Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2341s -
max time network
2355s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system -
submitted
20/08/2024, 01:30
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://81d8469c-febc-4761-9304-fb60d97508c5-00-2stzpgyde6u38.spock.replit.dev/
Resource
android-33-x64-arm64-20240624-en
General
-
Target
https://81d8469c-febc-4761-9304-fb60d97508c5-00-2stzpgyde6u38.spock.replit.dev/
Malware Config
Signatures
-
Declares services with permission to bind to the system 1 IoCs
description ioc Required by chooser target services to bind with the system. Allows apps to modify targets that handle user actions. android.permission.BIND_CHOOSER_TARGET_SERVICE -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 10 IoCs
flow ioc 435 discord.com 416 discord.com 424 discord.com 432 discord.com 434 discord.com 441 discord.com 442 discord.com 443 discord.com 734 raw.githubusercontent.com 413 discord.com -
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 483 ipinfo.io -
Requests dangerous framework permissions 8 IoCs
description ioc Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Required to be able to access the camera device. android.permission.CAMERA Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to read the user's contacts data. android.permission.READ_CONTACTS -
Checks CPU information 2 TTPs 2 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 3 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome File opened for read /proc/meminfo com.android.chrome File opened for read /proc/meminfo com.android.chrome
Processes
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5bbbe2fef7293905a163a0d5f031f87b9
SHA1d3e7061df6aeba742a75910c1468c7a2a50a95c3
SHA256abbf70e180fdf95c4c551f4d2192335812818bb7d593af7636cf1de73bbca3a2
SHA512662d5946569586270f6f6500c3cca6b62345730aca47cfc98d31566d7d4f28f340e1826d4597d5eafc34de0dedc07e49aba11d740e4f0c1065c1bcf9d9d96584
-
Filesize
352KB
MD5d98f6c54ebb2c8f43900e380a426f748
SHA118e3c5e76fc741ac6bc40d0502c6a2dc95635f29
SHA2560f107ed0930e8b81e81bd2e361e600866a119e6e6c8718d12ab9f39a9b1ce71d
SHA512a6270b0e286a547002a08706db8916199bb6c9f566c0d5339d351377337d38c5123129d745b913b54ce4f3cd0a741223f27ae9a3062fd4ca2ee662dcc2c77f10
-
Filesize
64KB
MD5ee745f4cdd72dd5bf60e349e2907a842
SHA11059262acde719eb50aa1958ae48a6b7e8a25325
SHA256739fbcf7117eddc2dcd895d39ff761f10fd17cf169ac85c4dd55d3c7e448bd2e
SHA512ce5d03b9efd3ad337dac61be2cc6348be5199a31822a4f2d529162f9c7d21ccbba092c1f85093c107a770e333b8acc583b2797d68623647213937c050234bf9e
-
Filesize
544KB
MD5648a0713850baf0d72f1407ab14822d2
SHA186b8e35f2fda507f70abdd1b7dbcde3de7c3bada
SHA256966f70a511f01bd38622d4586b7f0c2b9a46d8f40725aa2381f6a1ab5b539b4f
SHA512f3cd2aebce5405831949d82e01c303046d3c36eb164cd4454082c80e94b7de0178a455852b9e5d6535f704f21f7e51b8322f2e4c791e3a7a5038d30a8420306c
-
Filesize
1.6MB
MD5ca56c5bd8f10b212a1b2220e40287d0a
SHA169036b95344d8cf00d1eb9d6633d4f96001bf884
SHA2565144b85f8e1cdd64dd7390ec120a5537426a8eae26968b927c8a4d9b97894f85
SHA5123e0fa77eabfa0e683f62244879c283555451e861f0f95d7d3d5f66c965753aac5c7fa0797f780ac411531956b81dedd4fec4cdbd200ee6f588fcfcff4b0b2ce7
