Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
48s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
23/05/2024, 13:14
Static task
static1
Behavioral task
behavioral1
Sample
cloudflare.apk
Resource
android-x86-arm-20240514-en
General
-
Target
cloudflare.apk
-
Size
6.7MB
-
MD5
f30c7216a3a8802a2866d0e3e24ba6a5
-
SHA1
c5d22590327432d4232fd00136e35537d9caf48a
-
SHA256
338307d6e2aad7c9b3548e72ed051742aaddddb9cf825db2e3ab64c4d5a48128
-
SHA512
a617089a69ffcc73c67968d12ef5f92ae700fb64fc294015e7ca78db98d2aa8611982d2d28f8fe66388c75c0207974c96643dc2a330e5e3cfc83672d8520ce86
-
SSDEEP
196608:glqaPfKmDzdw1bZKFDeBaeSXLYS1DdKK15y:glhPCczdw1HBaDbYS1Dd+
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.cloudflare.onedotonedotonedotone /system/xbin/su com.cloudflare.onedotonedotonedotone -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.cloudflare.onedotonedotonedotone -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.cloudflare.onedotonedotonedotone -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cloudflare.onedotonedotonedotone -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD58e1ad991665ec9369ab92105ac467243
SHA11db7a9ab999d9e0da18f497ec20c3da34ad2ac1e
SHA25606cccf4f6d0c0308b88ddff1c99af83e9173308c7b6460ca504aaa410aa3d658
SHA5123de756e0344a6136951cf6ae13902d61894fa60c9b1bc6429ee640479544960c8b3db6245e444381e44600024ecf0f996f9807bca477721e78163f1e5c9258cb
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
88KB
MD556c34771dcc2fb215708257ad7d778bc
SHA135cec2b475976ff0688b4908fb96850ed7811ba0
SHA256b4f2667920cbcd442308998ffb9d803abac0113963cc66c1f8817b4a059e6f60
SHA512df71fe6fca8ad40b7c4f86f7b47fff1b5cde9d797d4b323aead744ad92e0f28b1ffad3dbd78125536dc98d1a6ad2691af19b1e92de8acec98a9f2bf5818e1c29
-
Filesize
16KB
MD5c588b7cabf2cceddc8ebd0c107b36864
SHA1d390ed3685b16850a5c61d8aea5c5bae554792ec
SHA2567645affdecb07b9c2bc99002fedd114020de455177435cf88180b1f30cda5f81
SHA51262b4a57ed31d09f61adedbf0420467ee791abd67365c5405a6ed4b425b4eee6feeeac79d8a79178f83b79a706f7d2d135bc534f28ddcdfec9d9aae2b3b3c57e3
-
Filesize
16KB
MD5964b537af58d1d8401f89a89babac7b4
SHA118691c5f676a784385ed19039e792eb9512d6d0a
SHA256a86d05cbf177e7f20e5dbb14316be4c3ae1f057dfe2903bb4d77df42908f268b
SHA5127cca9216c01cf5a806a77ce26ef7253c4680ffda4e376df934ba5d2ef6a87187c49a1e7cf0764be62bec676ae04d05eea1e4cfd0d78b1ce70ebf20159b15ff28
-
Filesize
16KB
MD59a8b532f244702ae622a4937b016306e
SHA162fec1f7c3b26f9b799c02bcde5811464e815c27
SHA2568a914f43879d817203a9e726d9b064098fa3e4e49585fb8ca2f128da8ac68f36
SHA5120591446380190948c5102084236f53f0fca960e10da99d33fde4aa150b29a8e2c524f1ea97e3bb925212efc32fdf6bf6f1aba24ce721e2cc9fee33c4f27ebf9a
-
Filesize
16KB
MD5349f3e564d5b978cbdd46fda9b364209
SHA10ad64fa1402006b76a8b12eb9e55bfaa8908e6da
