Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
27/02/2025, 17:35
250227-v6hlravmy7 1014/01/2025, 05:44
250114-gfjt8szrbn 1014/01/2025, 05:43
250114-ge4g9aykgt 1014/01/2025, 05:39
250114-gctj9szqep 1014/01/2025, 05:35
250114-f993vazqak 1014/01/2025, 05:34
250114-f9l11szpgq 1014/01/2025, 05:31
250114-f76yeayjcw 1014/01/2025, 05:30
250114-f68evayjas 1014/01/2025, 05:29
250114-f6m4xazpcq 10Analysis
-
max time kernel
27s -
max time network
36s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
-
submitted
14/01/2025, 05:34
General
-
Target
e8947bc9fb2bd597daba3064d5fab275d8df2beac92f301063f22fe276dcbc10.apk
-
Size
3.5MB
-
MD5
990bf5a2e9a7c90c75c9c07bf4a5e634
-
SHA1
ade24475ee8a9a2a0eec43772bbc02aeacb5926c
-
SHA256
e8947bc9fb2bd597daba3064d5fab275d8df2beac92f301063f22fe276dcbc10
-
SHA512
40419371a8dd596e8930e298e0d5470efd168a6d1a8425b8aa6eeb4e495cbc49580f234ac4278117600e2ff516ebdd867e6d395d67c80ce56660d1c8ca9ec92f
-
SSDEEP
98304:8mRW7NIyWHAt/2qcPf7K+KjXZKBEjzZST:8R7Wgt/GPjKPFK2XC
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.herocraft.game.birdsonwire.freemium1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries the mobile country code (MCC)
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
229B
MD53215d741b4ff2f58df8e5a8ff78e7a89
SHA129394fa640db98b4a31ee1e272cd3533c45f5b71
SHA2567f2ff38388931a5ee75431b7e3128c0baa5833341ba43aacf23ba6fc654ccc81
SHA512c9d8d03598d58fb424ab145b7a0366e7929f99a655165264e5dcfd35072723c0df250b4417640cb9ff8d7868bb3ea2c34ebdb8298a41119e0361b746a78ee3c9
-
Filesize
229B
MD537ddb762c64a9fae6e7347865f4accfd
SHA1755e3321e370579d1d63038b6876fecaf6fc8658
SHA256f9c386b1b04768d4b82c4dc3a9ee356e5f7c18fa2daafca64b0824f70dcbe35c
SHA5125334c498fda4ff9e9c7fe271761726de889339bca4c54aea8700e52ad4eda81a5110d2bc246c7d70de2a260fb849b0aeb04a9b2e6e3468121067245e50f18987
-
Filesize
513B
MD56dd89f79a4aeed9d53a35552a8c9c643
SHA10684d5363d293980c9f6bd526dfdae8d771eb73f
SHA2565bc8d869768620b59755b9c1b84aa91bbc216dfb80ca64ee7b1aac4d1623e6b2
SHA512f1a9f14bf0cc63e61cca2b89294065f7cb18b2d098661deef8ea2a0a9b090ca7c49860efdb2585b5b3d007d9dc5a1282a01d5fb966825552f349f761ec992d37
-
Filesize
2.8MB
MD5862273f2c6de4c25816b5cb1ae006df9
SHA17c4c0026bc157cfc104ad91980d3c40b2d5e78ce
SHA256c77d7de1df41842245f63cf10e13aed92fca563b8aa81a3888b4f142a5314f90
SHA512688ffa31ce578992ad659df808bce82f88e4b86c000c08ce4b6873f6dd743cca5e65583fb0f98b408ebd45cfebe2634290f12607429f26a5a37a716771eecd06