Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3028466s -
max time network
157s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
24/12/2023, 07:33
Static task
static1
Behavioral task
behavioral1
Sample
f3017307f70149aff9c02a03bab62bba11440ec7f6b94ba3ee05f1f0426f8316.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
f3017307f70149aff9c02a03bab62bba11440ec7f6b94ba3ee05f1f0426f8316.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
bdxadsdk.apk
Behavioral task
behavioral4
Sample
bdxadsdk.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral5
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral6
Sample
gdtadv2.apk
Behavioral task
behavioral7
Sample
gdtadv2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral8
Sample
gdtadv2.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
f3017307f70149aff9c02a03bab62bba11440ec7f6b94ba3ee05f1f0426f8316.apk
-
Size
26.3MB
-
MD5
6d0efc801599d271028db156e3f7af11
-
SHA1
b714157eb5d9bd5a465512e6e92aa7fa292abf3e
-
SHA256
f3017307f70149aff9c02a03bab62bba11440ec7f6b94ba3ee05f1f0426f8316
-
SHA512
32df3e11ff4c3c0161cc21dc238346d5d6e209d02d0f8d23862ad2fd3994d82a40ee808021c224244a5c9ee9646832321ba40de9d56edc2fc261c02d06c1c736
-
SSDEEP
786432:2QEdLlmhOpDKORH4kFJHMaOhSSfgUO3Dox94BvhU:nEQApDKORdsaxSfg/5bU
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.cyou.suspensecat -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.cyou.suspensecat -
Uses Crypto APIs (Might try to encrypt user data) 3 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cyou.suspensecat Framework API call javax.crypto.Cipher.doFinal com.cyou.suspensecat:channel Framework API call javax.crypto.Cipher.doFinal com.cyou.suspensecat:channel
Processes
-
com.cyou.suspensecat1⤵
- Requests cell location
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4256
-
com.cyou.suspensecat:channel1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4465 -
/system/bin/sh -c getprop2⤵PID:4518
-
-
com.cyou.suspensecat:channel1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4553
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
MD55a3d48496e7a8676f15f2d441e03e682
SHA1157054dfacf92372d7df2df3297ce97853934333
SHA256f58525bbad9207d76a1e484884e7c3eec70938b7963f3004c214640936fd8d0d
SHA512662b6c09104e44462a3117b19dba1348f4c15c4626bd080cf485de4e16462d6e54648a59af08db7a7c2223b2d2e3baaa3c7a5f56ae8aadec4aa9440fde92466c
-
Filesize
111B
MD555e17ce50739fa09bdc691a2d5212574
SHA1b42fa918665d5016900dec60e618890e41034605
SHA25684f03e26693e915a690ee77e8c280c2417e1420396b359d3db3dd94f4878babf
SHA512c13a73c2dc343c73455598a4dc5ea3b50e2be517da060db7fde9e29af4ebb21cc2e7f5877bc1a23a353111f63908e3c62f68004b6ebcdb8940bb063906cfa2b0