SHA256a6cb1692ac3334a217d3ad6bf38bee781e8ff9ec38b84e597fc56a7fdc9e18fd
SHA5124a58b4c33a6eb21f2d84ec6155cea11e4854f0306bf112ca54dfa72d35dc0240fc2f89a7a50baebb4eaaf3b9cd2554fd0028614660c5b7ea410d2a80555c7499
-
Filesize
16KB
MD54e9a9d47a0ca71d90ccd50d1cca7f806
SHA11277154791e73dc3f76a7f947a4d81e3912bc1d1
SHA2564d98f14958c7c89d6d818eb2f40e7aa30e536d24429bdaaf08cbe700bb4be680
SHA512b2bdd9c9aa709ac90c6e84e478ed7f497ee913f607542b482c73b4d1d129b9f9a0b9aa0c6eac5ab569c0669c46421d72b8cf1a2c887c1d4a3bca7a2bff45483f
-
Filesize
16KB
MD53493211966daa1ea8f634746402033f1
SHA18cb64e33725fc7534f8cc012e0d5cf82f7681388
SHA2566a146bc23545122c297446d4b055bec2de2bc3cd97136ef741daea5a5ca479a8
SHA512e95dc0badd90f2f7c9d26205e83a14cc59868a4ef7c67853f38f6bb2952d067706346bbc1095d80880d2c1f6c3abdb970e8db8e55605095472accb5f78f70a00
-
Filesize
16KB
MD58edec73def30887da915c118810131d1
SHA175853b793c7eb3bea8fd3ebebfc2e1d7bda96103
SHA25623bc6e4ee6cf19df32f01d9845f8858c45dd96742f668e332391b91719418102
SHA512644bb006957cf13619bd92898c6a40d9e233c3ca8cc9a7379e4d8d4b4a318394e637f5a82543d7e13cf0062be8b72e66e83b79c328b6c81734be269971ee12ba
-
Filesize
512B
MD52635e7467faa40b7a5afc340b6f746a7
SHA1c6d27d04dd62cc3df1aaa830a12e9d3a4f9dd9c7
SHA25695a2654cd2981f70220c0859c07c39763ae9774be09fd951d9f9dd34a2882c1a
SHA5123f6fb9de2d1680b27a1c458b85b743c88d39dec29afa1f4967b39890a142b4d189447543e15a0bd868b5024c5a28983facdfbe31abf364c5ffac05059374233f
-
Filesize
8KB
MD5d2ffb71c3ea3a23fc1a30c60e6966264
SHA13e7504d139675339c50f02283ab9c21c149c55a3
SHA256528299ff0cc27591368d68148ee7de95e8c287dbd83e1ac4f38d7cbc0391cd76
SHA51289bdb4b9d7c21b0b219dd7b0cc574f2f143d7410639888b86b5d4006ef3a5f6198e6f170d9f61a7bed2add4303e8950616718f7908637596b266ca1847146342
-
Filesize
4KB
MD50d93d523484bd3f6c1c5e1a298762e22
SHA1abf61520786a6aa73ac567dfe4b3a09d68598a82
SHA256bfd8286f26651b41b86c8d0ddc63c65d280da29318937c744c77feb7467641ad
SHA512a88cddfef422ef2a142babf2f74a9171e898134113cd28b0e6d11cad8a05ce4cea38bd072f81f55c74fc36ecf2a89fc4ab1e78672471742e6556e0b361fb87da
-
Filesize
8KB
MD5257324577c84cf370f33c89219d8ff85
SHA167a4417eff0dcd0493da1d10ce7e4a1e89a53312
SHA2564d341a9a97d6b7d8dc2331af4b2f5cc854b930c4c598832ceff8d79187b0ad86
SHA512f439509d1384b0a3bb89ac9a503bae75339af7c3b43448ec2e64078d4f914e91ac27cd5220f2d052a0c44d0abbd04c21c60630695e70db8faa56aa90455d56fa
-
Filesize
8KB
MD5d22146973bf2ff2421965944f00a2211
SHA1694ba4ee3fd7da204cf19ecc58128bb3cca0c88f
SHA256e7451168d3800f003ccf2c8c671fed9c6ccf81b53ecee8dab0c76448df211a95
SHA5129adb6c90844f1bce23eab918ad241288ab66c5c8053464f214f70a61bbf2982499cfb354ffe79835de9b70fd46900a6f53478b9f67a66ff83d97aecc2303f333
-
Filesize
8KB
MD5b9799e9c0b56103f19e832d77dd1f396
SHA14f2a0ae33cfaeb3b736145ae8dd54153fab18dd3
SHA256a95bd9d4c88721cec6716d7130a5ae63428461db25f5b961100a43b87a1a0cd1
SHA512f3b2902e4f1398e2390fade1a8aa2195ff70ad273ed9714309159c885f0e4ad5edc0203f7ead84b43eacccf61cd8927a812a3f81df9a9de0c9f7f981f91689a7
-
Filesize
52KB
MD57a0cb79a8a9bfc73b318e99e7276f4dc
SHA1e3ad32140f4126640d5cb3e307401d8b6611c1ae
SHA25621d0e15f9f8db1ccb7c15d691c7d3d89f4005ad3161a69028b2e1f79a75838a5
SHA512a5e448ec45d5fd65cdc4d4e0d8a5832de1bc4d6d73d0112b262dd049f2f6c2837b647d35597dbb1e4ce4ab0aecb2f559febcf65804009dce12e20268cfa2ee12
-
Filesize
512B
MD5fe67ae65b30b52340039c6d279473ece
SHA12d4164643d6c331d815a8910a25fa7967b3f48af
SHA25669f423347f08cc1a893af36c4f9c9f800d4fa4e2fdb2447edfb07d9039ba6515
SHA512a567dcfc321ea4e89d04d64e68a8aa286200bed5fec554804e535c3a517b446b42113a4f6579073457623786d35f067a9dc90e067ec73528c77db82a8f98d2ae
-
Filesize
8KB
MD571d661665df770aaa07eb0d42790e201
SHA12831871c39b32c63f4e38eebabebf950c047d72f
SHA25609d14a735f15232a99d5f331942e582d6e51ecac4662eee2975b5cea1d0ba69c
SHA51237681229ffff91fcaabb201b4acd7536f987b0bc210ad70a7f06a50307224796bfa8e9f95b1f152ea5523d2d7cd20f03431c592bc1ccf64d17f994512c2a9bf8
-
Filesize
8KB
MD51db74a7e64c417dcbc0648c60411927d
SHA1a59144a519f4fd4d492216b4d146bcab163fe5c5
SHA2560860adec3372069267550ac953a309f85d76460140fcc0db8352f3442260c9b2
SHA51292ddea85f0e09fd5c87f30fea60afc8b2a49744fdcbeab3cf4f4bef67b5053950516c0f017f1eb921f9406be534fba3ecf229e900e3374d71f8311cb7cd3a156
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F48EA000E-0001-119C-F7D2DFAC5F0EBeginSession.cls_temp
Filesize77B
MD5f8bfb30640c201be1ec3d45301574bec
SHA1c00cf351189d4a7801d0c6213b309354bfdc21cd
SHA2562d27d4e711edfc90df5b4e110db45b9dc9fd474554bb01498c1560d5267cc6a9
SHA5129939061fe777a0df56bb8d25c4ff471cdbc2e06cd3c479f83c45a9be7db6983f00f2a250043a7b8d6660b25d40877af1e3cc844babdc00c7d243605ca6faef7a
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F48EA000E-0001-119C-F7D2DFAC5F0EBeginSession.json
Filesize132B
MD5017373c4a86413d6326315928e045721
SHA1ae3c97014dfdd93c4ab8f7a42f324ff732997b70
SHA256ac40ec2cfeaf04ad3f7c0ceb85f48af4248a69b3d411a24c8c374321de4b8e51
SHA51263597013d579a600a5a7573f1d7022c6ecfcff05d2709f8964289099dca13fd7944e48aae125909d67909dfd95f789ee0fa66eb955d01cfcc97ad0f920466ec8
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F48EA000E-0001-119C-F7D2DFAC5F0ESessionApp.cls_temp
Filesize133B
MD539f0bc59fbaa56981b3b68ce5e6d9264
SHA1d2a137a67b357479e40c55f763e77368f9593a0c
SHA2566b786828d7291bb60c0a3a389bcaf0b2a302ff789d8eb1b96365052224cc6be8
SHA512b811e1ee37d4a1d8fbd8c5eef026d83c61fbe6f014063279b867b4bd2ff4ec4838b05cbbf2d7022caf8cd596a9d7bc0041bf802fbc78d4073e1f29dced277d88
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F48EA000E-0001-119C-F7D2DFAC5F0ESessionApp.json
Filesize246B
MD563cf6d010fb2fbd2e9be0b3ac20d6bc0
SHA11d4818cf1deaca481e4d60c6ac7aa0a84d575dda
