Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2803114s -
max time network
154s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
24/12/2023, 07:33
Static task
static1
Behavioral task
behavioral1
Sample
f2f1956314f980e2c79856058578019b187c327c10aa78f637643d03d55e971f.apk
Behavioral task
behavioral2
Sample
f2f1956314f980e2c79856058578019b187c327c10aa78f637643d03d55e971f.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
gdtadv2.apk
General
-
Target
f2f1956314f980e2c79856058578019b187c327c10aa78f637643d03d55e971f.apk
-
Size
13.2MB
-
MD5
c4c5c8ce40661f9caad6b4018f5df937
-
SHA1
d2e0d00e4a4d707b43cc6ca2b0be30931a53adc1
-
SHA256
f2f1956314f980e2c79856058578019b187c327c10aa78f637643d03d55e971f
-
SHA512
daf12baefbc6cbdd3f77c36892c5c0fc7b4d30af1d315e9bfb9b9fe4adb2fe2caaf8a278c4d5546707b042d12bb2230cb6a53dee9a1ad86658355f5fb3ee5fa4
-
SSDEEP
393216:pzn3xGG/72h9gK9VKsGxfg5+RjQBiL9aXiProv/nRd/3:pz3xd/A9VKseZL0XiPYnn/
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.tieniu.lezhuan/.cache/classes.dex 5057 com.tieniu.lezhuan /data/user/0/com.tieniu.lezhuan/.cache/classes.dex 5057 com.tieniu.lezhuan /data/user/0/com.tieniu.lezhuan/[email protected] 5057 com.tieniu.lezhuan
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
MD575d46252620a12dd7343e91c8ba209bb
SHA16615b67e21963e5689685f8494f442dcd729d4d1
SHA256c433c8e3f847da2b98ee8b704ea3b7d0f38d6249626dfe26a22bef0c08e5fa71
SHA5129ae5f0ae0a77bc8c9a27a43252ba01d4bbb69a326eb028d2e887d701b202b66a7065765f2f0214d2b0701493634ff33c2104becdb80bf7e8c2657175857b7af8
-
Filesize
48KB
MD54e93a7a07efedcc6e3c741526d2d89a7
SHA1e25833d7a51783c17978a7c5e7953d7cf1df80f5
SHA25626fd97dcb56a0ae4ffee7b9514cb697de101ad39e3b2af2933b1eadf409b740e
SHA51294a5e0b50c0efc69b79fe9b46513537b798a45d00234a7fe1c529e7d5eb153704ec9966a0e0819983f726260579707d7b82e7b31f845fa7602e06c078b98319f
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
228B
MD57043456c5fd84feabb4470d47f4631e8
SHA1e3a1d3f96eb88afc97deb9b66643b3e213350216
SHA25600004dbfbb1ce944855f113d650118ace22c793335692c49847f90e0613d54f2
SHA51277e563affc6a302bf24268172ed3b4d83b8fbf2db8aaceb90d064c2b7b2ca3b8706b39e6bc2d750850f326528d0e9c7b98ae95a52b4bfa69e004ee717f81c624
-
Filesize
52KB
MD55c4c6c89b5302ca53fd3ceb2d0a1e4b8
SHA1a74539c44b564bd18b72929f54ed27d2302d4c51
SHA25673fc5bc3b6098447a3e7e53193f96cd214b510d6e72dd4f3706e64fbafaaaf14
SHA5124123d7da4232bb37b9874fb2e1c399cf861bd5a2a8190ebf43da68b461cb58b3767c3b9f4c957a36c115f36cf516e0ab02c7ef523423d64ca06ba6c1278cde57
-
Filesize
8KB
MD5de0c8abd3c70e6cf5c25e85effff136b
SHA176163b96483e633fff59a935cbcbf892a7176f90
SHA2567476f7e7daaf50819898dd4929dc1af38e4d33515d9f6e7634acb530ffee263d
SHA512cf56447271432a4b94952d89904c57e5f93bca9fabe2d5f06a26cc3c8f13403884226d9d60d2be5f5ad7942b25e31c35bf2d5b5179b103d1ad59c5e5353f9d4d
-
Filesize
8KB
MD5b75dc84a93b57fe83428346ef0bf489b
SHA12bcb6f2e7b761be8e2a59ec9a161fd685e8567dd
SHA2566b73435a2a43edad052b67fa94d78acd7a2392dd8cb5cd727b978e9097a4cff4
SHA51235a7353725e4391490cb0a96c3c5b150926b7aee302a38dde0c8af83aaba0ac25e406c61c4ee94e5309e4f6d408a56ae01e5ea14a00751fe1e15d6a057821b89
-
Filesize
8KB
MD56083e34fe92deae39f857a3d9d7ff1de
SHA173d33d2a9262d09bb4463b9d02feb3f4259dc61f
SHA256a9e97c7d56623d144ec9e6b5f86683987dec6047d86621de82b9563394096279
SHA512fa5da310bdbaa1e4413773abe123d196c80f232348adb7764e84424730bd384b505c1de7a6ebeffc26e72ebb675bd45d27f8d587ef524ab4a499e336aae2a514
-
Filesize
512B
MD57bd72415f91284b689d850fa2807b874
SHA19b5ca41e471d8a09e22de5aff5c8559690e05f06
SHA256f13b795bd161728046f3079766aaeb1af8456e06d0a09e9596888eb9c26ec595
SHA512c335471f54ddff4af2d61ff99904cf29270bea89f140edecbe848509de4256670fb4c9a27f12db514f44eef37dae429eb86c17b799bda639938e71d444880b53
-
Filesize
9.0MB
MD57a16907c5f1ba2ab831fee6c5aa32dda
SHA1053c689a3617db6386d44127ecc8d9392bf03517
SHA25692a7b48550213dab85a98e562b9dd5b4acf8a9ddcd5d02400c37548ecc4f0392
SHA5121715cd520ad2dcc9d9534b06cd091170fc169f4a73be64ad965d5fcd3614e807dddcda3c07ae8271e777672abacc9c0c2a36fe0f73a9193e37f24e414a45d087
-
Filesize
3.8MB
MD59cfc22170663ce25d8ca1503d349655e
SHA1d9618f192e863a4517f908cedd0ee855ac0c3a20
SHA256ec7fc67f1a6747ca0e0f3702f3a849cb6e228ed0a1291f3e5d03f0c621b0588a
SHA5121d05ae7ba0edb3200c43afc92a7d0af5ff92048071c38be7ce5d5f3dcbaf8ff8aa95a93f032dfed2c6ba9ec06b65c0e402eb7c5548df690cb7fba3619d91601c
-
Filesize
36B
MD5cb9c1851f60a18ca39f1b2eacb6d43ac
SHA1e6823fc2607e6d21364b46f540ec84fc03e48a33
SHA256c96b6e0b152b8906decef43a0ab2617755998d935e57dd0ef317a1fe0c5c2d67
SHA5127e3fa91eee04f8442609d22605a254a8f61b6f1591508673fa4b4726b048dc5634caea5f48ada8467ecef589570f60c8729e3a59be1e83e45501b51088d1ab6e
-
Filesize
344B
MD5e40486f187b6418e41342dd350e245b5
SHA10008cd6bfc016d338dda7d0c20e47bb52d7d1fb1
SHA256ef5a56713465434fc83bdcc0dec5df3ce5f511007cb66201ab405a4aa1716f39
SHA512206c11891a43912011a97bdf8c5f52755bfe8d9f3bc5e09b5a978497e269ebaec5b58ffee19286c774e908d53eed38c58fb2d42858970cbb3d0a7787a9bbea14