Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
155s -
max time network
187s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
28/05/2024, 08:12
Static task
static1
Behavioral task
behavioral1
Sample
7c483e372b2414653a8721e891687033_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
com.baidu.appsearch.clean.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral3
Sample
com.baidu.searchbox.novel.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
com.baidu.searchbox.novel.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
com.baidu.searchbox.novel.apk
-
Size
2.8MB
-
MD5
a91100974bbd2c98c6290f252c48eb92
-
SHA1
77c42c566b682a5f9d5ca059fe92923f0645e6b4
-
SHA256
dc1600c45a5d6db01aaf6d2a7505d517abdba01f30c089bf6560d4df65fd503e
-
SHA512
33967e9ecba74206983909ecddf1176ef465460c10e0124434c954bfba6a6c08a3308044b6026970c30610b4bd2af888df54cea1cf0441f89f1eecbc6cc61fc0
-
SSDEEP
49152:kLecQ1h4Oxcmem4RygNBo6fTP+neO51rUgIzw4YdYzJKKkMr/mRfmCG8I6v5Mthf:kWh42exRyel7PgL+M5sxcTzWhdJ
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.baidu.searchbox.novel -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.baidu.searchbox.novel -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.baidu.searchbox.novel -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.baidu.searchbox.novel -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.baidu.searchbox.novel -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.baidu.searchbox.novel
Processes
-
com.baidu.searchbox.novel1⤵
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4273
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD50c218c6e67b83c9ea7d8e02744bdf93b
SHA13525f643cbd14fa08b20a79abc856c23753873b8
SHA256c88852c49ccba8e0a7abe81320b4a035e23ba6dc5423b1f37374dbeaa17217ca
SHA5120d31a614f3d8646938f685efde2c54d0489b82b2a3571b628515b297d608023400bd03237955bec557148de5de6cf23bf5ce7f0ce550891f40d87e07bac425c3
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
32KB
MD55443060e2d3742816c5b79d90eab46f1
SHA17ec17712dc7402069ffb0225ec0a0438d9391f8b
SHA256e97cab78278132a30048bb87ab21c59186b41264dec3cff9e5738f9bebe6c98e
SHA512f107054492af8cfdd61725a606fb62e126dcaf37cbefcc864ee01d3195b5182ad846bd81e3c472ca93d0765c6d8f4d7c7ea33480c1754a5a4de9e9daa884de09
-
Filesize
512B
MD57d3d8ac78d8160e9a73aa6201384cc54
SHA13dd7a401b062b7b1e985bdfca29d52eedfebdff6
SHA256cc8e9d1d3a77b82d75434acec4443f69d7df47100dad8bd7998908776a5ccda9
SHA51242c0533fd3d0dbdb6bf3f072803983b19ecdc1b28ee481816a666ce9139f137667a2e245ce07ff7f2f5722a39fe55055c2a25b6f23ccf33b97923e23dbeaae75
-
Filesize
100KB
MD569edeb279b0b8dfd5a16fbd832ead150
SHA189ceee9df7e0ae56b412331bf35edf67778aa194
SHA256d3df386d9cf19f564bb3a4f6e6b6f1d9c9885a2aae4465630bb19564aa15f087
SHA512e7d798caf0a89b7b2205c5b64fc239f5ea6b24c1267929a94b336fae0529698bb58b32c548ae94a55cab57a33da31cb4f67896f6e908333b04a0f76256f32406
-
Filesize
129B
MD5768c7a7992c64274ae162edb63f53476
SHA138f4071a124c196059b069f9ac700d90a919fc73
SHA2566980a59516fadde169b657db9e6803616f965f84e3400e86a7f1a917e7bdf0b7
SHA5128e8b367f9d01c360860d76a2ec2659de34e39d29ac5c86f15f47613f782d97785ca6eee1d7f38e5c39d3876dc445fbe547fc58d18d7b528f5e58b5f1b5c839f8
-
Filesize
62B
MD5be7367618d9208ac6401c461f8639529
SHA1961e6b28caea6cfb94f8780d685e2d7ece8d4960
SHA256e4c420b74dd655035203a819078af9d1f6fb724baddb31bf36276151f6de2027
SHA512b101e1b93565ee2a8cfee9ae08b05e2f2cd0ec4be4138589ea8f7492e16239cd8c0b628c752094a668ff56a80510ecb96559c896dea77c15e1fadf089b3313a0
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56