Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
424098s -
max time network
157s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
17/01/2024, 21:12
Static task
static1
Behavioral task
behavioral1
Sample
639e0ab03a66476669d1761ac624f790.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
639e0ab03a66476669d1761ac624f790.apk
Resource
android-33-x64-arm64-20231215-en
General
-
Target
639e0ab03a66476669d1761ac624f790.apk
-
Size
13.2MB
-
MD5
639e0ab03a66476669d1761ac624f790
-
SHA1
be990d5785fa775c6ccc910c427d4b3c5d95d1a0
-
SHA256
dbd1185d80687bdffa3b276e60d4dad67a4c2180e321baaf9af53ec2facbe9aa
-
SHA512
cbbb315b92a72948f7c5cf1a8382024fbba40b38c9cd32e4f03ef1ebb2966c5e9d68c6e2e0dcef05ab25f73f4c6e8e047a7a014282b036d83ae109607f3b0c75
-
SSDEEP
393216:HQjF7alCshFZWl2TZFdq4JHJyjs8Vlv46Bn0:HQjF+c8yqLnHclv46h0
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 3 IoCs
description ioc Process Framework service call android.content.pm.IPackageManager.getInstalledApplications me.suncloud.marrymemo Framework service call android.content.pm.IPackageManager.getInstalledApplications me.suncloud.marrymemo:pushservice Framework service call android.content.pm.IPackageManager.getInstalledApplications me.suncloud.marrymemo:remote -
Requests cell location 4 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation me.suncloud.marrymemo:remote Framework service call com.android.internal.telephony.ITelephony.getCellLocation me.suncloud.marrymemo Framework service call com.android.internal.telephony.ITelephony.getCellLocation me.suncloud.marrymemo:pushservice Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo me.suncloud.marrymemo:remote -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock me.suncloud.marrymemo:pushservice -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal me.suncloud.marrymemo
Processes
-
me.suncloud.marrymemo1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:4232
-
me.suncloud.marrymemo:pushservice1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Requests cell location
- Acquires the wake lock
PID:4304
-
me.suncloud.marrymemo:remote1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Requests cell location
PID:4336
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD51d1523733c0efd0febce407f409d2210
SHA105b6828df4091ceda1d249bf596338d774b7b123
SHA256bba799af5087eb4f951fa19eadcc114be549f2992a0a1e9531a9ea1feaedc421
SHA512f95ca4a23a597a4361197dd08303df496e78ca00cb709f6d780eef3685ce0aa825c25fe68fe2c2b7e9e6025716601066afd88c10533c5427d696c82464769534
-
Filesize
16KB
MD55a3a6a4c41e024f45ad812a5375927bf
SHA1d68d3ba4cb61c5fe08a4c9999274c815a7e2e4ac
SHA2563f0f5853f2c3b9478490c6e1c0def90ab2702d7a7d12a37efe99b6867c1b74cb
