505a9a3ad738584f92f6ca6620afee5f63a26
-
Filesize
6B
MD58e31aa8d6b61e8b044ac3346e87098d6
SHA170e4050667039f00eb5231bd731b9f3cb5daf00b
SHA256d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b
SHA5122935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6
-
Filesize
4KB
MD5be7778f14fa70b5e3fb0834de023998c
SHA13bc4b22e1883afc0aefe872cd446bb76203b4b63
SHA256bfe474a867d3d178f1f8859a833db63bc8c0470769effbb103ea3713f311e2f7
SHA512a47a3cf5e0fc9c953dc94befe9847a4b335ea5c44d76c01f7a9f8f5d4e97b840f675cf308e9c7c4a0847484d254aa074336d9b4d1b40d0abe009d6fa812010fc
-
Filesize
4KB
MD54eb6b671acf1a1ca42d436b6f1afa4ed
SHA11b1bde36c94b0667b6d027fcefa895e2102a6562
SHA256a6656473259ab384cb6d1ec7349e0ae8f094231bd636e3a8e7c60295b5f2acf3
SHA512b6d9ef7d03dbcb731c8fb563af72ca2db834ca7e58cbac06eace262bc34f1f3921584a5dfb3168bfa66b33a9b4b66924bc6522d1301aef908b209aaf77162ee2
-
Filesize
88KB
MD5ee4b83569af687ae1e0f4f1544ee81ea
SHA1ea7f8cfd3818499a75dc530f04ae45bafc88e53a
SHA256abbfbfb9420a230862a003e5a3162c3b1974888804f3dc8924e9159afc17aa3a
SHA512f66f5f3d256216c427b1ccb4c165c2d6ce42797580358887b937d18d18ee62a1909532036d33c0d335e28c864708ad987499083688a8ef33a4deb86cebda2a93
-
Filesize
32KB
MD511c4231829f5c5aee99f63263f1a7c81
SHA1e405ae3fdcec3a724e5731f36703ab168ff5cc6f
SHA256e48bdcf24abb353558864a0be4683ab8a4a2a6c9c320abaf5366e9f1bc206e46
SHA512779ea4be2dd2fa35fc70d00d7e6f8746d9de3012cc7e35c0978c3df52a1d90c4fb8aacd2c7f1f0c6a630a9d377b58c120390babf873528304625bfd471148614
-
Filesize
1KB
MD5052b822a4b88b79ec323223130977695
SHA12cd8476e7964072e5d4ef916a91e964b7dd99050
SHA256e85a144d27cf338dfe9b1d406d22a2087e4b1e0bac382a6eaf074451be99277b
SHA51215e0740bde25a688a7e28fbe447c3de7e0438e5d382267829d510b94b1c7a3dab27b9b4136303717c211f7a736112f2a8837e260a4ee487f68f7e3266c54657d
-
Filesize
2KB
MD5c9cada2abc9a18319cf7f97f1383ef57
SHA1490762681a96bcacd3cc0e9dc6181a56e577412a
SHA256a8bf688ac87e2879775c252797881613a4069b7e3c3d4b95d982ceaba8920d5e
SHA5126095121e2bcba6e614a4f88b1c9aa61fdb5e78cbc17744416bb5681455f90138e863cdb167bfdd503c53f888bc45f60cc6909a512c1328b6263dfc99e232a690
-
Filesize
4KB
MD521338c8014dde150ffbc58155a17576a
SHA19b42273083b28ce7241dd1a7ce03044c494b9598
SHA256425255006b4f767b50c1088d5ee629bfdb11887c1c91c19ecaa87ed7fafa2feb
SHA512a51c0b2b5a6462e61ede3548aa0dd233b1bf3f1071ee94c9c6374fa3534361b5fcc45216d0d06f2320005e73b51a7f0fd9e7ca4569076da1dfdb2d6863a4e8e2
-
Filesize
24B
MD5a936690571e9104e1922dda4a0ba5bd1
SHA165f49c57edde2f96be2a1dbdfc3f7351f1e66554
SHA256f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412
SHA5123be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394
-
Filesize
24B
MD51681ffc6e046c7af98c9e6c232a3fe0a
SHA1d3399b7262fb56cb9ed053d68db9291c410839c4
SHA2569d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
SHA51211bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5
-
Filesize
248KB
MD59ea90919e6cad35813d0ac21a49ebf7c
SHA1135579de1e7853e1d98ca046bb36a761b1435946
SHA2565f862cb9de0d50f3822958a65c0c65a0b59b3a06d10c01a604cc7dd253685e7e
SHA512d30da6dfe6781649999d19289f06579acbe694fd080a5977803c309cbbd39c6fb0f3d44dca4f6dde42b09ce58539a45589b2d9984e5b58d5b83db2b75f76a497
-
Filesize
96B
MD509c5415b21c993c2f8ccaa41d71f2fb5
SHA139391aeb1c17d8769333af277c333faaf31a0ce6
SHA256bd5dc90038ab47a9c12cc6fde1e1be924f4b31cb3fe640c242390207da8ad907
SHA512bef04dc8efa7e6b06dc0d9402c6738080c8e995376ffa7f1d64554c2b37b8bd9fc5b8de988b1cc120edd2551a9154ae4e3618987c3f25d3651f712473c274bf4
-
Filesize
28KB
MD50d3e99204c6401ea499fe9e6d9855497
SHA109829f00ca458eab7374d5079393a2cd69a2348a
SHA25663ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca
SHA5128d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68
-
Filesize
512B
MD5c95406d47d8ce5fe058a1c81befb52c7
SHA169e88c3aa38efe12aded6df4f896e6fc51d43ab2
SHA256e6e205b86c5d2b773f8ffde9c30a91f651b2cea881392ed139c101b60dec106b
SHA512ae04b0a1f47c05b72d6c3399a7302f720c22e62f68af91407abc5e59e8226ab9ebeaf26538e3e6dcabadf653d2c151c144404edf2d32f55d477f05e7f85e97ff
-
Filesize
28KB
MD54c147c14af4c145352bd8b29fe31432e
SHA142924c6c6f9d10234a9053bcf1fc88403bd042f9
SHA2562f56b1ff49f5bafcfc5ef931f2949f45d4303d139c99d43165fd0e645a9c6909
SHA5123b194de38f2fd00aac8be66566d0891817e4507b821367bda7a47acac42410d5a7ecd0adafe1bd9dd9f38387732eac48b4272f0bd205c975dc61f910d03f4604
-
Filesize
52KB
MD590ee58797c06a8a18492869c3764eacf
SHA140f954936b98c0e8b6f69b71aaac406edaa3ce14
SHA25667844e471f4acc9b2a25f9894288ec1a3a294dc2cd60f8f5673262c4dd46a06f
SHA512f4f9f34dfa8070862c94de10172a7a4114c243611ec864d2dc22cb7aa550c46186532ae903c374add0f1a6b2319dfa3af196c54907e3af57f4f5b42e97d044f4