Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
167s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
23/05/2024, 13:14
Static task
static1
Behavioral task
behavioral1
Sample
cloudflare.apk
Resource
android-x86-arm-20240514-en
General
-
Target
cloudflare.apk
-
Size
6.7MB
-
MD5
f30c7216a3a8802a2866d0e3e24ba6a5
-
SHA1
c5d22590327432d4232fd00136e35537d9caf48a
-
SHA256
338307d6e2aad7c9b3548e72ed051742aaddddb9cf825db2e3ab64c4d5a48128
-
SHA512
a617089a69ffcc73c67968d12ef5f92ae700fb64fc294015e7ca78db98d2aa8611982d2d28f8fe66388c75c0207974c96643dc2a330e5e3cfc83672d8520ce86
-
SSDEEP
196608:glqaPfKmDzdw1bZKFDeBaeSXLYS1DdKK15y:glhPCczdw1HBaDbYS1Dd+
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.cloudflare.onedotonedotonedotone /system/xbin/su com.cloudflare.onedotonedotonedotone -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.cloudflare.onedotonedotonedotone -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.cloudflare.onedotonedotonedotone -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.cloudflare.onedotonedotonedotone -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cloudflare.onedotonedotonedotone -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5da2adf6c7355614e3a2f2ef9f22d8ba7
SHA1c629f1069be40a8056c40b2ba44da3a9a147f177
SHA256c98a4f9772b51e14657458b1387c54b50525fcb82424a346b402a7fd0d1d3989
SHA51211452b83b608b8bb5bac593655ba0de2980ff2314803e439d033dbb3924f3ab6813e143c308108f58b7ceb712b5d1cc7b2215d37200b4398e6dc60d88fda1e18
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
88KB
MD5553552e430778d244c7593e14542ceab
SHA1f695005fcab935a824b0beb64ae2bc29f79654d9
SHA256e69c5e70fd5ddd81c738f8f448d5c9780db5d5510b804bfddf91290463f36b9d
SHA512871f1b8ff608624c9603148b86a549dc1f924290fe2d1d7824d8d91c69f2e9f85c76f494fc03119a86ba0b376fa8ebd3b63e626c13a3d5d0f4eecf9b6978446f
-
Filesize
16KB
MD522363dc21864241c2598c1acbae3b599
SHA1844ce9d33c37178de81e2a9f6c8d3af5d2694231
SHA2569565200c0aee5fce368188d669eddb3205149149b6e3d296bd959486cd826e59
SHA5129b1e7d6f979e7c2eb8f9e8282a112f86f6142f01876423772288d9cc4752270f5b17cd485cfa2ba7739c25190a0af545df51fad3db84771725ee3bdcd5ed1f5a
-
Filesize
16KB
MD558de89deb33878685d04f089f583c94c
SHA1184f6a8ce25b5c9f2ead19091cff7b0c8eb12735
SHA25697439fdabc7fed3b49f1f3ddcac858c709f40d35b0a00325851dc21615f05040
SHA5124c92871751f27fa67aab9613b6bfdae6c9a70cb3c7a5ee083a9896f7b9804c8009d8ab356361ed077eec9bfea49e6bcf351dcb3dddf5157076d9e144b8c21344
-
Filesize
16KB
MD52cbc060e88f889494e337f6b8d7f6be2
SHA17488319624fe28b79c9dd8875b7d8ef60746cfe3
SHA25641f4b27c1cfa983e2ce30eacd43b0bdbb516c35806277a23af06d2815b48d6d0
SHA5129ff236eba348c0f5d2101ff757e29f5abe7ab08e1bc1ddf5ac15a1b41684ecb0775122568856e775f5be2fce1ffdaa386fdf2717add7393f515c8f71bfa12362
-
Filesize
16KB
MD5669e4cfc1b05633ab09199fc7bb5e1ba