SHA512f473479cd09999d0a6ccd002ef8284c57a36b811dcafe7a7899768ed60d6d8e8d8baab0fe0f8eba68118d2a0e3e20164a6a7030b691083718b1218fbf6d02779
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
72KB
MD53e7a2ea1abc7923d6272c09fbf485b68
SHA10f89616d0d144d9827634250fa4f01d7aa41eefc
SHA25623e7184ed9b4f57e5fffd18be32d6deda47c6a94bc7a2442edd00286e87496ca
SHA51243614fae4b9d6fcc860a22a8a1dad91a2a851d0d7a4af8a35f3a7f0234977ece3e85904773e692336feccf66df4cec0aa4678ac1e322b490b5819eb4434c79e7
-
Filesize
20KB
MD562dbcf5833e8272b0015de58e2eeb89f
SHA1749912a70074125d3cf51ce578bbf94fb916c140
SHA256020ed63c0f8514f67a5545f69ce90ab45007980a6609710971d87a07e4dffc38
SHA512eed6155b9e8d67981fb238a01a3788e74c30889feeb81302f041f28ab66fac876510a4b58cf588193cd884feed314c8f7cf7565139116afc988d4d306ce35e76
-
Filesize
20KB
MD5c34d225ade6b75b4c92345a2d3ff6820
SHA1832512838dfeaee732601b7c0ffa8401c268aadb
SHA256bbb94a44434295aed572447df2f39c4fda0e1ab8242c40c668ce78015159c666
SHA5128bf53163400c748439157c225d7315e49f7b2858b1fa4831a63c18a0bce056bc66003a1a902cb9335e712e9e3cf8abe595ff3fcc8995e2fcdb8cb33d0d119ee5
-
Filesize
512B
MD53c2d62c90464ac4f190f492341f3e4ab
SHA12e668a84177efc8f7fa1f54b653e32ca542dab9c
SHA256e7f5558b14d6ad91c695cab391f7b1810675649c1c9d4000189349de984bc0f2
SHA512020714eae8e18fbebc89b2abca51b088bc2a679681d2aff470fedfc9ba3ba443fd0e45a9ada90b0fbf5db877241d21b0770222e75e5767fe6d94b4ce8d0f841a
-
Filesize
40KB
MD5933fb96905a2f81ad1a8697a07219039
SHA1e9da0686d072c664246b044f5d0f3b32dd8fed8b
SHA256e591a3e6f3e569a802c9063d664c606929f214861903a194e7dcde7de8757cf4
SHA512031644c965071df93ec0fe048df21e10755cefa17fd4a83eacabb18c116ea4faf2ff94788f4a64cc36805264cbfdc3f2ebe37555f5c15ffc22012ee5820f076a
-
Filesize
1KB
MD53aa0ec920699406dbbed08627448aaa7
SHA1519e4781130479596d55e13f2bf6f32396087690
SHA256d3868f020f0d3099ff0721e4cfacfc9833d63795a7c87da86ee9fd7eedf74ef1
SHA512fc0c15398a79a84456f1cc46e3c9b59955377faed8016f4b5775e252d49c2a7e1bbd3e5e813ce7ad1a4dec67c7ed95e3be659533125227e33ee646bfc296c47f
-
Filesize
24KB
MD5aa6703faf63f4cc295abbcbec8b31da8
SHA1e1ae0acf8d4c577d30da1e3b9f2e5eacf6f5949a
SHA25647f99eb5e5b6fa81e98591aac465f6fd1c073291da6e546668ac7782240f1667
SHA512b31a9a6bf31e1cfba335829ea287f3da689e40d9c9129db6e4cbeb9580624f1ddb4a83c5cab60d4948167a12f3507e185b68ba9460ac7c69dcb2c87f6b103388
-
Filesize
24KB
MD5e6fec8cac3d4c4dd3e8668a0c0d88b3f
SHA162698b27715861c24cf274d8247d9b0c3e8c0958
SHA256f73fe7ffb1d65c1fe955ae83b5d7330507d53cfe2894a8c21f071f42e4caf9b7
SHA5129ca7441b36221066d42a6c5b823b585fe9c618b65d4bad794ce6a3059b2b09677735d04bcdaadfb129d3e1f81926e1f223a510854019eb7f14d21292858902d1
-
Filesize
32KB
MD50fcb31920c258bcb52a89d3acddf2d4a
SHA1dd764d611e087ef4e43f0a5cd3f3be85e062eb17
SHA256b455bb6d9ca4b802054f6f1e72d66184b37897ba60a1e5b5de456454ddd07828
