Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3768754s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    06/01/2024, 21:16

General

  • Target

    47323949565abfa1db247bf60bb8cd9c.apk

  • Size

    7.1MB

  • MD5

    47323949565abfa1db247bf60bb8cd9c

  • SHA1

    1e08da7edfbdf4ecfe520a42b5f48e32abf4a57e

  • SHA256

    7ffdbe30b50e296c2834519112b93dadc1a09e3098e66438109809e645eb5180

  • SHA512

    f88858a6d88e19162b66e289c35f95b075f61fb9db0256db98e14307ce9150ca50eec5f543cf9ac3fe5c3549b6ef2861838d16e90313a5716888978403cbdfb0

  • SSDEEP

    196608:PeNOivoRa5RL1YVuEl1GwzsWHLSWBBggq:UOivLRLr8zvdBJq

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 6 IoCs
  • Checks Qemu related system properties. 7 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks the presence of a debugger

Processes

  • com.dgjqrkj.yinse
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Checks known Qemu pipes.
    PID:4253
    • getprop ro.product.cpu.abi
      2⤵
        PID:4279

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.dgjqrkj.yinse/files/libexec.so

      Filesize

      48KB

      MD5

      ad9e82d3b0f6f43203c107ea179e7f78

      SHA1

      48435e9a841e4c3e3b5645c66bbcae8e21b0369b

      SHA256

      e09223fc7543620933929f49cebf7eb54631ff92a51f2a3e6a99dbbfbde35552

      SHA512

      bcfd726a685c9237cabe1891252ecb89a2300cecea86a082ec13bb516ef1102ac36f9a66d0d91f4da31852e73fbca49f95c8475d28f4a743fae915e35dd32f3f