Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
115s -
max time network
110s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
06/08/2024, 18:31 UTC
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://web.archive.org/web/20230706214541/https://download1587.mediafire.com/t1vdad3xufngg6CCX1k5jtiFJ0YYnHArLuX2ldpUW45Y7C5_ICaaMoj15-uYrQ6IH4D6uZD0Xn-dcHnvDAXCw1fpmTc_0gQtEgldscAvESOiKjQXCpk1VPUISW0N9EJwVOMwZfG74yKr06krisXQH9u4s95Hp7LFqY-oMYQYAG2yBcY/12o45hf43lvv6az/fnaf2+aptoide.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
https://web.archive.org/web/20230706214541/https://download1587.mediafire.com/t1vdad3xufngg6CCX1k5jtiFJ0YYnHArLuX2ldpUW45Y7C5_ICaaMoj15-uYrQ6IH4D6uZD0Xn-dcHnvDAXCw1fpmTc_0gQtEgldscAvESOiKjQXCpk1VPUISW0N9EJwVOMwZfG74yKr06krisXQH9u4s95Hp7LFqY-oMYQYAG2yBcY/12o45hf43lvv6az/fnaf2+aptoide.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
https://web.archive.org/web/20230706214541/https://download1587.mediafire.com/t1vdad3xufngg6CCX1k5jtiFJ0YYnHArLuX2ldpUW45Y7C5_ICaaMoj15-uYrQ6IH4D6uZD0Xn-dcHnvDAXCw1fpmTc_0gQtEgldscAvESOiKjQXCpk1VPUISW0N9EJwVOMwZfG74yKr06krisXQH9u4s95Hp7LFqY-oMYQYAG2yBcY/12o45hf43lvv6az/fnaf2+aptoide.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
https://web.archive.org/web/20230706214541/https://download1587.mediafire.com/t1vdad3xufngg6CCX1k5jtiFJ0YYnHArLuX2ldpUW45Y7C5_ICaaMoj15-uYrQ6IH4D6uZD0Xn-dcHnvDAXCw1fpmTc_0gQtEgldscAvESOiKjQXCpk1VPUISW0N9EJwVOMwZfG74yKr06krisXQH9u4s95Hp7LFqY-oMYQYAG2yBcY/12o45hf43lvv6az/fnaf2+aptoide.apk
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
-
Remote address:1.1.1.1:53Requestweb.archive.orgIN AResponseweb.archive.orgIN A207.241.237.3
-
Remote address:1.1.1.1:53Requestarchive.orgIN AResponsearchive.orgIN A207.241.224.2
-
Remote address:1.1.1.1:53Requestweb-static.archive.orgIN AResponseweb-static.archive.orgIN A207.241.237.2
-
Remote address:1.1.1.1:53Requestwayback-api.archive.orgIN AResponsewayback-api.archive.orgIN CNAMEwwwb-api.archive.orgwwwb-api.archive.orgIN A207.241.237.8
-
Remote address:1.1.1.1:53Requestathena.archive.orgIN AResponseathena.archive.orgIN CNAMEanalytics.archive.organalytics.archive.orgIN CNAMEanalytics2.us.archive.organalytics2.us.archive.orgIN A207.241.225.195
-
Remote address:1.1.1.1:53Requestupdate.googleapis.comIN AResponseupdate.googleapis.comIN A216.58.212.227
-
Remote address:216.58.212.227:443RequestPOST /service/update2 HTTP/1.1
Content-Length: 655
Content-Type: application/x-www-form-urlencoded
User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
Host: update.googleapis.com
Connection: Keep-Alive
Accept-Encoding: gzip
ResponseHTTP/1.1 200 OK
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 06 Aug 2024 18:32:09 GMT
Content-Type: text/xml; charset=UTF-8
X-Daynum: 6427
X-Daystart: 41529
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.200.46
-
