Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
24s -
max time network
150s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
19/03/2024, 22:32 UTC
Behavioral task
behavioral1
Sample
d744723ff284094a006bad426ed3d6c6.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
d744723ff284094a006bad426ed3d6c6.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
d744723ff284094a006bad426ed3d6c6.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
d744723ff284094a006bad426ed3d6c6.apk
-
Size
8.0MB
-
MD5
d744723ff284094a006bad426ed3d6c6
-
SHA1
3b5e07a9ee4b561f86c1d9f957e2d883e1833a74
-
SHA256
abfc681699486b55ab723a174ab25404124334133bb5d3c94fdbd39a3af9c9a3
-
SHA512
d44d33c608344ab8743af82d216211f6eebb1a6742d6e0656670ab6e7646a3c2695f4e3774afbc65d01018dd0deae50e39160e0ddbaed6d72f652142bb11553a
-
SSDEEP
98304:scZSMu2goodfQYUv4O/VkY1G2WtCqJTBQN8pvaTJ3apDRY:slT/dbUAYG2W4qpM8pvaTJCY
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal net.dinglisch.android.taskerm
Processes
Network
-
Remote address:1.1.1.1:53Requestsemanticlocation-pa.googleapis.comIN AResponsesemanticlocation-pa.googleapis.comIN A216.58.204.74semanticlocation-pa.googleapis.comIN A216.58.212.234semanticlocation-pa.googleapis.comIN A142.250.200.42semanticlocation-pa.googleapis.comIN A216.58.212.202semanticlocation-pa.googleapis.comIN A172.217.16.234semanticlocation-pa.googleapis.comIN A142.250.179.234semanticlocation-pa.googleapis.comIN A142.250.200.10semanticlocation-pa.googleapis.comIN A172.217.169.42semanticlocation-pa.googleapis.comIN A172.217.169.74semanticlocation-pa.googleapis.comIN A142.250.178.10semanticlocation-pa.googleapis.comIN A216.58.201.106semanticlocation-pa.googleapis.comIN A142.250.187.202semanticlocation-pa.googleapis.comIN A142.250.180.10semanticlocation-pa.googleapis.comIN A142.250.187.234
-
Remote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.180.14
-
2.1kB 6.3kB 15 14
-
268 B 164 B 5 3
-
268 B 112 B 5 2
-
276 B 112 B 5 2
-
328 B 164 B 6 3
-
320 B 172 B 6 3
-
336 B 112 B 6 2
-
268 B 164 B 5 3
-
320 B 172 B 6 3
-
268 B 176 B 5 3
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 164 B 4 3
-
276 B 112 B 5 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
268 B 164 B 5 3
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 164 B 4 3
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
268 B 164 B 5 3
-
268 B 112 B 5 2
-
276 B 112 B 5 2
-
5.9kB 9.0kB 23 23
-
216 B 164 B 4 3
-
268 B 112 B 5 2
-
276 B 112 B 5 2
-
268 B 164 B 5 3
-
268 B 112 B 5 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
216 B 112 B 4 2
-
268 B 176 B 5 3
-
3.7kB 11
-
80 B 304 B 1 1
DNS Request
semanticlocation-pa.googleapis.com
DNS Response
216.58.204.74216.58.212.234142.250.200.42216.58.212.202172.217.16.234142.250.179.234142.250.200.10172.217.169.42172.217.169.74142.250.178.10216.58.201.106142.250.187.202142.250.180.10142.250.187.234
-
69 B 109 B 1 1
DNS Request
android.apis.google.com
DNS Response
142.250.180.14