Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2810771s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
24/12/2023, 08:15
General
-
Target
ffe678a905b47b0a5d25eacd4e57719f98962d4073b923c83ae7b24f6b68f05d.apk
-
Size
16.4MB
-
MD5
f3af5a4feacdf8ccf004f78f6b1ab776
-
SHA1
ff98dc95c6192d7409473a821a99df46a8ab2fd8
-
SHA256
ffe678a905b47b0a5d25eacd4e57719f98962d4073b923c83ae7b24f6b68f05d
-
SHA512
091bafc0ffe72d972ee76aa3d735121cf5f622e323d90de4ca3f38dbeef4c222b0fdd353f029d2fc923d083420d350a118c831f9a88097037aa746f6bf316a4d
-
SSDEEP
393216:kRCGa5y0jeHJ8agMPJL4zoiy2bngXqfZSL1rJVFt7dYcfVS1A:tn5yDHJ8/y8zoxTXqCllScfVSq
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
-
Checks Android system properties for emulator presence. 1 IoCs
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
Processes
-
com.lushi.zhuanbao1⤵
- Requests cell location
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
69KB
MD575a8168e7080b90fc2956592c268371f
SHA13702da56d31f381525473364f031dc884e37076d
SHA2560b9c032080788add7f5989d0ce145e66a4686ff3a43b0e48dec60bf18bf75701
SHA51233536573c834fffab7236dd96c22cbc3d075ab70b622ff7787381e5c7c262ab62e0252f0d07313c9227ccc8308cd93cd96373e57fa55a066691d5b5cfb55f5d3
-
Filesize
69KB
MD502f69eb4fe05ebc6c9f736d83e5f7e26
SHA1777d75e14a73f5721fc4ae34f49a9a4b82311373
SHA25613502356b7d3f910107aeff131e9c4a2b892744a125a2d1a2a206b219dc36042
SHA5127c1f5d68d40bf37aef2e59aa9a4f96d1ef642a8db7e53295953b0b5fa3a63cd7546c5cf8ad3fc17f6b84a795a08e13024d8dcb3db828ca3fad634964cba69bcc
-
Filesize
512B
MD5dc1a125db68a732bf6ef6f525aa9b283
SHA1485731fcda7c46212f7a660921f72576a7fe7a45
SHA256f2baac3e9dd8179c3a43db058af09cfcb6da51eb2a6cdeb9a39fc81d4d563f15
SHA5124129e6078f28c69971a58fdfd1ae1195cb78c749b6642fa3a0a119102e8919f6b9930659c3c3710a3dffb9cb773d17eaeb72875993443ad33ae95bc5a6171c2a
-
Filesize
8KB
MD5ab24223e57afb44ec5535a9fc9d20859
SHA165653007d2f134122a1a149d266083183d072438
SHA256ddb25bb446a61beba68537dd854a4ce7d10ee31ad333ea49f3f13672b0399375
SHA51256aec439ccdb390619638d7742a6ae8d8738e140190b3bd1b03dea6da1d3fdcc54b01e39c0ce8487cc2e30c4c36a42137779b16ec4833b3efc5cdab2fe3f27aa
-
Filesize
8KB
MD5d2490ae5d3047704e705b4542da9d7e3
SHA1fc96177383148090c936974d1f479b4f6c69c8b4
SHA256d9669fd5cb341c06739ec215f4f5d8f4748ef160b8cc7546ebd2b8a1b0391ea8
SHA5122612374e3acdd23ef2f0d0d91e9bcc9e9710ec4f192f4a2fdfe8fc46e7b40c1f4df5f6bea54174b11b05e5b1b6e67552d68e2c63941af2eac66d4cd543a0228c
-
Filesize
20KB
MD56aa2221283e2f6a24a1c148e8093c4d4
SHA1d757b8ca71e249c536d7ee6c9abf30a83205f5d7
SHA2566aa4c467e4c4b25f7a3b1844f3b1dd4afeaf625282f1c14ce1d8d818bf8725b1
SHA512f88555a33dac3ec698c8f363e2f9185bd08fcfd407de64625d57a7dfdb4c727a1ecc306565ecc74eabc34c4b84d86ab40b42417f33685521e49c61bc238bf979
-
Filesize
512B
MD56918a463946337360fd6f8309614f105
SHA14e73fd1991860be6d01443f75700e4b39ddc0a0f
