Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
4197070s -
max time network
158s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
11/01/2024, 20:12
Static task
static1
Behavioral task
behavioral1
Sample
5477ea6e0ce6c98ed7f28ec062c630bd.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
5477ea6e0ce6c98ed7f28ec062c630bd.apk
Resource
android-x64-20231215-en
General
-
Target
5477ea6e0ce6c98ed7f28ec062c630bd.apk
-
Size
263KB
-
MD5
5477ea6e0ce6c98ed7f28ec062c630bd
-
SHA1
3d3e1f1401e03d65c5d32a82ed700a3e5df1d5c4
-
SHA256
6964e5b5d985c6c440b063531582112d06eba78a6406af2c98c235d99ba50b25
-
SHA512
90d7facf891f72bea6c231c3efb75318f05ae87ee29a3f609eb0546d01950725cd6964aea2c618ea0d7c3466ebff01a46341067ca48309134fda45d758d7dde7
-
SSDEEP
6144:nPNvivXSCeVvnD2IJOsBFaw4IzEsS/ZXBc2Y4MT5fNM:di6tQIwsBFa/IvcR9UM
Malware Config
Signatures
-
pid Process 4913 com.news.ggicl.ddvctosoc -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.news.ggicl.ddvctosoc/app_tfile/fields.jar 4913 com.news.ggicl.ddvctosoc -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.news.ggicl.ddvctosoc
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
138KB
MD5cceb8db3b057d24673d49eda229e9892
SHA1b18f6353b2156410249079a3b7b86ef3a530e8ee
SHA256e900cb4c3fe9d8f45196a7457e9645c65b0f3cde820f4161950252cff67a4d97
SHA5124a42cde3165a706e823caa1362001ed8aa647caf22325a4f2554c64fc4ebcd79afe44fe5eab5474221806f26e7aca9d2901026de6e597ef62fe867f123e4bd57
-
Filesize
369B
MD56de41202d76cfb91657a014430e7f33d
SHA11c066a98ee1dae3493881522b42a6978ef72ffee
SHA25651491488aa5999f64c4d74c50676559497e9890b2a3978cdc8f07dc782e945ec
SHA512765ef4f4ca7a832af8677b8cb38b705a5cf809b6d321f7d86bcb03471d5e55d8c9b8dc04dbad9f89b10febd5e87b29d29e1bd36fa91259ba00ea863ad1225236
-
Filesize
12KB
MD5163b0e3f017becbc89b9d7f330b78f09
SHA11ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA5126a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
-
Filesize
512B
MD5977d0940991709663fb74dcd899f3457
SHA1983d535936dd89fedf88800ab6db16705a99990b
SHA256b4895f4fe4eeb2d21b057a8c4edfae27b65b1ef8af395ed342f924997a2ccdad
SHA512d7ab31ba81b64c3a048572da5827f3afaf71e24b919bd68964ec96526a9719bf77c34236b80d729348ce7b9a34ea6d70a3090244b3280675a25fc6eb90eac21a
-
Filesize
512B
MD52fd82aef6ebd1a4910fdbcabfdff4d1d
SHA16ec078f8bdbe694d37a9c79108f63f4ddc9eb023
SHA256d769a9531c1404759c66a3dfae2d7ab934c5b66503f5b3eef9074fc5e3adf6ab
SHA5129290fb3acf8d2eec8fea03957814734eb81a70ded49580d5db6e7f8d87c4586be84dd892bd296c2c1a9cbd2daf339b864b6ea56f9536bc384b61a798187ad674
-
Filesize
281KB
MD573b11c4c10150bbd4f29ad012dc11dde
SHA165c83ad32c29f9811c32eda75d7fcdc92ef42dda
SHA25652132037e9b950a9cb48d6374ee2c6747a6bfe776e13a726395771f1b40ee9da
SHA5123e53b1ee22a00e60896da86d2695195e0965c93d190c4d1c0dba2eb5c611d670ee7693a9f8756858255e2b170cb82a753719dd4d6a827af437309b7a1dcc6f01
-
Filesize
4B
MD5b8c37e33defde51cf91e1e03e51657da
SHA1dd01903921ea24941c26a48f2cec24e0bb0e8cc7
SHA256fe675fe7aaee830b6fed09b64e034f84dcbdaeb429d9cccd4ebb90e15af8dd71
SHA512e3d0e2ef3cab0dab2c12f297e3bc618f6b976aced29b3a301828c6f9f1e1aabbe6dab06e1f899c9c2ae2ca86caa330115218817f4ce36d333733cb2b4c7afde7