Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3184758s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
30/12/2023, 06:17
Static task
static1
Behavioral task
behavioral1
Sample
10dc236953f527baf900f74ab9fd1b50.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
10dc236953f527baf900f74ab9fd1b50.apk
Resource
android-x64-20231215-en
General
-
Target
10dc236953f527baf900f74ab9fd1b50.apk
-
Size
22.9MB
-
MD5
10dc236953f527baf900f74ab9fd1b50
-
SHA1
584d11bcb3dfaf4caa3fa681d12eba0a8883a492
-
SHA256
501f1df1ec0fb320722ce13d569f90fc66c93b822ff4f2152bcbd89cfb86c537
-
SHA512
f61764cd8acfce10f7d612f53fb97162ee55f7b0c4f1767c39a8bc142986046e8f60da62d832fb5dcabc53c45079c392e829eb94d27ee41dc861dce9893b39e6
-
SSDEEP
393216:pk8uddncWkNUabCudBMfKmc+aQf5GKXW6hZ0RydMEnS+orPLReAgFnw:Oddc1DISmcVKFdGXsSZrzReHw
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 6 IoCs
description ioc Process Accessed system property key: ro.bootmode com.inspur.icity.hecheng Accessed system property key: ro.hardware com.inspur.icity.hecheng Accessed system property key: ro.product.device com.inspur.icity.hecheng Accessed system property key: ro.product.model com.inspur.icity.hecheng Accessed system property key: ro.product.name com.inspur.icity.hecheng Accessed system property key: ro.bootloader com.inspur.icity.hecheng -
Checks Qemu related system properties. 7 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: init.svc.qemu-props com.inspur.icity.hecheng Accessed system property key: qemu.hw.mainkeys com.inspur.icity.hecheng Accessed system property key: qemu.sf.fake_camera com.inspur.icity.hecheng Accessed system property key: ro.kernel.android.qemud com.inspur.icity.hecheng Accessed system property key: ro.kernel.qemu.gles com.inspur.icity.hecheng Accessed system property key: ro.kernel.qemu com.inspur.icity.hecheng Accessed system property key: init.svc.qemud com.inspur.icity.hecheng -
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.inspur.icity.hecheng /dev/qemu_pipe com.inspur.icity.hecheng -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
421KB
MD5d323e89d458f4f1d9489d26978c2bfc7
SHA1e047299ffc3ca059c8d33cf5c86c0021ba8fa62d
SHA25656e514aa32482d45acc743dbc8705b3d4dad0833de234c45adf77f90317a93bf
SHA512776666959f62e445706d769f53b254e7b88eb353efe04d32c95fbeb07f44be45337363f800ebf5efa3c23736aa100e240c9c3b7ee1cfdf0a93a79da9f7bf13d0