Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1841491s -
max time network
170s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16/06/2022, 18:22
Static task
static1
Behavioral task
behavioral1
Sample
b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230.apk
-
Size
4.1MB
-
MD5
9b08148a0dcd6b574b36f7c2e888aa03
-
SHA1
ec32912daa82f71824a8e2697138af5b293c30fd
-
SHA256
b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230
-
SHA512
6ad17bd34c4ae6553a0e3ac322cfe69a939dcce0b8cd260a4aac511a5b656aca03fc5ac0b7bef44bdb0d6cde1ec08d0427c7f79f10f7f8a5325f99da988bb326
Malware Config
Signatures
-
TeaBot
TeaBot is an android banker first seen in January 2021.
-
TeaBot Payload 2 IoCs
resource yara_rule behavioral2/memory/6190-0.dex family_teabot behavioral2/memory/6190-1.dex family_teabot -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/cake.ice.reform/app_DynamicOptDex/Ym.json 6190 cake.ice.reform /data/user/0/cake.ice.reform/app_DynamicOptDex/Ym.json 6190 cake.ice.reform
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD57166707a8ec26a384a4fab90ada876e9
SHA1527b8b7f519ccc43c39989cf57f8ff6a1efbed73
SHA256dcf5355ec39d7dac9f22d1bc0ca31c49f3813f71b0024c1e85732612cece1009
SHA512dacd0d5472de05184a1072e40ec11ad88bd7d5c2526b9188ee42502bbbfb696a56999faee2c8435cd38684ab32c5a69c0f9a504c73a493a1d107e76397e40d07
-
Filesize
1.1MB
MD5b3cfdb9e29dd0bd84a253cdfdd20a681
SHA11c0400a531147e097c2a84faba310f2a8519276d
SHA256e0e9ad92cf446106d79f55848ad0920b7b6a1f01913a69989b21ca3c7db26ff6
SHA512a794f62531fd24213a76d58c555967604b0f810ec50b03754dc52af244d39f328d0c10fc455dbc4387cd4980d202ec4e6ef7946abe965da1f7f722f3814d9fa7
-
Filesize
1.1MB
MD5b3cfdb9e29dd0bd84a253cdfdd20a681
SHA11c0400a531147e097c2a84faba310f2a8519276d
SHA256e0e9ad92cf446106d79f55848ad0920b7b6a1f01913a69989b21ca3c7db26ff6
SHA512a794f62531fd24213a76d58c555967604b0f810ec50b03754dc52af244d39f328d0c10fc455dbc4387cd4980d202ec4e6ef7946abe965da1f7f722f3814d9fa7
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5866dcf823ac02010c242a1c52821bd0b
SHA109d53f214cb696b736e75b8ad9d7e93f7d181ff4
SHA256be0dc572073a84887f489d482b00b15aa0aa7a912fb1706a0d5c3436d17fdec0
SHA512e79768f64bc9a3a224d33fabb92f6cd93afdcc516c0536d29582b0348a528dd588d12899570a73328f12d110c54d4f57a38c95fba8d1e45f5199e0e6758d900f
-
Filesize
112KB
MD5b663831f8cc130493476d94f2d7a5330
SHA1043a1956ab8e40821d67043f8a9110a8eb36fb93
SHA256c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
SHA512e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
-
Filesize
1KB
MD51ca97143a402b3317ae913677230c49a
SHA19c8d11cdf49f58f6c211052d387050bfa8c61daa
SHA25629e2a56c1cf19b24e0add45c478b2f859cec8debde08496f4a9357d221382834
SHA512073d1faa815e83c0ea569a54ccca4a512e40b335b0f342b54935a653e1094dff9e2e4cb576953093deeb9560e69020bb5c4694431ecc7679fa35e2c30c03bdb7
-
Filesize
36B
MD5d78f6e7fc86c4ccdc349c7afec643773
SHA1bbb27f1ff616317a39df3ab66591a04213964ee4
SHA256bb39c340718c81c27bf891df175376f3231b37d93976b9b725d636eac677d03e
SHA5128724364c4f6c0c7b37a1d0786195739fb974f4fa4375ae33076e9840c4b1e57d8fca647155716dfe0306cf7c3d547813242dc483305d3653bee8c6ed94082b9c
-
Filesize
40B
MD5695debd37cac3644039a40e84f3e242c
SHA1c52eb58d686c6ead760b8dbef1893b43ee15faf2
SHA256df6c6bcbac432914639700426e11e63f3b4e0a0c268014bb8e92448c305ab4ac
SHA512596f0e8cd441f8abb32760f66a4afc09bbf827703abccdbff6c7476c2dcfd423f2df54cb3c7f513351e2768b82ff88aa3a2bf2ed1c8655cac1518da1a0f57ff9
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5b9611e5065d2542418158d640c88911d
SHA11b235b393e2159226699c80c000e5ebc2bd6f2a4
SHA256cc5200d9c1fb5ec66d105745844c1271893741b34bb11e824aa68fda68ad5bca
SHA51251ac81afb2dcfd3d6519e8569e319c4086e9302bbcac1b8557cdb1bae86c72428a6e1de142e2538f91e806af91ba4dd9cfc9f7a0c2abbcee14b0365f55986004
-
Filesize
127B
MD56ef709b8536878951e87c29a1518fc2b
SHA124376c70b00152501b3d98df61fa7db435339172
SHA25610b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
SHA51296547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9