Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

insta_followers.apk

android-13-x64

7

Resubmissions

27/02/2025, 17:35 UTC

250227-v6hlravmy7 10

14/01/2025, 05:44 UTC

250114-gfjt8szrbn 10

14/01/2025, 05:43 UTC

250114-ge4g9aykgt 10

14/01/2025, 05:39 UTC

250114-gctj9szqep 10

14/01/2025, 05:35 UTC

250114-f993vazqak 10

14/01/2025, 05:34 UTC

250114-f9l11szpgq 10

14/01/2025, 05:31 UTC

250114-f76yeayjcw 10

14/01/2025, 05:30 UTC

250114-f68evayjas 10

14/01/2025, 05:29 UTC

250114-f6m4xazpcq 10

Analysis

  • max time kernel
    179s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    14/01/2025, 05:35 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    insta_followers.apk

  • Size

    4.6MB

  • MD5

    51064cc8676f45813dec4c5a1c1ce150

  • SHA1

    e9d2c7b278c98f85481176c6089b2a74120c6b56

  • SHA256

    e232bbfa86980003e46cd2019243e2579b15c844957cd21e70f8d4300ce25f78

  • SHA512

    e380e740f4a91013e07e05848ebc4e64ac8278425697cd1da110ec940f6884402d4974302eff493ac685f6969d732e63e95304aaad9742e06f9d8fcd7da3d722

  • SSDEEP

    98304:SjbFZKFifcyWk4D+zfro+Pr0hOR6G21GB/EjJ9:IhsFTkP4h8F8b

Score
7/10
evasionimpact

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Performs UI accessibility actions on behalf of the user 1 TTPs 53 IoCs

    Application may abuse the accessibility service to prevent their removal.

    evasion
  • Requests enabling of the accessibility settings. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.test.accessibility
    1⤵
    • Loads dropped Dex/Jar
    • Performs UI accessibility actions on behalf of the user
    • Requests enabling of the accessibility settings.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4349

Network

  • flag-us
    DNS
    rcs-acs-tmo-us.jibe.google.com
    Remote address:
    1.1.1.1:53
    Request
    rcs-acs-tmo-us.jibe.google.com
    IN A
    Response
    rcs-acs-tmo-us.jibe.google.com
    IN A
    216.239.36.155
  • flag-us
    DNS
    remoteprovisioning.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    remoteprovisioning.googleapis.com
    IN A
    Response
    remoteprovisioning.googleapis.com
    IN A
    142.250.180.10
    remoteprovisioning.googleapis.com
    IN A
    142.250.179.234
    remoteprovisioning.googleapis.com
    IN A
    142.250.200.42
    remoteprovisioning.googleapis.com
    IN A
    142.250.178.10
    remoteprovisioning.googleapis.com
    IN A
    142.250.187.234
    remoteprovisioning.googleapis.com
    IN A
    216.58.212.234
    remoteprovisioning.googleapis.com
    IN A
    216.58.213.10
    remoteprovisioning.googleapis.com
    IN A
    172.217.16.234
    remoteprovisioning.googleapis.com
    IN A
    216.58.212.202
    remoteprovisioning.googleapis.com
    IN A
    216.58.204.74
    remoteprovisioning.googleapis.com
    IN A
    142.250.200.10
    remoteprovisioning.googleapis.com
    IN A
    142.250.187.202
    remoteprovisioning.googleapis.com
    IN A
    172.217.169.10
    remoteprovisioning.googleapis.com
    IN A
    172.217.169.42
    remoteprovisioning.googleapis.com
    IN A
    216.58.201.106
  • flag-us
    DNS
    encrypted-tbn0.gstatic.com
    Remote address:
    1.1.1.1:53
    Request
    encrypted-tbn0.gstatic.com
    IN A
    Response
    encrypted-tbn0.gstatic.com
    IN A
    142.250.187.206
  • flag-us
    DNS
    gmscompliance-pa.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    gmscompliance-pa.googleapis.com
    IN A
    Response
    gmscompliance-pa.googleapis.com
    IN A
    216.58.204.74
    gmscompliance-pa.googleapis.com
    IN A
    172.217.169.10
    gmscompliance-pa.googleapis.com
    IN A
    142.250.178.10
    gmscompliance-pa.googleapis.com
    IN A
    216.58.212.234
    gmscompliance-pa.googleapis.com
    IN A
    172.217.169.42
    gmscompliance-pa.googleapis.com
    IN A
    172.217.169.74
    gmscompliance-pa.googleapis.com
    IN A
    142.250.179.234
    gmscompliance-pa.googleapis.com
    IN A
    142.250.180.10
    gmscompliance-pa.googleapis.com
    IN A
    142.250.187.202
    gmscompliance-pa.googleapis.com
    IN A
    172.217.16.234
    gmscompliance-pa.googleapis.com
    IN A
    216.58.201.106
    gmscompliance-pa.googleapis.com
    IN A
    142.250.200.10
    gmscompliance-pa.googleapis.com
    IN A
    142.250.200.42
    gmscompliance-pa.googleapis.com
    IN A
    216.58.212.202
    gmscompliance-pa.googleapis.com
    IN A
    142.250.187.234
  • 216.58.201.100:443
    520 B
     10
  • 216.58.201.100:443
    www.google.com
    tls
    1.1kB
     4.6kB
     10
    7
  • 216.58.204.78:443
    tls, https
    1.2kB
     40 B
     3
    1
  • 216.58.204.78:443
    android.apis.google.com
    tls
    3.1kB
     6.8kB
     21
    16
  • 216.239.36.155:443
    rcs-acs-tmo-us.jibe.google.com
    tls
    1.6kB
     7.1kB
     13
    13
  • 172.64.41.3:443
    tls, https
    409 B
     40 B
     3
    1
  • 172.64.41.3:443
    chrome.cloudflare-dns.com
    tls
    2.7kB
     5.9kB
     24
    18
  • 142.250.179.227:443
    update.googleapis.com
    tls
    5.0kB
     10.7kB
     21
    18
  • 142.250.179.227:443
    update.googleapis.com
    tls
    1.0kB
     6.0kB
     8
    7
  • 216.58.201.100:443
    www.google.com
    tls
    4.9kB
     16.9kB
     30
    33
  • 142.250.200.36:443
    520 B
     10
  • 142.250.200.36:443
    www.google.com
    tls
    6.2kB
     119.6kB
     64
    97
  • 142.250.187.238:443
    tls, https
    500 B
     40 B
     3
    1
  • 142.250.187.206:443
    encrypted-tbn0.gstatic.com
    tls
    3.0kB
     51.0kB
     34
    38
  • 216.58.204.74:443
    gmscompliance-pa.googleapis.com
    tls
    9.8kB
     6.7kB
     19
    16
  • 224.0.0.251:5353
    3.7kB
     11
  • 216.58.201.100:443
    https
    144 B
     70 B
     1
    1
  • 216.58.204.78:443
    https
    4.0kB
     6.9kB
     11
    12
  • 1.1.1.1:53
    rcs-acs-tmo-us.jibe.google.com
    dns
    76 B
     92 B
     1
    1

