Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
21/05/2023, 03:08
230521-dncjcaae9w 721/05/2023, 03:01
230521-dh7sasfh78 721/05/2023, 02:58
230521-dghf1sae7t 7Analysis
-
max time kernel
1010832s -
max time network
54s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
21/05/2023, 02:58
Static task
static1
Behavioral task
behavioral1
Sample
Lord Drakkon.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
Lord Drakkon.apk
Resource
android-x64-20220823-en
General
-
Target
Lord Drakkon.apk
-
Size
15.1MB
-
MD5
4c6b2de75c5907db622c61c7cab3bfbb
-
SHA1
224248abb97e3075080639cc8c895133e227eb96
-
SHA256
66f445fd69f435b8b0f6b27e59ffeaf98c7f1f85e7aa4e2a9ddcaf603dee9182
-
SHA512
5cbabacac91e99d5528812235b975bc915da20cbc40e4066043d0a1d094add552612571a0566d070f0b68d726cbb293a91e2815fcab50c4ac81eef72f864b515
-
SSDEEP
393216:kJ/ytEXJfVJ0gaBqWRcKLboXAC4rVc3TOUviA:a/ZZfQInKLbpC4rVcjOUvF
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 6 IoCs
description ioc Process Accessed system property key: ro.product.model lord.drakkon.tokusatsu Accessed system property key: ro.product.name lord.drakkon.tokusatsu Accessed system property key: ro.bootloader lord.drakkon.tokusatsu Accessed system property key: ro.bootmode lord.drakkon.tokusatsu Accessed system property key: ro.hardware lord.drakkon.tokusatsu Accessed system property key: ro.product.device lord.drakkon.tokusatsu -
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud lord.drakkon.tokusatsu /dev/qemu_pipe lord.drakkon.tokusatsu -
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /product/framework/com.google.android.maps.jar 4974 lord.drakkon.tokusatsu /product/framework/com.google.android.maps.jar 4974 lord.drakkon.tokusatsu /data/user/0/lord.drakkon.tokusatsu/files/audience_network.dex 4974 lord.drakkon.tokusatsu /data/user/0/lord.drakkon.tokusatsu/files/audience_network.dex 4974 lord.drakkon.tokusatsu
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
112KB
MD5b663831f8cc130493476d94f2d7a5330
SHA1043a1956ab8e40821d67043f8a9110a8eb36fb93
SHA256c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
SHA512e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
-
Filesize
1KB
MD50dc9eb0a8d50ad09f6740b83255cb086
SHA1e66c6a1a4bea2996efab733f528778580d188fe1
SHA256b485c7904c16d1c1690c35b9fe5e96739a41c3e06c2b31a888eb328498ed9828
SHA512b587cd8f54a0f6c797484979047a161280f6f818ad1b339a342e04d2e0d6d518547a32690f220c92f48021846c584afa4bfcccbbc7f13eb8fba29196e3bd0422
-
Filesize
36B
MD5e32b03aa8f6c7cc8179acd9eaa4b06c4
SHA14ae5067fa33facc67c4af7ffcc342a93a0ade04c
SHA2562a486df220eb48412a67f20aa5e8553e4cebe59919a985b395e094cd9a815cea
SHA5120ff590595c415f84f0128b29f57a3f2410bbe9226a776eb7cdec36fe83d629f735550e6c8fc4acfebc7c8a1bdec04541d2d8340936586bd50f79f44954f87fce
