Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    39s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    08/07/2024, 22:06 UTC

General

  • Target

    81ce38f5987359e64ddb84f7ac3356fd5160f4f2c9000563393f141516341255.apk

  • Size

    1.6MB

  • MD5

    0b2880cb11b9be304346fe6513de585f

  • SHA1

    a315dec708b66a69ece082b3db3bfdce43ec721e

  • SHA256

    81ce38f5987359e64ddb84f7ac3356fd5160f4f2c9000563393f141516341255

  • SHA512

    ceedc28d1d597f0bd067703807f8c14ed36993ba4d750a1f5f3093a834b83ae14088d361d3050b75b618ee3ee03231369cd42590b537549e46a2ca6fbfb40a98

  • SSDEEP

    49152:O+6VmndqCnrhfVxTICBazsFm66blXCkx8r:Okn0AF/nOSZ6hXCkx8r

Malware Config

Extracted

Family

cerberus

C2

.urlConnectPanel.

Signatures

Processes

  • com.example.mmm
    1⤵
    • Removes its main activity from the application launcher
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Performs UI accessibility actions on behalf of the user
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Tries to add a device administrator.
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Checks CPU information
    • Checks memory information
    PID:4595

Network

  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.250.180.8
  • 142.250.187.238:443
    tls, https
    695 B
    40 B
    1
    1
  • 142.250.187.238:443
    tls, https
    695 B
    40 B
    1
    1
  • 142.250.187.238:443
    tls
    5.7kB
    8.8kB
    24
    23
  • 172.217.169.74:443
    tls, https
    1.3kB
    40 B
    1
    1
  • 172.217.169.74:443
    tls, https
    530 B
    40 B
    1
    1
  • 142.250.200.36:443
    tls, https
    850 B
    40 B
    2
    1
  • 142.250.200.36:443
    www.google.com
    tls
    11.3kB
    14.6kB
    33
    40
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.250.180.8

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.