SHA2564276d74f242e031e9074d79420df1f59355ae862e984293588fdec70f7735a06
SHA5120ef6bcdbaaef5930b54c5cb44eec9630a23e3c44dadb41cc1cb3315f85e65b3b7939bfde60af1c477345b91e1b0cdcce7feabaca72aceeb7480361d8111debc6
-
Filesize
8KB
MD5d71c1990972d20964f9d667628fc4e68
SHA17225a37f35cd824ce1af5c62efc529510025898e
SHA256e86c322828cb5082a958071e1c6e0873886b4937bed71d1d0aef517ff641699c
SHA512a55cd5d55ebf0f64bfc309d0a7b1c4635cf5ca30b11b6d2c449a0ded3a099c42503010666381387bd26f864abbfb9f204e62bb9c0764d79522e138fc6caa01ae
-
Filesize
8KB
MD59582324971de85f3ed93dc013f02024c
SHA1afb664b74bc0c515ec0a9d94bb6df433f25de400
SHA256247392a5ab9f6a023fde194d2d40ec9bf3da9d64451879d42c3d8b68c4eeb4f5
SHA5129e53b4bf4dc62938661ce5fc145024a02ccaafefe093118b08a34c78a7e75353afc04d9cfc71a4da65324a1a6e03533bc6bf66f7ad0ab5d40694b959d531e8c3
-
Filesize
12KB
MD5ea628e04765adaf4238a5dcdff4bbd51
SHA1a801947619ea8c368efe9c006a324dc6339ac60b
SHA256885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
SHA512c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
-
Filesize
512B
MD56f67abc99ae6264fcc1f2f9d0fe42141
SHA12fc1d03da5bc1ea5f57ca0050de135647e21fba5
SHA2561576aca9bb209ae2cbeef5a0b0ad205da53b70f605cc9060b723386c2102e914
SHA5125fa2cf5b09cdd9f0ff83fbfb0c727c52b4b2d59c1908eaef11525024d097dabede69b430a0db96c1ce674d714131fd12d29da91ef33d33d15cd355324e0f7db5
-
Filesize
8KB
MD5cf65ee27216402fdb716c85fbaccf03f
SHA194b9403a75d37411da3ed4e448de9ab7695cf6cc
SHA2568a9d639db0a05fee7eb062321c72746b5959af2e30ca07da17802a6252146891
SHA5124bf14ae2c0d6556af34207007b1c22ff98e5d5324b0716ba2ce6cb89c9283cd6560fbf9d2dff0485d890dfe9d8c25ffb5180b1aa3744c8426a5d7afe6b572b5f
-
Filesize
8KB
MD5075bf1500f730b170cc4b8754b9b3b1d
SHA1a4bc5b90b7fc02661167d23e7121965dd423a626
SHA256797dff78d780a7aecafa784df15a6474a58002b8d709eb634829f0d2ff4f5dce
SHA5125fd47eb8b94de731886d5285dd10894a4201511877eea3a32d12fbccbc322d57ca088acc7a34db88d44ec18231bb95e857a5b8ea3771f4a71024267d76bd7163
-
Filesize
9.0MB
MD5a70d22d506d7dbfc2b2bc928fc9bafef
SHA101dbf9da9cb6fe10074e01aed46b802d2752bafb
SHA2562a1b99582ad6fbe9bf3e03bed0ff185c931e6d72692d82f10801a5b98f5c9b27
SHA512f3356d9f80a33fef5deb691e39f92cf4fbd1df7b367845e3b4240b3e1b9fdc3343d8c3260581d5ee9443967ca29b14535e744767ed7343f12c995d1e0e091971
-
Filesize
7.1MB
MD54e7b544cc4527db7a01c0e50f67323f8
SHA1726fb91da72cf418b1d127980ca7239c7b298766
SHA25662384a361c611522c914d0d106833a043d0437a47ae235fbad4baae8f0b78a13
SHA51249139cf9ed130f0a994ea9736aa9a3efeb909398bf2e42602a00188637f79342efba43b545f25537e8b5eb43227abcb3632d0215d39b947ff0aba2d8d18b650a
-
Filesize
36B
MD54cc7cb73d28c9c05298b7435e9c6b047
SHA1bef478e09a755b7ce98954f3eacff82daada71c2
SHA25642c71c769811d714013a1f681556e43172adc8b28dfd4a19ba5457ae85acce09
SHA512047aae86796a1376aa28cf44f5e84d55e7c8f0388fe850d70183cf7c037930917bad0166383e51347e016646ad888bd28cfd3a52328edf8b43292f3e543d5951