-
Filesize
237B
MD5711133adfdbf81c9d2934fa1bfa31442
SHA1ae231630eb90bcdae53ad29ea8479176dabef32a
SHA256f672b88ce1ac8c258c50befc9f825d99135c6306f1f6973fa154bd1bb18fbb6c
SHA51241f185d8529f2df3c21d4943e197d108744111e3205f12740d70cf0ee516c9a3f99ce46680855d9527a8937f50a867fc76efc1ddfaa9bbff082d5596b564ddc8
-
Filesize
237B
MD5567ca9a6bb7391c41b789cb947a9a773
SHA1b014b6f8557e1ca978f567d7562931ee51eca4e7
SHA2563dbef08953493a287b9e3d39b93790d2c096c6369f38fbf5a4b9df85398a4c2b
SHA512838f08b4660b7143d9baa2f15f97f5d3967de3baf5a5964a02c3cef09b32d96d415137bd2b3816024ce74bd0ddeffcec1f796b90cc56dbe9b39726b2c8fcec26
-
Filesize
4KB
MD5aa99281ce0cd69a9302f8b64b918ad75
SHA1ccafc0e5fb16198e466b209a888301f4100fafe8
SHA256a3cde8388c50e78c7b3c8dab1d0c46c64c375248031adbb6a5802e3da65bb431
SHA512a8b80f09a555652d3e4b9775b6aa58341dad7fb120509e128df417533ba361353b19530306e8691f1ce5fc0c69f1a89d29bd2eb176291a5e85b945d14c9eb085
-
Filesize
229B
MD514e13aae0a13b336ed2c605c5afd92db
SHA1f8f121a5376f6a85ce9e5894ca8de6c6f0ffbff3
SHA256e2c5c7305bec611061b4dd21d98622be8263969fca784eb4c56563353f1b4795
SHA51266aedd29222d8150c874a911f56f66bd8f0ed086fcb87ec4c9397fb4fd5ff4540317edbbf6191abaad4a085db67d3dcf8e0dce354962e077dca6b713d44d78be
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD53588d50dc394071a018750913c46b738
SHA18bf2461c9cc1543c5afbf71208dc8a14c8f3d218
SHA25670821d324ece84348c50bcd081736a9835e03db24abda61f5e4d59b41fceeb1c
SHA512dae2e7350a1276bf9aa78bacf11f191b66d3ef904e19f9954da96e27671fd25821e326d4c99464955675f72df95fa1e9a783a85886ac12cc1e2f12d59ccc81af
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
48KB
MD5b359cb558bad4bdb2422714d69cc94f9
SHA1b60c7f4d6d021fda17cf4be17a0273ab4fe7d64d
SHA25687baba2a0c9bf80f96c7f7771da9309ee15c86343d52eefcf18901ca0f62c79d
SHA512d37b97a6bb081775b0131fac16c2dd4d2ba4de49846fc2c261c17cc6b481fd6d1c5027bb30838c104a8b0271cd1369a633b0102c167980772ac40f6f347b3312
-
Filesize
512B
MD57f42b96e5100aafff34adeb99910f351
SHA16017389579047bcb694698f77db6396b76c3a74e
SHA2565638e0716a75dad3d5b8c0407d57c5a73c377c2bce63d1251d1455eb5578047e
SHA512053d35af70b895b3c15c882968cc9b170b56803d1969f1265f5af4113e77f567a4eeda5d03ec771531dc27a2d73a34b557604dfa756e045dccee31469281b509
-
Filesize
68KB
MD5d961614114756886b47d634a1eac530d
SHA15f383dea2ae71dfb39280daf206f4a9f7b146682
SHA25615f781819cf01a1e08cf9d454c63b005e3f837b79191007738c775f6504a9271
SHA5126e58a6f692067a6eb08dcb23be84871fdb220c9190ce2e4141933b26c7c156cfcba2651d3c5a0290bf015d40a30ed1a6751b9e4a6ab5ffdfa9dd72d915c088f3
-
Filesize
512B
MD5a1e2a612ea4fddce758cdf3466ba3d1d
SHA1f45bca709afe105c7913dd88c0871658e71e5f7d
SHA256fef8f4753eb43179cb45f41563c7929a3aa2491139274acae435c1566765b2ab
