Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3768754s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
06/01/2024, 21:16
Static task
static1
Behavioral task
behavioral1
Sample
47323949565abfa1db247bf60bb8cd9c.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
47323949565abfa1db247bf60bb8cd9c.apk
Resource
android-33-x64-arm64-20231215-en
General
-
Target
47323949565abfa1db247bf60bb8cd9c.apk
-
Size
7.1MB
-
MD5
47323949565abfa1db247bf60bb8cd9c
-
SHA1
1e08da7edfbdf4ecfe520a42b5f48e32abf4a57e
-
SHA256
7ffdbe30b50e296c2834519112b93dadc1a09e3098e66438109809e645eb5180
-
SHA512
f88858a6d88e19162b66e289c35f95b075f61fb9db0256db98e14307ce9150ca50eec5f543cf9ac3fe5c3549b6ef2861838d16e90313a5716888978403cbdfb0
-
SSDEEP
196608:PeNOivoRa5RL1YVuEl1GwzsWHLSWBBggq:UOivLRLr8zvdBJq
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 6 IoCs
description ioc Process Accessed system property key: ro.bootloader com.dgjqrkj.yinse Accessed system property key: ro.bootmode com.dgjqrkj.yinse Accessed system property key: ro.hardware com.dgjqrkj.yinse Accessed system property key: ro.product.device com.dgjqrkj.yinse Accessed system property key: ro.product.model com.dgjqrkj.yinse Accessed system property key: ro.product.name com.dgjqrkj.yinse -
Checks Qemu related system properties. 7 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: qemu.sf.fake_camera com.dgjqrkj.yinse Accessed system property key: ro.kernel.android.qemud com.dgjqrkj.yinse Accessed system property key: ro.kernel.qemu.gles com.dgjqrkj.yinse Accessed system property key: ro.kernel.qemu com.dgjqrkj.yinse Accessed system property key: init.svc.qemud com.dgjqrkj.yinse Accessed system property key: init.svc.qemu-props com.dgjqrkj.yinse Accessed system property key: qemu.hw.mainkeys com.dgjqrkj.yinse -
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.dgjqrkj.yinse /dev/qemu_pipe com.dgjqrkj.yinse -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
MD5ad9e82d3b0f6f43203c107ea179e7f78
SHA148435e9a841e4c3e3b5645c66bbcae8e21b0369b
SHA256e09223fc7543620933929f49cebf7eb54631ff92a51f2a3e6a99dbbfbde35552
SHA512bcfd726a685c9237cabe1891252ecb89a2300cecea86a082ec13bb516ef1102ac36f9a66d0d91f4da31852e73fbca49f95c8475d28f4a743fae915e35dd32f3f