Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1339196s
  • max time network
    14s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    14/02/2023, 12:07

General

  • Target

    Virtual_CDU_1.5_5_1d6a9e.apk

  • Size

    2.7MB

  • MD5

    92f59c5fc95e76eb05b140962c26b817

  • SHA1

    e4c34d563086b66c2d3648b2de6a41d80ab13753

  • SHA256

    1d6a9ebb4d5e2cbe529f91190052c0f4461b079a85e5067ae2a1e6ca3da1874c

  • SHA512

    56a48b7c920ee5fd18ed729bd2ac4a07a47e90aa34a18481c6fbf6cc5578a0e164e67b03c0925cfbc88aaaa4d59663bf5be5ed55692c4179a9be75592eaec4ce

  • SSDEEP

    49152:9w7dU4bf8tiibQ8yUBM4DWnGTgu4RgKe+F/KFurnp3bgG0JKy5+C2I5dTVsLLxmD:96b84i/yAryf7gK7drnFb50JKy5F2I55

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.virtualavionics.vcdu
    1⤵
    • Loads dropped Dex/Jar
    PID:4290

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.virtualavionics.vcdu/code_cache/1676376440506.dex

    Filesize

    2KB

    MD5

    b5226ede1106261e7c438744eee9a864

    SHA1

    352593a2577dbaa67b26eefc1629a19cc2c9c2da

    SHA256

    3834c792435933cd916d886f9842894316a99339a0368f7bae255b53683a515a

    SHA512

    7e410caae4666f8473266cac4bd163f7f2093d3f2e8778b50d347eeffe3cd4ed37e0d8b84c38ae85a28b7e50a2a2db3e8661ec51b71a1d9db876e98827aef627

  • /data/user/0/com.virtualavionics.vcdu/code_cache/1676376440506.dex

    Filesize

    2KB

    MD5

    b5226ede1106261e7c438744eee9a864

    SHA1

    352593a2577dbaa67b26eefc1629a19cc2c9c2da

    SHA256

    3834c792435933cd916d886f9842894316a99339a0368f7bae255b53683a515a

    SHA512

    7e410caae4666f8473266cac4bd163f7f2093d3f2e8778b50d347eeffe3cd4ed37e0d8b84c38ae85a28b7e50a2a2db3e8661ec51b71a1d9db876e98827aef627

  • /data/user/0/com.virtualavionics.vcdu/code_cache/1676376440506.dex

    Filesize

    2KB

    MD5

    b5226ede1106261e7c438744eee9a864

    SHA1

    352593a2577dbaa67b26eefc1629a19cc2c9c2da

    SHA256

    3834c792435933cd916d886f9842894316a99339a0368f7bae255b53683a515a

    SHA512

    7e410caae4666f8473266cac4bd163f7f2093d3f2e8778b50d347eeffe3cd4ed37e0d8b84c38ae85a28b7e50a2a2db3e8661ec51b71a1d9db876e98827aef627

  • /data/user/0/com.virtualavionics.vcdu/databases/sensorsdata

    Filesize

    128KB

    MD5

    0d2a61793cb76e6513fbab6ebc0c9382

    SHA1

    57df0a98198636066be14ca57b3e9872c70038b5

    SHA256

    cc5e878db8bb53374830dcda648b40fde739384ddc873fce6e55726ff490a192

    SHA512

    b694ff1542103922142d99f2768ba820b3c13d48c6a6677036ba6b2ca04d60915d095c620a193a9c8936d6bbbff6463bc1f6f1a72407efb4a90555f3e682172a

  • /data/user/0/com.virtualavionics.vcdu/databases/sensorsdata-journal

    Filesize

    1KB

    MD5

    7bedce0012294a248918c548a5851061

    SHA1

    5be93cb20223c88bbfddf98c2c62b5acedb91258

    SHA256

    c3a357d7c3a916c71fa4398c4342eeb3590e2dd39c172703223d26df6115ad05

    SHA512

    660c8783988831ef21cce9531576d54566f8cae1cbf59bdc9355cde9feebc847c49d7b854e56d34eae9826d6078911ec747640ea7f8075f480800048e5c21017

  • /data/user/0/com.virtualavionics.vcdu/files/.YFlurrySenderIndex.info.AnalyticsData_JSZ3W3WWDYQ6FVFCTM52_328

    Filesize

    88B

    MD5

    ae2660d27180e1d9c31249e3bb1b43d8

    SHA1

    70a0c41e035b849aac6086021f86b4ca9a5afe1a

    SHA256

    e6b028243ea569371122d3f0f11ef278e12632cc4dba07e68b6d3a654568f419

    SHA512

    9f72dac88d47b2946c5f63b1921d6ae641d8fcbb3153fa40f36bf5a4eaefce33629ce111d0d585029ea48c363e09e650dcc4ca4148bcf475e8681c5c5c79f198

  • /data/user/0/com.virtualavionics.vcdu/files/.fstreaming/fCompleted/completed-1676376442036

    Filesize

    9KB

    MD5

    ace3a1a135698e4621165049f1dc6f70

    SHA1

    6607a46100218dee93a029c64673fc1bcebf6193

    SHA256

    38d91d2219787e12fc61da090df7b70c0224fe1228ded28903a6919791aa4aa6

    SHA512

    c20c1db392ae8d94a761d687dab9393b6e1c62f65419fdb41ffe725da7dee9983913271053cf20a8a795517f0531d3ff6d00d9b186f9ac1e4f01042c7b2f4cee

  • /data/user/0/com.virtualavionics.vcdu/files/.fstreaming/fInProgress/currentFile

