Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
13s -
max time network
136s -
platform
android_x64 -
resource
android-33-x64-arm64-20231215-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system -
submitted
19/01/2024, 16:50
Static task
static1
Behavioral task
behavioral1
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral2
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-33-x64-arm64-20231215-en
General
-
Target
AMZ CLONEDARK 12NOV.apk
-
Size
103.0MB
-
MD5
4b4cdc4e72d83c28864019be1157858f
-
SHA1
f5ee315734345312b24f7a64cf8c313ddead2b85
-
SHA256
3bfde67e31fefb95eab26bd9aa8db2e3104398b3a85ef015ce7c4adae9e45e32
-
SHA512
2b799c17293fa8d6481f984b6b4c5d4451170c052d02a75a6a9dd6a0464a8640eb28231cd98a05b5a869b5be728e3ea149586e8109894408d5ddb6cde53e114b
-
SSDEEP
1572864:/oStB3SzOTZ5rcPk2RsBY4569yi+fq4DknJMK5+oA:/oStB3SMZpcvsB969yC4gy
Malware Config
Signatures
-
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4388 com.alightcreative.motioo /system_ext/framework/androidx.window.extensions.jar 4388 com.alightcreative.motioo /system_ext/framework/androidx.window.sidecar.jar 4388 com.alightcreative.motioo /system_ext/framework/androidx.window.sidecar.jar 4388 com.alightcreative.motioo -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5edb655088d1ed9f33f9d0d499b7a3ef5
SHA1565c4f4e43179dbfc285cd6331dc8ac75a901af8
SHA256bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9
SHA51298cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599
-
Filesize
8KB
MD519655b6bb1d8d7e8c9645b4e5a4ece6d
SHA133587809f4660f56e7ce78d64f9b1cc72f7d4d2e
SHA2568b600ae8e09c680c89fa1f49a8709da33be35852b6b605249233eed636ef176d
SHA5124aaaba3e6e19b78e17c13ea69d92625c05fb596148528a4b13943cb4368b5f56b86d7882d635bd95b39ffe606e8fe23fcac97be63e3699c2c2d62860203efe5d
-
Filesize
512B
MD55bfceab4b9c7648f28053cb2e2ed729b
SHA1dcdd8ae8c52f9bfd588dbbd98e26a115dd84ab8c
SHA25665ef5e4300d28b503839aea4db476c98fdb092eda1973ff4eb7b76a9ba9a6bf9
SHA512c705dedf6781d414a7c390b753314fcd4cab5966d83246b308dade0c45fac29d05d8ddbce4a7b1cbaef661ae818b206b770daeaaa2f6c905953d613b9de5a6e6
-
Filesize
8KB
MD5f01bb7403fb4e26b38ff9a54c17ab96f
SHA1a74b67430ce76ed3de35bd3a7550a2c40d8421e4
SHA256c29c3fd1b5915c86017e1e8c93fc95084243f5440f3be73306aafee42103b1d2
SHA512889b1694f484cec6eada5746333338d4a983eeee9d439560fe6c5cfa668e27fdeae38abedfa5cc63d2dfda419bdfc403a13af85e14cfe84633b058f5da108442
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/com.crashlytics.settings.json
Filesize720B
MD562481b16e89db68d826b0b5cda6f80ca
SHA1f8d8e93290be2d794a08a95eccacae29d6791f8f
SHA256f4874fc24e2d55b5f8ee9e5e4dc524190cbf4807321c1ee7029d1d7e8cc5de0b
SHA512e676b713c92b3387e5571079f88c45222f4822ed744b6b116af32a6bbcfdd2a811017ddf3540bf709ed2482faae18967ceac9a22617e88ce990846f4b05890fd
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAA8E0037D00011124D939BD7AA586/native/app.json
Filesize237B
MD557e5193caa22ca14652a3266e5b4c322
SHA1f10776b0ef537a49c63e7240821da2a063a4d30d
SHA256ce6a6c44e3624bf69cd6155fd53667e8719125dde729d0c8d9b0e5b893fddd28
SHA51288336a6175d4b965949f9ab5ea52180c6204e3c25476f2b1a4224edbd4356b20c80af5cb326a6ca05e3669b27f8ea7587275d8e00073e321cdebd79d8b93cc25
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAA8E0037D00011124D939BD7AA586/native/device.json
Filesize193B
MD51cd7dac218f14887d69c38d27173c805
SHA1c688688fd0836da0010b8177bbd27520b9e25f0f
SHA256ba39dc14a7e15d58fe090a1ac5f1c2d745290b293a28ea958fcdfa63400244a4
