Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

230f3d7400...d1.apk

android-9-x86

7

230f3d7400...d1.apk

android-10-x64

7

230f3d7400...d1.apk

android-11-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    15/09/2024, 08:24 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    230f3d74004fee235055e786aba413abff2ed5cf4faa1987a070493be28c75d1.apk

  • Size

    4.5MB

  • MD5

    d55ee912c682c9c6aecec279681c6443

  • SHA1

    0bdba6764e5384f8810a7006899cb667f7abed69

  • SHA256

    230f3d74004fee235055e786aba413abff2ed5cf4faa1987a070493be28c75d1

  • SHA512

    5660978c9af7a699f45462591bdca8e34b1f7e764b726cda02778317f476f18ed4c94a3ff5245b96336d3d8563be77e0d5fbc2db24b94ec2ea61c1f7a2fa898d

  • SSDEEP

    98304:oGZm/UcvLXo+yDW1AN9mfg2rpD0eDD0LD0+D0EFD0nAFD0BD02D01zD:oGZs/0XDWKXwDRDKDrDDDCoDgDvDQzD

Score
7/10
collectioncredential_accessevasionimpact

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Acquires the wake lock 1 IoCs
  • Performs UI accessibility actions on behalf of the user 1 TTPs 51 IoCs

    Application may abuse the accessibility service to prevent their removal.

    evasion
  • Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
    collectioncredential_access
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.applicazionetokennew.app
    1⤵
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Performs UI accessibility actions on behalf of the user
    • Requests accessing notifications (often used to intercept notifications before users become aware).
    • Checks CPU information
    • Checks memory information
    PID:4499

Network

  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    142.250.200.46
  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.250.200.40
  • 142.250.180.14:443
    tls, https
    1.5kB
     40 B
     1
    1
  • 142.250.180.14:443
    tls, https
    1.5kB
     40 B
     1
    1
  • 142.250.200.46:443
    android.apis.google.com
    tls
    5.6kB
     8.7kB
     23
    22
  • 142.250.200.40:443
    ssl.google-analytics.com
    tls
    1.3kB
     5.9kB
     8
    9
  • 213.109.147.35:52997
    120 B
     40 B
     2
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 142.250.179.228:443
    tls, https
    936 B
     40 B
     3
    1
  • 142.250.179.228:443
    www.google.com
    tls
    11.3kB
     9.9kB
     32
    38
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    120 B
     40 B
     2
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    180 B
     40 B
     3
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 213.109.147.35:52997
    60 B
     40 B
     1
    1
  • 224.0.0.251:5353
    3.7kB
     11
  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
     109 B
     1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    142.250.200.46

  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
     86 B
     1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.250.200.40

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.applicazionetokennew.app/files/db.db
    Filesize

    44KB

    MD5

    d5d190e1180c5e6858c40a93f7526f12

    SHA1

    0d054f2e34776c8d5bcfd54d743831b9919618fe

    SHA256

    274fe3e82fc2630d99809afd6a1c64768a77ed69c04b33e0df6a292a5a042203

    SHA512

    0d58df37359d6e35f02ef95e4edcfb05fac6c3bc57d1c3e56e49fa7b6c66aef3f99b383cb14dc5a01b52bc6a0d4685f275fb30279aa26e8339a5e0b8416ba85e

    Download Submit

  • /data/data/com.applicazionetokennew.app/files/loading.gif
    Filesize

    73KB

    MD5

    b939bfddae63d6eeb43f71e60c5fe2e5

    SHA1

    d20e224ddfac3efc818ca7ec35327b3a549f0e70

    SHA256

    8b0f662fc6a3c42378b9abe0a47963997a054eba207dd5a1ce8b2c6dbbe71d6e

    SHA512

    4987a75bf83e843607b7d8a76dcd0fb944298568103f7e9bdbec3b538582e2adaf514ca8d182f8be7dd381a2774fa40146124e58b1e755554c297fbdabb0bb4a

    Download Submit

  • /data/data/com.applicazionetokennew.app/files/txtscreensize.txt
    Filesize

    11B

    MD5

    1b65c10c6215685f9d621d797f911373

    SHA1

    cc50aaed5cd521a62ec8cf9fe0413153ec90f265

    SHA256

    2230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89

    SHA512

    5a9139f295dbe384b1584eff5c11f3f86759232f7b661b75f27fe92b996b4cdc0552e315f79b26f5f2c1f91756d9ae04cf0c3675b6172e91a3d373b9b314496f

    Download Submit

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.