SHA512b410c9cc715b7580323bfa10f063934c347a29abf7a1701c922a0a2e6d1fcc478197077a6fd43ac89d9f085ec4d422be4c5be0ba8ea9ecd449c49874e1c30a37
-
Filesize
32KB
MD5750bf23e2c1855b6d4d17b7f125f9ac9
SHA1f4f092e12c3dd3bedbd46c52f54686b556ce4a56
SHA2564338311e2a97ecaf8332bb70f3271d855f9f752cf9077cae5a0d875c0a7dd92e
SHA51215ce4638bb7fd7cc49cba5f0651da3ed6c35b201300e693604b3de0e13bd10929e76dd18b876ae337a93c8b3c165d271610cea0070a138c516c293886aa51074
-
Filesize
512B
MD55181d52235ed91a42860a07b0d75f38d
SHA1cca99db2a9d83fd3f645e1d86ac02fdf7c5d4c57
SHA256781f09f5a06ffb441d20e04a6e4b98ece241126a43ce4619c0ebaf36a69b1d47
SHA51278c565449c067c9638ab1712481f4dca5782ff6d18b2edaf845a57827ffc80b7ff84e0d72527846ffbca381584a9c4f5fa92a6119bce95b05c2fba72ef0f573b
-
Filesize
76KB
MD54d4c47b2260f4fa5a65f9a4d32643a07
SHA160a7630ef7a0d942286902d97b1b1cb9e910c273
SHA25652dab3550aaa6b6e14f34bd016cdcdc9c3443ee1bf43540679a6fdeec018e0ba
SHA51287cfb1d7fbc76f95e91700607ff0aa6ddafcf8da6eadb07459538c63b7c82431ff47a825b761fc03c720a7467c3f7f433734176b771e7b2f7f0fd1c028de55ff
-
Filesize
80KB
MD57feb8930219f021e90d47eb0db157e57
SHA184306840696fe6fb1527aecf3462fbec6830ccb2
SHA256708b89e69aa2239aa45b2ce20f2dffd90504cd73e03f0890ca211c9efa23012c
SHA512b60b75b311a530dec6a5c1f8ea35193e4c403df276bfb531879fb5c70093da7ed188167b3026ca148dc20cf0a3a5747199ca5cad770be7da922b06c5d1b68ca5
-
Filesize
68KB
MD567fd4e643e26785112c447dd5a09419e
SHA159dda2de1b607c8851d7c914f8a746c1e41c4652
SHA2569b52e33a4ba43a58e1f33ab13e35ee0dc7aaf6463385b37cf2fab3a62d77b601
SHA5122168265b23b5c5934eed8d5a19d98de7fde94ce4226ba2e0382c66efa6a0101282871b9df98dfcf8a81a1ea61186c3f70e99f33b67ccdb0324dd7f2b63382479
-
Filesize
512B
MD528e3c2764a1c28ab8ab0c672fd3fd5f3
SHA1959027797cb0c9a36464afdc14837757c573345f
SHA25667861d180ec3994c1236f4f17b6f169e986eedf1cc4d502068eb6f8dcb14a857
SHA5125963ff2ca2b032c848814af88a391d9635dedd473f14f116d2c28b03fc1464ea3bf7f5934b08f2e7fa51b6e6bde947c75415b49efa5f8f6407ae059842c59b49
-
Filesize
56KB
MD5cee433c223dccfb1108c3f3112a0c7de
SHA191f237c6a58968f23ff1dc892a2f370eab526e03
SHA256764653fc120ed41b067e1539355de8cdc965277d2bb832a970651a830ff9ff52
SHA51222f1480f2c57aa05852d150438a53872e0f533e61a0d7fa3d205573b5f8d5cac2a1018a19f183ba456be58118eeba553d7202aff56242af6f8b95611ff439627
-
Filesize
44KB
MD5c855a84c70f5725144b779d7f88a771e
SHA172f4a7e7fb3b14df53220e09439cb2b9f58009dd
SHA256e0817ce03db8c7322dcebdf2c2350bf7e28fd53673e7a61e401e81f4566a8c79
SHA51204f4ce1832fe94dea0b478fe21965edf81dd59190c7c0c0b05141cd67b544554548b010dffc0155dc4d90567494b2f7e982c1480363e70557a1a3ef787257f9b
-
Filesize
512B
MD58491101687880088cb335cadee790dbe
SHA1e05b8f4cb12174c4e06f191c64c6a712c0111b34
