Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1841491s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    16/06/2022, 18:22

General

  • Target

    b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230.apk

  • Size

    4.1MB

  • MD5

    9b08148a0dcd6b574b36f7c2e888aa03

  • SHA1

    ec32912daa82f71824a8e2697138af5b293c30fd

  • SHA256

    b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230

  • SHA512

    6ad17bd34c4ae6553a0e3ac322cfe69a939dcce0b8cd260a4aac511a5b656aca03fc5ac0b7bef44bdb0d6cde1ec08d0427c7f79f10f7f8a5325f99da988bb326

Malware Config

Signatures

  • TeaBot

    TeaBot is an android banker first seen in January 2021.

  • TeaBot Payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • cake.ice.reform
    1⤵
    • Loads dropped Dex/Jar
    PID:6190

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/cake.ice.reform/app_DynamicOptDex/Ym.json

    Filesize

    1.1MB

    MD5

    7166707a8ec26a384a4fab90ada876e9

    SHA1

    527b8b7f519ccc43c39989cf57f8ff6a1efbed73

    SHA256

    dcf5355ec39d7dac9f22d1bc0ca31c49f3813f71b0024c1e85732612cece1009

    SHA512

    dacd0d5472de05184a1072e40ec11ad88bd7d5c2526b9188ee42502bbbfb696a56999faee2c8435cd38684ab32c5a69c0f9a504c73a493a1d107e76397e40d07

  • /data/user/0/cake.ice.reform/app_DynamicOptDex/Ym.json

    Filesize

    1.1MB

    MD5

    b3cfdb9e29dd0bd84a253cdfdd20a681

    SHA1

    1c0400a531147e097c2a84faba310f2a8519276d

    SHA256

    e0e9ad92cf446106d79f55848ad0920b7b6a1f01913a69989b21ca3c7db26ff6

    SHA512

    a794f62531fd24213a76d58c555967604b0f810ec50b03754dc52af244d39f328d0c10fc455dbc4387cd4980d202ec4e6ef7946abe965da1f7f722f3814d9fa7

  • /data/user/0/cake.ice.reform/app_DynamicOptDex/Ym.json

    Filesize

    1.1MB

    MD5

    b3cfdb9e29dd0bd84a253cdfdd20a681

    SHA1

    1c0400a531147e097c2a84faba310f2a8519276d

    SHA256

    e0e9ad92cf446106d79f55848ad0920b7b6a1f01913a69989b21ca3c7db26ff6

    SHA512

    a794f62531fd24213a76d58c555967604b0f810ec50b03754dc52af244d39f328d0c10fc455dbc4387cd4980d202ec4e6ef7946abe965da1f7f722f3814d9fa7

  • /data/user/0/cake.ice.reform/app_webview/GPUCache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/cake.ice.reform/app_webview/GPUCache/index-dir/temp-index

    Filesize

    96B

    MD5

    866dcf823ac02010c242a1c52821bd0b

    SHA1

    09d53f214cb696b736e75b8ad9d7e93f7d181ff4

    SHA256

    be0dc572073a84887f489d482b00b15aa0aa7a912fb1706a0d5c3436d17fdec0

    SHA512

    e79768f64bc9a3a224d33fabb92f6cd93afdcc516c0536d29582b0348a528dd588d12899570a73328f12d110c54d4f57a38c95fba8d1e45f5199e0e6758d900f

  • /data/user/0/cake.ice.reform/app_webview/Web Data

    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/cake.ice.reform/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    1ca97143a402b3317ae913677230c49a

    SHA1

    9c8d11cdf49f58f6c211052d387050bfa8c61daa

    SHA256

    29e2a56c1cf19b24e0add45c478b2f859cec8debde08496f4a9357d221382834

    SHA512

    073d1faa815e83c0ea569a54ccca4a512e40b335b0f342b54935a653e1094dff9e2e4cb576953093deeb9560e69020bb5c4694431ecc7679fa35e2c30c03bdb7

  • /data/user/0/cake.ice.reform/app_webview/metrics_guid

    Filesize

    36B

    MD5

    d78f6e7fc86c4ccdc349c7afec643773

    SHA1

    bbb27f1ff616317a39df3ab66591a04213964ee4

    SHA256

    bb39c340718c81c27bf891df175376f3231b37d93976b9b725d636eac677d03e

    SHA512

    8724364c4f6c0c7b37a1d0786195739fb974f4fa4375ae33076e9840c4b1e57d8fca647155716dfe0306cf7c3d547813242dc483305d3653bee8c6ed94082b9c

  • /data/user/0/cake.ice.reform/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    695debd37cac3644039a40e84f3e242c

    SHA1

    c52eb58d686c6ead760b8dbef1893b43ee15faf2

    SHA256

    df6c6bcbac432914639700426e11e63f3b4e0a0c268014bb8e92448c305ab4ac

    SHA512

    596f0e8cd441f8abb32760f66a4afc09bbf827703abccdbff6c7476c2dcfd423f2df54cb3c7f513351e2768b82ff88aa3a2bf2ed1c8655cac1518da1a0f57ff9

  • /data/user/0/cake.ice.reform/cache/org.chromium.android_webview/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/cake.ice.reform/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    b9611e5065d2542418158d640c88911d

    SHA1

    1b235b393e2159226699c80c000e5ebc2bd6f2a4

    SHA256

    cc5200d9c1fb5ec66d105745844c1271893741b34bb11e824aa68fda68ad5bca

    SHA512

    51ac81afb2dcfd3d6519e8569e319c4086e9302bbcac1b8557cdb1bae86c72428a6e1de142e2538f91e806af91ba4dd9cfc9f7a0c2abbcee14b0365f55986004

  • /data/user/0/cake.ice.reform/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9