Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
18/11/2024, 05:13
Behavioral task
behavioral1
Sample
base.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
base.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
base.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
base.apk
-
Size
3.2MB
-
MD5
1eb27cd5e5b35f30634bf3708d41829c
-
SHA1
a66699f9e3933017483edfd538aaa09f57819c22
-
SHA256
052fe0ddc8faff67d8a27366c0e643cae2fff21e65794d2d7265407f50f2150f
-
SHA512
3275845143ee9cd45fe7b6b27261cfda9b770d0ffbb3e1908b6c9a169900ccf0e06400ef4007397300490e770d734a182773ed1a79039c0652b91db5bbe22857
-
SSDEEP
98304:x/+9H56XSZIUaAJanXmyD7JWynPOj9zniN:x/iH5ekJa1nXmyNPOjto
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.Mad.api -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.Mad.api -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.Mad.api -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.Mad.api -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.Mad.api
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
16KB
MD5071756248539f9bdcdd1b29e6ceefb35
SHA1e8c5cf4b442ffbfa4de3fcd12c5cd4c020438b38
SHA256c736965fe38f3afdcdf9a23200f1b8d82baf979b54b808a15ad431283f5a9de9
SHA51274119025f2b2e3f42ced2911b7e04f2747bffe4a8eaa1f3b289403e057ba73ffae6c43a292859211d303f31749f2ee2b7d2e5c66ee2492239661aa505d653146
-
Filesize
16KB
MD59c9efa7d9f8e0a8b6875fd45bca446bf
SHA13f7d217ce17a7ed400d3efc9837046cfdc449533
SHA2561f7fe31a363ec23170bcaf8db7c7b3542cc708c89e80b6cc515b5448fe48231f
SHA51289ee623e2f0b3e8b93343cc490bb36c16329847eac9bb676570bb11456ae4489cec0c51584a7792bddf187c7c17ba0fddb98d0513c3ede2f051244f923212d4b
-
Filesize
16KB
MD5107e37fa7046e15abbc66c24adfc84e8
SHA1f7c8b24ddb63555539d57dac13a0d298bbab0c07
SHA256fe12aab10b9376fe6d9c03c18e9aca027de43f7caa1fb9d9d415f91e20bd3308
SHA512f990dc437132d604b7980b0a4291eb3239988b22866c3bcd3aedd71be90d7b59cbb25731479121d24b7b41899fb933a60e8f706c36f1f622fc9847d468ab9d90
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
512B
MD5d97dbc194cae044ef369f3a89cfc93e6
SHA1d10d7b0495551bc3461250fb3247ed449c8325f0
SHA256aab61e87f386406c26c0c75467945d0093538ed724234a92bc497efc60d6c7b1
SHA512d28095720d0c3df12ce0985d188fe71e3196b311188be60e2440c81fd4a1faa28111f4951f6a54e82364972dd379915a802ba4b2f7b99cc7dbe319f87b5980c5
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
4KB
MD584faa3fad281c13559a730a506ec612b
SHA13af54d73f39c610ef6619f3d4a1bf89fc728069d
SHA256a0fa9838d7e1d7b86e7983c20e92e2ce9c92abd3d1d5b0b9fb335ea6c98d57a0
SHA5129e6e0135e5415be441d133cbe8956143d7e14db04d173ed922d5f9ea8c395accb3bf5198df5f7d0bc2d24ec10c8086ac87f3709de3062412b265cebbf7b7f6c6
-
Filesize
4KB
MD5c797bd612cc2fb38b3c4ce5e7e3fc016
SHA1374a20d7b4e6fd992fee133cef8840acca6555f8
SHA2561d63d01a1ae54c3f1073f4d81417723d17281d08d9cb329b9876c9e4352c1577
SHA5120c239b2e5164aba83d76482b846b68af14b1849d900c1239db54ba65c9ceadf95241bdb64fc6551d6087b067d12d2279c080e7c35e58efa6f101d2a08770e812
-
Filesize
4KB
MD5f42e7b6ddb5e18b12b782ca2b86d969f
SHA147dbce939ee9605a94105315dadbabd9d61646ed
SHA25685a7cb9926e7e2911d9658338ac88521b2bc31761e30dad9ffd306dbad6ff3f7
SHA512eff2477ff09301b66530f736c8bfb12aaf7648cddc068a5e2a7f186d63ed58bc49722e6863de720cc1a2092e5867ad8a51be1008ea877e12f33fd46c2d30d728
-
Filesize
36KB
MD5576287c87ae329c0fbb63152c7422c79
SHA156109246833dc86d1e6626642caaa1ddc4f10b89
SHA25672d4fdcf30d602307b10370f70ead72e58900bfe71779e500275bbeb21ae7fd1
SHA5127cb6020d15d7ff41c7a1437e922eede0c8edea5f2ea82370ea9022a83c9a453d152bd92efae6ca8f0e5d7f59bda5a9dd0075b0f85f4acc5571d7f1bb686e2ea7
-
Filesize
569B
MD56b806386fe73b2e8ce5dec5a8a48ad7a
SHA1c31cd081aa879d037ddf6d6244878aa60b44855d
SHA256a9d7a5f11ce6e15aaf89a20f3378691e860076804b090eb0b384fb36f72925d9
SHA512c2fa46df0ca84d79f965709910ac4b9f0e7688450e07a7ee157831d65f44434adcb5dce38b5f569ed18c7d4ff862cd8f80e4bdabf45fc8b208cb67e8977ce509
-
Filesize
90B
MD5618863f36c6666b6e0b09f5804bf6eae
SHA10a1d93386a227a17725a04010b3994c0604b9b88
SHA256cafeb3c38759b254135c3cd3b575027844696207ddb8ebd085b1f7cacd18bf54
SHA5122dee139066a40196ece3ff90d0d82a2558649b3274de9b5e2a70e571a6ca2be1d8d5c9fe87d5a457f208a0fe04108125169a0297a0b1ff88bd62d132e14afc79