Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3143996s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
29/12/2023, 23:25
Static task
static1
Behavioral task
behavioral1
Sample
06dd0f3cc380131a7648e6d9bde02b33.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
06dd0f3cc380131a7648e6d9bde02b33.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
06dd0f3cc380131a7648e6d9bde02b33.apk
-
Size
13.7MB
-
MD5
06dd0f3cc380131a7648e6d9bde02b33
-
SHA1
21d553f0e5101353e34c6c03619132b0b4d15de2
-
SHA256
3bba224ae3fdd9ddaba4bf2ea84dd25ee935476dd949c686f20386c45121c9cc
-
SHA512
c86908aac9eaaf2b184e64af1e9194d61f3ea20f6c2676946b13fafc56c38ca061df3af11bddf907fa5f594c58dca792628e587cfb5e0260237bbcd5b1baf910
-
SSDEEP
196608:Jx1pXuCl3tbionw18VFswlAhb8nwFDcvnfIHTdcfMhHwkw1YN3YoXXye1VewLnHD:Tov18AwqhgwFqIzCMRCYqonyILj
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xiaomayizhan.android
Processes
-
com.xiaomayizhan.android1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4251 -
/system/bin/sh -c type su2⤵PID:4317
-
-
logcat -d -v threadtime2⤵PID:4338
-
-
/system/bin/sh -c getprop ro.miui.ui.version.name2⤵PID:4357
-
-
getprop ro.miui.ui.version.name2⤵PID:4357
-
-
/system/bin/sh -c getprop ro.build.version.emui2⤵PID:4381
-
-
getprop ro.build.version.emui2⤵PID:4381
-
-
/system/bin/sh -c getprop ro.lenovo.series2⤵PID:4405
-
-
getprop ro.lenovo.series2⤵PID:4405
-
-
/system/bin/sh -c getprop ro.build.nubia.rom.name2⤵PID:4430
-
-
getprop ro.build.nubia.rom.name2⤵PID:4430
-
-
/system/bin/sh -c getprop ro.meizu.product.model2⤵PID:4455
-
-
getprop ro.meizu.product.model2⤵PID:4455
-
-
/system/bin/sh -c getprop ro.build.version.opporom2⤵PID:4480
-
-
getprop ro.build.version.opporom2⤵PID:4480
-
-
/system/bin/sh -c getprop ro.vivo.os.build.display.id2⤵PID:4506
-
-
getprop ro.vivo.os.build.display.id2⤵PID:4506
-
-
/system/bin/sh -c getprop ro.aa.romver2⤵PID:4537
-
-
getprop ro.aa.romver2⤵PID:4537
-
-
/system/bin/sh -c getprop ro.lewa.version2⤵PID:4562
-
-
getprop ro.lewa.version2⤵PID:4562
-
-
/system/bin/sh -c getprop ro.gn.gnromvernumber2⤵PID:4587
-
-
getprop ro.gn.gnromvernumber2⤵PID:4587
-
-
/system/bin/sh -c getprop ro.build.tyd.kbstyle_version2⤵PID:4612
-
-
getprop ro.build.tyd.kbstyle_version2⤵PID:4612
-
-
/system/bin/sh -c getprop ro.build.fingerprint2⤵PID:4637
-
-
getprop ro.build.fingerprint2⤵PID:4637
-
-
/system/bin/sh -c getprop ro.build.rom.id2⤵PID:4662
-
-
getprop ro.build.rom.id2⤵PID:4662
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136B
MD522bb881cba04476f04b8cc87c6406258
SHA1b42376ec51eb75ad9fa8c525e4161b45ce27c512
SHA25621fb397bca7914c6946007b96b98b3dee26b9f42e436cb0cc53259b4c95c3f96
SHA512d958f2aa6afcf61428734f8b256a65e6d749b60e73b4a7f74719f7df5e737e839063fc68e9f51d3e5d73813e995178ac0556c53a5073c7165cbdb2b485e570ba
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5a0b45132737a24d24f92566b35d80ba3
SHA1addc35f0b98bde6630cd0df08e28cd579a4f9c19
SHA256bbcb259684feaa0335950b734b7ba587de321208bfc75df65bb4426684241382
SHA512e91c13efe2616b4e11652f165e039e865603aafed26b645bdaf011b5f2a3822fd8eb1ba19ebd4c02b8b14f12da02e80d7356af6ad7f17c0785964505b315d963
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
56KB
MD5de1955427e330b83cd08f694777c3649
SHA1330e079e31b2221eccac1967aeae6210a43dbb6f
SHA2562071d23ba590f31911c1f8f99883042f24ce90f6e5a2c0cf518b239f873f0029
SHA512e62d125d38321da9bef3dcc6d8aa9da8af95bc4467b269701f8257b19a6b32c207d96211135dc30094fbf994dc5071bfa943f7adbcd16e841a6c79382bdae564