Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
16/08/2024, 23:08
240816-24h8tswfnj 616/08/2024, 23:05
240816-222bmawepj 616/08/2024, 23:03
240816-216vqawekn 616/08/2024, 23:02
240816-2z8ypawdpm 716/08/2024, 23:00
240816-2yzzdsserf 7Analysis
-
max time kernel
2s -
max time network
82s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
16/08/2024, 23:00
Static task
static1
Behavioral task
behavioral1
Sample
magis-celular.apk
Resource
android-x86-arm-20240624-en
General
-
Target
magis-celular.apk
-
Size
29.2MB
-
MD5
c09ae2d7831f3e2c8f1ba10fbd89489c
-
SHA1
b6a5c97bbb4d44a34d5be58bafee179b295e9894
-
SHA256
0c956e74273da58c9d2c0de914cc01973463023ccd8267abe3fff054312042a2
-
SHA512
be5c187d121079a8a30fa5f326dc4cb12a2e2eeef8006cc7075068ffd19c11c8d4cff68013be4e06107660d01d018c4c58e9f2742f491a43ecf7fddf6b04354b
-
SSDEEP
786432:MJZSPOVLQR/mRL581uD/VSCMOytwySizoiDGAEdBj68ld8p:MJfVL1581E/sCowyDzraNbld2
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 1 TTPs 5 IoCs
description ioc Process Accessed system property key: ro.bootloader com.msandroid.mobile Accessed system property key: ro.bootmode com.msandroid.mobile Accessed system property key: ro.hardware com.msandroid.mobile Accessed system property key: ro.product.device com.msandroid.mobile Accessed system property key: ro.product.model com.msandroid.mobile -
Checks Qemu related system properties. 1 TTPs 7 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: init.svc.qemud com.msandroid.mobile Accessed system property key: init.svc.qemu-props com.msandroid.mobile Accessed system property key: qemu.hw.mainkeys com.msandroid.mobile Accessed system property key: qemu.sf.fake_camera com.msandroid.mobile Accessed system property key: ro.kernel.android.qemud com.msandroid.mobile Accessed system property key: ro.kernel.qemu.gles com.msandroid.mobile Accessed system property key: ro.kernel.qemu com.msandroid.mobile -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.msandroid.mobile /dev/qemu_pipe com.msandroid.mobile -
Checks the presence of a debugger