-
Filesize
40B
MD558a23a670957b790772170cc7a786eb0
SHA1ec21afb6871545327fdd26012982ff80e434dae0
SHA2568db1977e92102d17ae2506a5763b39dbb1d5c3c70e186d9b3ff87cde815c3669
SHA512c427c26a770cafcfbe95dc08587f0b0cc00e19f49c9c843c730f1d3765a20e2ff725770bc83e38022a5105bb720358ec9347ebfbcbfd896fa91a11bf64a039a8
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/lord.drakkon.tokusatsu/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
Filesize96B
MD553e50fec42a255f96a36dc5471132d9b
SHA1e34880425777a2e14a7902e513eb9e7ab0a98262
SHA256bf0a2b0d2e1f30ebcab8ae767489a65d9f9663286bcfcaf928299f2e85d93d70
SHA512410e1910b7677f60c015c8559fe9e1375593cb151637581e9bad2e42d92603838f4e540869fa729fee91c810a5bdfec4cc1ec9466484f51412a4a20574c134e0
-
Filesize
80KB
MD5d95d43f7a9a41e94e8c0b35c4eec43f8
SHA1f223d657a1c0b665facb3dcf8986bd8de4941a67
SHA2566b8c8dd173d3d4352ee38c27524471c05de6d266d9b7f4027a34998e606d0d4f
SHA512d382b5cd6a43a1296e7d3fcee2c2c5f4df3d512fc768c663cef379288bb989990563a6cad466a648e069e2edeaf53175daa22e2cd944c101d52bee77b96f4da9
-
Filesize
1KB
MD570f65db0c144614bc04289a52c209b64
SHA162806bbae50fb0cb1265555f0e7968b1e9e255ca
SHA25624a2e03ffc4244d0e3fcb4fc230093b2704b7c2c2241bbed0972d2bae985d469
SHA5120c1889da971f270cb11650008c07503e28827a53bb859dee23a16329e82bd5a757394bd21b7303fa6b5d448001b67b8fc2ee5734de0ab2fec4791f1dc30fcfe3
-
Filesize
88KB
MD5b7baab36e7c446bba2ed37b9cfaae780
SHA1b83cf883b8ff0cd7909ac7ca11938e0e522d31ab
SHA2568aa364c8c2a87b1020771d8a63121f10d50194da15b407369887c8e528736720
SHA512c9f66ac05e3180407070aac852502ef07dfd74c192157cb37b577ea1645a07fc3fe51532890edd86afb46c3029cfab47453f65d8805dfc313ef0787c225253b9
-
Filesize
1KB
MD598e6a683aae179ca470a65902336ed45
SHA1068dd21c1df979becf04e96ac5ef032487a2e271
SHA256a60304df4a70cb1daf439e46b32ddc00a5a82c85678c37bb81aac8dbc296b390
SHA512a1baf89bf87de3e4d100be9c6cf327798d72d670b7e52aaf34f0762c8c80f1b685bf964f96e9f9bfc118a6ae11e90ef62e8c0a53a0dd0c129d14abc7408006fa
-
Filesize
88KB
MD57bd7e08b7c157fb7a04f9701b6965b65
SHA119ed78cffffd879509071b091ba60776c18e8d97
SHA256c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc
SHA512a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb
-
Filesize
1KB
MD5a8ae49087684a02c225e08b233ccbc90
SHA1843b0329b0271be03df177aa429fa7be7eb01401
SHA25685510e3cb889014b58ba4329939bad14045b33b3a85f4acfe5f29b6c0185b953
SHA512299676716d2fadb0fe48d7483e925ca84b18ccc446eb2788839b7b9d0bba45733c7c3cf5e26de300d4795f4cd84ea77bea8de042f03fa066edc8924d1917578d
-
Filesize
3.2MB
MD5692c6b1b89702297c59bd34c4bd1fa53
SHA1f38cac946f03d7e869018acbdfe0ed272e11b106
SHA256920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75
SHA512927048402fb314ef2624776b27317a6f996ea6b3d697d66b8b213d5be9559f24ae0dca8d2f8a9350d32310b8cab071933936640641d297ba522b3af60424df63
