Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    179s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    27/06/2024, 08:32

General

  • Target

    B2B18FE4E195DD5E40A9B58D10EC657CC916D290A1068BBA4DBE99D1B03AE682.apk

  • Size

    13.0MB

  • MD5

    da3714138823dc1fc449670df1709ddb

  • SHA1

    f093143bf67ccdd54b91ee6c08bd0ab90d8bfebe

  • SHA256

    b2b18fe4e195dd5e40a9b58d10ec657cc916d290a1068bba4dbe99d1b03ae682

  • SHA512

    3425213bc1040faf189ee94c348785c9b23201c6af7bed88feeb881811694168fe03e2ef526a160582980cf6d2140db65f8e12d41da29e823418202c8380e3eb

  • SSDEEP

    393216:LsNBaCMkWwDlx0uTySRX7eNjfCyBmjNHz:Ls7FXDlxH9RX7yj6yBGNT

Malware Config

Signatures

Processes

  • com.contato.ImperiodoBrasil
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4933

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.contato.ImperiodoBrasil/cache/1582435991586.jar

    Filesize

    9KB

    MD5

    e8e0527a01aefdb89afd2c508f131da1

    SHA1

    f1103e6b260c657ceb3d95f1b023af3fda8b133a

    SHA256

    f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

    SHA512

    fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

  • /data/data/com.contato.ImperiodoBrasil/cache/oat/1582435991586.jar.cur.prof

    Filesize

    148B

    MD5

    a3b78d197d786c13687c3f0f89703bd8

    SHA1

    9967f0726b6b1ed3f198904547b81920f8329621

    SHA256

    c5e6754556dbe01b055066f23c28ddaaf5fe67cee4baed00d59dc993335b3d97

    SHA512

    9a47c9bb977edec9d29d22f280e0078ca931a722eaecc2b085c6b5aaf6246d17a6ad07c9faca45070bb5b89a3ee6cf896f5e2c7e73fb033e3ac57471df70a8b1

  • /data/user/0/com.contato.ImperiodoBrasil/cache/1582435991586.jar

    Filesize

    20KB

    MD5

    fde2ee00cbd121cfab5290b078aa3ceb

    SHA1

    e2b77d5320e155e413d040a8c20020962065b2f8

    SHA256

    2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

    SHA512

    a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56