Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    173s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    27/06/2024, 08:32

General

  • Target

    B2B18FE4E195DD5E40A9B58D10EC657CC916D290A1068BBA4DBE99D1B03AE682.apk

  • Size

    13.0MB

  • MD5

    da3714138823dc1fc449670df1709ddb

  • SHA1

    f093143bf67ccdd54b91ee6c08bd0ab90d8bfebe

  • SHA256

    b2b18fe4e195dd5e40a9b58d10ec657cc916d290a1068bba4dbe99d1b03ae682

  • SHA512

    3425213bc1040faf189ee94c348785c9b23201c6af7bed88feeb881811694168fe03e2ef526a160582980cf6d2140db65f8e12d41da29e823418202c8380e3eb

  • SSDEEP

    393216:LsNBaCMkWwDlx0uTySRX7eNjfCyBmjNHz:Ls7FXDlxH9RX7yj6yBGNT

Malware Config

Signatures

Processes

  • com.contato.ImperiodoBrasil
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4609

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.contato.ImperiodoBrasil/cache/1582435991586.jar

    Filesize

    9KB

    MD5

    e8e0527a01aefdb89afd2c508f131da1

    SHA1

    f1103e6b260c657ceb3d95f1b023af3fda8b133a

    SHA256

    f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

    SHA512

    fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

  • /data/user/0/com.contato.ImperiodoBrasil/cache/1582435991586.jar

    Filesize

    20KB

    MD5

    fde2ee00cbd121cfab5290b078aa3ceb

    SHA1

    e2b77d5320e155e413d040a8c20020962065b2f8

    SHA256

    2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

    SHA512

    a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

  • /data/user/0/com.contato.ImperiodoBrasil/cache/oat/1582435991586.jar.cur.prof

    Filesize

    153B

    MD5

    f9431a0cde5766b6a47fe517f0dbe91f

    SHA1

    41ebffb9e03db4e211961286e6c233726d1c704f

    SHA256

    48409024aacda3669e2112419ca8742dedca12f5310521730db60c8387710616

    SHA512

    3102a350b8cdbfe686564eb79892a609f3cccd74d4b420f831156b1c57b736853f1cba0988d4dea7bf728f341e3ed2b997274684726afa2d97d31115e5213382