Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2500877s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
20/12/2023, 07:11
Static task
static1
Behavioral task
behavioral1
Sample
8e752a5336a411eb4ffedca0a524a6ce12bb83dba8ee64a10c0396d4f6b8c61e.apk
Resource
android-x86-arm-20231215-en
General
-
Target
8e752a5336a411eb4ffedca0a524a6ce12bb83dba8ee64a10c0396d4f6b8c61e.apk
-
Size
6.5MB
-
MD5
99bf14fe35249b5f6f2e9e333cb1a38a
-
SHA1
e473f0e48820bc21b7dc115d2e1b06a1e0c90bf9
-
SHA256
8e752a5336a411eb4ffedca0a524a6ce12bb83dba8ee64a10c0396d4f6b8c61e
-
SHA512
8a2b96ff20870d79b1bf0c6e0c58e8946d82b215f0752152538466652d7da11c5d83daf00d2bb02d2a3fbf12128c4d26ceec32a71e2fac28b315b28afaa2b836
-
SSDEEP
196608:M/FLEolw0GwFusZLFW7nHpMQrjB12aNISbmt54a:QFYCwzwFn2MIT2B2ib
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.joniy.abc.yhzd/files/data.jar 4260 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.joniy.abc.yhzd/files/data.jar --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.joniy.abc.yhzd/files/oat/x86/data.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.joniy.abc.yhzd/files/data.jar 4203 com.joniy.abc.yhzd -
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.joniy.abc.yhzd
Processes
-
com.joniy.abc.yhzd1⤵
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:4203 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.joniy.abc.yhzd/files/data.jar --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.joniy.abc.yhzd/files/oat/x86/data.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4260
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
MD5ca2bcc7a502ebe854deae37d6952b481
SHA129d9cacf79b5eaea6db50402bdb19fd17454ad1f
SHA256b8c2639c6e290d8880b1ecc74cd61838439860efa104c9d68c578d8fa3da85d2
SHA5120a6b1cb290da5bfc7641cf4df4df4a6b332f0cfc9db45a8bfe36379c8dbfb06ed6267792ef397be193d601e472b8607f441035e9a05b85546b626b90346443f5
-
Filesize
512B
MD545f840092e6a94b2b1fb357fa32ad437
SHA10cf08b102c8cc4085bb5c14bd0b5587b395d3989
SHA2564c7f1afca2a1895969454d00602d2a83e1e3086a0cc1f3a33d86465623a3dac8
SHA51287f540126337add2ff66ec409c246680dc988653a77cf7e9b0ec25f993463fabebbfcaddd86826543fd8c3c94fda42dcee6390ef25d0940c5feafde93a599ac3
-
Filesize
44KB
MD5da91c7feb54a2e9776946f12eb3f1046
SHA12bee8713a2818a53e28ee23e5f72ea51664a4caf
SHA256539cf08f989a4b9a5a8ee1eac198a6931fb02d757e9ea5f95f9dceee26c1c011
SHA51223e3399042cce9bfa4b06201468836e7187877d0258af67be1522363a46e586c2e256b30de74485ab147b2b89946fd6443767f939c6fb08fbf46f48aaf4082b0
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5487709887bf0a5d443d4f870e2223027
SHA188d57e7b02eec128a0bb38825ed99122c66f29b8
SHA256ef08b0471416566bb3b2cc9b81f5e00b837456c25bce823d86f7cba6b34097ff
SHA51270acd658b8770eeb8bfe09e290182506addb781af15d38d9171a408102f505b46573b12594053418b64cc339bf30e48de48c8e0cf27179119a9467f2960a577f
