Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2741916s -
max time network
150s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
08/05/2022, 07:24
General
-
Target
f9fff0bccb018212346fd00c76015c4afffc89f739d76330ba210c48ca662d74.apk
-
Size
4.0MB
-
MD5
e7a4a02d2c1e0c90af2ce66be570faeb
-
SHA1
7f9771683ac59c2efd27a5693275d46ff3b71d15
-
SHA256
f9fff0bccb018212346fd00c76015c4afffc89f739d76330ba210c48ca662d74
-
SHA512
4b1537d34d5975c3ddf283b1b426e11dd614a5c8fb41f5d1f65feb3211debeb766832378f591b71814e9453ea5b831003fc280e9c7f26f31702e6f735e1ae942
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Makes use of the framework's Accessibility service. 2 IoCs
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
Processes
-
aosfhqgkatqgri.ygogxwdje.eeyhxtouxxlrbg1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/aosfhqgkatqgri.ygogxwdje.eeyhxtouxxlrbg/app_DynamicOptDex/PUu.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/aosfhqgkatqgri.ygogxwdje.eeyhxtouxxlrbg/app_DynamicOptDex/oat/x86/PUu.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
MD516936bdf43a9ec8221308901341422cb
SHA12710848c13541a344ae12732d2293b78e11fe457
SHA256b036e7394a10f2be500e305cc635fc0d9d28de40c0d7a3296dbdaf80aeb3adf4
SHA5122f6a6e93b41f9dc948f889bb18f12a4f656977d7349f21bf63c3e91eac5ef629679f480219d82dc4fcb5f7dae37b7f498806a50f9b6de89452d4fec533554db3
-
Filesize
2.5MB
MD53753910db0ca34dc490b66b45d4aa4b1
SHA1c7535bbdf9b992f506c217be3f45f0af75e5fc1c
SHA256de5c67848300899c2fb3fee28f969871c6281cdeb4cbcb4f538066b535a2d6dc
SHA512e32e30fd7bc2395d177ce20373e02b152665f2ea47f7b3e845b576783822217036cf91eff65983fbd4b999fc6276a1bafa54164831e33908d20017bf93631541
-
Filesize
2.5MB
MD556d625801a9c86aea2ed036568b495ee
SHA1d4dce19db75054eca8de2240bde3527f6d8642e2
SHA2560d692dfe4208fcfe98f8dce12000e1df1d45ede66316fa0b571e3f23cd5da10c
SHA5129babe8cbc1e67fb3761d541b52c0578b643b63ed5b29aaa7b27dab72d3713bb9654dff76479fd9668308d66e48e325e379cee9fc58ca6c59806698c70b80285f
-
Filesize
2.5MB
MD53753910db0ca34dc490b66b45d4aa4b1
SHA1c7535bbdf9b992f506c217be3f45f0af75e5fc1c
SHA256de5c67848300899c2fb3fee28f969871c6281cdeb4cbcb4f538066b535a2d6dc
SHA512e32e30fd7bc2395d177ce20373e02b152665f2ea47f7b3e845b576783822217036cf91eff65983fbd4b999fc6276a1bafa54164831e33908d20017bf93631541