Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
11/12/2023, 11:24
231211-nhpltsdcam 711/12/2023, 10:18
231211-mb7ndsbhfp 708/12/2023, 21:22
231208-z76r7aedd2 7Analysis
-
max time kernel
1484690s -
max time network
1805s -
platform
android_x86 -
resource
android-x86-arm-20231023-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system -
submitted
11/12/2023, 10:18
Static task
static1
Behavioral task
behavioral1
Sample
you-tube.apk
Resource
android-x86-arm-20231023-en
Behavioral task
behavioral2
Sample
you-tube.apk
Resource
android-x64-20231023.1-en
General
-
Target
you-tube.apk
-
Size
19.0MB
-
MD5
51b9845b4f63d3b70a67580017720ec7
-
SHA1
6d93642bcbd4f29e915dca06ca52124a084ea61b
-
SHA256
c50bcd4191a62a7dc7502c8ba07d9d55df49c14e37d1c599192552469c471433
-
SHA512
4789abcea248d0993f016300b0626d0aded12b9a5449feae30ddb66b3cf711978d75954bb3e4fc4a3f80abbdde4826befa6f37e99faba02ea0f65a1501901d41
-
SSDEEP
393216:oXNNdcrT8FMpWCU99Etf+gP5LDrqkriU0S57HQRc1l:6NNarT8FMpC99ENDP5LDrqkriUL57HQo
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.drama.tvbox.documentary.amovie.ymusi/cache/1689111357674.jar 4459 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.drama.tvbox.documentary.amovie.ymusi/cache/1689111357674.jar --output-vdex-fd=161 --oat-fd=162 --oat-location=/data/user/0/com.drama.tvbox.documentary.amovie.ymusi/cache/oat/x86/1689111357674.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.drama.tvbox.documentary.amovie.ymusi/cache/1689111357674.jar 4266 com.drama.tvbox.documentary.amovie.ymusi -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.drama.tvbox.documentary.amovie.ymusi
Processes
-
com.drama.tvbox.documentary.amovie.ymusi1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4266 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.drama.tvbox.documentary.amovie.ymusi/cache/1689111357674.jar --output-vdex-fd=161 --oat-fd=162 --oat-location=/data/user/0/com.drama.tvbox.documentary.amovie.ymusi/cache/oat/x86/1689111357674.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4459
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD5189d24556179c74f72678b58e01308c1
SHA1d4ed4dc1b0fb6741c6c9434348b159dbea92e0b4
SHA256236eb17c5c14261b62630ebdc5830f4a97d3cf0dbc7bd1de98dfd17d55474353
SHA51227dc7bd75c982173c58d3a02e793616dd6364bbc3d593d1453c5c1cb5dc0ef560b5931a7736ae12c69486fb170ee723bf124747d1b2727a4026281dccbdae9e2
-
Filesize
512B
MD53a10e9cbba0e659742f6e46ca1685553
SHA1d2bec97800dcf53ff58614af5b71ad852cb1f4ad
SHA2562a1ce128475a8e345b1b496b8c249b95dc2042c10429f3d0a95d557491a93dc1
SHA5122a755ba56da76627f037b270264dcfcae25a736a3edc4f20e2f6fc73f628bec51607f831b1b88666b12bde8f9a8f7525015b2ae71beee5af903c8c688a14428c
-
Filesize
16KB
MD52ae2c248d477482dfaf14a361685a045
SHA19e78b998344080bd273faf52d6e700bd891bba55
SHA256c5ebe70028b61780657f109c9d6ed69f5ccd78b11dfc3ebe78c167aa1ed2f010
SHA5125a9d5f6cafed510ba53610dc50ce18720c4c7a7dfeb7dda2f6005e24d4613cd1a93d40eb1a0eadb3f7b418df73e4371a6187f34e4a2a891c2c6c2685c4e82d9d
-
Filesize
112KB
MD556ddf4816a7677ff3823724498e4672e
SHA14d656be840ebfe94881371c8d9db27de3f377e6c
