Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

b51404dcbe...b8.apk

android-9-x86

7

Analysis

  • max time kernel
    3191087s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/11/2022, 15:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b51404dcbe92b27d7f97cac5b953dcbd533f22c8fdb09625d240c02e9fef1db8.apk

  • Size

    2.0MB

  • MD5

    ca77c5c59bf78d639101d0c093bcb833

  • SHA1

    58785b6539d28d0344111b5319e76fc7eef7e0e2

  • SHA256

    b51404dcbe92b27d7f97cac5b953dcbd533f22c8fdb09625d240c02e9fef1db8

  • SHA512

    730bb80cda2f0119e2fab0f0d52645df3308463a3e6662ef30e7f7fed0dbb97179dcc27f594c2c1cf476ebb1e1236d9e253e98a116f1958b39f39878496be6f2

  • SSDEEP

    49152:0tsXhcUhm0NveGrLAaBHpQyy7ttfgz/1BrTMvX/YqESeYkMsKbx:qsR/htleGrEaBJwJtfarTMvXYSeYkMsa

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.sm.video
    1⤵
    • Loads dropped Dex/Jar
    PID:4109
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2021.apk --output-vdex-fd=48 --oat-fd=49 --oat-location=/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/oat/x86/com.skymobi.pay.opplugin_v2021.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sm.video/files/classes.dex
    Filesize

    1.1MB

    MD5

    d478fe3211a435e012eb9c65d0d95fbd

    SHA1

    eb18dd0aba464a40bf598112125cdc1d9bc2e812

    SHA256

    dcbfa9c91c909e8a5ff20345c5d3d927ee3986dd0f18fb34fa4f57a7ed765cab

    SHA512

    8cfecec4efc2934e4dd36d3c97ada0b5240f0cfff6b04406fb77b8508c078899a28419555006fcddf9a2a7b79ffc50674ae7bff377955a36609d121e10f079f5

    Download Submit

  • /data/user/0/com.sm.video/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    42dcd3f9b0df7cf8fbd3cc2bf835867d

    SHA1

    1073b809b9ddf725e9ec0c4dc9cd3d82f0a8cc65

    SHA256

    4045f68622b524ecf42215acf722f7b7d0256943c7367d7cd677b1390e458831

    SHA512

    fab703f87ef8a191d0523152c5de7beeb4292687300ae2154f196d79dba1676e8fb8918d829ecef38abbc41067dfd4c3a1663d4f480e1a45c9447bfb5dd8f21c

    Download Submit

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2021.apk
    Filesize

    386KB

    MD5

    4a1fb248e672d39457f2cf9088c17880

    SHA1

    b500b2528ed6cee5929603b862b14a18655ac06d

    SHA256

    b2831dae43d2dc8daffc919456c244b17f15f5453dca097d665979e7254f8c23

    SHA512

    b434ee9348e7e2717b35c4f64bc71aa58aca634741045b91ec61eea5bdb536ece7449fe8d376f724bb0006cd2bc7976c9695bc3aa47a59a26ab6c6c09096279e

    Download Submit

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2021.apk
    Filesize

    386KB

    MD5

    4a1fb248e672d39457f2cf9088c17880

    SHA1

    b500b2528ed6cee5929603b862b14a18655ac06d

    SHA256

    b2831dae43d2dc8daffc919456c244b17f15f5453dca097d665979e7254f8c23

    SHA512

    b434ee9348e7e2717b35c4f64bc71aa58aca634741045b91ec61eea5bdb536ece7449fe8d376f724bb0006cd2bc7976c9695bc3aa47a59a26ab6c6c09096279e

    Download Submit