Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2947261s -
max time network
114s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
25/11/2022, 11:11
Static task
static1
Behavioral task
behavioral1
Sample
12201d2c58e57a453ef5afa8d551fcf67a6d6c7e7d8afbe1feb419b353003e6a.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
12201d2c58e57a453ef5afa8d551fcf67a6d6c7e7d8afbe1feb419b353003e6a.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
12201d2c58e57a453ef5afa8d551fcf67a6d6c7e7d8afbe1feb419b353003e6a.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
12201d2c58e57a453ef5afa8d551fcf67a6d6c7e7d8afbe1feb419b353003e6a.apk
-
Size
442KB
-
MD5
67ae66df32e56a3f355fe944126321b7
-
SHA1
3c5254d01f57627fce403dbfd40b94b7d475e126
-
SHA256
12201d2c58e57a453ef5afa8d551fcf67a6d6c7e7d8afbe1feb419b353003e6a
-
SHA512
8f2092f7db58d2d2e9e9afb6e93a512de993b40d9ab035da752fb087b13a1284e273adffb7d3e1e2872b9af8a31a3f83367fa9c916a65da2897bc8a81318a6ee
-
SSDEEP
12288:FBqXec7QS9dj7p6DFDvjRMl1tCAJHEgz48ND/I0PV:SXBQgdj4Fv7Ayh8NrIE
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.android.tdsdf345rdfdr/app_oiuj/zkl.jar 4097 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.android.tdsdf345rdfdr/app_oiuj/zkl.jar --output-vdex-fd=59 --oat-fd=60 --oat-location=/data/user/0/com.android.tdsdf345rdfdr/app_oiuj/oat/x86/zkl.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.android.tdsdf345rdfdr/app_oiuj/zkl.jar 3982 com.android.tdsdf345rdfdr -
Reads information about phone network operator.
Processes
-
com.android.tdsdf345rdfdr1⤵
- Loads dropped Dex/Jar
PID:3982 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.android.tdsdf345rdfdr/app_oiuj/zkl.jar --output-vdex-fd=59 --oat-fd=60 --oat-location=/data/user/0/com.android.tdsdf345rdfdr/app_oiuj/oat/x86/zkl.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4097
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
MD5712612c47b25832452415b93ed72d1ae
SHA130ebc37c0173c86a225205fcc6516bd5fd2b4c38
SHA256d8be1918670b70c11f455a42811e48b5474c829064e31438c180d59a392079d6
SHA51201379a2bca296bc881289ec58c624336442c18fdf8bf97c335cb33ec7124911a583f7ef37427372499131dab8d6035917b15938b5fa0c7152c3b9b19b1940615
-
Filesize
172KB
MD5ca685b6c8f57cbf193f7ae25e2f0db0d
SHA1caf806c7f922eed9f405b75a17ceb3fa1567d0e3
SHA256891c1b0f38d23220a9df85a9112389a1d8de8a0637ea2d60f3d1d5d5c45cfb1d
SHA512b2fc275c59c73010fc1aac48dd3c00f0177d43735df394943f87085f4e6b7d4117fe072bbaf461a78435d0e4981288127047a4b93b32bd2b5d57a0e943558ed3
-
Filesize
106B
MD5b178462d2cf3357b10484ce683be0cd0
SHA1f3813bf732b99d58cee9712591aab21aa5b1f25f
SHA2567a170fc7eb3548b52a14aa02d74dba3df910c716826facce34255dc7aaf13a28
SHA5125ba0229d0182861e75d49938171cba48294501d875f7b933f508c4abb9c9be688b7a9b105b6fe4a5a688a042b4f97cc1ec0c9a91cf495e412119b2f2cde0da5e
-
Filesize
141B
MD55c0b35c758ce5e14e70dc05e9ff9c0ff
SHA18b305bab3ea46c02779d2ff447ec8719feaa24c7