SHA2567de2a4187e71899578247f672f139039ac4aab8b21f2afdcf96a48a9a955d07d
SHA51291791bfaac49d19d0c0fc4cdaae35db2e363d9ad1b3746d5a357f968ba16cd51a679f0b8b9c5f943726e1694ad66e493ce546cb9a35dc42ea221a8b8952f8295
-
Filesize
56KB
MD58458f8e31c22cdee198a24ec9094e104
SHA1e12fc4c6b88e859bcf3997bd7331b3d1992068d4
SHA256a3ac3a3d22d79dcda079f10dc6296b84cab3461ccfba2fed13392dbc331fa04e
SHA512c7bf7622bf0c2f6a36708b506ecb60ae4bbd867575c27371279352c3def9cc43bcfd53db39bf57169f0940fc79a0f525830866c869ace8eae19c8615314e7dbe
-
Filesize
512B
MD536709941fc78c2e4d08369d57cee53a4
SHA1053fc072b88b43e2c56f5e6605a63e401ba6ab4f
SHA256c89c17669945b08f03a63e060796951b65b6eedd8ea111ee11a212d4512bc94b
SHA5127290607a7cd91b911fe75bc8f43b882f06cac1f763010fbe26dba3a5b5956e472ac3ac37968a72551dc3a4210d502eeda1e3006eed50df0243855d484a31ee07
-
Filesize
4KB
MD535e45f02b13a9324ddeb22492ca48711
SHA1e155f6b1b353d62c1fcddb51da94a4f3f7180a22
SHA256c14b7507b6b2377a421f666d75a5cdf559fa8c78015890ae7d4388c1f729ad6b
SHA512655670d131c780e1c28e0237779156c29301872784dccf64012228665f7d72bf8cacb27632d68b5741147074d1e42083f39b835542c58ce7f936e882a690c1cc
-
/data/data/com.cyou.suspensecat/files/realm-object-server/io.realm.object-server-utility/metadata/sync_metadata.realm
Filesize4KB
MD56254469ee7c013378b88a5ebe948de0a
SHA11908ce3b378e475d880ef201036165e226962265
SHA25646cdb298382695da9fca0276bdc8e65d38ef414ad1853f6f57899711e38f7295
SHA512de120c30ca13f3ad069f37a3d83f50fa82d3e68d7eb6912879e06e28ccd08835830d157462ca602ca8d82f616152ac137dcaddc10924a2679d1f4d2ba0e71ffe
-
/data/data/com.cyou.suspensecat/files/realm-object-server/io.realm.object-server-utility/metadata/sync_metadata.realm.lock
Filesize4KB
MD5620f0b67a91f7f74151bc5be745b7110
SHA11ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d
SHA256ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
SHA5122d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d
-
/data/data/com.cyou.suspensecat/files/realm-object-server/io.realm.object-server-utility/metadata/sync_metadata.realm.lock
Filesize1KB
MD5f22d17ec898e5ea052a09517ea0e3190
SHA15ed49b734f5fd0a986ad35f5e015384c1852d229
SHA256d0be9e4963d7b27d1e138c17b2c1726169bfd5d450dc9c06df167a9c8b535ade
SHA5122447ee6592950b91eeca9be2445fe6115d99a162afbf69073c213b63aee9ee65086b907f8e59fa8a7db22f4b3902e10516824381260d39febf364599f6aa1cdd
-
/data/data/com.cyou.suspensecat/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzODM1Mzg4NTM5
Filesize1KB
MD5d55e9ead0d277d710896e86175f6452b
SHA15054aa073e3d517761ad56a6501e3c086e541396
SHA256a1d01f9677271c5ce972998c69aa9afdd136ac431622150927c43c932c84eac6
SHA5126524a8b5f7187ebbd54f4c2edf6534784a30d17c6b5545da238cafaec6a44f3cbb693fd5b555e5d30774dc5c020a57539d17f472ffd639bda07ff4e7445ac740
