Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    13/03/2024, 17:51

General

  • Target

    c6816820680f2dda34b9a3fb70eeb48c.apk

  • Size

    30.6MB

  • MD5

    c6816820680f2dda34b9a3fb70eeb48c

  • SHA1

    beb3423e7e608a52d3cc8ce1b1e9d1952277b37e

  • SHA256

    7e9645b7f890b956da1b3ba387a8607aa586a0991b493cfbd55046aaa4f006b0

  • SHA512

    06a910668bb3f353ebb76391a8f3c3c3ee379cadab0330cae27c37dd0dba723f2ff2d27df4d54452900b781fb1e186bca48ec0c024e337a92a2835a362c14460

  • SSDEEP

    786432:BRA55G02Iw4MaX3ITMBixOc8DjtMFTtf8qSf0R:Ba5rhw41XUM+lw6Hf9Sf0R

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.wmrpg.arpg.darkslay0
    1⤵
      PID:5007
    • com.wmrpg.arpg.darkslay0:ngds
      1⤵
      • Acquires the wake lock
      PID:5057

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /storage/emulated/0/.ngdslog/com.wmrpg.arpg.darkslay0/pushv2_part_one.log

      Filesize

      450B

      MD5

      66a14123ec482b92588196ce11c5f747

      SHA1

      c7ac6621db8843dfd08af7fb7f3ae95c80a2f085

      SHA256

      bd36dfd7258b29d6d1d51229a4864694cf98fc492918e3c1e0216c30d6d7386f

      SHA512

      c08b8b85f921b0d4c25b3f5cb566d8334b1b01efd169f289f6adba3516ce4cfb9972dd387a8363780feabec5890e75dc8c5954c0d2f7902252d3df040b0c19a8