Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/04/2024, 11:54

240427-n29fcaae9w 6

27/04/2024, 11:52

240427-n11rtaae6y 7

27/04/2024, 11:50

240427-nzn2mahh83 6

Analysis

  • max time kernel
    10s
  • max time network
    9s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    27/04/2024, 11:52

General

  • Target

    balatro_v1.0.0n_Modfyp.com.apk

  • Size

    60.3MB

  • MD5

    7a40bcf5b553faf23e999d1e67555a32

  • SHA1

    2a1d2b723dfe4e887bed8cbbe02e86bf44d07172

  • SHA256

    7366fe333473d95ad8907a1714cfc4e511d06b50eb1a5c74ce190b27b0b6d4be

  • SHA512

    4e170667a3548b7d1242e24e64ed00cf809e5fd52eaaa7249aebab16b8b646bd183a067df6e1a8be61f077aa0387371a397954cc4722cd0e764a7e58ecf5aabd

  • SSDEEP

    1572864:Q6cGWDaAQLI2mx5Jl9shgQb4H9xfDhix2fvOw8bJ5Vdu:DcGWDaP8BNA6jb88fv78bfu

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • me.wangyw15.balatro
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4465

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/me.wangyw15.balatro/cache/game.love

    Filesize

    84.1MB

    MD5

    d5062e9312c1564008580f8828f1f086

    SHA1

    0c64822f5488887be4e89ea991e1eb8bee91214b

    SHA256

    4ad05adcd791609dbc0e4c5574dd5dcd9f80423f0385a06fbd5da6a124555a73

    SHA512

    869e00c149f13a2b678a49632a435eb3a348bc9f760483e019fbf2f3b194c322de2c9557ca2ed7d735db66fa596abac9de63084dbaea6098443ae5efeb397d0c