Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
682aa6b775a...f1.apk
android-9-x86
7com_aspsin...ad.apk
android-9-x86
com_aspsin...ad.apk
android-10-x64
com_aspsin...ad.apk
android-11-x64
com_duowan_imbox.apk
android-9-x86
com_duowan_imbox.apk
android-10-x64
com_duowan_imbox.apk
android-11-x64
com_duowan...ns.apk
android-9-x86
com_duowan...ns.apk
android-10-x64
com_duowan...ns.apk
android-11-x64
com_duowan...an.apk
android-9-x86
com_duowan...an.apk
android-10-x64
com_duowan...an.apk
android-11-x64
com_duowan...io.apk
android-9-x86
com_duowan...io.apk
android-10-x64
com_duowan...io.apk
android-11-x64
com_duowan_lolbox.apk
android-9-x86
com_duowan_lolbox.apk
android-10-x64
com_duowan_lolbox.apk
android-11-x64
com_duowan_zero.apk
android-9-x86
com_duowan_zero.apk
android-10-x64
com_duowan_zero.apk
android-11-x64
com_google_zxing.apk
android-9-x86
com_google_zxing.apk
android-10-x64
com_google_zxing.apk
android-11-x64
com_umeng_...ze.apk
android-9-x86
com_umeng_...ze.apk
android-10-x64
com_umeng_...ze.apk
android-11-x64
Analysis
-
max time kernel
2739640s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 19:57
Static task
static1
Behavioral task
behavioral1
Sample
82aa6b775abdaf499f001050aca5a320c1d35bc24595aab33366a177070d88f1.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
com_aspsine_multithreaddownload.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
com_aspsine_multithreaddownload.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
com_aspsine_multithreaddownload.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral5
Sample
com_duowan_imbox.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral6
Sample
com_duowan_imbox.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral7
Sample
com_duowan_imbox.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral8
Sample
com_duowan_kiwi_fans.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral9
Sample
com_duowan_kiwi_fans.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral10
Sample
com_duowan_kiwi_fans.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral11
Sample
com_duowan_kiwi_qrcodescan.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral12
Sample
com_duowan_kiwi_qrcodescan.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral13
Sample
com_duowan_kiwi_qrcodescan.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral14
Sample
com_duowan_kiwi_recordervedio.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral15
Sample
com_duowan_kiwi_recordervedio.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral16
Sample
com_duowan_kiwi_recordervedio.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral17
Sample
com_duowan_lolbox.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral18
Sample
com_duowan_lolbox.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral19
Sample
com_duowan_lolbox.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral20
Sample
com_duowan_zero.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral21
Sample
com_duowan_zero.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral22
Sample
com_duowan_zero.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral23
Sample
com_google_zxing.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral24
Sample
com_google_zxing.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral25
Sample
com_google_zxing.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral26
Sample
com_umeng_socialize.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral27
Sample
com_umeng_socialize.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral28
Sample
com_umeng_socialize.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
82aa6b775abdaf499f001050aca5a320c1d35bc24595aab33366a177070d88f1.apk
-
Size
24.5MB
-
MD5
b88b2db835f8838ac32a02d4e0772378
-
SHA1
03430c7af775b40bcd3f46bdc87a58a6dff7e884
-
SHA256
82aa6b775abdaf499f001050aca5a320c1d35bc24595aab33366a177070d88f1
-
SHA512
1dffbea6375617471a200a57b597a3f56e8652305928cd383890828a32ae4b219e63ddb8edcaf3793d2da8badc426e7cfa3192cfdf45dfd873832d742e55697f
