Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
17/04/2024, 02:20 UTC
240417-csentscf4v 117/04/2024, 01:50 UTC
240417-b9q8hsae35 117/04/2024, 01:33 UTC
240417-bytjhaaa49 117/04/2024, 01:12 UTC
240417-bkzhlahe37 117/04/2024, 00:55 UTC
240417-a9swnsha78 117/04/2024, 00:37 UTC
240417-ayl9ragg37 117/04/2024, 00:36 UTC
240417-ax4gmsac3x 417/04/2024, 00:35 UTC
240417-axa54agf84 717/04/2024, 00:23 UTC
240417-apyanaaa6s 1Analysis
-
max time kernel
52s -
max time network
49s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
17/04/2024, 00:35 UTC
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://instagram.com
Resource
android-x86-arm-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
http://instagram.com
Resource
android-x64-20240221-en
3 signatures
150 seconds
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
-
Remote address:1.1.1.1:53Requeststatic.xx.fbcdn.netIN AResponsestatic.xx.fbcdn.netIN CNAMEscontent.xx.fbcdn.netscontent.xx.fbcdn.netIN A157.240.214.11
-
Remote address:1.1.1.1:53Requestm.youtube.comIN AResponsem.youtube.comIN A142.250.187.206
-
Remote address:1.1.1.1:53Requestimages-na.ssl-images-amazon.comIN AResponseimages-na.ssl-images-amazon.comIN CNAMEm.media-amazon.comm.media-amazon.comIN CNAMEtp.c47710ee9-frontier.media-amazon.comtp.c47710ee9-frontier.media-amazon.comIN CNAMEf.media-amazon.comf.media-amazon.comIN CNAMEmedia.amazon.map.fastly.netmedia.amazon.map.fastly.netIN A151.101.1.16media.amazon.map.fastly.netIN A151.101.65.16media.amazon.map.fastly.netIN A151.101.193.16media.amazon.map.fastly.netIN A151.101.129.16
-
Remote address:1.1.1.1:53Requesten.m.wikipedia.orgIN AResponseen.m.wikipedia.orgIN CNAMEdyna.wikimedia.orgdyna.wikimedia.orgIN A185.15.59.224
-
Remote address:1.1.1.1:53Requesta.espncdn.comIN AResponsea.espncdn.comIN CNAMEa.espncdn.com.stls.edgesuite.neta.espncdn.com.stls.edgesuite.netIN CNAMEa1793.dscg1.akamai.neta1793.dscg1.akamai.netIN A2.16.170.34a1793.dscg1.akamai.netIN A2.16.170.123
-
Remote address:1.1.1.1:53Requests.yimg.comIN AResponses.yimg.comIN CNAMEedge.gycpi.b.yahoodns.netedge.gycpi.b.yahoodns.netIN A87.248.114.11edge.gycpi.b.yahoodns.netIN A87.248.114.12
-
Remote address:1.1.1.1:53Requestir.ebaystatic.comIN AResponseir.ebaystatic.comIN CNAMEir.ebaycdn.netir.ebaycdn.netIN CNAMEebaystatic.ebay.map.fastly.netebaystatic.ebay.map.fastly.netIN A151.101.194.206ebaystatic.ebay.map.fastly.netIN A151.101.130.206ebaystatic.ebay.map.fastly.netIN A151.101.66.206ebaystatic.ebay.map.fastly.netIN A151.101.2.206
-
Remote address:1.1.1.1:53Requestwww.instagram.comIN AResponsewww.instagram.comIN CNAMEz-p42-instagram.c10r.instagram.comz-p42-instagram.c10r.instagram.comIN A163.70.147.174
-
Remote address:2.16.170.34:80RequestGET /wireless/mw5/r1/images/bookmark-icons/espn_icon-152x152.min.png HTTP/1.1
Host: a.espncdn.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
ResponseHTTP/1.1 200 OK
ETag: "9ac9e9363b76587769dda7c61107e9a9"
X-DataStream-Cache-Status: 1
Server: AmazonS3
Content-Type: image/png
Content-Length: 2790
Accept-Ranges: bytes
Cache-Control: max-age=13207
Date: Wed, 17 Apr 2024 00:35:24 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
-
Remote address:1.1.1.1:53Requestwww.google.comIN AResponsewww.google.comIN A142.250.180.4
-
Remote address:1.1.1.1:53Requestsafebrowsing.googleapis.comIN AResponsesafebrowsing.googleapis.comIN A172.217.16.234
-
Remote address:1.1.1.1:53Requeststatic.cdninstagram.comIN AResponsestatic.cdninstagram.comIN CNAMEscontent.cdninstagram.comscontent.cdninstagram.comIN A157.240.221.63
-
Remote address:1.1.1.1:53Requestupdate.googleapis.comIN AResponseupdate.googleapis.comIN A142.250.187.227
-
Remote address:142.250.187.227:443RequestPOST /service/update2 HTTP/1.1
Content-Length: 660
Content-Type: application/x-www-form-urlencoded
User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
Host: update.googleapis.com
Connection: Keep-Alive
Accept-Encoding: gzip
ResponseHTTP/1.1 200 OK
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 17 Apr 2024 00:35:29 GMT
Content-Type: text/xml; charset=UTF-8
X-Daynum: 6315
X-Daystart: 63329
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:142.250.187.227:443RequestPOST /service/update2 HTTP/1.1
Content-Length: 654
Content-Type: application/x-www-form-urlencoded
User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
Host: update.googleapis.com
Connection: Keep-Alive
Accept-Encoding: gzip
ResponseHTTP/1.1 200 OK
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 17 Apr 2024 00:35:29 GMT
Content-Type: text/xml; charset=UTF-8
X-Daynum: 6315
X-Daystart: 63329
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:1.1.1.1:53RequestszswiwbynleIN AResponse
-
Remote address:1.1.1.1:53RequestzkvxopnuIN AResponse
-
Remote address:1.1.1.1:53RequestynpabqllmtufIN AResponse
-
Remote address:1.1.1.1:53Requestwww.facebook.comIN AResponsewww.facebook.comIN CNAMEstar-mini.c10r.facebook.comstar-mini.c10r.facebook.comIN A163.70.151.35
-
Remote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.200.46
-
1.6kB 8.1kB 16 15
-
4.1kB 111.8kB 65 86
-
1.6kB 9.9kB 17 17
-
1.3kB 6.9kB 13 9
-
2.16.170.34:80http://a.espncdn.com/wireless/mw5/r1/images/bookmark-icons/espn_icon-152x152.min.pnghttp679 B 3.4kB 6 5
HTTP Request
GET http://a.espncdn.com/wireless/mw5/r1/images/bookmark-icons/espn_icon-152x152.min.pngHTTP Response
200 -
1.6kB 13.3kB 18 18
-
1.7kB 15.1kB 19 20
-
2.3kB 40.9kB 30 38
-
1.6kB 6.2kB 14 15
-
38.4kB 98.3kB 104 124
-
1.4kB 6.7kB 13 17
-
11.3kB 381.4kB 167 275
-
24.9kB 1.9MB 398 1306
-
912 B 3.9kB 12 10
-
912 B 3.9kB 12 10
-
964 B 3.9kB 13 10
-
852 B 3.8kB 9 8
-
724 B 3.6kB 7 7
-
2.7kB 8.1kB 10 15
HTTP Request
POST https://update.googleapis.com/service/update2HTTP Response
200HTTP Request
POST https://update.googleapis.com/service/update2HTTP Response
200 -
3.1kB 35.9kB 38 45
-
1.5kB 5.7kB 12 12
-
858 B 40 B 1 1
-
2.8kB 6.9kB 10 14
-
1.2kB 40 B 1 1
-
2.9kB 9
-
65 B 104 B 1 1
DNS Request
static.xx.fbcdn.net
DNS Response
157.240.214.11
-
59 B 75 B 1 1
DNS Request
m.youtube.com
DNS Response
142.250.187.206
-
77 B 263 B 1 1
DNS Request
images-na.ssl-images-amazon.com
DNS Response
151.101.1.16151.101.65.16151.101.193.16151.101.129.16
-
64 B 109 B 1 1
DNS Request
en.m.wikipedia.org
DNS Response
185.15.59.224
-
59 B 170 B 1 1
DNS Request
a.espncdn.com
DNS Response
2.16.170.342.16.170.123
-
56 B 127 B 1 1
DNS Request
s.yimg.com
DNS Response
87.248.114.1187.248.114.12
-
63 B 196 B 1 1
DNS Request
ir.ebaystatic.com
DNS Response
151.101.194.206151.101.130.206151.101.66.206151.101.2.206
-
63 B 114 B 1 1
DNS Request
www.instagram.com
DNS Response
163.70.147.174
-
60 B 76 B 1 1
DNS Request
www.google.com
DNS Response
142.250.180.4
-
73 B 89 B 1 1
DNS Request
safebrowsing.googleapis.com
DNS Response
172.217.16.234
-
69 B 108 B 1 1
DNS Request
static.cdninstagram.com
DNS Response
157.240.221.63
-
67 B 83 B 1 1
DNS Request
update.googleapis.com
DNS Response
142.250.187.227
-
57 B 132 B 1 1
DNS Request
szswiwbynle
-
54 B 129 B 1 1
DNS Request
zkvxopnu
-
58 B 133 B 1 1
DNS Request
ynpabqllmtuf
-
62 B 107 B 1 1
DNS Request
www.facebook.com
DNS Response
163.70.151.35
-
69 B 109 B 1 1
DNS Request
android.apis.google.com
DNS Response
142.250.200.46