Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    128s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    20/01/2025, 14:09

General

  • Target

    Roblox (1).apk

  • Size

    6.3MB

  • MD5

    45d0a54e86d0355be8010660eb0d5f69

  • SHA1

    67b8d25d19d4c2fad1b6eee40f314c1a15460268

  • SHA256

    d3c76dcafcd239e42481162a333b02bd7b94b8467c1680e9b7eba92fd795e109

  • SHA512

    c11b33b5392111a9c00d9a5502a02dad40bfdb95261c65d2f1f708faef302412a168854db8289dad01e66886f756764fae950135c1f60a8aa1e192fcb2c1bced

  • SSDEEP

    98304:QEwTQPRG6+5c+H7c3f7833DAlAMWLERdcmiWSRG76JaYyCZ2zjBNIXV7:hwTQA7c+3mAMaZmZkK6AYylzVNmB

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • artemtrj.apk
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4247

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads