Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
19s -
max time network
132s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
27/05/2024, 02:23
General
-
Target
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
-
Size
2.0MB
-
MD5
71f6cdb3d8eebe1c8e7e26896238e571
-
SHA1
019134386a6d900d61285e5e986249928a9504b6
-
SHA256
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8
-
SHA512
740e8bcde7462b99972ea472ee0cae53f4f61fcdc6d9ca1c8c44d0661323178c891f7fe82052cd7bae7239d7a953a6dcdb5e6fc42b28cd4acc9e1634e284228b
-
SSDEEP
49152:I8FjWz5Kzip37zl3fg1S1RvyzHth1mFI1/3Go1eiUMG1VummJwga8TGi3U/kX1l5:IIhup37zlviS1GHoFW3aiUM6ummJwgaE
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
pl.spyone.agent21⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
MD5dd46d6cae176055d8617ceb3d40f1d96
SHA1b7a971b5f755f7fd5f9041bb1a0ffb1a74d9dd57
SHA256c4d2fc19a3c54c2d2cadde804546ce6f62f960865b829ea240026e1ea2706e96
SHA51254d353f7e746aa3935848cc2f694cd6cfbd1c59b6f56e276b76fad0f0a4c8ea09cd4835be8a8ccd615a7714d3e212a091d93a2b3b835f4ea767c8ba5950a5516
-
Filesize
512B
MD5cd1ece6d8e0518de6bb168100b0bcfde
SHA1dac84faee66cb864a60437f397f0e0ef9fb15d01
SHA2569ca1114ce56e385a3545bddf363c88e8222adb6fdadd9e886c76729c2938e0d0
SHA512e8014cb8adde5fe80fd82b4ff54ac6ba63bcee1fbe78460cb944e57ce166eff5603c8588fd3312dd28a90773d365ab8cca1a3f556f8b5686356bc1596b9e1636
-
Filesize
8KB
MD55479c9e4f73059515c73862c14292b1d
SHA16e72c4e77a7cd4a156c8662f151aa4c9fded7f87
SHA2566b28d9625f210c21c70c902e98f0b9c33cdb7900564144e824da58c48d1134c9
SHA512940ea6e8f5faee16460817eec1d84428977365e24de7e5f4f86148120fa9014da850a7a3c22155ce43bf4c28b8ac1d793a987f9fe19b6e713e938e9833ef8267
-
Filesize
8KB
MD564b0d7ef52eaaa09cdf05b57eee83d14
SHA1452ae63e1d2a71da5edc90d3597d4dfafb5fd7fd
SHA25689b29fb4d547fce012b8d3dcf9f0c8b6cd1affddc0f38118ec11d0fae9a04093
SHA51298bb0a8a7fbe304d9986790d25ec9146d32bb78e7a125841faf0396548bc6799a6274330e33a0503bef1517e54765b332061edcbf50a0e516df233f888a2b109