Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1339196s -
max time network
14s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
14/02/2023, 12:07
Static task
static1
Behavioral task
behavioral1
Sample
Virtual_CDU_1.5_5_1d6a9e.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
Virtual_CDU_1.5_5_1d6a9e.apk
-
Size
2.7MB
-
MD5
92f59c5fc95e76eb05b140962c26b817
-
SHA1
e4c34d563086b66c2d3648b2de6a41d80ab13753
-
SHA256
1d6a9ebb4d5e2cbe529f91190052c0f4461b079a85e5067ae2a1e6ca3da1874c
-
SHA512
56a48b7c920ee5fd18ed729bd2ac4a07a47e90aa34a18481c6fbf6cc5578a0e164e67b03c0925cfbc88aaaa4d59663bf5be5ed55692c4179a9be75592eaec4ce
-
SSDEEP
49152:9w7dU4bf8tiibQ8yUBM4DWnGTgu4RgKe+F/KFurnp3bgG0JKy5+C2I5dTVsLLxmD:96b84i/yAryf7gK7drnFb50JKy5F2I55
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.virtualavionics.vcdu/code_cache/1676376440506.dex 4290 com.virtualavionics.vcdu /data/user/0/com.virtualavionics.vcdu/code_cache/1676376440506.dex 4290 com.virtualavionics.vcdu -
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD5b5226ede1106261e7c438744eee9a864
SHA1352593a2577dbaa67b26eefc1629a19cc2c9c2da
SHA2563834c792435933cd916d886f9842894316a99339a0368f7bae255b53683a515a
SHA5127e410caae4666f8473266cac4bd163f7f2093d3f2e8778b50d347eeffe3cd4ed37e0d8b84c38ae85a28b7e50a2a2db3e8661ec51b71a1d9db876e98827aef627
-
Filesize
2KB
MD5b5226ede1106261e7c438744eee9a864
SHA1352593a2577dbaa67b26eefc1629a19cc2c9c2da
SHA2563834c792435933cd916d886f9842894316a99339a0368f7bae255b53683a515a
SHA5127e410caae4666f8473266cac4bd163f7f2093d3f2e8778b50d347eeffe3cd4ed37e0d8b84c38ae85a28b7e50a2a2db3e8661ec51b71a1d9db876e98827aef627
-
Filesize
2KB
MD5b5226ede1106261e7c438744eee9a864
SHA1352593a2577dbaa67b26eefc1629a19cc2c9c2da
SHA2563834c792435933cd916d886f9842894316a99339a0368f7bae255b53683a515a
SHA5127e410caae4666f8473266cac4bd163f7f2093d3f2e8778b50d347eeffe3cd4ed37e0d8b84c38ae85a28b7e50a2a2db3e8661ec51b71a1d9db876e98827aef627
-
Filesize
128KB
MD50d2a61793cb76e6513fbab6ebc0c9382
SHA157df0a98198636066be14ca57b3e9872c70038b5
SHA256cc5e878db8bb53374830dcda648b40fde739384ddc873fce6e55726ff490a192
SHA512b694ff1542103922142d99f2768ba820b3c13d48c6a6677036ba6b2ca04d60915d095c620a193a9c8936d6bbbff6463bc1f6f1a72407efb4a90555f3e682172a
-
Filesize
1KB
MD57bedce0012294a248918c548a5851061
SHA15be93cb20223c88bbfddf98c2c62b5acedb91258
SHA256c3a357d7c3a916c71fa4398c4342eeb3590e2dd39c172703223d26df6115ad05
SHA512660c8783988831ef21cce9531576d54566f8cae1cbf59bdc9355cde9feebc847c49d7b854e56d34eae9826d6078911ec747640ea7f8075f480800048e5c21017
-
/data/user/0/com.virtualavionics.vcdu/files/.YFlurrySenderIndex.info.AnalyticsData_JSZ3W3WWDYQ6FVFCTM52_328
Filesize88B
MD5ae2660d27180e1d9c31249e3bb1b43d8
SHA170a0c41e035b849aac6086021f86b4ca9a5afe1a
SHA256e6b028243ea569371122d3f0f11ef278e12632cc4dba07e68b6d3a654568f419
SHA5129f72dac88d47b2946c5f63b1921d6ae641d8fcbb3153fa40f36bf5a4eaefce33629ce111d0d585029ea48c363e09e650dcc4ca4148bcf475e8681c5c5c79f198
-
Filesize
9KB
MD5ace3a1a135698e4621165049f1dc6f70
SHA16607a46100218dee93a029c64673fc1bcebf6193
SHA25638d91d2219787e12fc61da090df7b70c0224fe1228ded28903a6919791aa4aa6
