Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3600249s -
max time network
306s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
14/10/2022, 13:00
Static task
static1
Behavioral task
behavioral1
Sample
pochi.apk
Resource
android-x86-arm-20220823-en
General
-
Target
pochi.apk
-
Size
16.3MB
-
MD5
d6a20b5e8706231a4b10ae18d1e8da12
-
SHA1
135ed8adf6c875dbd836504796102bd41cc13265
-
SHA256
dacaef00983a188984deb34f5620921b17a4e0390a8515c880db89aee9577e88
-
SHA512
c7aaa825ec6a7f6da99a92fcd4c6fcf8a99939b219aaac18dd94003a37653b548c92b5b4157ea3bd0ba9b8626a22cd1493141efad4725436e29c1e9612be420d
-
SSDEEP
393216:RA9iJw0zlQTSezkbzqSane4wHT9Ne0Ep2TJkBSEv:R4iv+uezkqS6nor0WkBSEv
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.github.pohi.cdc/files/csp.jar 4252 /system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/com.github.pohi.cdc/files/csp.jar --output-vdex-fd=127 --oat-fd=132 --oat-location=/data/user/0/com.github.pohi.cdc/files/oat/x86/csp.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.github.pohi.cdc/files/csp.jar 3969 com.github.pohi.cdc -
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.github.pohi.cdc
Processes
-
com.github.pohi.cdc1⤵
- Loads dropped Dex/Jar
- Removes a system notification.
PID:3969 -
/system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/com.github.pohi.cdc/files/csp.jar --output-vdex-fd=127 --oat-fd=132 --oat-location=/data/user/0/com.github.pohi.cdc/files/oat/x86/csp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4252
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5cb7543c4df600f2af58097cce0e334ba
SHA183cc92f38c27fdb4fa519b1ce2f37912f24af1f0
SHA25664c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233
SHA512ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980
-
Filesize
1KB
MD532eb9c4c27c19c76fee1bfdcca8cb900
SHA1f9a1b9e566ce20feea9ec04fc68e144a42d1a9ec
SHA256f3668447ee01e585e62ee9f443a8fd04dd4176aea75be76f87b4394c085f0cd0
SHA512478aaeed34c5e999961841777552c4b3bf835628519a57e004a8b33a6920b0c6f4dc07110ac5c09d924ba034d62e88882f28c9a39a6a2e914de128da63cbbc74
-
Filesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
Filesize
48B
MD5763df1f3bbe388bc345d83adcd1df23c
SHA15d6720b5beaacd36d675464fe92c801e2b431185
SHA256ebaa5b66e22ffb50fdb371cb00574e4cfaedf92f1705d5246f81aa410723573d
SHA5122915acc09c7d652bdca9912134156888d3a5e92bcfc84fe69eb917e62e0f95ca78bbd212a8b015383ec66d4e34b88d45241e2a3bc965f8d603b7b1b1e5c09fef
-
Filesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
Filesize
1KB
MD52359c7f108268a4476bb0978bdb1bdc6
SHA1458b4359b9e3e9dd03aba9176c9f8d4076ff3f0b
SHA256ac51849d23200d5eb1f2de81cce4eb2b1a3760cdfb88f776ef45ba33a1663979
SHA512eb14a78fa87dbea912e6d607c907d6df6368353e7472b41e613388a3277bbc513e7ed780d8ec64c3d9d62611463428a4ccd92b001776fe54dcf20a4671627bbc
-
Filesize
36B
MD5f2a143a8c704163e407184cb8d2d3744
SHA12a1a9adcf06ea98bab25d39d3bae4acdfd75fdce
SHA256bd8ab4c10cb5fdce2510752e1db46f933aba3d308fb1aa509dd8b91f08f67ccd
SHA5121bc93dafbfc73665777b64065055da9c4ab893c4214b95046c37944967aedb577fd1a28bc275df8d6c37de34faaefba72388316aae19e57b57c83c9d059e8478
-
Filesize
31KB
MD50e5ab34d604439c7e2c5b50978bdb9ee
SHA15a85a96eec4fc985f5ae6c5aa1c2e03d18e059f3
SHA256f79747a52007734ae395c2a5501ec472704efac5903829857c46174b4de84212
SHA51268ab07460424af762c341ff29a4dc214dc0e9cf01fec08c16e4fcfb18f8ca9eace36f7e691a30ff6513f6503cfb36612ee229ff70fe82af120ef1472a6a2967a
-
Filesize
31KB
MD55b47e0c374839f90edba6a2a999c3ee4