SHA159d30e28f08fa4e36a9bcba46e3412f8f88cae0f
SHA256d28519c226df0acf25f353371b6f8e56597b2fce0e3083ccf99c5ff276bb3206
SHA512225f83e2c8eb5113b3b4eaedc344b53a116997bd387b1a5a659875b96dfa1589b6fdb62181fbb97aa75ea0b69f9da825716e3b74ae77b5a20f868125ff1b5daf
-
Filesize
16KB
MD5b6ca2d9f63b85d3860587cec33fec8cc
SHA1120c85b57fc235be578cc269fb5cbb4ba6096a50
SHA256d33036e228b8db366269187c0ce899c9e4f33e813338e9e860563e86168f6a96
SHA5125b4b0b22c2c341d13ed69a02fbd2fddad97d07063473ffb3f3899625489d016b1f95411ea33f759dc34ac373633ae2ed1f437f9c547c41114ec9bd382be543fb
-
Filesize
16KB
MD5c3f43dc6c71b182e4a805b6927a9a477
SHA129d5a0678d558945be0326b3a31654ec373688b1
SHA25660554f4044357fe2b5e545022839ad5bf5bae8bf6ce96feb06ceb10b4e0b3f26
SHA512e6e497933eb18137fba856ddad9910127b48c40e4c6fb5533db5034994b1ed03a87d11e5d1e3359ffec3e4b07bdfec63a6da9a74d4387e13142fcb578a8bf8d6
-
Filesize
16KB
MD5394b6b5e674da3a69c42222fc84f7db5
SHA17be4ad27e9a50dd42789f6508017b8964928431b
SHA256802867287c9dad574c6bf9a66393cb448faed5391cf6884e43da070c23b494e3
SHA512e9c60734a84c8a03c45d732a42d53fa438151120b9785296b5a417e85e5af804215504aba9be74761db03c3395e006058b1af014feede5b2b968c7b0549830f7
-
Filesize
512B
MD54f03a842d000a0a2d00d81cdcd016d6e
SHA1d2c0d59348e8ba95767892cd42e04978745cf946
SHA25650fb66a70388689bf7cdf7d4202c58e1448f99d8d6cd6b5238325ad5de9e3d53
SHA512cb2a32c325a9f14216c7822b22bf21d8dcd8611197c98b8afb20477e14df3705a064846ed021edce29dbf5a6fc728f2d4dddf5aacd7885b7185dfa18b56836f6
-
Filesize
36KB
MD5a3d26331f9b39fdc4e9e4b66384eaf05
SHA141d6cd2ada17921d9d1e4633a05451130ca0a8a7
SHA256c92b12a00cbc1a248737573600aa911c3cbf3aa0ae7075d1fb7635fd29e2e38c
SHA5123bff58a2e22db20d42f2050c47745753c72389a35533a63f0c92502de5e711b4bedec2d780bda293ff2d1a6ab3df69a7ccebc8255a87fe1b05580cfd8781c0d8
-
Filesize
4KB
MD57a778f03b492390a538f2bcb5b5f101f
SHA1f6de54cb54e15723f279679dad734bc439384835
SHA2563779937b80e9660fc1b9ea46cd4287aa83241b24e4f0d6610b86432fd996ee91
SHA512db1ea1a49104771d55e1663539ce4e8107088338175e48c14cb76433b854c641f364283d69e48e1cfb164dd11a9470062ef9c3a44159473a20a4aeaf66e818cd
-
Filesize
4KB
MD5284c72a1c73a8ab802a6da5003a8939c
SHA1c6be3cb11ff0d9314daf9ce0dec892cd5dc68a12
SHA2567b87d58ed18ae6bcc43053794f8ead38b754a5528be795b534fe00077075a79d
SHA51279440bd1f634460d8f66561a0ab984b0d74741fae3272e5b306b00bbb959396c790c3ad5630f4cc9ce58acdc0367d435184c3c669544a744dc99a798f884d873
-
Filesize
4KB
MD55fc17ac54cecc8939f193f2a18f51a0d
SHA18388cb13795a7badb59c24a824213f08da94ecaa
SHA25646075c3e861de2b6f50c6bfd0a593c8bef6c75b59641121a668f805588a9a4ea
SHA512fdf8a4a09edc170578cce5762e487d300db4917b37c68578a94ed60f6101edbd5312736c992ca682c80554b1cbb92379b86a4f9b78bf163f43ed28b1c7116124
-
Filesize
4KB
MD5c840d24b4cdea760afc8bf84b9a4e62f
SHA1483986fb4d2c875d5fa06cd4ac793f643d1c50c8