    Filesize

    4KB

    MD5

    cd91e3718926309c85f87fbfd663c0ed

    SHA1

    9164d33688379cfe786f9222f77782326bd5056c

    SHA256

    4d013bb0298e6ac240d0f51a99c200640abfee0837888e153e0c96dba10e574a

    SHA512

    5e28fbf2c3e2939b03be406e9f0ad1e0c5403ffa6904276fee63a823b437bb76bb87f080c1d39aabbe41f7edb9a253bf289f9322e8de8a567caa16139f6f16f4

  • /data/user/0/com.virtualavionics.vcdu/files/.fstreaming/fInProgress/currentFile

    Filesize

    1KB

    MD5

    b1d99ae2fc5b9b947cc597c381b4fbfa

    SHA1

    a2dfe6518578194a03906be30b29107b4f585c02

    SHA256

    eebfb8b2b6ec312f9435e28caba05d612d89768920559b29d643e7942e333141

    SHA512

    d909ab0ff12efdd6ce35889ea3aa3fd69c244801d009215c45f5fad94c3dace46392d22ff253e260a3fb38acd2dbe8b7d467ee884ce2206c96e2ccb6e4798252

  • /data/user/0/com.virtualavionics.vcdu/files/.yflurrydatasenderblock.8c0955e1-10a1-4d02-870c-d3992e33c9a7

    Filesize

    1KB

    MD5

    f5d682ac8b4a1f1e964efb65d1d5fcbb

    SHA1

    653dee0446ddaf39c720da015595459c1d684f87

    SHA256

    25489da9b28f14b0850da39ac75afce834dd1bd3f3ee580a28e8f01e9c827826

    SHA512

    b13b3b8a0cd06bd6355ac8627ab95cf6fded24b56df21e4f9bf86e91665ade22134747b18520850d03f233d257e05e927cb6f843b7c71fb476eccadea36b35d8

  • /data/user/0/com.virtualavionics.vcdu/no_backup/.flurryNoBackup/installationNum

    Filesize

    100B

    MD5

    e841063817d4fac22d891054a9f21ddd

    SHA1

    e98315a8f2288010d962691e754c925d45570183

    SHA256

    78ddacb4a9eba9d74a70ca4d59d03bd913b5835d7ca947049b87d105e11565af

    SHA512

    7daa7e238c5c6617abc82d44dbf8ba8026be8c2ea18b700daad6d9b0235fef07e3e1c05588b30b3c546a26385a55a3064cd27e7c74374c91dcb2f73a9c899e70

  • /data/user/0/com.virtualavionics.vcdu/shared_prefs/FLURRY_SHARED_PREFERENCES.xml

    Filesize

    129B

    MD5

    724bca6ef2ed083e2540fad0721c37e0

    SHA1

    abccb5f0864b73ef98aea948b91d2e104ec4bc45

    SHA256

    a0c9f1ba6c24359dd619f80ccd2885919505b10080c7d262d8d2e5005f639211

    SHA512

    27f8375c9654d0a3b37e87e82792077f821361f7aa3282e81a198ec5dd354e4dee77bd60e5ec7e9e89569afbcb86038cd9b1196b8875183f7a5fda44f3fb1150

  • /data/user/0/com.virtualavionics.vcdu/shared_prefs/FLURRY_SHARED_PREFERENCES.xml

    Filesize

    204B

    MD5

    d13a1ff61dc4328993246f4933bd5e3d

    SHA1

    717865df1c458424d12779e3b2034b0228ef7043

    SHA256

    7260f7f9c806814db1dc3bcbb698c4c4fcc934bd700b8a5351e89f3839fbfd25

    SHA512

    f3a19371ef3ca2206665e12054afed841c7400f64bd1ce17e03e025988ebfcde60dab01180bb105155633052d4900ddf7a23e2217018687c93ae392bed2b9951

  • /data/user/0/com.virtualavionics.vcdu/shared_prefs/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml

    Filesize

    134B

    MD5

    77a2beec827a461d722738d1671f92e8

    SHA1

    795e01af13e0df658338755b56b136a940488c03

    SHA256

    db89d1d3ce40e6ab31ededd29d1b1e4ee8b10865b785f7955634c735a977bdcb

    SHA512

    b40fdb532f1a9992171c0c7f588e0f89fe9aacaa4804423bfb19792677127f122c3d24311d2352eb16db8d65f6e1ac3168617732b8f057e036f0542032e6d398

  • /data/user/0/com.virtualavionics.vcdu/shared_prefs/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml

    Filesize

    442B

    MD5

    224ff4fe27db3c9bf350ac4899c3e330

    SHA1

    d2ef1697907ee2728ebdb38b3252056b72002296

    SHA256

    b82a142fe13fed2dafba5e0062ab8f1b6f69e7fbda8fe6f0468bfc388b7ad1bf

    SHA512

    4e61d42c8f7bd779bb4fd81c22249bad4d429addee654dce19b1a257e7d8044dffe3bf78992e5ee82c13bda381d51533e098ba946cf45b29b658d1478f079778

  • /data/user/0/com.virtualavionics.vcdu/shared_prefs/com.virtualavionics.vcdu_preferences.xml

    Filesize

    129B

    MD5

    96a30795ce5a6db9541ae66b268bdda4

    SHA1

    65f4a73bbb0f31c5f307c1ca8dc1496c9c971a84

    SHA256

    cf9039b18e3f5942a60902e40fb5f2ac8bda70bb714d03395813eefd178657de

    SHA512

    a4ac6bad1243becbdb77b260403c98513bc39276237c77c4277d4b5781213e2bbcc17901c4a3974ab77a601579a7089bf36c951980e0070b70382bb6aba41022

  • /data/user/0/com.virtualavionics.vcdu/shared_prefs/sensorsdata.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03