Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

21/12/2022, 09:14

221221-k7j6vsfa9s 7

21/12/2022, 09:14

221221-k7ealsfa8z 7

21/12/2022, 09:13

221221-k66y8sca29 7

21/12/2022, 09:01

221221-ky131sfa7y 7

Analysis

  • max time kernel
    867505s
  • max time network
    97s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    21/12/2022, 09:01

General

  • Target

    BancaSicura.apk

  • Size

    3.5MB

  • MD5

    074679c220f5f8bea6b29e8d73dcbcf3

  • SHA1

    8c545464bc24b0c44814793713d9f0ca038a787d

  • SHA256

    66109267c92cccca9a44f95cb372b3229b808045ce8e6ac2780450cf80401a76

  • SHA512

    0301ec18b4634e87a23abd281662672152a7ed7dbf4470cf638e5d687dc1607a15f7bbc885175584e73b984d3583880edd3eff2d2502dd8ccef8304c3b18cd28

  • SSDEEP

    98304:1sK5/HEkPM/gCVcK+YqOj7gPERGjKiMFbzASj2gEOqZ3MmVP7:1siziMYqOj7bAMJEkqZ3d7

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.andro.bal
    1⤵
    • Loads dropped Dex/Jar
    PID:4013
    • /system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/com.andro.bal/cache/hook/classes.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.andro.bal/cache/hook/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4137

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.andro.bal/cache/hook/classes.dex

    Filesize

    95KB

    MD5

    d81ae88d49382c2ca9e4d260c319d966

    SHA1

    89fa77bab9fdc0041e310f98ee540e5ec0d8070b

    SHA256

    af89e6cf2b909e11b8fb0f0d20bec2e8419b830a6296558f257088f6631f60a2

    SHA512

    5edfdbf7a197d6168cf00219dfb2d11480cb86c82e11428f020c3ca41441a1622f43dc4bb8df261df68f9ee4265258ba001ee819cc648e74ba46742faa6a40fd

  • /data/user/0/com.andro.bal/cache/hook/classes.dex

    Filesize

    95KB

    MD5

    d81ae88d49382c2ca9e4d260c319d966

    SHA1

    89fa77bab9fdc0041e310f98ee540e5ec0d8070b

    SHA256

    af89e6cf2b909e11b8fb0f0d20bec2e8419b830a6296558f257088f6631f60a2

    SHA512

    5edfdbf7a197d6168cf00219dfb2d11480cb86c82e11428f020c3ca41441a1622f43dc4bb8df261df68f9ee4265258ba001ee819cc648e74ba46742faa6a40fd

  • /data/user/0/com.andro.bal/cache/hook/classes.dex

    Filesize

    95KB

    MD5

    d81ae88d49382c2ca9e4d260c319d966

    SHA1

    89fa77bab9fdc0041e310f98ee540e5ec0d8070b

    SHA256

    af89e6cf2b909e11b8fb0f0d20bec2e8419b830a6296558f257088f6631f60a2

    SHA512

    5edfdbf7a197d6168cf00219dfb2d11480cb86c82e11428f020c3ca41441a1622f43dc4bb8df261df68f9ee4265258ba001ee819cc648e74ba46742faa6a40fd

  • /data/user/0/com.andro.bal/cache/hook/classes.dex

    Filesize

    95KB

    MD5

    d81ae88d49382c2ca9e4d260c319d966

    SHA1

    89fa77bab9fdc0041e310f98ee540e5ec0d8070b

    SHA256

    af89e6cf2b909e11b8fb0f0d20bec2e8419b830a6296558f257088f6631f60a2

    SHA512

    5edfdbf7a197d6168cf00219dfb2d11480cb86c82e11428f020c3ca41441a1622f43dc4bb8df261df68f9ee4265258ba001ee819cc648e74ba46742faa6a40fd

  • /data/user/0/com.andro.bal/files/209e58ab/3343219382.apk

    Filesize

    3.5MB

    MD5

    2e72707bb00d7fb56059afb3939b269b

    SHA1

    5902033fd6a2a7be492f159853665c0a68bd0cfb

    SHA256

    94c34dd79220df71079f2ef2ee65746a5e4a2867367782ca5a6f799291bbc37e

    SHA512

    7bc37481ac2b2208269a3add371b9c762bb7735c31ce7d3b95f2e7eae59a83955ebba4f0ce78d2f52618a1783931e1e7cf0f3ae36156a44783199f5cb043f549