SHA2562d30aa98d58194c50075b5ebffbad53298f1598a9f9a1d70151595e2e96176c4
SHA512aa228d3d6f0794db823f47f9bd6eda0a602a5f9aa09c5da044455ec4679aa15713151d988a9666392028124b93abdf341ece6cd7a23e63b73ac1874af8f424c0
-
Filesize
4KB
MD515e580bc39410201bd7f67cb14340764
SHA163b54d572020a5111beb906c1d94bf521bfe4610
SHA256ff588fdf967d7d43b79c2e5dbbb65aee6e67b572974c47d7d29e732a3efe99d2
SHA512869809b92a8b8d93895da747bdcb70caa7669b37b14f27e7dba489e780e49198e9c21a4564f9f5b5e6e9746765a6fc6f903b2737328b7dee1fdd424adeaad186
-
Filesize
52KB
MD5a364c3a1493a19416ecb39c715a74078
SHA1533e7b236480a24b494c7b65bf52cccbc23a4a74
SHA256c914e30e572d2d28177b60bc26b1e547f81cce30bd65a680a55bdc530131cd7f
SHA512ae95982c7e2fb60e9a6feecc4957eddbe18d16a4ff8c469b9a31ad7d61f75d893f84bbdfdf00e3e239c2d4a566c4f5cd4762c84e7b04b95a1cb5d8571ffe23fc
-
Filesize
512B
MD5c49f44636e691e7936f4e5b67ed18ac8
SHA19eb1914d533edb4b0f5a4758daa377433ecc0793
SHA25667a494cb808a14abc04ec226d3f89c33c7c8f28f802708014e183883fc216608
SHA51201199bb0fcc96c2edd905db003e35151fe20969eac31d0f6b1c243cc2cb62666453c80aaf962bf48e0923689a03d808f5c1ae414dd95dc9873fa2eeb0b11929c
-
Filesize
64KB
MD5c43486d1b0f43d677f4df027fbee6e19
SHA10b2c9803cd136b598aea06c24b1f651aee53f98b
SHA256d2a2b3c3153b6e32f85c08a6253eafa1e59caf9a6fca314cac17943f59cabfe5
SHA5122bcba808b5b990ea1fbbcfb8c205b1bdc65a6c1cadfd262b10c36fb57fedffaf3c09ec09efeecf13907faf17e81cfcbcf6a82946a36df90d81eaf4d3d4e1e469
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F517101CC-0001-1099-AD39B668BFC0BeginSession.cls_temp
Filesize77B
MD574a2116ecc4becd60e9041ab97335bef
SHA101be314ef90e9449e309cedda60c1d0a31b15b9b
SHA256ffecbf2f18b0696e6075967e2669c7d2eb5552187f907e079691998a58390372
SHA512b267f3522042efd5b126bd1daca3ec26aa15269b48fa83ec40f07db52695ef42782379339d3774676f2e59ed1236cdf388913ab106ee9c4029686a49e4152bfd
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F517101CC-0001-1099-AD39B668BFC0BeginSession.json
Filesize132B
MD5699cbbde7fda68176976e2c8df3127ee
SHA1d01e2e0ad9eabf402c70d1fd0df9d884594bd861
SHA2562935a0d9521e47529750324cae7aa49894755b7352c0e8e724ee886e43d57f03
SHA51253fed7abd589b05f3b4d39883050462414d1892cc740111bdaf0b57abc5aef28e40dd9c3f685588e6eeb0a270c2147a1fa225e648bd61ed678e71e1a16a21de1
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F517101CC-0001-1099-AD39B668BFC0SessionApp.cls_temp
Filesize133B
MD5e46329e2af2953e53963081ac12e9f66
SHA1f246c2c4fed53e6a18dc220c6e3ed859f2484de8
SHA256ba89d3daee7acb5ef63a5ad951de6ff85252dc3d8d131fceaa779511337a6fc3
SHA5129d4335b9d6b84fa08531a49b09720004f9a237497eaa5314f2dde91e99b0303d6abfce00f7363884359186cdcd48f8ff208c409b21a77e51e5a2175007854206
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F517101CC-0001-1099-AD39B668BFC0SessionApp.json
Filesize246B
MD57b7e3c882c98826ed7131e32abc13f1b
