Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2685940s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 19:14 UTC
Behavioral task
behavioral1
Sample
7448531235e3dfc38d62eebde776915482cf0c9b16f7fca92cabd90b0844518f.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7448531235e3dfc38d62eebde776915482cf0c9b16f7fca92cabd90b0844518f.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
7448531235e3dfc38d62eebde776915482cf0c9b16f7fca92cabd90b0844518f.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
7448531235e3dfc38d62eebde776915482cf0c9b16f7fca92cabd90b0844518f.apk
-
Size
8.1MB
-
MD5
965e0004c3e638b7d9c793c53169ca84
-
SHA1
55374cb8583e4c099d9233a71a6efa37d59ccb5e
-
SHA256
7448531235e3dfc38d62eebde776915482cf0c9b16f7fca92cabd90b0844518f
-
SHA512
e2722cac7c99836c6b2cbee9043b8d3e93e17b1e2adb983e0b9e59100f8b1948388ccd8a1b053ed7dfdd6252b52993a2ca730a8464473958accc7ec035aca863
-
SSDEEP
98304:aaGXjlXRXOwKpj6S0HE3RyTRJRlu1nbN8pvaTd9t5G0oSrp:ElVqeihydJRUnZ8pvaTd9thrp
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal net.dinglisch.android.taskerm
Processes
Network
-
Remote address:1.1.1.1:53Requestsemanticlocation-pa.googleapis.comIN AResponsesemanticlocation-pa.googleapis.comIN A142.250.187.202semanticlocation-pa.googleapis.comIN A142.250.178.10semanticlocation-pa.googleapis.comIN A216.58.201.106semanticlocation-pa.googleapis.comIN A172.217.169.10semanticlocation-pa.googleapis.comIN A142.250.200.10semanticlocation-pa.googleapis.comIN A216.58.212.234semanticlocation-pa.googleapis.comIN A216.58.213.10semanticlocation-pa.googleapis.comIN A142.250.187.234semanticlocation-pa.googleapis.comIN A142.250.180.10semanticlocation-pa.googleapis.comIN A142.250.200.42semanticlocation-pa.googleapis.comIN A142.250.179.234semanticlocation-pa.googleapis.comIN A216.58.204.74semanticlocation-pa.googleapis.comIN A172.217.16.234
-
Remote address:1.1.1.1:53Requestsemanticlocation-pa.googleapis.comIN A
-
Remote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.187.238
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
268 B 176 B 5 3
-
216 B 112 B 4 2
-
320 B 216 B 6 4
-
320 B 176 B 6 3
-
440 B 228 B 8 4
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
268 B 176 B 5 3
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
268 B 112 B 5 2
-
276 B 112 B 5 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
276 B 112 B 5 2
-
5.9kB 9.8kB 22 25
-
216 B 112 B 4 2
-
268 B 164 B 5 3
-
320 B 172 B 6 3
-
276 B 112 B 5 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
276 B 112 B 5 2
-
268 B 176 B 5 3
-
268 B 112 B 5 2
-
276 B 112 B 5 2
-
3.7kB 11
-
160 B 288 B 2 1
DNS Request
semanticlocation-pa.googleapis.com
DNS Request
semanticlocation-pa.googleapis.com
DNS Response
142.250.187.202142.250.178.10216.58.201.106172.217.169.10142.250.200.10216.58.212.234216.58.213.10142.250.187.234142.250.180.10142.250.200.42142.250.179.234216.58.204.74172.217.16.234
-
69 B 109 B 1 1
DNS Request
android.apis.google.com
DNS Response
142.250.187.238