Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
6s -
max time network
161s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
-
submitted
23/01/2025, 22:07 UTC
General
-
Target
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.apk
-
Size
4.6MB
-
MD5
4abc56d891cf2946b33a89686b62dfff
-
SHA1
8650158b8f9e67624968283984ff3a830826acf5
-
SHA256
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647
-
SHA512
c4b739af85c8cf7e0ea464a652df4daa5c51a6a7ddf959411785362e696254ee9c983dfb044acbb1aebc8329c4298b29be50533e8ce9003bc5bfba223f4f71ef
-
SSDEEP
98304:i+MH/WZx5eKxtIDazNhu4QmgNOYwXxYQMvEp7nx:s/WoKxTzfRgSXxY1sx
Score
4/10
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.cyphered.owaneco1⤵
- Uses Crypto APIs (Might try to encrypt user data)
Network
-
DNSandroid.apis.google.comRemote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.187.238 -
DNSssl.google-analytics.comRemote address:1.1.1.1:53Requestssl.google-analytics.comIN AResponsessl.google-analytics.comIN A142.250.178.8
-
216.58.201.110:443tls, https -
216.58.201.110:443tls, https
-
142.250.187.238:443android.apis.google.comtls
-
142.250.178.8:443ssl.google-analytics.comtls
-
142.250.180.14:443
-
142.250.180.14:443
-
216.58.213.2:443
-
224.0.0.251:5353 -
1.1.1.1:53android.apis.google.comdns
DNS Request
android.apis.google.com
DNS Response
142.250.187.238
-
1.1.1.1:53ssl.google-analytics.comdns
DNS Request
ssl.google-analytics.com
DNS Response
142.250.178.8