SHA512c20c1db392ae8d94a761d687dab9393b6e1c62f65419fdb41ffe725da7dee9983913271053cf20a8a795517f0531d3ff6d00d9b186f9ac1e4f01042c7b2f4cee
-
Filesize
4KB
MD5cd91e3718926309c85f87fbfd663c0ed
SHA19164d33688379cfe786f9222f77782326bd5056c
SHA2564d013bb0298e6ac240d0f51a99c200640abfee0837888e153e0c96dba10e574a
SHA5125e28fbf2c3e2939b03be406e9f0ad1e0c5403ffa6904276fee63a823b437bb76bb87f080c1d39aabbe41f7edb9a253bf289f9322e8de8a567caa16139f6f16f4
-
Filesize
1KB
MD5b1d99ae2fc5b9b947cc597c381b4fbfa
SHA1a2dfe6518578194a03906be30b29107b4f585c02
SHA256eebfb8b2b6ec312f9435e28caba05d612d89768920559b29d643e7942e333141
SHA512d909ab0ff12efdd6ce35889ea3aa3fd69c244801d009215c45f5fad94c3dace46392d22ff253e260a3fb38acd2dbe8b7d467ee884ce2206c96e2ccb6e4798252
-
/data/user/0/com.virtualavionics.vcdu/files/.yflurrydatasenderblock.8c0955e1-10a1-4d02-870c-d3992e33c9a7
Filesize1KB
MD5f5d682ac8b4a1f1e964efb65d1d5fcbb
SHA1653dee0446ddaf39c720da015595459c1d684f87
SHA25625489da9b28f14b0850da39ac75afce834dd1bd3f3ee580a28e8f01e9c827826
SHA512b13b3b8a0cd06bd6355ac8627ab95cf6fded24b56df21e4f9bf86e91665ade22134747b18520850d03f233d257e05e927cb6f843b7c71fb476eccadea36b35d8
-
Filesize
100B
MD5e841063817d4fac22d891054a9f21ddd
SHA1e98315a8f2288010d962691e754c925d45570183
SHA25678ddacb4a9eba9d74a70ca4d59d03bd913b5835d7ca947049b87d105e11565af
SHA5127daa7e238c5c6617abc82d44dbf8ba8026be8c2ea18b700daad6d9b0235fef07e3e1c05588b30b3c546a26385a55a3064cd27e7c74374c91dcb2f73a9c899e70
-
Filesize
129B
MD5724bca6ef2ed083e2540fad0721c37e0
SHA1abccb5f0864b73ef98aea948b91d2e104ec4bc45
SHA256a0c9f1ba6c24359dd619f80ccd2885919505b10080c7d262d8d2e5005f639211
SHA51227f8375c9654d0a3b37e87e82792077f821361f7aa3282e81a198ec5dd354e4dee77bd60e5ec7e9e89569afbcb86038cd9b1196b8875183f7a5fda44f3fb1150
-
Filesize
204B
MD5d13a1ff61dc4328993246f4933bd5e3d
SHA1717865df1c458424d12779e3b2034b0228ef7043
SHA2567260f7f9c806814db1dc3bcbb698c4c4fcc934bd700b8a5351e89f3839fbfd25
SHA512f3a19371ef3ca2206665e12054afed841c7400f64bd1ce17e03e025988ebfcde60dab01180bb105155633052d4900ddf7a23e2217018687c93ae392bed2b9951
-
/data/user/0/com.virtualavionics.vcdu/shared_prefs/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml
Filesize134B
MD577a2beec827a461d722738d1671f92e8
SHA1795e01af13e0df658338755b56b136a940488c03
SHA256db89d1d3ce40e6ab31ededd29d1b1e4ee8b10865b785f7955634c735a977bdcb
SHA512b40fdb532f1a9992171c0c7f588e0f89fe9aacaa4804423bfb19792677127f122c3d24311d2352eb16db8d65f6e1ac3168617732b8f057e036f0542032e6d398
-
/data/user/0/com.virtualavionics.vcdu/shared_prefs/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml
Filesize442B
MD5224ff4fe27db3c9bf350ac4899c3e330
SHA1d2ef1697907ee2728ebdb38b3252056b72002296
SHA256b82a142fe13fed2dafba5e0062ab8f1b6f69e7fbda8fe6f0468bfc388b7ad1bf
SHA5124e61d42c8f7bd779bb4fd81c22249bad4d429addee654dce19b1a257e7d8044dffe3bf78992e5ee82c13bda381d51533e098ba946cf45b29b658d1478f079778
-
Filesize
129B
MD596a30795ce5a6db9541ae66b268bdda4
SHA165f4a73bbb0f31c5f307c1ca8dc1496c9c971a84
SHA256cf9039b18e3f5942a60902e40fb5f2ac8bda70bb714d03395813eefd178657de
SHA512a4ac6bad1243becbdb77b260403c98513bc39276237c77c4277d4b5781213e2bbcc17901c4a3974ab77a601579a7089bf36c951980e0070b70382bb6aba41022
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03