-
Filesize
3.2MB
MD5692c6b1b89702297c59bd34c4bd1fa53
SHA1f38cac946f03d7e869018acbdfe0ed272e11b106
SHA256920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75
SHA512927048402fb314ef2624776b27317a6f996ea6b3d697d66b8b213d5be9559f24ae0dca8d2f8a9350d32310b8cab071933936640641d297ba522b3af60424df63
-
Filesize
3.2MB
MD5692c6b1b89702297c59bd34c4bd1fa53
SHA1f38cac946f03d7e869018acbdfe0ed272e11b106
SHA256920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75
SHA512927048402fb314ef2624776b27317a6f996ea6b3d697d66b8b213d5be9559f24ae0dca8d2f8a9350d32310b8cab071933936640641d297ba522b3af60424df63
-
Filesize
240KB
MD50c76129125f47eb0c33023d8c26e6695
SHA1456a24055b05b6eb164790c7640cf5f325846612
SHA25653f18509abbd8b5231c4f07c066a956ac9110b72d37ac4798c8f39a291610caf
SHA51240215f5a6d6b0345d04a6bbe227bcb3b482ace52448ca52d73ee53d1ef043d181aa28113f58ac7bf6add38dd45deea6a7672c8dde2f6f705da7a43ceee747084
-
Filesize
450KB
MD59e4ec8196d79b91ce08963cfb13551e6
SHA13d248e6c7b17bac4a873efb24a5a637e1923c782
SHA256486435e38c4dcf5c2e82aee9459f4529a40c633c211c089ac5b359e2d0ae6c9c
SHA512c5eab0b9c80e465b4467ba8682abdcd374efbe2ab9d02070f7ddedd0759d9e60adc68f3aa4cf1bb65c1dd4965a76f0ffbc5697c9b0946cc5f9e254a0c35dacfb
-
Filesize
153B
MD565026ee778e1372d9f4aed742772e893
SHA15a5f1c821d7639424f3c75a44468ab5f7dd4e8cc
SHA25615070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
SHA512589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616
-
Filesize
68KB
MD5eaa8820f6ef42535b78359a1dcdae919
SHA1250beb7a24c577e2a56eb3e2a913633b1139f137
SHA256c2fe0b057c65b5d7514b351e6de0ffc82b9014d4275dbe2f9c351ac4c2e3819c
SHA51244012196a88784675a2d1ed697f9b5cdf17b23b0886552a2a2bc3dd7fc44be891005603ef0011863afceb5cf878c016314643cff0af9033a4083221c785bb6e7
-
Filesize
239KB
MD5c6dcf0d047f75e705ec45c878d4aa787
SHA1b6f9f3c2c03ec9d62564f5500be23937ec7c9ee5
SHA256101f88919bdb7108830f476795fec60ba8e52b96ef12bd32f2b4068f6fffbfdd
SHA5127b0f9434ec3311e68a83fead2ab27be41cd57d4fceb2964301e3638e518fab7335fb3a3c7f3267512187f58649059e4b9e88adf736314170e1126151ff3d3d89
-
Filesize
19B
MD588c27e77eec8382404f182886236ea7e
SHA1596795c0e16c3245073f49d2c569070ca1468589
SHA256c442c56f4bd4e33a84cebab0a8fcdec671f23136de61040b548e3197ec039634
SHA512223e3a488d4f2481401becd9ede041ec0b3a5aa2d61b567947b18cf5913d7e42ec3ec63b3f73686ae0b8f73bea433a2ecab1b5490c934b2dafeea32c5695f13e
-
Filesize
8KB
MD5b6ca8b30661a7844ed292db75a29a953
SHA18e0d397ab1f2ced1f143829084c3f53333743bdd
SHA25663a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb
SHA512d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb
-
Filesize
1KB
MD5f62355a5392c618253c23d7b92b89857
SHA1ba23fb4b43da8abe367058bbae47f15af5ffa25d
SHA25655fc650209b88296c1674a28d13037168cce21c006de5d718cc288350eec6d2c