SHA256bd46b013b58f527ea5933ece74cb94fd86109fe5a215b20122706335c5626afb
SHA512b23bcad7064e23b5df98f58301f2f29f364a9e717af8055ef473d968c960813454ea085874116e77b770c6c9fbbd2208b676c1c03948ceba3ac2eab92a14e3b3
-
Filesize
176B
MD5db5d2d3e0d6b710be8dc23640955169e
SHA14a924e8d43ed02b168f9ff5f0afd314546ebbf4a
SHA2563a0549455e84e0bc299643808867eee7b5c6dfd403d50bcaa2c9b9d474ffa215
SHA512348b0e173b44ff5eb717af82369f563b9e0902ba0f606f7ba643dc4ce914787e95ef55a1913896fb5aa44745f577fe520d17932ad4d33136845ca3f079125eb3
-
Filesize
209B
MD53e72e26848d38f232789bc35bb51d37c
SHA1fa22c4864250376dcb70ae27dbb9aa2c803255a8
SHA256f7a4dd6b65640b9d457f96eb385fc95be10b89348adf5c31209ead111263d744
SHA51221e0987f0218c38f1521c1923a5542b55cf89574791dde4e5e6f262aa1029954779bf05679f96706ec338dfb331535c2e63eaa5188fbd6a4e6c1801882bedcd5
-
Filesize
246B
MD5689bef532a9cb3fc6bba9d942bc5707e
SHA1d877a9871a1126306b47d5f3d7dd024b36692ab1
SHA25693ab9206680ccc1684028dd517c1e117c90b01316070d538a7115b21f4f0d600
SHA51206838814007935c2fd1b4f1e233892ccbee86dc4b77182a184e7749a4cab8bf741820a552c11b2d4e019b0971253784417e6bb03d687bcc5e1b711dd867c8aff
-
Filesize
295B
MD52fb51f9442bba206724b5c8a578ba02a
SHA129f35f5510011ae5fabb4286c203da55eea14e72
SHA25604c43190eba6bb3a78a4b8365824a6ba88db9f746503399f6e7283c3dbba0594
SHA5125150619e609fbef8559f7a96eaacd2141c15fb36c7dd7de2ea7ee1f080cd6c7da4ec492ff74899156da78aec31ce877c582cf0ce8d114fd52bff952fbb84721f
-
Filesize
122B
MD5510515bdae08c3279cede61925d2760d
SHA114e12d699e00d30cb97a8d9d7f0a0c832f11de5e
SHA256de4aeca88e449d5038b049d41cbc442c1cc453871d0386d4cf9845d75fd4edd4
SHA51287684e0e1fc38285e4e300f26eb1f7e9d174561d8404846cd99e1b5f91a20489d973ccf493c2656e3a31844b24c74a5bf94e4fdc5a4bdf2269656f1015f6ce65
-
Filesize
163B
MD5dcc7e75637813dd993a767edf8b866d3
SHA13b67623985275faeeddc721d1519ac6b7bcbeb1c
SHA256e8936f67923232cee5d34457924f38dcfae7fdeb0732c9fba77095b2a05a689a
SHA51238d6a7623bc4dc4253cc2e5b8d43050f0091046fae96a638044ce9886fb14059388fcef6bab377afa404fa058f3e7988f87bd6e9615daad355ba9e48802bec64
-
Filesize
217B
MD56188d37e2ebca008e41f2b3b9496c7ac
SHA1e8d8c0691389d5515d8e14f83703424d4e9c5aa9
SHA25612560ed1f1db99fb269f314d44e88f4eb89bbb5678e291d008d648ac3ec528d1
SHA51281849035005ab986399bac29f5a5e875353f709fde782eb5c3132ff85426fc4acb1da7373f4ddf3da9e1cd0fb5383c28599017be73242feea7bf097e418b7845
-
Filesize
271B
MD5215081829500956a53f766923f4ddc63
SHA19d1f8ef60f55faf55d1fb992356b2e4ee01d6472
SHA25604bc6a0b061b86f12406258b2bcb0658101480c3f518d3cb0829b51af46964ae
SHA512409bab380896d2a417ae00010a14677bb8ce97a661b4cb58feb04ffaf6f066b8a05041c808308836dc1b906eda542fc4934b969d7973f6d7ef84510dad20cd45
-
Filesize
271B
MD51dce65877a27ac8a70a5573bb41bac65
SHA195d341dade3de4b7e8498c5b8a836f2e583e37a9
SHA2567fca007160ce3348a570bcd564035475222500245cecbabfdef1b085a91d8364
SHA512437b8a0a44ea77e6fde57472db0a58b673ad00db8f9af06ed83efa58552433dba35815066d326317d0377ac371442a1c13768f4b15296f1964bad85c0ae7ddc8