SHA512009f5d30aedf58e5c88835cee9a6b87a073660627beda8a09070eeb9139be05f78d11677ce31152f57a988ff132a469d9231140fea3f4c7cb078d39fa55509a3
-
Filesize
32KB
MD56d37bd23a36b8955b982e2267b6cdd43
SHA19572e3f96d1799745b4319075fd9c04aceb02a7b
SHA2569e0084ae01c650fc42df195c51ba7a89812b814c26fbfdee02e28ca12d069f69
SHA512309d76da50809978bd13eca10ea8cf754cc24b78415db11eeece6baf41e4ec79f81a61e2887a8b0900d68f618d003d3477df22bf95cd4e93ce503adb4bd6e0ce
-
Filesize
28KB
MD583b70953c96348390bfb8cf75710552d
SHA1fc933c641dbe20fb9f626f7d5d87af97f9f5f533
SHA2564c403b5abfb11fdf92554fa96db5f4a4718e1e642846c0537b1debdbc7200d44
SHA51274bbf141bd01600dce1186cd5331c41b62c99aaf3e5a65b5ff3595df10a8d37015d1fd61f0c7d593c48992446556dba3ec56297c87686e040be7406236f092b0
-
Filesize
512B
MD5640e7e03b60edacc3c3ea343e93f5bd9
SHA10a1c4e399a33a80fa5f48b10e10ce610064622f7
SHA256369fa37f741a8ef38207634d6bc79e296b29a6821fbcf356d1a4e2eafe28b095
SHA5120eaab205af8145a3d789b6d0159e105e8aca647776ef354aedcd7fc4b4b71e29d2b3d9ad531cbeee90d5a02265a37820bfaec33078b223440685accf5f01bd04
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD50470b874148331ca9a0ed266bbcd3537
SHA122468c7cf55a18ed6df01819d6e0e55d23c2e72c
SHA2564791426b6b64a9f237033535dd62e1113d177172d0ec32833f3e4b3a47403214
SHA5122251edc5b3c37379b7622bd8ccae22172d2d5e619a8a98b6143e5c38d33126090de192a9283feeaa20c87bfa84684294e59bbd4ddc90ddb2722d2345f459b1cc
-
Filesize
4KB
MD5349c511fa3a1f7eefab09f6c2be843d1
SHA15c6a7df3da69d227d1a0b35361d1a867913fb818
SHA256be4b483426cf36eff9d94a374a165d5c2847238280a3a7b914185b5bb6929e06
SHA51234ed0eeedde6108584a495cb3be3a4d10ed4e62f4b33d570c5b0e52d285a811596bee3fe820df8d9622b92ce29d433b2ff6602e4c06aa7bbc7aeb81738981721
-
Filesize
8KB
MD59764653f77a0843d61b689da6b933e1f
SHA10a25f99f336e57d98a75d9eec84599d011475ba3
SHA256c212ecc264be398c125f33497a3ac44fb3db508a29403086c8f007a99cabf225
SHA51292f2a446a5ebeea76462cf7c8312069fed47f6d32dbd2c69244e831ae7991bc14058af1d84c3550bffff51a6f4dd65e4535ff12a9fb8e632f7b1b06eb870c4b7
-
Filesize
72KB
MD5e8177528f88ed41d2c469d3e686d742f
SHA1e87f50c46a1dcc5f8be8c1fe1b3e1eb2b733ba77
SHA2562e5808dd246cf73971d37c98d0e609b47c14c6d39511ef5eed1ef1182454c7d4
SHA51295b836d37c09765c7eb1e3f4ceeba092a96814902fc965f014e2c9a9fce3a55a5a5160b678e1795813250951b765a51ef69a4ff4e5e1c2592927a43c031947ee
-
Filesize
40KB
MD588ea2fe11a3f44fcd7e854c033e3bd34
SHA1e96d76be6c065fc98f5acb57caf11943e2fb9ea2
SHA25641c310cdefb35c8d87cc5449084b67e88463c5c2c98fbe995ac478207222b0f7
SHA5120d8823c306e32fb7e09f2703922c4fdfab444be587e5cc02b76f0ac54ee5e07ec67c5fbea63f74715d4193ea8bc3335657ccc59bda0125565ccbddb2293d7333
-
Filesize
36B
MD5fcb980dcc1fdbf3c9089ae5eee1db4a8
SHA1a743a28bf12556d59aeb30ad53db89d2d902f54b