-
SSDEEP
786432:mru2ZyqkK+H/BxToLxRaLw/9FnzhYp9AsjrLg6/f:mrbZyqGH/BaLiw/DnCpak
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.duowan.kiwi/files/storage/1/version_1/bundle.zip 4287 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duowan.kiwi/files/storage/1/version_1/bundle.zip --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/com.duowan.kiwi/files/storage/1/version_1/oat/x86/bundle.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.duowan.kiwi/files/storage/1/version_1/bundle.zip 4257 com.duowan.kiwi
Processes
-
com.duowan.kiwi1⤵
- Loads dropped Dex/Jar
PID:4257 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duowan.kiwi/files/storage/1/version_1/bundle.zip --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/com.duowan.kiwi/files/storage/1/version_1/oat/x86/bundle.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4287
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD510ea5799f0707aeef2db9b244f529200
SHA10daf401e98fbff1ab34a8c5996626c477d40f50f
SHA25681be3c8aa443dcdf08384b0ba4cab5916f7f144dd2586a54ee996c03806b4a50
SHA512a3f7512280c1b5000804f8c322f88ef8a67b61c0bb99e4a575f77076574eec98a06033ca9ccad225c3c286e255bab6cc5098f90c6402ba868221eb6dab759242
-
Filesize
116KB
MD5e6c6b54504290bcb82aac7c397eeeb14
SHA1315f0b439e93b4fc3bc49932cd32ebcbc62bdc80
SHA256ed1b804ede7e2f03658c97104937499db136e9d3ecf6595898c672128f5ce8db
SHA512491b32ab4656cdb11eaa80639f44978efe76448494f7015cfc9c3e451dd663a82c5f442cdb4c9e048c7b2413c5f4ec8a55f230231e61b923f81b16665895565d
-
Filesize
7B
MD5ce1539cb197f0b0721dabc73016770aa
SHA19188be2faf6f4778c9425ae7b647ac67dd5e0e0f
SHA256301f114df5b33ae2732782c78700a8538c38be394acfc187551862adab49d923
SHA5126b79a767edc0ca2a5593f6490a9ad135ce0a44a6a4fb03d2b4732382d64d63b4e9f6f61e8e00eb2b6ed12cabd0bd3e034de812429a189ef5094db59711efe75b
-
Filesize
41B
MD59b2b5d604319974bc03e6de2e2139b67
SHA1107f3d47c18695cf1986d61bb91f8d33522ce18e
SHA2565f47529b7ac0682bb9b7eb2c5fb35ae4847459d9751dfbca1ae3d82286f4a734
SHA51225b8ad7c0c952e32bdd1a0a4d193df99307991826ecf54c26bf71cb1dba01a9db885bb8dafed466cec78f5908cebde189a2c5091d1d4b6bbd97e1e5f68b505b7
-
Filesize
18KB
MD58b5d2ab676fab110e3f301d37616b46f
SHA1ddc60eb5885d00e668d953ea60db86ecf89d19cb
SHA256e009496d3f0968650ebaf32ede3baeeb12298b85c5e8c993e7f501148e8ebdb6
SHA5124c5cca822dc2e94c490dae3216b5946170ebc4aa0a8b657374e36ef9308c7c7058814b74bab20e2abce4e4644d5de47e8710804fdd49a93b2a835e4efa57b0fa
-
Filesize
8B
MD5596be2d44fa5f557702b144ffde1014e
SHA1461d6580e38ccb6dc72699b6c945e53831dcdf03
SHA256d5688a52d55a02ec4aea5ec1eadfffe1c9e0ee6a4ddbe2377f98326d42dfc975
SHA5123d53caf3669af0254e5a4c3785fb2127567f02c6e63fe809339670ec20f33c4e900a36af2cb2d5dcbc1ea21aa2b1f996a663b6429cd5a3063be117e8e43be012
-
Filesize
8B
MD5fa5ad9a8557e5a84cf23e52d3d3adf77
SHA1cb473678976f425d6ec1339838f11011007ad27d
SHA256cd2662154e6d76b2b2b92e70c0cac3ccf534f9b74eb5b89819ec509083d00a50
SHA512df9c478c05321087b50a1d239b4aab290e9b793252758e706e24312aed21c29072285e436a20c3c6227f99b73638f0414fba5835586fee4e19231c1ec56d58ee
-
Filesize
8B
MD5e675cc21c1f78217cf5d6a5b1929afde
SHA107aae1b618f604c684ee3189fa1723bef8656fe4
SHA256cd04a4754498e06db5a13c5f371f1f04ff6d2470f24aa9bd886540e5dce77f70
SHA512dfa8db1c35931931a6007f85a9f4035928cf159357ff8d682a50b6a0f3dfa0e020ed4eb377f6011446f351f7001bae06932ad0cb662e01f07acf6aee257d3bad
-
Filesize
273KB
MD56b9a2c550ad58ea9a8cea7c4e092ae8a
SHA19ae409067e9e908df546bd4fe8decf9c92af2617
SHA256cf7171a130cc730965336f1184a3aa3ffa23e63c4a3a65f06710b8fcda58e71e
SHA5128d0c103a1a1f068d337bfb8fdeddc669584036fa98870a9551d867b8f6ee9995cdf1d964f67405cfbb728000aa1d25ba0e92d2a1670f59c847f9a59360370b0f
-
Filesize
273KB
MD5aec54a90725bdbbffdf446c484c8ab27
SHA1226406dd2ddf3e0bffb378eabf0d93554000e960
SHA25671ea4604ae2ebd6ed35f50806e40212c8da8d842a4142a16246a2a3d6a4cdea1
SHA51292977b89880660281dd6de38eaa759490be5c2635ce4e33d09ba5542ea06e7f40295306b7fe124a5377c98436d7d608afc15fd281b56a60e6f4387a4c74a329b