Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
25/01/2025, 09:00 UTC
Behavioral task
behavioral1
Sample
8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk
-
Size
3.9MB
-
MD5
bbf2a8ed116cb34454a60641bb2d6a57
-
SHA1
ad5b1a2d95be058511dd4b5c320a18117bbb21f3
-
SHA256
8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768
-
SHA512
b3e63d876995feb7a5c69778c79e2e96e98710993a4864789c6d13c1247e56e05cbabe7dab66e9573048779387f014e0bed9c50e01ea0db94482cefc0682ce09
-
SSDEEP
98304:zGZTSHh5MkkmXx5TfPHt74OM70al0QOB9eg6CIy3lYR:zGZTSHMahVXHt74xwQ6cN9R
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock org.bax.project -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo org.bax.project
Processes
Network
-
Remote address:1.1.1.1:53Requestsemanticlocation-pa.googleapis.comIN AResponsesemanticlocation-pa.googleapis.comIN A216.58.213.10semanticlocation-pa.googleapis.comIN A216.58.212.234semanticlocation-pa.googleapis.comIN A172.217.169.42semanticlocation-pa.googleapis.comIN A172.217.169.74semanticlocation-pa.googleapis.comIN A142.250.180.10semanticlocation-pa.googleapis.comIN A142.250.187.234semanticlocation-pa.googleapis.comIN A142.250.200.10semanticlocation-pa.googleapis.comIN A216.58.204.74semanticlocation-pa.googleapis.comIN A216.58.201.106semanticlocation-pa.googleapis.comIN A142.250.178.10semanticlocation-pa.googleapis.comIN A216.58.212.202semanticlocation-pa.googleapis.comIN A142.250.179.234semanticlocation-pa.googleapis.comIN A172.217.16.234semanticlocation-pa.googleapis.comIN A142.250.187.202semanticlocation-pa.googleapis.comIN A172.217.169.10semanticlocation-pa.googleapis.comIN A142.250.200.42
-
Remote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A172.217.169.46
-
1.2kB 40 B 1 1
-
6.0kB 9.5kB 17 26
-
3.7kB 11
-
80 B 336 B 1 1
DNS Request
semanticlocation-pa.googleapis.com
DNS Response
216.58.213.10216.58.212.234172.217.169.42172.217.169.74142.250.180.10142.250.187.234142.250.200.10216.58.204.74216.58.201.106142.250.178.10216.58.212.202142.250.179.234172.217.16.234142.250.187.202172.217.169.10142.250.200.42
-
69 B 109 B 1 1
DNS Request
android.apis.google.com
DNS Response
172.217.169.46
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
90B
MD5fff24ecdd7e644194d33da9d769629ad
SHA125a97814a2e92575ca6a0be4fd9c2fffc6844881
SHA256942d75c7c27079f2cf086bd676688bf5b27a35e90ae484d75a94b35170a0a889
SHA512da2e36f27c65cfc27f6c90fa134df838339ebe7c533c83cca7c0f31378d470849b0211ee297cb1e11fc54312b07e3e9936992e2bd7f85cf216bf64d5ad6c893a