Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

6

10dc236953...50.apk

android-9-x86

7

10dc236953...50.apk

android-10-x64

7

Analysis

  • max time kernel
    3184758s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    30/12/2023, 06:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    10dc236953f527baf900f74ab9fd1b50.apk

  • Size

    22.9MB

  • MD5

    10dc236953f527baf900f74ab9fd1b50

  • SHA1

    584d11bcb3dfaf4caa3fa681d12eba0a8883a492

  • SHA256

    501f1df1ec0fb320722ce13d569f90fc66c93b822ff4f2152bcbd89cfb86c537

  • SHA512

    f61764cd8acfce10f7d612f53fb97162ee55f7b0c4f1767c39a8bc142986046e8f60da62d832fb5dcabc53c45079c392e829eb94d27ee41dc861dce9893b39e6

  • SSDEEP

    393216:pk8uddncWkNUabCudBMfKmc+aQf5GKXW6hZ0RydMEnS+orPLReAgFnw:Oddc1DISmcVKFdGXsSZrzReHw

Score
7/10
evasion

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 6 IoCs
  • Checks Qemu related system properties. 7 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks the presence of a debugger
    evasion

Processes

  • com.inspur.icity.hecheng
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Checks known Qemu pipes.
    PID:4213
    • getprop ro.product.cpu.abi
      2⤵
        PID:4238

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.inspur.icity.hecheng/files/libexec.so
      Filesize

      421KB

      MD5

      d323e89d458f4f1d9489d26978c2bfc7

      SHA1

      e047299ffc3ca059c8d33cf5c86c0021ba8fa62d

      SHA256

      56e514aa32482d45acc743dbc8705b3d4dad0833de234c45adf77f90317a93bf

      SHA512

      776666959f62e445706d769f53b254e7b88eb353efe04d32c95fbeb07f44be45337363f800ebf5efa3c23736aa100e240c9c3b7ee1cfdf0a93a79da9f7bf13d0

      Download Submit