-
Filesize
1.6MB
MD5bd9f2cede336d99881d23342f672d7a1
SHA1b1baeef62fde44220bd8db91d0eb26c19cfd4d29
SHA2560def688bb37f97941f54fd650eb07fa3f6b2e79e67d8a0973f59ee5a67ab1b8a
SHA512013ed6549b5c34afd409b453e9cd6edb4bce27f07a16de8b58c69a7a02bf7cfd39cbc13035dc5766a925a368e0b1aa6497ef61195787961cac75370632e27207
-
Filesize
114.0MB
MD50f143fa08924eae22930dca593acfa65
SHA11fa782781373138bd29db7e1ed50a20bd46f209e
SHA256caf2031f7518291ffc30aeaf0a58ec42a3892c9ab7fb0bacb4fc85d094823f17
SHA512ee3368064cb70d1eb2418701bf5e2f6ab03e47c1b457d9e39e7128b566bbb43a536e82f232eae588da1eb77f093c3b25e2a7328804958aa1b6f5b775b635836f
-
Filesize
4.3MB
MD5f0894bb14e4d45d2726d492dfb9f5370
SHA15659052f9a5a97b3f0fb834da7b1ac695bb39233
SHA2568847fb650fd7f661b5735807efeafb9ddebec17c4ad3e6c199e497f83f5b890f
SHA512c25be6d31b9153fe4b282619e2feb78523f99c89627213fde3823d3935a9d5b593fe4fc14de6c45fc7e110ea4f184f9b3eea6e23e5d5addea819dd5994b983f7
-
Filesize
4.4MB
MD55f2da7e35c13555e7b470ead924f7731
SHA1853a33520819e2fc23523528e63323c8ec3e503b
SHA256c287322796d3a1e33b796948fb9c307d331ca5509a1e60c3277ce6f11c5141e7
SHA5123df39139c696977a30655c0992382567564f086425716722c3180e51a21633c708d0c95b6922249a8ce9693d205a7d51e385faa3d17f95677668399f4c579432
-
Filesize
19.2MB
MD52c40cd213106631d15c5a92c4ed42578
SHA1244622b2959b8ab8365dae3c09069525c4966b8f
SHA256022ae969b005bc7480a89ee8de4bde62d2a9256df9ada4672417d2a470545b2d
SHA51248b716e720209faab54b436f58b7a6fdccae6c5662f4040b952104ad582339a2011fe8d324c918051ebf8493ab657c0ec72befef29a37e5e552a2eb0a4898fe9
-
Filesize
1.7MB
MD5a6d00eb08901f3cc213f9d1df5d04b3e
SHA17c22b5bf4f39b4ded9bd459bce5bb1bae21522d7
SHA2561dd6cd287343ac734d99ba204073ef3c47a4ddaf8420c276cba1a73b703c0aeb
SHA5126dbe4bda652c5685136a04bbe04300498797f004202021c22c725be0a41124fd27164c34eeea701f909816d9b49263a28ab787d7b578e701d6d9962b9f44d8cb
-
Filesize
512KB
MD575197fa44ed27acb799693adfd63990a
SHA1bb787a63f43e2a3866180535f1c506e24d80139b
SHA256231f93c70e3e0551f64270bbc8edf3a9d766f67c702e896dd0db33b25b1d2891
SHA5123365f011e6e3dd396fcefc2ed87f130d998518e07254fac3dab091c754d40abfa699cc94b136d2f395e93331b2d35cee8c88d23c8d35e0c54b9344a68b3e7d66
-
Filesize
512KB
MD5b7edfc354de30001ad7ac77d883fc2ce
SHA19a758b062a3ea0a531cf6c808c063b24fa1a00b6
SHA2560ca26f95f1946b89ec10995c1d728df031127c4fcaf2aba6202b1dd8b09a28d5
SHA51259a0ed0f6ea61c48d405f4912d87183afd4bc8bf6e32bdec3cf9057286b0393129c89d31b957a5f08725351dbd6ec3a42fd86b59515b9bb542af7024150f419e
-
Filesize
1.0MB
MD5194b038f6a60a1cd5c5907e5878ff189
SHA17505c2befcce4156c44b77144b546fbe21a26c3b
SHA256d988730819819513874d0231546477f126d051e63f6246f4dd0a6423c33c96d1
SHA512ed318f635d9557f24a094b6b6f899c5525a0c6d20b2a88f3eac57a399ae947bfefd9e39d2aec2cb93b43c1a2ef9ebdf614c89cd72332c0c6eeee599f0afb6c59
-
Filesize
855KB
MD5cdedcb499e864a033d713a091990bb51
SHA181e5812c0269e73b8a1aa02d9067457d3f4774b1
SHA2566eeea7c4352fc53a915e464bd897fb78cecd29feb1dfb552a3a1c2b152debc7d
SHA512d5cbd444bf8d4006428317331ba99c55a49b7b40b7995ddc5b7d49e317f3cae5e626700dde028aaa0d576572ad77be87cbb260254feb027db4b3a9eb4a08772c