-
Filesize
16KB
MD5581a286475ff3cd194b16937d37f1552
SHA19230a90d796b57e3c207eac035a0c8f94dad13d8
SHA2560fad0b51a2e43c7968e5eb62bea834c22bd76f7a1fe99b2f40f1cfc98dea4140
SHA512d79d874dcf6910d2738fdd0ec4a9dcc1d31ddc4a07385f1f48345b7828637531298505315a091320cf4191071ceb030c6bdb5e0c75ee4dbfad51b93745950b8e
-
Filesize
97KB
MD543aa6e671437df7e21ada10b9ca9c76e
SHA121603addc58ee1aacd36fc5a065a6c28d8348957
SHA256bfb16339a70adf336c93d4eff1854ce69ec2f23e8473743721bb83e6c2816bc4
SHA51242e9caa35a717e4522bc4f2c69db219762338d66ae68d3b413e1c369952e9d05e5651d9b7c52e13f4beccb597c909c4d71884ec8cdb36323094cbeada9cf05e6
-
Filesize
3B
MD5c6f057b86584942e415435ffb1fa93d4
SHA18aefb06c426e07a0a671a1e2488b4858d694a730
SHA2562ac9a6746aca543af8dff39894cfe8173afba21eb01c6fae33d52947222855ef
SHA512bdc247a1a0e28a586ed40744d281993d519abe981aaef33277d4877d167e1150816e9723d068a59509991ed0cdd8c5cea0f9ecd0ef23664db7cb85db5a0dbe12
-
Filesize
97KB
MD5b3318d0f9efefa37d789745f55ec3b6a
SHA162794c6e107c5d6bd248fd1c883a5ab02da2d7df
SHA25662e0bdbf50e5684c6ebf48c10491b662f1662d26c9594e852c34849bcaec856a
SHA512bbbb19ed4c7f427e1399c2d18a4e104812514feea1bbdcda927c593e9d9d987a72051e133c94fe4c3d15d24716299dae53f172eb32b02c79f0d3c885fe748f1d
-
Filesize
238KB
MD57b77931bfeb2f5c8b0337fbba9a8b528
SHA10e6906a326f3921beedd676f7f0bd7c3eabaf2c2
SHA25692b9752d6ae65eeb948653cf5f27ab83438b787d5601845974c976f492df21d0
SHA512c97a3e2063c68103a5298a1a5d8c740f6ec44b60e836092438fe6295964955d2c99d1e4a113d3dfab7eff2fb8c4caca09cca6ea516f0be20b02c57e51767c900
-
Filesize
238KB
MD51cc8518346734dd6224a76390abdcc47
SHA16b008b0bfaeb1f96b7e146cf90e6d5cdea251405
SHA256f57bd8ca4cd7c881b8c304dad6e2530613bb287296888f5ffe1bdd39ad1d4f1d
SHA5127c824d52c4ef673f437811315d2e2aab4fa9c84050a5814cba780eeca21ed2a82759e88d9bd36f9a402a53f64188ada8c78718d26919f14a8954624e9e939248
-
Filesize
89B
MD54cb3e4ad3b6aaefdda4f27267ae2c6ba
SHA1792ff40717003dc5caac4961b0e736dc9b841c8e
SHA25685acec5aa1097e5032c7a6d79ff97713f01902f35b2b92ade31c343f5dd1fca1
SHA512858cb61b5c8a81b072477f8eb78cea72c03ec316b0c544726f3e7a795107377be9c968f02bc5a4a8b2621878f230a3288f323a766cff256226cd5e21000ab3b3
-
Filesize
82B
MD554749b38c84f0fbf5b82a77ec4aaf36e
SHA18c6a1e41c0b7b9929e63e32ef8546f8d84d5d716
SHA2568a640e94702ca8f0889a56b7911fb6ee8ae727be0eaf72fc0541a57499202f68
SHA51211cb81e6f3fdf43b3de6b3c5db5c311093a6e5fc6e722c666a0b2c5c9d6b17ab9abae3c980dc2a0704db28842a72e7d6c4b4deb0010ce77bcae7dbd0bb2a5139
-
Filesize
79B
MD56b01cd6e0fb72b041f69b49be9e71428
SHA1e557faedfafbb1754703422cd48ee96cb7129cf5
SHA256eef5a313217aa79c507f6693f70887d23fb5995ce81e96e7b522e53e144e3045
SHA51246ecf9387250c9ab8d6348408028efb4f2ae2028e437f9da7b237a2ddb630f86ae7bc0743578fce4d9011511c0941645d39339140d05418b3aaacf9cd43f8f6c