Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2732506s -
max time network
148s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 19:47
Static task
static1
Behavioral task
behavioral1
Sample
7ee0af841ba4f385f8d6d07de1eef61790782a3a8182a992e235c598181b552a.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7ee0af841ba4f385f8d6d07de1eef61790782a3a8182a992e235c598181b552a.apk
Resource
android-33-x64-arm64-20231215-en
General
-
Target
7ee0af841ba4f385f8d6d07de1eef61790782a3a8182a992e235c598181b552a.apk
-
Size
10.6MB
-
MD5
25fda9bf4184899543e256d79a54a8ea
-
SHA1
127fbb921b37894974619a5fbf0102c87914c575
-
SHA256
7ee0af841ba4f385f8d6d07de1eef61790782a3a8182a992e235c598181b552a
-
SHA512
58d7f54aef773a548e8971046f5199e6e0e1787c85b3fd6c1aa0e7a6cf88ccb9b4a937140f488c82ff5bd1926e07f8aaa99fd65712128bdce839926219659136
-
SSDEEP
196608:NQL3524v7Hev18C76LNwYncOfDJMyDRiHOkphdVKbRn9rTGaFPcTNsPtP8OE1JYN:NQL35h7eSBDfDRijnIyaFETyPtPX4J+X
Malware Config
Signatures
Processes
-
cn.com.yonghui1⤵PID:4478
-
chmod 755 /data/user/0/cn.com.yonghui/.jiagu/libjiagu.so2⤵PID:4534
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/cn.com.yonghui/.jiagu/classes.dex --dex-file=/data/data/cn.com.yonghui/.jiagu/classes.dex!classes2.dex --oat-file=/data/data/cn.com.yonghui/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed2⤵PID:4556
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.1MB
MD560192d4da11b2079e48b7ac24d54732e
SHA12b44395c9cba0d7bb619a08cbc26d7af849cd8e9
SHA256e5e03ebdaa1e90b113409a1432601d5f7b931e5360e6c0d7d1d89e3e1cbdb986
SHA5125e4466f4172bbd518f0081ebbb1b51bc57c0d4d6a7e5f8fd8a590bf3a4c674da6f67ff04a0cffc8c7d9fbb7d3abc87e8232e7638bdc9e6a3e7513cc5b3591529
-
Filesize
344KB
MD5f07c10fa1727a4d7395f07d20d77892d
SHA1a7c2f367daea205bda6035a739bff81003554b4f
SHA256b33b45d44e01f762b2678eb5fda5a804650b74cced4ea7362e3a19b37049e2b3
SHA51283411cbcf78a99fed70dbebc46d626c85f61ba729ea0b3c93d2e109c63bbe6a739eae09d61af7fa0ff127502f3a13034d45a130f581e8ed3f66db892712736f1