Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3184767s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
30/12/2023, 06:17
Static task
static1
Behavioral task
behavioral1
Sample
10dc236953f527baf900f74ab9fd1b50.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
10dc236953f527baf900f74ab9fd1b50.apk
Resource
android-x64-20231215-en
General
-
Target
10dc236953f527baf900f74ab9fd1b50.apk
-
Size
22.9MB
-
MD5
10dc236953f527baf900f74ab9fd1b50
-
SHA1
584d11bcb3dfaf4caa3fa681d12eba0a8883a492
-
SHA256
501f1df1ec0fb320722ce13d569f90fc66c93b822ff4f2152bcbd89cfb86c537
-
SHA512
f61764cd8acfce10f7d612f53fb97162ee55f7b0c4f1767c39a8bc142986046e8f60da62d832fb5dcabc53c45079c392e829eb94d27ee41dc861dce9893b39e6
-
SSDEEP
393216:pk8uddncWkNUabCudBMfKmc+aQf5GKXW6hZ0RydMEnS+orPLReAgFnw:Oddc1DISmcVKFdGXsSZrzReHw
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 6 IoCs
description ioc Process Accessed system property key: ro.bootloader com.inspur.icity.hecheng Accessed system property key: ro.bootmode com.inspur.icity.hecheng Accessed system property key: ro.hardware com.inspur.icity.hecheng Accessed system property key: ro.product.device com.inspur.icity.hecheng Accessed system property key: ro.product.model com.inspur.icity.hecheng Accessed system property key: ro.product.name com.inspur.icity.hecheng -
Checks Qemu related system properties. 7 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: init.svc.qemud com.inspur.icity.hecheng Accessed system property key: init.svc.qemu-props com.inspur.icity.hecheng Accessed system property key: qemu.hw.mainkeys com.inspur.icity.hecheng Accessed system property key: qemu.sf.fake_camera com.inspur.icity.hecheng Accessed system property key: ro.kernel.android.qemud com.inspur.icity.hecheng Accessed system property key: ro.kernel.qemu.gles com.inspur.icity.hecheng Accessed system property key: ro.kernel.qemu com.inspur.icity.hecheng -
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.inspur.icity.hecheng /dev/qemu_pipe com.inspur.icity.hecheng -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18KB
MD52e25f0bf5fac05be7de1d99fa6c207e5
SHA128b5673e68b6e655a71424c303b0275b05b92277
SHA2568699d1a7dbb626536d8907bb141d30481f192337daf1313171d34df52a24249d
SHA5126fcbfe69fda925f6fd89fb9372719442d60fb55adc81f8b8200df9cb3be99b948a6ce5b5addf1c936003eae6ebd65bf88a28889a687d9ff9a16d39a33e2d68c8