Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
896605s -
platform
android_x86 -
resource
android-x86-arm -
submitted
30/09/2021, 06:40
Static task
static1
Behavioral task
behavioral1
Sample
51490_Video_Oynatıcı.apk
Resource
android-x86-arm
0 signatures
0 seconds
General
-
Target
51490_Video_Oynatıcı.apk
-
Size
3.8MB
-
MD5
9ef00934e62771f18d6ff4e6d2b194ac
-
SHA1
782bedd376ce2af8c5f5abe83d903dbe028ed387
-
SHA256
743409c2aca5a493af60a3e700c25af2de88c134ce25488ab7f713c778945b39
-
SHA512
c3bbfc1d5984fb05a278d530727993c7fd336a5a7ce1a6ed7a8e8cfd95587ae6cd44b5b0b98fe6ef584962aa4f3adaa0f4594569cebad0d7de0bb0d82a90baaf
Score
10/10
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.nuaonmjh.yfpqcud/fUbaxbfIbi/jjjtbbufhbkfaiU/base.apk.dxluksj1.Jit 5058 /system/bin/dex2oat /data/user/0/com.nuaonmjh.yfpqcud/fUbaxbfIbi/jjjtbbufhbkfaiU/base.apk.dxluksj1.Jit 5031 com.nuaonmjh.yfpqcud -
Reads name of network operator 1 IoCs
Uses Android APIs to discover system information.
description ioc Process Framework API call android.telephony.TelephonyManager.getNetworkOperatorName com.nuaonmjh.yfpqcud -
Uses reflection 1 IoCs
description pid Process Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE 5031 com.nuaonmjh.yfpqcud