Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
4s -
max time network
146s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
26/07/2024, 22:05 UTC
Static task
static1
Behavioral task
behavioral1
Sample
4db9426f5c5b2c5b509ddf19d8a28f89d74166f5243d333a47e0dfa10c357465.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
4db9426f5c5b2c5b509ddf19d8a28f89d74166f5243d333a47e0dfa10c357465.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
4db9426f5c5b2c5b509ddf19d8a28f89d74166f5243d333a47e0dfa10c357465.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
4db9426f5c5b2c5b509ddf19d8a28f89d74166f5243d333a47e0dfa10c357465.apk
-
Size
1.5MB
-
MD5
0ec53a1ef3e2c157faa5048d770bb280
-
SHA1
2f6572b28b6ad18d76b30a89474bb855d0c48336
-
SHA256
4db9426f5c5b2c5b509ddf19d8a28f89d74166f5243d333a47e0dfa10c357465
-
SHA512
ead6e5cb7b42e2d2dc127b3dd27a89af80a1da3a94b4a80dab1220bbf540c962932c06758223361d64c8e29087b6ad1e52c15c19f579eb265a2e0b678f26b788
-
SSDEEP
24576:BpY7rLYAq5Vbm9lhs1odhGYhkE1pI1jhWgFe4dHdAOe0ORoUK:Bp/ILGaTWjDFe4VdAT2
Malware Config
Signatures
Network
-
Remote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.179.238
-
Remote address:1.1.1.1:53Requestwww.umeng.comIN AResponsewww.umeng.comIN CNAMEdefault.wagbridge.umeng.alibabacorp.comdefault.wagbridge.umeng.alibabacorp.comIN CNAMEdefault.cn.zb.wagbridge.umeng.alibabacorp.comdefault.cn.zb.wagbridge.umeng.alibabacorp.comIN CNAMEdefault.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comdefault.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.29.162default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.29.163default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.29.248default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.29.249default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.31.154default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.31.160default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.31.210default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.31.92default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.31.95default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.60.43default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.60.44default.cn.zb.wagbridge.umeng.alibabacorp.com.gds.alibabadns.comIN A59.82.112.112
-
Remote address:1.1.1.1:53Requestapp.wapx.cnIN AResponse
-
Remote address:1.1.1.1:53Requestssl.google-analytics.comIN AResponsessl.google-analytics.comIN A172.217.169.40
-
1.5kB 40 B 1 1
-
1.5kB 40 B 1 1
-
4.7kB 7.9kB 18 20
-
180 B 3
-
1.3kB 5.8kB 8 8
-
845 B 40 B 2 1
-
11.0kB 11.4kB 29 30
-
3.7kB 11
-
69 B 109 B 1 1
DNS Request
android.apis.google.com
DNS Response
142.250.179.238
-
59 B 404 B 1 1
DNS Request
www.umeng.com
DNS Response
59.82.29.16259.82.29.16359.82.29.24859.82.29.24959.82.31.15459.82.31.16059.82.31.21059.82.31.9259.82.31.9559.82.60.4359.82.60.4459.82.112.112
-
57 B 121 B 1 1
DNS Request
app.wapx.cn
-
70 B 86 B 1 1
DNS Request
ssl.google-analytics.com
DNS Response
172.217.169.40
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
195KB
MD5a438d78abdaa86f530820931a6a8e205
SHA18f484c0e5f6ea97c7dfd07a840a9df000725e4cc
SHA2562d4726d99a0967a5e0b5ca63c4e9e4ce143057c95172fa796410a7e79de6088c
SHA512e6e165e5ba3d2bbbf7ad99cda7258cf820d1d6747f9b3673da7c28f7d784275ceaf0f5a2ff636842f5a50a3c4c8b856a60bb1e420b260a7dee5f2fbd225e0936
-
Filesize
543KB
MD514a36e2eea3edcb7a7b9f00668c86dde
SHA125b0cf4f6423d29402a533517fc6b1277f10d7b1
SHA2568f87c1fdcdadeafa04c11bc390675c2e293cddf8df09971854f637e19651070a
SHA512695ebeb763361f19e1f6a561d88dd3b23e1c8284513e4a01e83a4876f92365c9653039595319f493450c2d75e04e9ff75ba5eeaab50c55363958b1ed279ef8d2