SHA51286ee6bd384306136da485c9cec55db2b4e3511bcbd750ece609fd28ecb73837e4ced74854a7eb05106c7f3f0c4cbc200145ab73d872b9228570f64b5870b0929
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
217KB
MD553c464176f5cc3a4c3cae69fa721052d
SHA1a69cf92cbff3ce84cb2fb19a38ea289360b9a078
SHA256c89ee13fcc4f7c149cb2f478505fc89cd39f7cabf20171a9ec013232c84ab208
SHA51201e37c3e5809c6cf43c80ccd68fb8aecef7c66a0b9cc06205fdbd5dc54c98ce3c559943928afeb99d56ab5b3fb8e0d858b69d51cc5f5f276c1a8307bb528bbb1
-
Filesize
127B
MD56ef709b8536878951e87c29a1518fc2b
SHA124376c70b00152501b3d98df61fa7db435339172
SHA25610b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
SHA51296547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9
-
Filesize
146B
MD5838738c33eddd01dfbdec932986ac716
SHA1f74383a590d57eabc17a5d30c23ead338cf75881
SHA2568496ea22d4405396e521360da0b39ab63530f012fa4706ae08901a89554fde1a
SHA5120b89f8f6324d13b39c9cdfd0166bd3b8c18e75a387a38210ebc474b983bf05c5644cb7e9e9bbda2bb3c2d223352bd743d60c72ad26b9ef3511ac217bdaef7f61
-
Filesize
160B
MD53e215096666a6621c678a11c08fdc8ea
SHA1701446bbc0528075d7825e62c3481f3d7601946f
SHA25697a8a877166b16aa61c4831cf3b88949ef535502b583a442215dcc2a58d74eed
SHA512a717e8c92d449c4475005b65a37cf2a1318577e48ac45867be73abeb5b01d862f790046e00fc58af72d7198c7e8d040260ee9ad859f0a3047bd8033bdc7d6239
-
Filesize
2KB
MD57e57fc7924866f0d9f97c4e90e2c5c4f
SHA18e19e8787a34c6f58314cfecb4983908f4be76d9
SHA256566b1ab3a0ffe79be58e6e2c9c3dc88bb0d13bd82bf91765a0be650e7e994b4c
SHA51298cd3e5a8f6d780576eed4905cde590bb57ca5150acde630e69f6ffcb04182b760cb5f5b3bc6ca43052fc7165ec51be0f6abcb848d1ab677ab25c388c4dd4c59
-
Filesize
2KB
MD5185267c0466eb19f0e334f6567203a9b
SHA194692521b10fe64d98fae556c1df22ddbc111eea
SHA2567267cbf2cb69c70605407e8aa3571641cb2e7279d055425cbc887a5f5e011a69
SHA51216df1b61a8606e94aae21320077a62fdb8c79c8a7edcc3c8d4f656bd785e7083a5392c4a6a66113de93850077b6a05876b5e178fa5017c6573c746fcbd78ecad
-
Filesize
259B
MD5c806bf2073ac019df65eac251076d51b
SHA185cbd584231bf14fa1887c25ecbf335d2a6f5dd1
SHA256974467995a2863cfe8a1c81b3b1443f07d03fcc534a5e61178c05e882fd3c8a6
SHA5125598e4acd685e1c2806bade047f666394482ba3deaa54e4d777af4ad4b144e6bf8e566479a75d49a8ef49a24623101bc4228d3d42f8f2d87a35ca7386b338063
-
Filesize
389B
MD55f8e63e8c3156f836563021ad3426431
SHA158f2ec5f0bfb2b720d665b857ff393675ca46ce3
SHA25699e9953d17d25179ffa23a0c07e5a1b9f49d7d2d53ba81e4f6c2c6189b585fb0
SHA5124f2a8c1e709847805f8be39baec333edc1481a258e22312ac28417b39816e1d8fbc6ee3744cb5bb832c3f47ff5395088ae3e8689bd5f9f9119813ad281e766bd
-
Filesize
488B
MD5d1bfe54f6faca83845fd2047b70d30f2
SHA1293157b6fd4ab1873a127bd929f1926d804481d7
SHA2562a00bca17a6a050b30a0caafba881aff0691f588c2cfa9e94d90252aee8fa91d
