Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    18/11/2024, 22:04 UTC

General

  • Target

    7c9731718738e645d8e81d394564f0c0a897545de64a83e0235d2b372eb9f6a1.apk

  • Size

    760KB

  • MD5

    e58b6ee37916d241e6cb232ff508a7b8

  • SHA1

    59fb5a9295abae874564ead095c59d37b8b9955e

  • SHA256

    7c9731718738e645d8e81d394564f0c0a897545de64a83e0235d2b372eb9f6a1

  • SHA512

    d36ca36f1d9579f3cf5e175537475c1b2ba95cffd554e30d033aac68f270e5d78b12c2b5ecc0885129e9fe8a3d49801cde1eb56aef3a1c9e619ecb3566b21a01

  • SSDEEP

    12288:6+yFUa1a8LdeS/wZAXUG5WmpYshXZPbGwidNpg/:6+Va1a6eS8AXUG5WmD9idNpI

Malware Config

Signatures

Processes

  • cmf0.c3b5bm90zq.patch
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests enabling of the accessibility settings.
    • Tries to add a device administrator.
    PID:4632

Network

  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    172.217.169.14
  • flag-us
    DNS
    www.youtube.com
    Remote address:
    1.1.1.1:53
    Request
    www.youtube.com
    IN A
    Response
    www.youtube.com
    IN CNAME
    youtube-ui.l.google.com
    youtube-ui.l.google.com
    IN A
    142.250.200.14
    youtube-ui.l.google.com
    IN A
    172.217.169.46
    youtube-ui.l.google.com
    IN A
    142.250.179.238
    youtube-ui.l.google.com
    IN A
    142.250.180.14
    youtube-ui.l.google.com
    IN A
    216.58.201.110
    youtube-ui.l.google.com
    IN A
    142.250.187.238
    youtube-ui.l.google.com
    IN A
    216.58.213.14
    youtube-ui.l.google.com
    IN A
    142.250.178.14
    youtube-ui.l.google.com
    IN A
    216.58.212.238
    youtube-ui.l.google.com
    IN A
    172.217.16.238
    youtube-ui.l.google.com
    IN A
    172.217.169.14
    youtube-ui.l.google.com
    IN A
    216.58.204.78
    youtube-ui.l.google.com
    IN A
    216.58.212.206
    youtube-ui.l.google.com
    IN A
    142.250.200.46
    youtube-ui.l.google.com
    IN A
    142.250.187.206
  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.250.200.8
  • 216.58.201.110:443
    tls, https
    1.4kB
    40 B
    1
    1
  • 172.217.169.14:443
    android.apis.google.com
    tls
    2.6kB
    6.0kB
    12
    11
  • 142.250.200.14:443
    www.youtube.com
    tls
    2.0kB
    8.3kB
    15
    14
  • 172.217.169.14:443
    android.apis.google.com
    tls
    2.6kB
    6.1kB
    11
    11
  • 142.250.200.8:443
    ssl.google-analytics.com
    tls
    1.3kB
    6.2kB
    8
    8
  • 216.239.36.223:443
    tls, https
    128 B
    40 B
    2
    1
  • 142.250.187.206:443
    www.youtube.com
    tls
    135 B
    40 B
    2
    1
  • 142.250.187.193:443
    tls
    135 B
    40 B
    2
    1
  • 216.58.201.97:443
    tls
    135 B
    40 B
    2
    1
  • 216.239.34.223:443
    tls, https
    128 B
    40 B
    2
    1
  • 216.239.34.223:443
    tls, https
    128 B
    40 B
    2
    1
  • 224.0.0.251:5353
    3.8kB
    12
  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    172.217.169.14

  • 1.1.1.1:53
    www.youtube.com
    dns
    61 B
    335 B
    1
    1

    DNS Request

    www.youtube.com

    DNS Response

    142.250.200.14
    172.217.169.46
    142.250.179.238
    142.250.180.14
    216.58.201.110
    142.250.187.238
    216.58.213.14
    142.250.178.14
    216.58.212.238
    172.217.16.238
    172.217.169.14
    216.58.204.78
    216.58.212.206
    142.250.200.46
    142.250.187.206

  • 142.250.200.14:443
    www.youtube.com
    https
    1.4kB
    54 B
    1
    1
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.250.200.8

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.