-
/data/data/com.cyou.suspensecat/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzODM1NDE5MDUy
Filesize1KB
MD59364514a2da9938962b1814db37d8952
SHA11d9eb4ae1427954369dd2200843ee4e178d735fb
SHA2562f5899ec4a0c15e52124fe7f7789e9f35d382b3c4f590d51d9b7a89f0ce86665
SHA51270700da74827a82313d761624a6d37c50e787a71a9e8e8201a76493a986b195dab96c03342be41435dc922d1c1a7a2cd31e08c82686fb177765d1d598f1cd11e
-
Filesize
498B
MD52bc7cd0b7f471ebab80dc2f11c03867c
SHA1f4cb6642c35f4a9c27a43bac57045bd79a558b79
SHA2569c00590cfe8c4be98cad9e303a9048a8b1dcba6d5c76eb660f8040deb84f4ca8
SHA5127af667ef3d2c161fdd5a654d251ce7c2aa208e2183bf0fd6066286663c1ed8645e5cd48663964a7fbce9f8f0b1911da2013fbc9835989e7ef398cd3d9d05bdc2
-
Filesize
111B
MD5e142d22240ba4cbd69a208313d1c8227
SHA17f256cd87a1653b0158588dd7bb646bf680a570c
SHA256d5d8ad86064ff0b2da6d6e2c03bf4325fb4cce3cf7eab4bcb51add2cbc33bee4
SHA512e1e1a2fb7a38c1e96c78b3a441b582b7f8586deec3842fb54b82811b51b8104c4cd2e49083edd2b2a2418f7be84319e49b7b70365f8ad5c5ec04c2459e45d2ca
-
Filesize
213B
MD522e2f271e6b542421cf05ad13b586d5e
SHA16565993f6aa1594c1fa0d2ca167c4df75a85dcdb
SHA2567a7261c23f83c861db34245f4c45df99d3e1e894fbcd973cabdd6f2307bb33ee
SHA51273f582be68e4ef5c80185a369afedd66ef8e0782677ae078497097606f5ad267da70fa04958446c429d4a51dd80e46206f2babe72bce86c05f6f8a97e38f6536
-
Filesize
32KB
MD58ff62ef9d8ae4dadad3511947035e313
SHA1c08a743c9e3e59ab70e5b51f3dfe7fc91a4c7a19
SHA256ebc1f5116fca0e8445783c524a76fcb5adf357dfa6bf756a71549d6b2f9d912f
SHA512dcac7e3f4a6d341d09d83f1a16fa37d70372f05b64c9ea6c6fed3bcce4919e46b2161cbb8ad4db4f114027a4f2d5e35306ddcf95d01de65b7825b9856550e31f
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD5b538e7c1cf7462320113c5d0e823123d
SHA1d929527b9c7968580a10bfb38385854b10dcb4c3
SHA2568b4d1c67e9d416dba709e536f75fe53b04643e11a14d437a71f1093ce3e979a4
SHA51221c7a0301bde1e2292db0f5e39101a70d19a08db29cfeea1bd3725fbad36f21b30bb044d4d42fccee5834137d29ca5390fcfe93c8487accdd0bc324ac61a5aa1
-
Filesize
167B
MD5e1aaff4adcad8af93c6363dbc0dad6e9
SHA160a82d1907a45cd140db48300e792c41593e41bd
SHA256cac2091fa03aef279b3d33a6b19bf753221d7cab4d3987da7d20da54f4678c1c
SHA512c0d5d1e9764c40e08c98456fbbef1eadce852aa155ff246db99e9d6d21f13d9410976074a53e9fd50f8dbc8dd871b6832cdb57d65c4d4466f2d19ac274154073
-
Filesize
68KB
MD59e32bab088f8364bcaf9010dcd67d806
SHA12a9a8d44ebc20f340ffda067b6b87ed3fa5828b9
SHA256558f2700af8d31732c7382b7470f9d5371dc251d6334d66f98090ac3e8dc6cee
SHA512be9b1867291fe804c5824d7b6d3e9b52eee07a1090a133f460a3f1002cb81d29502f9fe6b54f26d59c9fe17aadfdc6e19d5c2ecc02e589bee7fdc9988c895825
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56