Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
12s -
max time network
133s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
02/01/2025, 02:17
Behavioral task
behavioral1
Sample
769840a979ee956291e924d5cb95061f424adc3221b26d85e0e8e7f65777decf.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
769840a979ee956291e924d5cb95061f424adc3221b26d85e0e8e7f65777decf.apk
Resource
android-x64-20240624-en
General
-
Target
769840a979ee956291e924d5cb95061f424adc3221b26d85e0e8e7f65777decf.apk
-
Size
53.0MB
-
MD5
85ed51b00887d331b476f9568222743c
-
SHA1
fba6938bd6a675b21b4d77d49a58e7fc0b8f9e4d
-
SHA256
769840a979ee956291e924d5cb95061f424adc3221b26d85e0e8e7f65777decf
-
SHA512
e097b553c7682849580c0841f89e7141f92a1c2c6e6252496c3e61f504c1e7522953ffb9a61cb129f14100e4e6d39433f7a2c21a3596029422b1c5d27a6c962a
-
SSDEEP
786432:phP09KrszNOTCzZSs1LllhySA2yFy5msUonUdnp5ZxQ56OcpvcZbE33bHeVjKek7:f09Kgzacht85sXU0DcpvkEnoYcxiJ
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.makemytrip /system/xbin/su com.makemytrip -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.makemytrip -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.makemytrip -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.makemytrip -
Checks the presence of a debugger
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.makemytrip:playcore_missing_splits_activity Framework service call android.app.IActivityManager.registerReceiver com.makemytrip -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.makemytrip
Processes
-
com.makemytrip1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4303
-
com.makemytrip:playcore_missing_splits_activity1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4399
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5cdb29001f8a2f218f73e6510ff035739
SHA12d641b66ada3840d5fd3e565916c1767b702610e
SHA256edcfcadaefaca2e794db4d8d4cc50e3f2bc9033a26fce3839aa62e4bc93c9302
SHA5126dd7824a90cdae05785546f0cbe779544f6acbae58179ea33acec47422e69379f4d739b9ffc740952121770244a4aa73279c020890c0cc17e3857c5d489d7661
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD587b9703286f894d542eea83a55eb077c
SHA14978010695ce70e15b430786edd09bc976149963
SHA2564de4f7fd8df86f6a8e9298af23ae7fd54b33e714681e7782ec644f95dcb673b1
SHA51251a00b2f6c63b9acdd7e94668e4abfa547545f4917f172798c7a399ca86bc08cc96de53b76a4e8a68c2cba929f3c9b717c8d841659c503c1693f73dd508e4897
-
/data/data/com.makemytrip/files/.com.google.firebase.crashlytics.files.v2:com.makemytrip/com.crashlytics.settings.json
Filesize710B
MD5d9f8279a3a239fd70b58815219a9d1ff
SHA187a6326210c0b3fadde7a21ff5d59edf069b7bfb
SHA25661bc9374773f2c2e89cc50c7ec9e356e2e78b3635a856501fd9ef38995ec5577
SHA51235855fec38d327e62452463651fb503917cffc0723b25cd8a60516bd67afbceaf70485d8c8862d48afdfe69839d8640248cc71395fa7ba1ac11b4f14f5c8cb87
-
/data/data/com.makemytrip/files/.com.google.firebase.crashlytics.files.v2:com.makemytrip/open-sessions/6775F7560046000110CFE3234B920862/report
Filesize735B
MD5e77e046ffcd5c527502522a9f700155c
SHA159b1b9e5bd35430b5a6a1bbaa2041509ae3e73b8
SHA256aa27eca8dabf72836a8144f82a6bb18eeaf1f3a9c0e84612780576a30be8c195
SHA51220519fdb3c0c8060c62e52a6b62fe522ea118f774e2abadbe5f9afc6583b0c1f965050a9f625dd4fed3a01eb2681721c7eecf72715edbf66a23c3f2b8aac652c
-
Filesize
90B
MD519fa0223da94cf1a29c6a3902f59f360
SHA1a36a42a5caf4b06c16204e6151a17d5aa1d38b7d
SHA2563b8446e821020ff6e008ab5c441a402954febfc291417fcd29a21c00cb08f94e
SHA51230690bb901cba05e8c9d4d813ab38d2b5622447fd69e31c39a1781aef60476c25c2652aec0876c8304a32afd30e4d29f8d09bc83f778b6699f52942b747bedfe
-
Filesize
561B
MD565eedcf4a21670d1144647efc766228c
SHA1f3ab92aa480ce43c001bb54d046c497d8205b455
SHA256b369c94660ca9f5df5084d18c1fbbc5a51c556b416b052f13eb358311d3294d5
SHA512321bc10d95090e6a4616d0b6df867aebf69a71df0b0fc10b483b2e9268c2b36d03b37cf7856d2abd9fa85e3236a89290aa4e8ae13275984556b9a43840047794
-
Filesize
512B
MD5425ed168658d3593984cb788ef4ae190
SHA1983bdb8964629f560f06a4ed8e0fd86bd7f7a367
SHA25633e67264a6e12944803fb2cef0478edfda254f67ea62bee11d27084cb25a5861
SHA5129ec1ba5ff0da05520c7b0e4cc88b38a808f6919b5b8794401bbba1fa0c0e76d2301be71c04311e11193382bdd179f67540cf75cf72fbe3a9ed0b51227d0434d2
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD5eac5ea5e2927d0a79bdb2cea690d2c31
SHA1f8484c79626a464b782d37bc8e4c52139b188587
SHA256eb5d3a155162d7e977794157ae06a1b90ecd640db1ef284f0f58aa1984c0a7a8
SHA512a8fac2b9db0def1b7826e3a2229d221e7b8c50844b119c3a2e7ce776c3198ad5cd42602980f3c2cd5503975cc827ceebc686f64e183324d59e9532170801f39a
-
Filesize
108KB
MD5bd2894fb7ce91421b0e1839364d11da9
SHA13d569fbdea1eabb5255419dc3b69e1ec11965b43
SHA2568ab0f3f2864a0645fe14d6f1d550cb8da87647f36db931b3de8f7a2f73c13bdd
SHA51281c342f16d599dab71720b8cd975153fe5dea3b633b383bdb1831433c2d7a927a2d5487cbca1ca03c3f5e1cdc1abc62c7fbc7ad7e67f1dc1e442b30fe9f9a8a9