Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
35s -
max time network
175s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22/05/2024, 11:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
test.apk
Resource
android-x86-arm-20240514-en
5 signatures
150 seconds
General
-
Target
test.apk
-
Size
4.7MB
-
MD5
e6e74c9dca2f2f3c237f681c1ff0af3b
-
SHA1
2f53298e5ce18d4644bbdb603e35d44e022b7a39
-
SHA256
baaecc906677624f401f74ae68f52cf396ffc91db3f7ffce302532f0b027db08
-
SHA512
dc1f59c2b5a27391b24545581079ad76f75692d11b3c9ec960fca3991b250700a6fb3142d19b0231adce03a59bd83e47e04a8b35a7873f77a5bf6dbe0790c5c0
-
SSDEEP
98304:5z5jM4gLCCvxGtNeepDIzD46B1BgpDIzD46B1BDt4DYJTs74p:5z5w4gLrQNxS46BkS46BXt42p
Score
7/10
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.baidu.app.xfkldnr -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.baidu.app.xfkldnr -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.baidu.app.xfkldnr -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.baidu.app.xfkldnr -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.baidu.app.xfkldnr