Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    26/07/2024, 22:05 UTC

General

  • Target

    4db9426f5c5b2c5b509ddf19d8a28f89d74166f5243d333a47e0dfa10c357465.apk

  • Size

    1.5MB

  • MD5

    0ec53a1ef3e2c157faa5048d770bb280

  • SHA1

    2f6572b28b6ad18d76b30a89474bb855d0c48336

  • SHA256

    4db9426f5c5b2c5b509ddf19d8a28f89d74166f5243d333a47e0dfa10c357465

  • SHA512

    ead6e5cb7b42e2d2dc127b3dd27a89af80a1da3a94b4a80dab1220bbf540c962932c06758223361d64c8e29087b6ad1e52c15c19f579eb265a2e0b678f26b788

  • SSDEEP

    24576:BpY7rLYAq5Vbm9lhs1odhGYhkE1pI1jhWgFe4dHdAOe0ORoUK:Bp/ILGaTWjDFe4VdAT2

Score
1/10

Malware Config

Signatures

Processes

  • com.adroidzscpc.penetratezb
    1⤵
      PID:4493

    Network

    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      142.250.179.238
    • flag-us
      DNS
      www.umeng.com
      Remote address:
      1.1.1.1:53
      Request
      www.umeng.com
      IN A
      Response
      www.umeng.com
      IN CNAME
      default.wagbridge.umeng.alibabacorp.com
      default.wagbridge.umeng.alibabacorp.com
      IN CNAME
      default.cn.zb.wagbridge.umeng.alibabacorp.com
      default.cn.zb.wagbridge.umeng.alibabacorp.com
      IN CNAME
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.29.162
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.29.163
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.29.248
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.29.249
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.31.154
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.31.160
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.31.210
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.31.92
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.31.95
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.60.43
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.60.44
      default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.com
      IN A
      59.82.112.112
    • flag-us
      DNS
      app.wapx.cn
      Remote address:
      1.1.1.1:53
      Request
      app.wapx.cn
      IN A
      Response
    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
      Response
      ssl.google-analytics.com
      IN A
      172.217.169.40
    • 142.250.187.206:443
      tls, https
      1.5kB
      40 B
      1
      1
    • 142.250.187.206:443
      tls, https
      1.5kB
      40 B
      1
      1
    • 142.250.179.238:443
      android.apis.google.com
      tls
      4.7kB
      7.9kB
      18
      20
    • 59.82.29.162:80
      www.umeng.com
      180 B
      3
    • 172.217.169.40:443
      ssl.google-analytics.com
      tls
      1.3kB
      5.8kB
      8
      8
    • 142.250.187.228:443
      tls, https
      845 B
      40 B
      2
      1
    • 142.250.187.228:443
      www.google.com
      tls
      11.0kB
      11.4kB
      29
      30
    • 224.0.0.251:5353
      3.7kB
      11
    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
      109 B
      1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      142.250.179.238

    • 1.1.1.1:53
      www.umeng.com
      dns
      59 B
      404 B
      1
      1

      DNS Request

      www.umeng.com

      DNS Response

      59.82.29.162
      59.82.29.163
      59.82.29.248
      59.82.29.249
      59.82.31.154
      59.82.31.160
      59.82.31.210
      59.82.31.92
      59.82.31.95
      59.82.60.43
      59.82.60.44
      59.82.112.112

    • 1.1.1.1:53
      app.wapx.cn
      dns
      57 B
      121 B
      1
      1

      DNS Request

      app.wapx.cn

    • 1.1.1.1:53
      ssl.google-analytics.com
      dns
      70 B
      86 B
      1
      1

      DNS Request

      ssl.google-analytics.com

      DNS Response

      172.217.169.40

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.adroidzscpc.penetratezb/code_cache/i11111i111.zip

      Filesize

      195KB

      MD5

      a438d78abdaa86f530820931a6a8e205

      SHA1

      8f484c0e5f6ea97c7dfd07a840a9df000725e4cc

      SHA256

      2d4726d99a0967a5e0b5ca63c4e9e4ce143057c95172fa796410a7e79de6088c

      SHA512

      e6e165e5ba3d2bbbf7ad99cda7258cf820d1d6747f9b3673da7c28f7d784275ceaf0f5a2ff636842f5a50a3c4c8b856a60bb1e420b260a7dee5f2fbd225e0936

    • /data/user/0/com.adroidzscpc.penetratezb/dpt-libs/x86_64/libdpt.so

      Filesize

      543KB

      MD5

      14a36e2eea3edcb7a7b9f00668c86dde

      SHA1

      25b0cf4f6423d29402a533517fc6b1277f10d7b1

      SHA256

      8f87c1fdcdadeafa04c11bc390675c2e293cddf8df09971854f637e19651070a

      SHA512

      695ebeb763361f19e1f6a561d88dd3b23e1c8284513e4a01e83a4876f92365c9653039595319f493450c2d75e04e9ff75ba5eeaab50c55363958b1ed279ef8d2

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.