Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3184767s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    30/12/2023, 06:17

General

  • Target

    10dc236953f527baf900f74ab9fd1b50.apk

  • Size

    22.9MB

  • MD5

    10dc236953f527baf900f74ab9fd1b50

  • SHA1

    584d11bcb3dfaf4caa3fa681d12eba0a8883a492

  • SHA256

    501f1df1ec0fb320722ce13d569f90fc66c93b822ff4f2152bcbd89cfb86c537

  • SHA512

    f61764cd8acfce10f7d612f53fb97162ee55f7b0c4f1767c39a8bc142986046e8f60da62d832fb5dcabc53c45079c392e829eb94d27ee41dc861dce9893b39e6

  • SSDEEP

    393216:pk8uddncWkNUabCudBMfKmc+aQf5GKXW6hZ0RydMEnS+orPLReAgFnw:Oddc1DISmcVKFdGXsSZrzReHw

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 6 IoCs
  • Checks Qemu related system properties. 7 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks the presence of a debugger

Processes

  • com.inspur.icity.hecheng
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Checks known Qemu pipes.
    PID:4984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.inspur.icity.hecheng/files/libexec.so

    Filesize

    18KB

    MD5

    2e25f0bf5fac05be7de1d99fa6c207e5

    SHA1

    28b5673e68b6e655a71424c303b0275b05b92277

    SHA256

    8699d1a7dbb626536d8907bb141d30481f192337daf1313171d34df52a24249d

    SHA512

    6fcbfe69fda925f6fd89fb9372719442d60fb55adc81f8b8200df9cb3be99b948a6ce5b5addf1c936003eae6ebd65bf88a28889a687d9ff9a16d39a33e2d68c8