Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
08/02/2025, 14:13
General
-
Target
47fd8551845faab87bae897926908a332928535742145ccf218bf2af0ae3439a.apk
-
Size
13.0MB
-
MD5
64ced28d55551ae426f2b9b9cce2403c
-
SHA1
76c63e760e2cfa5c9682f1af5e248019319e4c09
-
SHA256
47fd8551845faab87bae897926908a332928535742145ccf218bf2af0ae3439a
-
SHA512
79347a7875144834a071bd848ec3cb3e7e3aa9cc10cfca51ecfea0dfbf00ed8397c435c4b1e49ca28569f2300e04e7f9e000119ef89bd962799c5bd3a358a126
-
SSDEEP
196608:nZbhoymj7XRscUurBQMSRYpZe87JCUdJ6IEiVAeBn1BOjxNji:nZbhOHrR1pZvCuJPvAI10/2
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.hello.world1⤵
- Loads dropped Dex/Jar
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.hello.world/app_dex/classes.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.hello.world/app_dex/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD5e1111c4bf80e0d5ecf0d0100064ad7c1
SHA123c7fb861328b153e4de34f04f017eff8764798c
SHA2569077fb747b5c9e76c2393c70533caef25a0eb5f2a2fa7ceb2dd8554653530aa8
SHA5121e5bab73cc6693637cd2738a1c018ade3770b5511d05b160db94cf3bfc256de9a2d5b67c8217b79ae3e050388e6d2da3f1ff254f3ea5ff81662cb7a6ab28b88b
-
Filesize
399KB
MD518f0241a54947e0b5475c0d676b69c3f
SHA1590a7d8c7b33073681ac3ad4c261623f1991fa50
SHA2560163ca070374c2a32bcb0727b44fe8680e073ff98d68f2c8c9c1695e68f4e995
SHA5129b792ab31ee4605973aeb67909c3ab2f11e8b396d012f97537b952f1a4b5a28ae4a66d4384f5d11b8d99188608219e0b0837891d2a5aed2758e6e60be5e208d1
-
Filesize
399KB
MD5c3362d6ff6e49ff0f252eaeb7a7cfb5e
SHA1ed548e4647294a6739250c62cbd6e88c0bf7d31d
SHA2568a99bd50b9df9db5e3345f0ad020d3a00980cb6c8743bde3c01409075123b3f6
SHA5124f67ae208ec60d6210d4348335995c013759b437adfce18f6d7064d5e7694ffa950dd8fc21aa5e2992e5b4bebd75a20e3157d69866c3a5c3bba12312c740a967
-
Filesize
1.6MB
MD52343292e57fbbaffaba36d81ac84a86b
SHA1b1998accf4063a6ffe914d09ec0b9e8b89f36eb5
SHA256f0e309babb777ac8cf6086c433cd0cc724a085392935d6c78809cd6dcb5798ff
SHA512bfc3028e31b2f6e2a938aab3db83852f09c537d94197e466387caf0f0bdb4540b194bd3f2ed453c11d7c557119a413bd0d10e6d5a092e475f53669c9e699424b