SHA2569a55d8d2e77ec376ae351dd94cc49e8f85aeccb693fa20823e9ca6041bfb5a58
SHA5122ea43488e25b0fe962a9b88a05130c064dcecd8005fbff0d1ff4f56f65c2b874331c62ea9b41ff1fd1c6fc5e57b2e3f0b1423c2680ecb67c5b0c394e9f0b3ded
-
Filesize
24KB
MD58175945242fad9fb218665b51d8f3a9d
SHA12f29ce825ec060079dff3d97e95081dbfca30e65
SHA256dc79c6dc4ee7f741320f1c4939be1d796f55bee3e544e188e3863225f8dc9c58
SHA51213c1aea656b7fc580dd931a712b8f3a268deb0e2792dd7f2b9ac172ea48077cce88ebb351a047f8a870316110c76f6710ba2ac2c6bb9fbe44f65acc2971ea849
-
Filesize
80KB
MD5e922d34adf7c09fb3484a6779574afd6
SHA196f7a43dd906935052b6efcef4ce00526eb4b3cb
SHA25667bd207b9de961adf812233b8856ba62e908ee9511b362169b4d6442f20da575
SHA512b43ec9825bb659a4e93e1538ec41a2ea0f6a2a5171926544b856164ec8beda9886089ad260c19a2a968ed2f347796ebc16a062d929f548d5b20ec3587bf8bece
-
Filesize
211B
MD50ef81f7fde6bb4acba117cc15c702109
SHA178750adf493c5115379ddc45e28864a3119f8c08
SHA2567ed8668f507054821c08e05bb3d94e89cff5dbd565b1b9db61b250aee26b26ba
SHA51262fe18ab7d59503914f58c90204cd7b280336354af264f245358812ae336025ce264443bbc750973c96c070abede01434f8764517884968bacb0139682600993
-
Filesize
108B
MD5285487c839fc04964123ad8fd96a4dd5
SHA18027f244f7a5ade44b963d67289a83eda2aeb979
SHA2569ef92f3caf4d123ec477464e1b19eb8dec718582b34941a57f6a8dfe8e0671df
SHA512615bf16b62f3ac07b143e71a97698c48984aed00b6749084f42c5f3b5501ca647c36db681a8b3d0202fdb9f0d2890283af72476310723c317b90f660ead2328b
-
Filesize
89B
MD56aa7794521dcacad058b435d03c818be
SHA19792fae45ee207e395109cf077b26ebb0ef3fa60
SHA2567c9b6c60d265dd8c1b02fc443115302f421a1c9a58f2f083c2679f90011b4948
SHA512239af9c90614e22b2c744579edd3b0bbb1279901b55c1ffadf05ace53db5b7a1cf797b216a728f2c5b47d11742cccbff9edffb9e1c32df4ceb63f49c8bcc7f25
-
Filesize
16KB
MD54940bdf90c9b8fd2df673eb03f464d8b
SHA127841e6e73bca74efc8b4126655ad6f646f6bb90
SHA256e12253385d27646ebeca61e35b85859fef754b1ff24e2c4f37fb8d5541fa21d0
SHA51259faba3b30575b715d168ca987a220614cd4e70600addb9ccd9d01a69861576d8d8371857b6eb30c3bb149281869896ce224021e9b7dbf4bbfbeffa8e91fa0ed
-
Filesize
211B
MD5ffcea35be8924736f61bc931b4dc8a30
SHA1af117b9c94f1e6ad7d54db2abcb9c356f9adc698
SHA2563d817e37c93c57e112edfe8ba72d9d67ab6621fc10bfc37daf3449d364d5beae
SHA5122dd75b2637a98d862d6405490777a0b652986304111294f4c544b7b9ee2de2d87f3d154af0bdbaf1569a2b67351f48b36ca9badefb6145c69022f40d557e7b1a
-
Filesize
28KB
MD50d3e99204c6401ea499fe9e6d9855497
SHA109829f00ca458eab7374d5079393a2cd69a2348a
SHA25663ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca
SHA5128d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68
-
Filesize
32KB
MD594a4a56792ce9a211a05e1193e488621
SHA125a09e50ccfe079dc387470e422c2a66ea0c96f7
SHA256e6d2a26171bd916c77d87e36f8bb2bea8ef598955be54cfc533db09aa3a5a575
SHA5121d9d6291e67edcdd207dd63db6c57371cecdff00d3919f6299be730a095c96f55d6025397472dbe59042945934128c59afe8c1277c29eadef7dcc17d764ea2bf
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
72KB
MD5411ba4becd1eeecef737d4f694d7424c
SHA1255b6dcadeee7251b2c9728825d28459391138ff
SHA256f06abb2ec1c8c1063b6e157693074847c36773a75897e2f54e329ef1724da710
SHA512e1023843b901f109e535c637822fb6248d473044d8f28869512716b6d3ae0d2cb167cd4f2c2ec046948b023965832d38b8859541fb0a4fab36419660168bb827
-
Filesize
1KB
MD55be9f18dd1fc8ceae4a84973cb242f5c
SHA1154706404ea08f7f5dbf34d6f38ca5a8e483cd01
SHA256bf906b429289824eb77cdf6aa6b2cf39ab8ade9b71d5f1cab9077353b90ac702
SHA51260f473e6edfc4656f42ed61950522b3c9b49e7f8e3e5b64fa6db850368ddf2c9d64e05e11b6c6ba3f2dac0d49822d36aa69eee7b2a662a3c53a2ce8166046257
-
Filesize
108B
MD56ca55ccc7ac9d7f4b7e9393e87f2767e
SHA1e811b4b92ca039734f713757418b5a3b98b088c5
SHA2569888099bfafa5492510640c157b2f1e5eb583bee3d40070b2f84ee66e4a0bbf4
SHA5123f4226ac52d8d741ad9d4a37d23521aaa0629736b91e18d2e0ae2c9155a2aee4162371edc30edd620c8a9d1b70fdb85d15a9ed8b0cde50f13eb138a640f2da34
-
Filesize
24B
MD5a936690571e9104e1922dda4a0ba5bd1
SHA165f49c57edde2f96be2a1dbdfc3f7351f1e66554
SHA256f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412
SHA5123be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394
-
Filesize
24B
MD51681ffc6e046c7af98c9e6c232a3fe0a
SHA1d3399b7262fb56cb9ed053d68db9291c410839c4
SHA2569d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
SHA51211bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5
-
Filesize
24KB
MD56021a3f237cd466cb9cbf657f46e6acf
SHA11c8cabbc3656c3c40972802e569dce23f75a51d6
SHA2569400540bff4131aa1b3201073de58e40f1081fbabcdbbcd65a4a816ac5f5ffd8
SHA5125ecf59bdea226b612ec1d15c2e71987be6e7622cb391fdf293f9654232f29fe695d5feaca2f9e07fef7ad1c1c4625a56f44f54b748f65db244e714d943f9a78b
-
Filesize
8KB
MD5cd5070f7494b5d3f8a7498a75f4a03c0
SHA1e2d786b8ef5ee816862b46390fe0ed0c04778129
SHA2567e30180527d32437190f59ed461b2e1af51f2c6f61312dd0db79f4dcc9dcb590
SHA512e4c3d63ffdaaac5ae08941ae95dafba1d76acb8a16d58704c8c6bb0efc31b525a1f41b22a3ed0afcaffdf7fce720090650444b78319d9a7ce7317f733eac67a8
-
Filesize
24KB
MD509fc572287c37ed95dbc5eab751f9fdf
SHA1114e5e268d9b6fafd4557caca34e887a6a8f6d24
SHA256a8a5fa11459f43ada8fe6c3ee70aa1bb6985bf2bdb87a17e2a692620eb208e0e
SHA51278f4408f8b9360f91c0f8ea6b5fa218d77f58fe8e98f9b32e2b2861f0f45750886a99cf1603afd21bc5ec56014c84d3ea7ad81cd4ebaf3513293a8e957f0b766
-
Filesize
211B
MD54e904a3d157f8376820c07b712444ec1
SHA1a7d710126115cd4dd7de09e47d0cde7f142ff792
SHA256bc99b2260cc5a9d708cb1559ea6c70d9ee484304307f4cbc48d589e49dbe833a
SHA5125a04b2627a03acb149e8f2e8eb2a137a15f96d5a4b5a009781c86d64d76a77e9308f80e7051c9417bcace97f051aa495fe6031b06df17fb9a8044bbb9be38cdd