SHA2565f9709540625c2e679db7c85c56ece0f8a1503b093e265663df4aeccfbc6803a
SHA512f8f3791583346e7eec2fe1625df64a55deaf56a0ab816d6c37aed20799c063b9e207976914d2424e6b70a6cfbb449e83d9baa9d3d3092614d7580c9eaebbf2a3
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F48EA000E-0001-119C-F7D2DFAC5F0ESessionDevice.cls_temp
Filesize48B
MD51d4502bcfb1ed059f6bf478a6159a7cc
SHA1409b14c3c42b5b4c82216909ee81407298c92079
SHA2560a2b70c7075a61f3f85f66f7e675d299b532ece79f6055f0069301a7c5069c56
SHA512ceb8284c3134ebdd44b3b6449456d3e528c6ce1c8122fdfdbb69eed95350e56a3000a513a5051967fd817a62fe3e4177edb6eb4dc6ba8a2d9b09788ca74ad6c3
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F48EA000E-0001-119C-F7D2DFAC5F0ESessionDevice.json
Filesize202B
MD584e19c18e0fb201f2eb399b3107409a0
SHA162c92c6a40fba1016fab3d7ff28f993051dd1946
SHA2565c47b0e02ead477ea3b62612e1c9b45fda20707c1b986fcb05a873c73194a62a
SHA5122ac18ed4007d0b8a512ef9c5eabb7fb63cef80bfb04b792f0bd0a0db1617da502bb4211832c87df5296ccb818f018ec50de0b2e3dbf938d9fb821cc4031b5360
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F48EA000E-0001-119C-F7D2DFAC5F0ESessionOS.cls_temp
Filesize15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F48EA000E-0001-119C-F7D2DFAC5F0ESessionOS.json
Filesize55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize450B
MD54bda82224adf127598511b1807fc192a
SHA10e020a1ddb2582cf0301c25cb17aad55340f19e5
SHA2569001d73e7bd2efdfc04ad094812d9b2ff8ae8aad0bf9d8c73fafca2d2ee4608c
SHA512b456c7141ec61698071a76fab3c13c1f54acb473e74dd02f0f1f7a345cf70b294534ad790c222effc13203f11661011b06df2c1c44b7e0a3689f4aa12cd1c7b7
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize2KB
MD59648a3250bf4be7f3a6f8fb611ed39fb
SHA1d47092b0293f8583d0ebf127dcc5174656e8663c
SHA256c1e01f0160b240b9e59188abaf9f9b2c6290417e6d9b04c7c0f5b12d26857542
SHA5124ad2c13030944b3088afb4a61dd97e60c2545516c21791ab00397d62c0f4d49e634038582e650cdced8688263ac50a456ccd2280dbe76383dcfc3a1465a35e24
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/com.cloudflare.onedotonedotonedotone/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_a24339b2-9f6f-4c97-8ea7-c1b87c2a2e82_1716472046745.tap
Filesize354B
MD518433304262e22431cec230d1bfeace4
SHA1fee57539fb670c31dd624826860b5ef565c761bc
SHA25696ddab15e560e8dd787acb0d5c244412a5053ab7118891941d920cd4bd84552a
SHA5126f528c24cdc2d8f0f7d2f9b43b71b0c9920cc08aa36a4572cc7ef2f1a0524bd7439de7f747ec55b3331eb28ef73e0757e3eab82dbb32c00925d72bcbe181ea08
-
Filesize
2KB
MD574d9ec4bef08fb6e4c92e67f0f361b0a
SHA11e46c75c50d54d260f0fe132be04bed7d63ea105
SHA256b791e6ed7638d1d882c9ffc08ab0d9a5aabfe9e724d10a3499937f1726549132
SHA512d22fd53bc193d49086290d715db8e674522fe3842811aa13132b0b8da0f658392a322ba2f12ed5093a74699b581693a90bae54da5429afe6f2713d7ec160428b