SHA18bd5df2c084836caed00478e372bac1d3a13be81
SHA256247f2d581edcc47f244ca4897d479bf12a40c23de112ab54ec3a4706af6498c0
SHA512d6c828df83010e343d68d69c67686fac2718e09b4a12d733a1a0955f69b782d716ff99905b373044d410306608bce42684807c9fd0e86045109ca65382600dce
-
Filesize
303B
MD57dd4825dac4cfd62ffed2f9c8f224f2b
SHA14c47f39c1eabebcadee4ad14baf01e3537d28119
SHA2567eae222014370d5dd5dd5c3f15da115c82fd87e277013c0b01098ba6195b9608
SHA512bfb46ba7260fc7b313740e412905d95fc6abf4c7b398cbe09d2c54cba34ec305e76e529a6061c6bec6bb1e1a0bc97f7cb69cdb8e10372e2efe108cf8ddcb4222
-
Filesize
304B
MD595c40f60374729590635850289b2911e
SHA1779206c02b532d33f69525a151fc7911c99fb6af
SHA256ba00933582e3c0efb90a8f2da8bc1a2a614df512fe741b542513eedd34d5d9cd
SHA51259ec82baf8f337e295fc9150883528d29770ccd99e2c5b96fbf26af46548e1e40bef67cee690faa3a624e016388bdd1626b102e0d301b285d310349a37d4f9f8
-
Filesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
Filesize
48B
MD5a7603d38a2054439ccd672abff6a38f5
SHA1d914187b9fd5149bc33ac7a930e6eebb3288ee08
SHA256cdd0cc4bea31b14a38bdfe08dd44be64d0662a143568576bb13a52beb38e7095
SHA512d2a94d7132e442abb757f7d37ab83b26234fdc01e9fe5311b9794baec3f84951d94e5822506e449f405d592dd75580f82bb79d287620f53dfc04ab196a5d5661
-
Filesize
96B
MD52d6e42487f78c8189b91179280e92e3f
SHA151085bb71bbe605944e36e0329b43a77c8bd91ec
SHA25689f1f51629b347b6e4359ce33acecb741d6eacbca39a5f3a4de5c6859a6567ce
SHA51235361215eb5b688083d5b7925f8893ec8964b3cc141f9af9ad7f7fa59e95871f438fbbad21928f6a8500ad404f28c2ca63d526d4e9e3e2750310f7ea629c51a0
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD5f1c2276e9fb7a4f90759f1d571ec5024
SHA1d57dcc4c6cd142199c1e8da045ff5791fe628d0d
SHA2568daa57add05799c7eae57af15dfa8e87764192651a56b3d4be4ca146ba6f741b
SHA51282d2f96a3dfe202350c07e92b67bc587940abced8df68016e9b22fbb86698049192f5c0b3af4a9c82d0d06c2dd9d12f098236d7dfe61c253685f27685aaf9695
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
60KB
MD542a5d94e7a5447fc9a9ab94ce41dec16
SHA1e4013e1c9cac8b567a51237ccacf7cd0d2662bde
SHA2565cbc176a40d3121ca97d14b0aa439a2a7342586ff76ed1941094f8ccc02a56cf
SHA512406e4cbdbe13c1b829bbb55e0ea8e270873285f4b02956a55664570da36f5c01275d219945beec6511081cbd8f1eeb7179e5471dd374a015988d375f893cbcf3
-
Filesize
88KB
MD5ffe63eb687eb20e761ba484b904d8da6
SHA1078d1ca9846352025d4ac0faa9d5ad881c5e8ec8
SHA25666363f108e967e9e358d6971a1b119996769b06b390285bbc1c0f41da50f7698
SHA512d740ee67292da7a82e4b75bc2c3c8ae5e3f898401580e8f396aed896d8634aa63701e50c0a118e01eab5c001bbf06f3fee5442cf04d7b507426194174b245ac5
-
Filesize
423KB
MD5437d1e20f231ee71f4343e0b8329ae80
SHA1942e3f9e8ca1e86e78332e6c7ba4d2c2e56d9117
SHA256e64f703955f9dbb591615b4c4db35796baa1f8b75c6bf7ebb783f00991798b63
SHA512f640413b8eecf594d400d4a4aa8adcd24765313607a64deb8cb0cf26d0c7179a77678ce591b5c4d142ff087498d31bfff6f2918602ff15581590a73478ca6d4a
-
Filesize
977KB
MD508c10905bc6a756b16ab13b8673bc51f
SHA196612083f624d05bc3e6ad746e17de7e603a83af
SHA256db1fa1b37307a99342ffb539abf80009aa5d769874e16c48cdfd012c838da3ba
SHA512ee07f69bd5142139d5b8cc3e0682ffb9616030141928dee371c057d1f298416cd290d4346019c4d3db17ff99f41a34e2b121bed514a9081cfeaf9ed03f6c340c
-
Filesize
977KB
MD508c10905bc6a756b16ab13b8673bc51f
SHA196612083f624d05bc3e6ad746e17de7e603a83af
SHA256db1fa1b37307a99342ffb539abf80009aa5d769874e16c48cdfd012c838da3ba
SHA512ee07f69bd5142139d5b8cc3e0682ffb9616030141928dee371c057d1f298416cd290d4346019c4d3db17ff99f41a34e2b121bed514a9081cfeaf9ed03f6c340c
-
Filesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48