Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2478694s -
max time network
129s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
-
submitted
20/12/2023, 06:23
General
-
Target
8b645ce2dadd4b594c552694fd85cd35acf622e53cb3bff9ca1870279da5f7e4.apk
-
Size
180KB
-
MD5
88304d543fc2b1274d7acab2a57b6877
-
SHA1
52d9571ee2d947c433d0495761ed21663e8d397f
-
SHA256
8b645ce2dadd4b594c552694fd85cd35acf622e53cb3bff9ca1870279da5f7e4
-
SHA512
8b4bd3cb14d5595ed6d9c9e6a2286b2bc34bb502949c8aa05f9eb1dfa6e3c0ab8e3fa0c7630aa05d410a94c4efaf06e7c775143e0c330e35cf6019d2f86743f4
-
SSDEEP
3072:P8vEukN4700pr75onSW9zUck0GmSlZTsIvRIEp9F6q5PQgy2LpATbKOW6FxYz:P8MLW70g75o/DIBF6SY51TbDH6
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 6 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.ontpxt.yjcawxgk1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ontpxt.yjcawxgk/files/cals103384376ses.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.ontpxt.yjcawxgk/files/oat/x86/cals103384376ses.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ontpxt.yjcawxgk/files/fl.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.ontpxt.yjcawxgk/files/oat/x86/fl.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
MD5cc9ed09f735a2da656d4c58bb5c9b20e
SHA1786a0d877fb408eaf548d05228d36f3867d87f3b
SHA2568397404a6ccc3ed39abfe8a7e5663f6976f07ff49eefa7c07984e009a03c36a3
SHA51244a2f51b741967236f6bb0be8d5453e968db83e139fb64620fa96a1168435d1fde50991b6579663da668e7e2d3f9678833f479f0d656e5b413be6f225069d1c0
-
Filesize
88KB
MD58432d226a036783a7450bba02e5ced18
SHA11ad853e77fdf2a1b1b4b31bb80ab72956a130973
SHA2565b057c70454805298433b7d778177d490ac3880b6d5888513d416bf28eae29de
SHA51201fc26dc447dc134dd9916f876076336d8827805a081f36f1e62abfb1de1e766aa85a67d28d3c7371ab38a2a6bc308a46eb382bb355dab0b3e7ffa6a74716613
-
Filesize
40KB
MD5d0cf43263c0a79fdc8bf600ea5eae93c
SHA1c5d4fb7c098a41706a4ed6f005506efe48c72c3a
SHA256c852799e5acd74c79dd8e68878ba60412ad82aff91564ad87ac611af0a621957
SHA512569d491d4704bdf321876e60955b91f615c268a52a2b17fe654e7fca30b03238705e1be6e372fd2387070a8ed6c3e50a54334def85fd37fe3312a25785356371
-
Filesize
88KB
MD5de5d2daabe949afb04307d0426029ea4
SHA1b0d9ff8237b185b4f18a26fa3afb7026c4b6ee94
SHA25655eb43594b26c09fde848bfc658f28fc4e5f2ab122984edb762183d5c067ffd6
SHA512ea71fa7e7b10f732d346d27cc9be40d991644ef1a5150fc5337076e342fec1081ef406e96ce852268dcf34230f87b471f6a565323f4bfbd42af685f69bc67923