Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
80s -
max time network
1159s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system -
submitted
22/09/2024, 16:10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://dosya.co/nt8hcc7eenad/virus.apk.html
Resource
android-33-x64-arm64-20240910-en
General
-
Target
https://dosya.co/nt8hcc7eenad/virus.apk.html
Malware Config
Extracted
sandrorat
potar.duckdns.org:1628
Signatures
-
SandroRat
SandroRat is an Android RAT first seen in 2013.
-
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19KB
MD5d64e7d2f2c7d8dee3d140983a5657eaa
SHA1d037ae5bc0a2986a3621d6a7c22f675a83e9e476
SHA2563cb4ef95b50fd96f8578e17d5eb73b880e41eb0bd8f7a09ab53391bdc05fc949
SHA51221e88e855bb5a2e64baecc147a3980fb973b085ee62041ba0a3d3264b6aee1e3a7b7f04f1f1a8371b893c6b2b158aeb78e9b4607e52725d082ce1836d6b0ff46
-
Filesize
254KB
MD5063ba05f9f2afa3f23b47dc318a7cc24
SHA1ea09d0c0023e8dc251505a61e3192a7e9c4e180e
SHA25674c9186a28afc24ae83e4e2d63f6230f219c721dee2a389e32fbe53c2c17d6b0
SHA5120ac877f41be838f216448f2fdbd483b109c3b93412c73642bb5817f624c301686814e98fb8fc48b4671b3d7a5df8b0e8c2398eef556119c7576cfab4f8b8dce4
-
Filesize
543KB
MD56eef3f6894b75f2ace507ac82b551519
SHA1035751df62a1d67717ef79fcf58b00056f811ae7
SHA2564889161908c435ead199b5858d465e83d3dca4119d7d0af9e4050702ae366339
SHA5128ee6b2d6901e13a37e59508201e32317e378bd2470bd9900c677f29834e31283b7736d8fa9248969eddc3714e7e6a1a7757baa9602680036c99cf809f5e983d9