    DNS Request

    rcs-acs-tmo-us.jibe.google.com

    DNS Response

    216.239.36.155

  • 1.1.1.1:53
    remoteprovisioning.googleapis.com
    dns
    79 B
     319 B
     1
    1

    DNS Request

    remoteprovisioning.googleapis.com

    DNS Response

    142.250.180.10
    142.250.179.234
    142.250.200.42
    142.250.178.10
    142.250.187.234
    216.58.212.234
    216.58.213.10
    172.217.16.234
    216.58.212.202
    216.58.204.74
    142.250.200.10
    142.250.187.202
    172.217.169.10
    172.217.169.42
    216.58.201.106

  • 172.64.41.3:443
    https
    1.8kB
     4.2kB
     7
    9
  • 142.250.179.227:443
    https
    24.6kB
     15.0kB
     61
    76
  • 216.58.201.100:443
    https
    5.6kB
     10.3kB
     41
    30
  • 142.250.200.36:443
    https
    8.0kB
     114.8kB
     58
    99
  • 1.1.1.1:53
    encrypted-tbn0.gstatic.com
    dns
    72 B
     88 B
     1
    1

    DNS Request

    encrypted-tbn0.gstatic.com

    DNS Response

    142.250.187.206

  • 1.1.1.1:53
    gmscompliance-pa.googleapis.com
    dns
    77 B
     317 B
     1
    1

    DNS Request

    gmscompliance-pa.googleapis.com

    DNS Response

    216.58.204.74
    172.217.169.10
    142.250.178.10
    216.58.212.234
    172.217.169.42
    172.217.169.74
    142.250.179.234
    142.250.180.10
    142.250.187.202
    172.217.16.234
    216.58.201.106
    142.250.200.10
    142.250.200.42
    216.58.212.202
    142.250.187.234

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.test.accessibility/app_ded/7vRij3cSNi3sCbQE2dAmkCg23x8iPrCO.dex
    Filesize

    2.5MB

    MD5

    8b5230cead615f005f2171207699d8aa

    SHA1

    1fa3764bdda3aa85f0481f8d63d96517c2638e3e

    SHA256

    b6f3c778f8411b88897f99b57e4c9c5c2ed6102527dd816147f4ca28de8d4498

    SHA512

    4d1b05e242d151fdfed77f7fa92bcc211cd23e28af134aaa5b403607b2ded7db6b6fb1fcbd134ecf31170e874f1e3ffb9d028e6ea8328441a678b725a180f22c

    Download Submit

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.