SHA256ae73479356fdc10bad611095b16d0e603f7fde036aa2c00e492ee3796dc5e2c6
SHA512520b180a256456750937dd941b056fd5cee5aeebd626763bc966a286653a0459bd63b8489264959746a0a1aab968c7d7f8a25e650b9df34a47b5a47910b8fff4
-
Filesize
24B
MD554fcce34dcb0a4ed2f70e2501aa8139f
SHA1158a48948eb6de7a68f720f95a87d26ad44e1ad9
SHA256980012a6c22d57e77bfbb8c30dc0f27c052aab5945799b883c314fdf328cbf95
SHA512c05a5e3328cb7a49800c0608fa4ac54cfc122422d1c65b0c84b46e77f2a2c71c7d879b2a77289bf24b371384e86933b43ed75503d28508ce93ce6cd38d9656f7
-
/data/data/com.drama.tvbox.documentary.amovie.ymusi/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Filesize8B
MD5ca1c698480cc113c708f26844a8faf51
SHA15ca1b52d02c91acafb374812122b24dd874e3b0f
SHA2561b07dcef85d49751c779c2f64a9911bb2010b4a5ae6e7f21eb473b69b50f05e1
SHA5124360cd4a1cd5d79ce42bf2b596f125eee9ad33970604215aee743ecfe4d85e2a47e7f1282db10b34a1ad1133a6beb58cabd4ce90f2d4ee2df0875cfe1201f367
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5a9ec2d785543fa55feb1160e0cac016d
SHA152dc223487b744e5345876da903a106447004dac
SHA2567049d6b565650e54300f378944f3f9ea40aafdbe891e9fe4e81dd874fa98aaef
SHA512dbf19e44c514cd37159e888297e7fbd091672c89650a45e82306ebf2081de86091171d58b94893bf2e4516afdb390353ca6add9fb9e613d728f11bce8b8f0115
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD50e1f75d7ad5119fe6af3831a08629345
SHA15c447873a01045bfee494dea51f57c09bbd6b4cf
SHA256a4f4e93b778ea9ed62e48ca0206e18ec0ad696369c0441b897d6be37ad83d8d6
SHA512b6404104d2960be04c67c4caa69e246aebe3746fca80cae4916de08f9d84cd8d625e1021bf25888072925798143b7d215f48e7022270e7a1e17283aaced869a9
-
Filesize
185KB
MD5866b973ba767885997f54e575444acaf
SHA1f435036d372d4d5193e309a53dec65439542647a
SHA256882b22958b74ffbdfae3c7b66b75f8717795d193c60c4fc7ec7b7a297b1cfab2
SHA512789c19f88693accbf3151e17ec6554c64cebf73f17f75283811fdfd7004040b052bfee76295d13477ecce5f6695bba533bd235b1f1acce1a4792ae96315c2d25
-
Filesize
2KB
MD5335d8a7569a611cf4e6fd8bf0e2ed755
SHA15aa25b6a0dc776d751d51b54f8c577d78dbe2cce
SHA256c397b5ffa87e347553324226c24ff03a93b5520384fed8ef771d82935fbce833
SHA512def9d3239acbe5f09c623755992bdd0622f0bcbe0f70e9a0065abcdb06d5948cea6b5e6ea31c38835f299c8633ef07a9ce03868f62a535e4e88439b67f4b3e51
-
Filesize
11KB
MD5337e0f5842600c5d8ad785c6b1866ed5
SHA11326490414107c915bf276e1cb062f0cf33be79e
SHA256840af47218ed964e71895df8c33510c5d1b7581a1be198f5f70e1dff5db4ab25
SHA5121b4810c42b4599a42fb6c7d80813720814dcf09ec299f32f65eebe45763bcd1ad1618380120dc0e68c374960c8ff695bc44902e42bfcc0b964d8220c06472947
-
Filesize
22KB
MD51ae022c13ce3d4bd976b4e9021315118
SHA10c8817d14a05d9940402800a3384bd7f8cdff9e6
SHA256fdf2b35466c0b803f767da4cb62568688e846aad81a6bf3560197bd47f77a5f3
SHA512aa395e134d5337c7b1b589dcb371121ed4a7accb8c0a9bd732a882dddaabcc48c36e3a7d743e1e058c870476df467cd3c378a7380cea8667b4edeb8cfd8ec0bc
-
Filesize
22KB
MD52800ad09ca14a7a986a6e8becbbbb158
SHA1cff8d824d09296149af1f7f7ad12ebb701f4b8c5
SHA2565b3ace2783fb2b21f30cd4e20a8645e6bd6d59347c44cbfd11141b0d9afcb33e
SHA512c315532db47e93c406308f997b1f81876dc4394838b64f93b3afce0748f1cd1c5b5e490856e5c7be0fc7aef063c0f4dcef73de0cc1a712eebc4f80a443cea7d3