Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    178s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    16/08/2024, 22:08

General

  • Target

    ed57cbe59c74b547e9b745ee42eefc01383c7b2f89cb3608bf854fad9e36a1d4.apk

  • Size

    5.0MB

  • MD5

    4d5d375611813b9c5cd9e99bf4f20041

  • SHA1

    536905101166d247fc48d3b48f7fdfafefbf7fe0

  • SHA256

    ed57cbe59c74b547e9b745ee42eefc01383c7b2f89cb3608bf854fad9e36a1d4

  • SHA512

    027ed0ab50d57e60cd3a1af7e8db3c00066a8377f3090de3a38b90e834dbdb1db3b97d8748fa2fd0e198ec0bbc2b7de4fb4f401ff059dd96b59dcc138ec62ccf

  • SSDEEP

    98304:z9ddus+vYa3Pzu1+GTp6nh4wclyvyWS9xiEg6223ern9d7uvEjcrjCNco/Krfm5v:gsjp1+kQnhC0KWShgI3A9hDOjCNN5v

Score
6/10

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

Processes

  • com.atrc.tr44
    1⤵
    • Makes use of the framework's foreground persistence service
    PID:4262

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.atrc.tr44/files/profileInstalled

    Filesize

    24B

    MD5

    48558e34074c126e621b0abdb126d0d7

    SHA1

    0f082796185bfd223f86ba6e4a1a70e6a4e55202

    SHA256

    7c746caad054b8dd2477e744ae5d729a7e2c3be8819f0e0623ec3b87326678ee

    SHA512

    91d826ce716d7bc676965e8dfd3f62cfdc9fc2077f8309efc78f75634a9781967d86b39390ec4f21b07041ad49abb092cb99e9ba3c5ee05772991bd1f72f7e7c

  • /data/data/com.atrc.tr44/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    9b099bdd7cf97f5cb89e4990a5ac4f45

    SHA1

    f485c9dbd07f5d80af8fd87e3c051083b3b77aa9

    SHA256

    4e9a4e73aabd88d0c96a649ef82cfa82a14f3d4104a46b1aca2fed66cf152772

    SHA512

    69d9b7cb37accce0fc602cb327bb9e7cf57c8d962676673747c2c422f57023bc3cac4abae6e91690c99a0f2a6216f2c983a77676b7f677e4da41a37594d9b118

  • /data/misc/profiles/cur/0/com.atrc.tr44/primary.prof

    Filesize

    2KB

    MD5

    bde929d1e3df4c110da63c42706d6161

    SHA1

    23fda1a2e140b547d791f058f5b653bbac31d597

    SHA256

    5816a19e1f9d24aa6124db7157f55c4697ba54bb56b3f82caea29f62162a5c39

    SHA512

    0eb478ff11b84ba048333b8ba96546f2c420bd581ca0cf666882c064f9ab92fb3bda6fe32c9dabb44badba24c17226292c7bba75924c9a7c23f0109fb1896cec

  • /data/misc/profiles/cur/0/com.atrc.tr44/primary.prof

    Filesize

    5KB

    MD5

    1cb31e2a9367a37819e31e9e38f50695

    SHA1

    bd35f7cf4fdae7dac361d230376ae83c76a2246d

    SHA256

    2f1a73fd1d0d6fbd189395c24938e5666b0758f53458b4cda3819525780eb301

    SHA512

    3b71f543ca598176346102a62e772903fee801173f9af009a3dca1ac48870df0285cf0c4a871adab84307fff279d0b5467eebbc6e1ee5b8c73f2295262ae96d5