SHA51285d11c9073425e343e587f1f265f04366037dff4ffd600dac3b9c7b74a0ce623607cc0631c6802ca27e6ac2d62e9f93846358bff6b6a506c89747721ed7daf6e
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAA8E0037D00011124D939BD7AA586/native/os.json
Filesize56B
MD587e2b9d6edc06545b88235933e703881
SHA1b29448a47c87bfe3a59286e3cf4e02eb72581a7e
SHA25677b886b74dd48e22effd172c38ee914ced97247f4516c319f09cb8c9ebce4c7a
SHA512ccccd682e14a485c8c8d13ca0105d196d00fe02bed941d939154a199c14e741eac6522f378f509ed14a52efd38e479930ae223f6f317a35b0787d82e553db3a6
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAA8E0037D00011124D939BD7AA586/native/session.json
Filesize127B
MD54029bd59d65f9b195fb12e4444f079fe
SHA1088024a53ccb3718087ccc74582348f80bd7ec13
SHA256011186c98cb2bf4fa7be7b988615e9df6de85e0f13120c7a3888a23f40f47326
SHA512cf3310210b95019ad3ff9632b2cbb294b3fd27cf5060198f6418e28b5c0fe48651fac567a5fc9a9f55834ccbfef0f9a5393a0d7a6e61c58e53739e64cc7e67a9
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAA8E0037D00011124D939BD7AA586/report
Filesize774B
MD53abc15756cf6aa0fa1c3649d5a371030
SHA15d8aa3ea6b568d8adaf1f7a99a58c91ee1c0c62e
SHA256efeeaab0750882f3740cc13724613573cf2cc869ba31dfbfae1d5b1632e19f70
SHA5121de33af25b56fa9317635cf9020a662ffc92434fa6b2a5a6b4b3358731e4fc4810449657e4d83b2d06bac9e5ecc518748cc572f4f7f73d87de6b7747d6c4fa21
-
Filesize
562B
MD5ad4bd592d8d2b91a15397f0a5069635f
SHA1455b9454bbea97c26f6d1905a620cc08d4bf467a
SHA256c8ecc38f33a4bdabf15be0c0b5bab271b7c511c5f511208f30085b853c321eb1
SHA512ed5dff31a3721f08b153f2369151723c66e12b7f9665a1496734acc167303f6ffa2ff4446a518982f339d89adab0964a474469197635c2417da3b2171b2ed35d
-
Filesize
90B
MD515d7f28834e486832c4f5b88c9214025
SHA1cb37253cb5dee3ad96f2dd3a7ecbdac5750b052a
SHA256dd201fc4682c31f41a220a2b59938dbfc7f3d51b86872f52de0e9db445c9e396
SHA512e65b89eff49ffea3264c2bdcca070396c0288ac451de5ba0d4a7aa5dc8e2205b567ea79596e4569e8d9d6ed0c0e2237a45a7d5b11092f10a9bed2967142cceee
-
Filesize
4KB
MD50eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1fee434f784e73cc7916322e949f727caf8363102
SHA256b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
-
Filesize
512B
MD5060dd19bbe849e02150aee578999fb0a
SHA15ae9cdc158646d89d799cb2b9089bacc7307d12e
SHA256b9470ee8ee86ab83d8ec81fd109258e5cba3315c681f2f664d82ef8f4d45e671
SHA512976f966d50ed693f056ff1307090099d0cb83a389ca39f04b6daafd6867a4f8dfe4dc9224d4ad1b6b33fd5565262f1c8e56ab72cab06bb3473f97b13c7e6ba9f
-
Filesize
16KB
MD5ae7ddca8261d9614676706a22c06b6ba
SHA158a18ca056702c4c3b188ffc035b9788b8cc794e
SHA25609a414198393227e2b5c37182043f54fced5deba9e184c0f982c6134b767a59a
SHA512034bd9b6f64ed565f97c99e0e932ff25f93d205bab78be69aa13c72dfc8bceced6d4016d4f6a48dfceb281f3aed1b25ae99f9a9badc4d5ac402a15c740525a1b
-
Filesize
108KB
MD57ad41d3b7a5de0d251f227df33ef3e32
SHA1e16b085477435ccd9827bf98ead4c153c3e4964e
SHA256020056d05094a5824d429e2a9f36b4d6da719c2b9d47b337cb4058f2bb4dd2d9
SHA5126a3822d87acba72a41a06a35ed09c0321ce212c09e2f8f3f2f3ace6208eca446c87af95b1b8be9298350dfb9b34722786c5c40d3dfd929b66fcf27f8b4684acf
-
Filesize
123KB
MD53056e1bdb7d4e19789d0319eff484bd0
SHA16791ae47aa9466fe0bca27ad6643f846853bbee4
SHA2568e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
-
Filesize
25KB
MD529469324e59dfcc052f24b5af4e7b2c4
SHA110c1e17ac6f598037bb51baa07945663645de4eb
SHA2569195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA5125e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2