Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    100s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    27/06/2024, 08:28

General

  • Target

    492F42920020596DC2B89EC297A66C51FA8847A2A3EAF5EF5D97663ACE893F6A.apk

  • Size

    10.3MB

  • MD5

    8be860fb16835e673be716dc11b846a9

  • SHA1

    1e2d2609b24a7462265f6e63e0003e39ddf24202

  • SHA256

    492f42920020596dc2b89ec297a66c51fa8847a2a3eaf5ef5d97663ace893f6a

  • SHA512

    51e7cb3e64ec477f8b042e6b476b3049c1bcb5c01396589a1c2844d2ba4230cf3f3e9aa32e31f67dfe0bc4d5901a0bb94021709fbf83619928590a055abeee47

  • SSDEEP

    196608:w5H63tsVQsQ+F46spOYC4x0q7YqdqEFJoTVeVMLO7SzHFuQh2p:w5H+elzxq7BgEPue+hh2p

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.joinhands.android
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:4251

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.joinhands.android/databases/OneSignal.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.joinhands.android/databases/OneSignal.db-journal

    Filesize

    512B

    MD5

    8c4a34cd2594ace48b375df0fda0cac0

    SHA1

    3ea0638ea2da0ac4682e5dcd8098e8e5ccad902b

    SHA256

    bc75cb9b5b0e66c1c184136f61ee50fb320063772efffeb3d5bfe24c421ef98a

    SHA512

    3f0ca55f6c16a0a80e8b936a8b70f4afc412e3b801ca14998b8e5296f7ddf2ef8e8a0e9e6dd4e457095b56162c88ef8fdfd56e750cbcf50c956c794627e651c7

  • /data/data/com.joinhands.android/databases/OneSignal.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.joinhands.android/databases/OneSignal.db-wal

    Filesize

    52KB

    MD5

    b3426207483b9aecc86a7ebdcd4deba0

    SHA1

    e048597174f827d069be959406dc1dafaecbbb2c

    SHA256

    e4620488ea4045f098dc3f042a3667dd5807cf7ff4a019109e7343db8ba6adb4

    SHA512

    1c89828bb70b546cf0028ef06132bad73d23dfa38b8653aed631f6f44152421f8dae63b839e81de2dc86e7769391eddc728ee12591f161b57b1a8b181879c672