Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    19s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    16/01/2025, 22:09

General

  • Target

    c4cca5b7ca5ca8d2ec3609597195936e9e8e30710c8a746e0a2e3b53b31181fd.apk

  • Size

    3.4MB

  • MD5

    b364b574682e4388454ca63ecb219fcd

  • SHA1

    4cc3e842f8242d89bd3b08c6abe7559c85306a79

  • SHA256

    c4cca5b7ca5ca8d2ec3609597195936e9e8e30710c8a746e0a2e3b53b31181fd

  • SHA512

    eb0f58b89e613a4c8922944c9e52dceefc69bcd65657ed9bdb61ae424b94b5b7a3c5fa49914d0d18ce85e1dad112c8e5a4c2b450d5fb19d0ccc5bb5a110bf567

  • SSDEEP

    49152:WnszHYdN6agL1emglGlKb8pjADuf82wc1V4MVuQ6IP/KrAEend:EszHY52dgl+L8P8V4nQP/KrAEend

Malware Config

Signatures

Processes

  • advc.calc.easygpacalculator
    1⤵
    • Checks Android system properties for emulator presence.
    • Obtains sensitive information copied to the device clipboard
    • Checks CPU information
    • Checks memory information
    PID:4772

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/advc.calc.easygpacalculator/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    9d48db890bad13217d223eea17e384af

    SHA1

    571aa3d1fceeed8cbcc49af93cdff2f4cb3c5198

    SHA256

    a88fec6921c9767d6b37ec44298a2d31677f07822243fa53a20e3467d7d238c1

    SHA512

    8744f7e29664c80b3e8e4eb1b6424893fd845207f5e5ee81fa768367a004091f4ec618fb8198c79cbf58ab68aacd16db53eeeb2b5916a254ae62ddf4415653cb

  • /data/misc/profiles/cur/0/advc.calc.easygpacalculator/primary.prof

    Filesize

    1KB

    MD5

    83d5f0091031d592c7bf6bb881a6ae67

    SHA1

    a702b9e4c002da026a10c7961b7cb940fe0fdf98

    SHA256

    47b24e0ad35dba5815e5efdbb9c0a127642d20b7da99b32cf2621a83298a501c

    SHA512

    00dc8a22cd69633f9e015a8d3fab65237512d3cfb4b9d50517b516d78dac550eb1f020d5897e922d1327d520cb4dc697db754b13dd7e1033ee5a24b8980c6072