Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2326514s -
max time network
159s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
20/12/2023, 01:37
Static task
static1
Behavioral task
behavioral1
Sample
7983b8621a6ee1e41266c138a379760bf21777c522ba18dd3565ff38f1f9814a.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7983b8621a6ee1e41266c138a379760bf21777c522ba18dd3565ff38f1f9814a.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
7983b8621a6ee1e41266c138a379760bf21777c522ba18dd3565ff38f1f9814a.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
7983b8621a6ee1e41266c138a379760bf21777c522ba18dd3565ff38f1f9814a.apk
-
Size
2.5MB
-
MD5
4758340d4d7f41d05c348ec7c6958918
-
SHA1
c64d3426a80a7b15f4580afd1686a8102b77ee92
-
SHA256
7983b8621a6ee1e41266c138a379760bf21777c522ba18dd3565ff38f1f9814a
-
SHA512
1afed35fc1c06c01f4cb56e81d5f9ee50e4d56075064a8eaca0b85e10b022ecc7c36858cafe7857510d0d2573f96f297ad4133088fc7740295184b64b1b48438
-
SSDEEP
49152:YcK6WF9djT40+9gFaLauk7MISZSWpfvC+VKmBbXett1rFP+EdX3evtEjD:LK6WnRN++uaukFzWpnCsKU6D1rhBevt6
Malware Config
Extracted
cerberus
http://ffvarsesver.co.vu/
Signatures
-
Makes use of the framework's Accessibility service 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.sadness.fashion Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText com.sadness.fashion Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.sadness.fashion -
pid Process 5051 com.sadness.fashion -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.sadness.fashion/app_DynamicOptDex/dHq.json 5051 com.sadness.fashion /data/user/0/com.sadness.fashion/app_DynamicOptDex/dHq.json 5051 com.sadness.fashion -
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.sadness.fashion
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
785KB
MD5cf1a5522cd7812c033d385796a597f91
SHA1ba341620b4b4e130b53d7dfc495620e8b044fd30
SHA2562b039052b7dd5f81fa0446181e8db7779ad847ee675fe932e58d9caf9a414c8e
SHA51269e1a250433a2c11a1a249a94302e73345b4c7abd7a209982907f38a80e1af5d032a99aecf20e6a4db2edac7c82e0903ab2fca7be7bb5a72cf619e4a8f205a2e
-
Filesize
785KB
MD5e496a7fbb9e529c7cf472ada790f89a3
SHA16bc848c8832b0ae18cf915cd8ecd99a442e72d9b
SHA256192646dc415e9b2322f95e940da44abb218b61eafa5f08e39ab7b78b104d307a
SHA512cc29602537358eff4de24a8381cab4c0f096859f256a97eac51d0bd99639b571390375416f3f64006ef89d6c11c63ac0ad9676a3398ac49cdedb6601090fa11f
-
Filesize
591B
MD5d547739eccfa556af1e4faff1acbcbdd
SHA1cdc19ee7beea47ba2a466545df1c79bcdca018c7
SHA2564529bfe326589bfa550115c9d5e82b4a7b7f4850b2a713d9082850866aefa569
SHA51209562bc55d3c9f96defb8d7e5c6a5703d9208eefc823def2b22c07b61312d08c7af3fe6a31f1246db9db87782e30e1ce0730e5485bf0084d4b590f4d6dcc4594