Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
24s -
max time network
159s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system -
submitted
13/09/2024, 22:06
Static task
static1
Behavioral task
behavioral1
Sample
2ee8c2e5c48f1a8ae608a5f738670f5c28cbcba4b63e33ab821984233ff00d1a.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
2ee8c2e5c48f1a8ae608a5f738670f5c28cbcba4b63e33ab821984233ff00d1a.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
2ee8c2e5c48f1a8ae608a5f738670f5c28cbcba4b63e33ab821984233ff00d1a.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
2ee8c2e5c48f1a8ae608a5f738670f5c28cbcba4b63e33ab821984233ff00d1a.apk
-
Size
392KB
-
MD5
364ef380db46a661788f536b149a6dd4
-
SHA1
087417a3a91a11dd97545f27575c2062ba50c883
-
SHA256
2ee8c2e5c48f1a8ae608a5f738670f5c28cbcba4b63e33ab821984233ff00d1a
-
SHA512
cd63cf1d145e4756c65ff7f976fe8d4eac21fba1e218c1644fad2376d99ba604c9ceeb7dcc0c9926fa4447b5da073bad45fc27851cd3c53588bca80159660bdd
-
SSDEEP
12288:ygFE/QalmQa+KMDO7NhUUsjl71Y8XOLp/suOj:HFE4gmQatM6hOl7iBLGuS
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener i8iwk.lqoo2 -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone i8iwk.lqoo2 -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver i8iwk.lqoo2 -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo i8iwk.lqoo2 -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo i8iwk.lqoo2