SHA1b4d4927d8b09c5d7a24bcd39927fc96d48fb1cab
SHA2563d039f27715bbb5102e99a9cc5896ca94b724e870aeda24f838645002785ecb5
SHA5129d403bc8e8d5c8f5abaddfa7357655eead06e06352b369827c8bdc5575ad8ac2bd95ad62c244fbf442aaf1fb8be053c6d99efa9e64d9822df0664cc9ca231516
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F517101CC-0001-1099-AD39B668BFC0SessionDevice.cls_temp
Filesize48B
MD5cf9cb0612d588a1f71b63084cea67316
SHA13d035bb92fd3f8997160cf8025c40239af74d3ca
SHA2560d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9
SHA51270f000233e181e3b7c6fcf07aa04fdb570f970335837f8d1c4680a9f78af9f9e17c73a0a5646770f7a8787e338899edc4a5197b023865a4da894b1aca12bf600
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F517101CC-0001-1099-AD39B668BFC0SessionDevice.json
Filesize202B
MD575db92d50c80a89e068550028c62acec
SHA1d78ea55f5dc682e4da456d26383249f608fe894f
SHA2561dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2
SHA512dbb81daa5fab357f087dc295e7861444f945eb4c3883a09926b47312ce526bc069266a8a24b2a5b4921fb13e797696c5824195f0a79317e279ccf7855ca2ee13
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F517101CC-0001-1099-AD39B668BFC0SessionOS.cls_temp
Filesize14B
MD59b3d4522944ce6396563812bfdb92fa9
SHA16d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F517101CC-0001-1099-AD39B668BFC0SessionOS.json
Filesize54B
MD593023624eb8dff5c20050da136aaae0a
SHA1acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize449B
MD5a45d7c186edfe5ebc1b69799769b774a
SHA1fb6e2dd83675a7c42ad1dba30bd80225400725f3
SHA2562065699d08317a730a9e0b45ced1fd33806103034935a34f68080d06396dc0be
SHA512bb082b26a1ab0a43d7f6123e5a3cf7d5c4dc927038fe88a72496b736fb172e13dd94dd30a41117c020b45fff2da90f9aa013ea5a3a327038ac9020805da276a7
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize2KB
MD5f2308be5f3da394082861e8afe0ffd9f
SHA18ee9e20ec00aaf3bcae663b369064009bc98ffda
SHA2564d42a219c0e278b7b93d998823630a3d995d957ed6de39575bd3935320aab2ad
SHA51265dc8f3883705f29901f95b6a93e32174c56ff9ba6943c3b38bf752240275c5e47781d39df92ce8fa8b74acbe611b6fdfbb30ed35b09b776a63d646266dd6744
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_44cc62aa-e7cd-45fe-8ca2-d7f1e60cfa3b_1716474228907.tap
Filesize351B
MD58f20927ba996a02b6ee4f085f3192271
SHA1599bdeb454ad80c33fbce6514f0ae082786ad9dc
SHA25672409e17b02fd2fe1c056326a76a3019bc18e3446429ea2a8cc97241ff0e5277
SHA512f3660fce8e8d677ccb6d2abef4f4e14da879ddbf64461d279774f9c74eb10009d059c156f437d161095a8bac1dffc0833656ad858e68b897c03603abd48c19bd
-
Filesize
2KB
MD53c22c4b36ed4e8dfdb8725369fefff6b
SHA14faa0c901a0327b8a3ceafde83468c8e948ad92c
SHA256590f108a2f16975b23a03ab19588fd129b31ca9898d03871d12f3001959ccec3
SHA512a55d9ae9456135b016e24d3247080d978e87964214de9c7c686ec1bc4df7723b77a73c1921845bb9dec56946d08d1eea34d801014eccbc948fa11cf99f798b22