Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

DJP.apk

android-9-x86

7

Resubmissions

13/01/2025, 18:24 UTC

250113-w2dbxasnas 10

20/12/2024, 16:28 UTC

241220-tym1tszpdl 10

Analysis

  • max time kernel
    32s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2024, 16:28 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    DJP.apk

  • Size

    3.7MB

  • MD5

    8bd1c057de789baea3d0acad35a4d1fd

  • SHA1

    09692ebecc03862c8223a43e0934fc7e1fa6c06f

  • SHA256

    377f07b92d33e0ea9d7cfe3c288e19df2be8555154bdb1141b82a87d068a0cf7

  • SHA512

    6d4c33afd728d8bdd9ec2ca69554efb3c21370b755812a27b4e5c24aae2e39577b5f0b4aa273ce9dab09b9421bd50c528cf25c6f438726211c757cd09396b738

  • SSDEEP

    98304:p1y8VfJ2nSi+s+OZm41gFvWMfz/L2ci5eR:Hy8Vx2ndLIWQT2cweR

Score
7/10
discoveryevasion

Malware Config

Signatures

  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery

Processes

  • com.example.mysoul
    1⤵
    • Checks known Qemu pipes.
    • Queries information about running processes on the device
    PID:4252

Network

  • flag-us
    DNS
    semanticlocation-pa.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    semanticlocation-pa.googleapis.com
    IN A
    Response
    semanticlocation-pa.googleapis.com
    IN A
    142.250.200.42
    semanticlocation-pa.googleapis.com
    IN A
    142.250.187.202
    semanticlocation-pa.googleapis.com
    IN A
    216.58.201.106
    semanticlocation-pa.googleapis.com
    IN A
    216.58.204.74
    semanticlocation-pa.googleapis.com
    IN A
    216.58.213.10
    semanticlocation-pa.googleapis.com
    IN A
    172.217.169.42
    semanticlocation-pa.googleapis.com
    IN A
    142.250.200.10
    semanticlocation-pa.googleapis.com
    IN A
    142.250.178.10
    semanticlocation-pa.googleapis.com
    IN A
    142.250.180.10
    semanticlocation-pa.googleapis.com
    IN A
    172.217.16.234
    semanticlocation-pa.googleapis.com
    IN A
    142.250.187.234
    semanticlocation-pa.googleapis.com
    IN A
    172.217.169.74
    semanticlocation-pa.googleapis.com
    IN A
    142.250.179.234
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    142.250.178.14
  • 142.250.200.42:443
    tls, https
    202 B
     40 B
     1
    1
  • 216.58.204.78:443
    tls, https
    858 B
     40 B
     1
    1
  • 142.250.178.14:443
    android.apis.google.com
    tls
    4.7kB
     8.5kB
     14
    23
  • 224.0.0.251:5353
    3.7kB
     11
  • 1.1.1.1:53
    semanticlocation-pa.googleapis.com
    dns
    80 B
     288 B
     1
    1

    DNS Request

    semanticlocation-pa.googleapis.com

    DNS Response

    142.250.200.42
    142.250.187.202
    216.58.201.106
    216.58.204.74
    216.58.213.10
    172.217.169.42
    142.250.200.10
    142.250.178.10
    142.250.180.10
    172.217.16.234
    142.250.187.234
    172.217.169.74
    142.250.179.234

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
     109 B
     1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    142.250.178.14

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.example.mysoul/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    Download Submit

  • /data/data/com.example.mysoul/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    f4eeca7338c1e33362318fc47dc65a96

    SHA1

    11104bade12c850a024f9f882d9b7060c8d9125d

    SHA256

    58813bc91ffcaaca7f6bbadcdb7c747f50c9ca471d108699c7d509a3fe6e8cf7

    SHA512

    59b98008f48e504d8f10e12a2e33cd35a1030e4636e6a8c6800b2dade69eecbc73ead03ca182cc64476100f8a09955dadca50c332cbb33d1411eb8d631c667e2

    Download Submit

  • /data/data/com.example.mysoul/no_backup/androidx.work.workdb-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    Download Submit

  • /data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    76a6996d9011d9b37f1842dcb37018d1

    SHA1

    ddf48bdb2cf5c52ce2dfec7fb490cd0304f7a50a

    SHA256

    cb2879f45dd191eb22bad8f57c5f5a56358866577c3aaeba599a504b25af4a15

    SHA512

    0b6437349886c2ec7d05c4e8f5b4b05084caaefa972149a28dac4f257065d056bad5b48f88763f554267f164f9a55e21455c05b17f6f34aeb3494c00f1196a06

    Download Submit

  • /data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    69f16345218b7fc6f1c1d5a0f2501a6a

    SHA1

    22e8b7a5d0d09917b7470fc4712fae341d20f723

    SHA256

    1e0687b2eeed91b1eb20c174749ded64c6ff9064120da49b24511d312b75b67b

    SHA512

    156bb7294451def5b1b1d69849b8185b56199292597661d126a84c7056a2c36bfa29a2390ba9a8fa6f540e622292b73b878d6b59775438e547df261f1a195b48

    Download Submit

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.