Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
21/12/2022, 09:14
221221-k7j6vsfa9s 721/12/2022, 09:14
221221-k7ealsfa8z 721/12/2022, 09:13
221221-k66y8sca29 721/12/2022, 09:01
221221-ky131sfa7y 7Analysis
-
max time kernel
867505s -
max time network
97s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
21/12/2022, 09:01
Static task
static1
Behavioral task
behavioral1
Sample
BancaSicura.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
BancaSicura.apk
Resource
android-x64-20220823-en
General
-
Target
BancaSicura.apk
-
Size
3.5MB
-
MD5
074679c220f5f8bea6b29e8d73dcbcf3
-
SHA1
8c545464bc24b0c44814793713d9f0ca038a787d
-
SHA256
66109267c92cccca9a44f95cb372b3229b808045ce8e6ac2780450cf80401a76
-
SHA512
0301ec18b4634e87a23abd281662672152a7ed7dbf4470cf638e5d687dc1607a15f7bbc885175584e73b984d3583880edd3eff2d2502dd8ccef8304c3b18cd28
-
SSDEEP
98304:1sK5/HEkPM/gCVcK+YqOj7gPERGjKiMFbzASj2gEOqZ3MmVP7:1siziMYqOj7bAMJEkqZ3d7
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.andro.bal/cache/hook/classes.dex 4013 com.andro.bal /data/user/0/com.andro.bal/cache/hook/classes.dex 4137 /system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/com.andro.bal/cache/hook/classes.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.andro.bal/cache/hook/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.andro.bal/cache/hook/classes.dex 4013 com.andro.bal
Processes
-
com.andro.bal1⤵
- Loads dropped Dex/Jar
PID:4013 -
/system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/com.andro.bal/cache/hook/classes.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.andro.bal/cache/hook/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4137
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
95KB
MD5d81ae88d49382c2ca9e4d260c319d966
SHA189fa77bab9fdc0041e310f98ee540e5ec0d8070b
SHA256af89e6cf2b909e11b8fb0f0d20bec2e8419b830a6296558f257088f6631f60a2
SHA5125edfdbf7a197d6168cf00219dfb2d11480cb86c82e11428f020c3ca41441a1622f43dc4bb8df261df68f9ee4265258ba001ee819cc648e74ba46742faa6a40fd
-
Filesize
95KB
MD5d81ae88d49382c2ca9e4d260c319d966
SHA189fa77bab9fdc0041e310f98ee540e5ec0d8070b
SHA256af89e6cf2b909e11b8fb0f0d20bec2e8419b830a6296558f257088f6631f60a2
SHA5125edfdbf7a197d6168cf00219dfb2d11480cb86c82e11428f020c3ca41441a1622f43dc4bb8df261df68f9ee4265258ba001ee819cc648e74ba46742faa6a40fd
-
Filesize
95KB
MD5d81ae88d49382c2ca9e4d260c319d966
SHA189fa77bab9fdc0041e310f98ee540e5ec0d8070b
SHA256af89e6cf2b909e11b8fb0f0d20bec2e8419b830a6296558f257088f6631f60a2
SHA5125edfdbf7a197d6168cf00219dfb2d11480cb86c82e11428f020c3ca41441a1622f43dc4bb8df261df68f9ee4265258ba001ee819cc648e74ba46742faa6a40fd
-
Filesize
95KB
MD5d81ae88d49382c2ca9e4d260c319d966
SHA189fa77bab9fdc0041e310f98ee540e5ec0d8070b
SHA256af89e6cf2b909e11b8fb0f0d20bec2e8419b830a6296558f257088f6631f60a2
SHA5125edfdbf7a197d6168cf00219dfb2d11480cb86c82e11428f020c3ca41441a1622f43dc4bb8df261df68f9ee4265258ba001ee819cc648e74ba46742faa6a40fd
-
Filesize
3.5MB
MD52e72707bb00d7fb56059afb3939b269b
SHA15902033fd6a2a7be492f159853665c0a68bd0cfb
SHA25694c34dd79220df71079f2ef2ee65746a5e4a2867367782ca5a6f799291bbc37e
SHA5127bc37481ac2b2208269a3add371b9c762bb7735c31ce7d3b95f2e7eae59a83955ebba4f0ce78d2f52618a1783931e1e7cf0f3ae36156a44783199f5cb043f549