Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
04/10/2022, 09:59
221004-lz275saec6 826/09/2022, 05:56
220926-gnh8nsaghm 817/09/2022, 08:02
220917-jxlfhahdf5 806/09/2022, 18:32
220906-w626tseffn 806/09/2022, 18:14
220906-wvcrsshbd7 8Analysis
-
max time kernel
335980s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
06/09/2022, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151.apk
-
Size
4.1MB
-
MD5
cc551ea1e9bb262a25f25a2f15412905
-
SHA1
5856d942486d0ef997527591c7ae58b6d6a4bf07
-
SHA256
bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151
-
SHA512
8b511c9e9cfd784a0537027c738ae6d4c722f0358814b4fb8089c8302a07320e49990183fd5f6b9006e99e5c1622a17d5f7ef21613c7075761d3386e3cc44f62
-
SSDEEP
98304:Jeq7CtjZunGGO2mASwWX47tll0FCYHBjnDSY6vkyFmwnM/yd2ofrHS:5ytun3O2mAJRll0F/hLGkyFm//T
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 3 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.ohalqpdj.discopet Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText com.ohalqpdj.discopet Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.ohalqpdj.discopet -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.ohalqpdj.discopet -
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.ohalqpdj.discopet
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
Filesize
48B
MD562974f7f3ae70ee03945f68832625076
SHA1b540457467d2bef0a97bd55733d1d016710b65b7
SHA25693dcbd95390dbd2e25be3079a4a03f1d96f6c3f40f968d0a878fc1ded5b1e6d8
SHA51231a01608130b8ef102421a27adeb2655ffd173be4645ff92b697047687f9f1ceb4809ef4e25bb4dc726b53f94b68fe6532d6da73f3fe7365503178fbdb455842
-
Filesize
48B
MD5526a0c2ea879d73d01ea9dc3af94c8b7
SHA1b7bb93f951a015dee1083b65e878718be171d90a
SHA256ef38af825425cdddb09acdd2088330316ea8beab5385aaf0a5c77a7f035e31b3
SHA512392f8a4838637f235c833c94635eccbf636b98229fa993813ecf96e8cdd4743af3197a6284b31aa5939248496b849a6fed420c6e472aacf17f9c51f94b924eca
-
Filesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
Filesize
1KB
MD5ed70b8ed2907e87fb35e573066fadb1e
SHA13e2b3e465ea7d9db4bb84c92761284dfdc722304
SHA25635785ec4a6cbd6b22bf6a08bd59ea9f28540fecf3fa5bea870130f4e1c85f790
SHA512df353156bc3bfcb156bb4d959c761b3670656db74357fc9ec889932e59b4ec14b611267346a6f6358684e75992c7503873c71617a04860146560b145d4c291ac
-
Filesize
36B
MD5beb7734dd2ceddfd41070c47b44a354d
SHA1a55447fc66e72dbc964a4d385867bc7515d4a68c
SHA25601f1770de476d384d745c60fb5a149028ae01da9c103d31f63c1d1976abb4a2d
SHA512dfd77ef7b72e402dd7a1eea199a10713705b9e5e5e244efa7e1ee6feab586ccc9907d0eb2e66ef4fc2e8b271a1b42be45e6295c834e87742b9bfd30a2eca56eb
-
Filesize
68KB
MD5fb5b3e67752438d4992d139b651abc07
SHA1417233757b978fcd1486d8c7786d7ffbe3ce7d98
SHA2566d526fb6d4af24327fc76e5b13606c1933b365aaad42d6d428f854504a70084b
SHA512108a3deea144566566d213285801f3d20b8301e24edd3db9f6e90efe0ffe11c11b9695fa2976a85a4490304b7eea66d023963da3aae858aad2e5682f26cec1b7
-
Filesize
524B
MD5a019b552501238c54b6f5ceb2895b8ed
SHA1f99a3e551bfda517eada89999ff5122975c1bc3b
SHA25678ba42697a996987cbf8472d74c52670ddd5aea28b2b381e38db02478ef74d6e
SHA512d35934ea32a26754cbff56ff13001bf951b0d6b1506cfea2d32cf2711e5f1bdbb1111ccc9a285999788d2e68ab05272c197d278c680de7cd9b2bd367a2df6d77
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
108KB
MD5f4b1eddd6d0be55f5ba71eeb196cb325
SHA170b04376e9d37df3e10010fb9fe981c200026fb6
SHA2564e6f4f24c1f17ac84732a4553339edb44bc911ba6b22eb687504bc4dd0f705d2
SHA512397c2c90794083fab40c15d6a4e13ad089e8574b1b83719346987c710848a279751a1ee4193d2aa2914d61524a915ceebfa7af93f322264cde9100853519effc
-
Filesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
Filesize
152B
MD554ac2f9a144c31b25ddd041dea6723b6
SHA12d4082ea6ba7bdca2e74a22119a6f5d302d701f1
SHA256f4479caf86557fc017c67832b8af210f1330eda5ad948f6a3d8f2924fbf5b160
SHA5127e3ec7daabd0c734c3bab7a3b314e855c69cb036c84b650d08597234e4a30cd86aaeae30ee8a28b841def8d32e83571a022e206d93c3147b242031732e2ba4e9
-
Filesize
398B
MD51ccae0e526cca84b2cd856ada017ce31
SHA1906ad0cc618d2201d4ddc614fc7fb2aa171eaab6
SHA256fb20dd3c441a3a8acc075bdd6e2408a0d8989a7aa65b3bba5153feda13fda27c
SHA51228f51d7fd3eb6faa5ade7a11620140193c90e73e583d90aa08df3aa471d1511dbbb05066ab570b668587fc5d423868fb9d6f068d369c73b9629963c95e1a03cf