SHA5123a817d5e9e94b5c01a03f5a4b512bf4ed49ef2441e8965b6788cd9d4c6657de32c81ac77997194a1a73458acdc2a3430d6b0a99f08a8caf0b5240b4a6589d54f
-
Filesize
542B
MD5e61f4e2c0f19bc7f59ec85546953c37d
SHA1f71dfa22fd3a4da8e114ef499b4df7fa2ade2187
SHA2566f55515fb18465b37f560dd57ba676723b6389787e302fa753b35189c7d38612
SHA512955c8fe591c76046e38f4e4a49c34cbfcc18a10670a57e480d5910271b78d7fd69464caea7c872a9877be1f8cc055b32edcb5105befbacea2565802e7859731e
-
Filesize
600B
MD5485634ea89efbe2cb2ee63c758da4c92
SHA12e6da75ea776d64140e69a47387fe0fce2acbb67
SHA256c11c564caee9a587098c7f928db2b6e72f08f5e7b826aac611d0fe7996a2c536
SHA512e8d1eda2f7328861a3bb50192c6cb9dd561792921657c06464544ddf5b68a3abfeaecc7f9e5ca9f5282557a9f5b5dc96f7e3688d4215da52e980431e6998a301
-
Filesize
601B
MD52a13fc021ded7981b73c07a0a4e3c2fc
SHA17b3fcfe12d47dadd0ae063802e8608af680ff929
SHA256c69a286dc72fc74caf42178c2bda91fba373559f22977aa6a7ec086265a04a7c
SHA512de16b644fd52b73e9a9bddae8505c7c7448fa7c392c5e31cf54cb77cdfea99d1d61c0cc292f871258b6905eb192d3a7c60c62590ea23e0b0ed6cb7062822f2a0
-
Filesize
659B
MD5727865e8aafd3157d5a30803aa8ec2fb
SHA1bfa8a581aa7a7e977bf213b0ef55a869555babb4
SHA2563cc295e6c6b32241338419a7856ad46287d44166f779bcf2043871885596e9b5
SHA512f8d2b02f5542743d02faccf0b11655b81806596da7e1de1f091ff0741d0031cc5e4fe4f41e45d7bc5ea5f35edc493ecf5130a7e78369f5c62fe8c410163ba85e
-
Filesize
713B
MD57a950f6c9050417c523e0f3711bad63b
SHA1fe0d2685b8db3a95e6c2cb96eff5a534e3ea99e6
SHA25628b9b934522ed377db3a1754234775d10f41b4070f9de50e0be89383927c5336
SHA5124eca0cf807b36c223f02cfda9a8bb13c2d4d65c26dde8951ef125222e911e944ce7cacc703b50b93103a35027b9d43e76fa49be8189bf93b990d6ea7bf765389
-
Filesize
790B
MD5926ab9b2158c11b74b132b801c26294a
SHA109843d0527daefa04842ecb0d057e80e5796b73b
SHA256d72db8f42d50518c4f1730d84d708a1d97c86540ecf442e61bf014ed2c3b64b9
SHA5126606a4c306ceb30d3b848a7d1cb3be7571430518520155787127201d750ce0a74544fc8224768c1b01b602920b0360f2f6cc381b5f496bc276d154ea640fb460
-
Filesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
Filesize
149B
MD5f9be71632a237e00c539a51d857ef391
SHA13d8a116a1ac1ce9fba25b74625b14eca175c376b
SHA256196dfc6393290a2f416a253e68cb723dafb1ad49e3ca9248e048754e6908586c
SHA512b468a855e2e0ebe0aadda059a7d1f9173642fbddacf97bcd9e9954b3df951d6d7fddae12a6be4ebbde6924f7946d8b3ff60bbf3b431c1c95f417a1ba0f5c94e5
-
Filesize
315KB
MD54899aca36d1ed747a447dcac0d101a62
SHA132e43edc0bf3e036683ea8639472e6cd31ab9929
SHA25667a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f
SHA51250b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f
-
Filesize
315KB
MD54899aca36d1ed747a447dcac0d101a62
SHA132e43edc0bf3e036683ea8639472e6cd31ab9929
SHA25667a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f
SHA51250b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f