Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    14/06/2024, 16:15 UTC

General

  • Target

    base.apk

  • Size

    2.0MB

  • MD5

    2e241e2b34d2a7f4c7c108eb9fa9bfa4

  • SHA1

    d55658c8d2dbfd7a01f5f1635a855174d1e5d2bd

  • SHA256

    278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285

  • SHA512

    b27704a97152628cc9c4bf060891ef19724d47dcbad8f40bca19112d25bace65fa9fc26b5c9e39dccb6dcd6e79e1845383534a1859e4786456bfac7e0e3ed6f5

  • SSDEEP

    49152:wsdkkgeXtaig3nNGm2ihQSrmF5u7TuBg7TbkD0v1Y5:7kk5Xgig3NJ2NSrmcTkg7TbkDEY5

Score
6/10

Malware Config

Signatures

Processes

  • com.temptation.lydia
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:5128

Network

  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    172.217.16.232
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    142.250.178.14
  • 172.217.16.232:443
    ssl.google-analytics.com
    tls
    1.3kB
    6.1kB
    9
    9
  • 142.250.178.14:443
    android.apis.google.com
    tls
    2.8kB
    6.9kB
    10
    14
  • 172.217.16.226:443
    520 B
    10
  • 142.250.178.14:443
    android.apis.google.com
    520 B
    10
  • 142.250.178.4:443
    tls, https
    723 B
    40 B
    3
    1
  • 142.250.178.4:443
    www.google.com
    tls
    8.8kB
    9.5kB
    26
    29
  • 172.217.169.46:443
    tls, https
    128 B
    40 B
    2
    1
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    172.217.16.232

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    142.250.178.14

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.temptation.lydia/files/PersistedInstallation764195435461950362tmp

    Filesize

    90B

    MD5

    aa5c3b95d344f4c769aa1dc9b599f95a

    SHA1

    dd54bc3e77161dc7a183e1509be7685487d2daa5

    SHA256

    86834e9ce2833761c687d674d3f166131df8256fd659e084bad2e1388b52aa7e

    SHA512

    1c31f44bcc1390779ba17eadc9b4ce3486b2082a838f9a4720435e513eee413dc61942cc90371c0c78a39ec560271c20e9492af8008e56d290764acb48f21a5f

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.