Remote address:1.1.1.1:53Requestsemanticlocation-pa.googleapis.comIN AResponsesemanticlocation-pa.googleapis.comIN A172.217.169.10semanticlocation-pa.googleapis.comIN A216.58.204.74semanticlocation-pa.googleapis.comIN A142.250.179.234semanticlocation-pa.googleapis.comIN A142.250.180.10semanticlocation-pa.googleapis.comIN A216.58.213.10semanticlocation-pa.googleapis.comIN A142.250.187.234semanticlocation-pa.googleapis.comIN A172.217.16.234semanticlocation-pa.googleapis.comIN A216.58.201.106semanticlocation-pa.googleapis.comIN A172.217.169.42semanticlocation-pa.googleapis.comIN A216.58.212.202semanticlocation-pa.googleapis.comIN A216.58.212.234semanticlocation-pa.googleapis.comIN A142.250.187.202semanticlocation-pa.googleapis.comIN A172.217.169.74semanticlocation-pa.googleapis.comIN A142.250.200.42semanticlocation-pa.googleapis.comIN A142.250.178.10semanticlocation-pa.googleapis.comIN A142.250.200.10
-
Remote address:1.1.1.1:53Requestwww.google.comIN AResponsewww.google.comIN A142.250.200.4
-
Remote address:1.1.1.1:53Requestwww.google.comIN AResponsewww.google.comIN A142.250.179.228
-
1.1kB 9.4kB 17 17
-
17.2kB 602.1kB 262 421
-
3.7kB 16.2kB 24 22
-
958 B 8.4kB 13 12
-
4.4kB 76.8kB 49 66
-
906 B 8.5kB 12 13
-
958 B 8.5kB 13 13
-
1.0kB 8.5kB 14 13
-
958 B 8.5kB 13 13
-
3.2kB 38.1kB 28 32
-
2.1kB 8.9kB 14 13
-
2.1kB 9.2kB 15 17
-
1.7kB 6.7kB 9 11
HTTP Request
POST https://update.googleapis.com/service/update2HTTP Response
200 -
858 B 40 B 1 1
-
5.6kB 8.4kB 15 22
-
1.2kB 40 B 1 1
-
1.7kB 5.9kB 11 10
-
91.4kB 61.4kB 128 183
-
2.0kB 5.9kB 12 14
-
3.3kB 10
-
61 B 77 B 1 1
DNS Request
web.archive.org
DNS Response
207.241.237.3
-
57 B 73 B 1 1
DNS Request
archive.org
DNS Response
207.241.224.2
-
68 B 84 B 1 1
DNS Request
web-static.archive.org
DNS Response
207.241.237.2
-
69 B 108 B 1 1
DNS Request
wayback-api.archive.org
DNS Response
207.241.237.8
-
64 B 132 B 1 1
DNS Request
athena.archive.org
DNS Response
207.241.225.195
-
67 B 83 B 1 1
DNS Request
update.googleapis.com
DNS Response
216.58.212.227
-
69 B 109 B 1 1
DNS Request
android.apis.google.com
DNS Response
142.250.200.46
-
80 B 336 B 1 1
DNS Request
semanticlocation-pa.googleapis.com
DNS Response
172.217.169.10216.58.204.74142.250.179.234142.250.180.10216.58.213.10142.250.187.234172.217.16.234216.58.201.106172.217.169.42216.58.212.202216.58.212.234142.250.187.202172.217.169.74142.250.200.42142.250.178.10142.250.200.10
-
60 B 76 B 1 1
DNS Request
www.google.com
DNS Response
142.250.200.4
-
1.5kB 49 B 2 1
-
60 B 76 B 1 1
DNS Request
www.google.com
DNS Response
142.250.179.228
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD553a3f02a3b5f01b07ad7078b8e2a5b1c
SHA12f3fef9858b448ee1f0279b60cce101c2c19854b
SHA256bd6f177e7b82a7b8facf4c06df031b042416c63c2a7684b5ef6e7d838fec0d5d
SHA5122034124f3b2ed1634f661e138938676d52bb291ffd4c55d1093e31230527706e10083b342107f7275c5685673f91642b6244658f7706da2df9ff0407cfddff94
-
Filesize
192KB
MD58ae370494e539291344925e9a7c6598c
SHA180622cc6583048548393185992b74eceb7f0e7eb
SHA256a4ba493fa425d42ea933514b8e4bba225cfaffdba89c3bc963cc2ea823d32874
SHA51209bc5e711e440fcc779ec547721670af33c9052f980996eb22907cf12fa057c5cab8cfeaa6d7230001c6d1d6c786651761ee3687668466c34a4246cbdd3e17a5
-
Filesize
549KB
MD506d47ef8c6b95dc181787d9d37f22c83
SHA19603c192e78f1891bd4a054045e71b5ae512b461
SHA256913637f82603e242655ac10278e87f3b21366dad40c09dded407d7bb5d21b175
SHA5120a42894d2c0c7f55570ea9a426037beadc99a529cd8aa6bd78db8c52e5a09343b9baf9378caad7bf076db448d72c0a24ce6fb328858b31bf1f4237ca8d45c51a