Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2611998s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 17:54

General

  • Target

    5d92077a1727c65bdf37d55ca3b2d450c516a70b8fd1e5f3f319d233ed211987.apk

  • Size

    25.4MB

  • MD5

    135aa22fbb1b800e729aaaa4232ebff0

  • SHA1

    ac450e877a19ff47aa08f4879c762266c4b343e6

  • SHA256

    5d92077a1727c65bdf37d55ca3b2d450c516a70b8fd1e5f3f319d233ed211987

  • SHA512

    9bc8183181fa2a18e54fd8662385a5f341719e9b5ad170405ca87c561ae2864422fdcc609bf1b80104da1995f9d9deae8656ddd2bbf5ab622f34150a8ec1a8f5

  • SSDEEP

    786432:27SF/ClJLvALBycG5W354co2vXEHUgZa3BW:2WF/kLwmALvX93BW

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • air.getout
    1⤵
    • Loads dropped Dex/Jar
    PID:4252
    • getprop ro.board.platform
      2⤵
        PID:4285
      • getprop ro.mediatek.platform
        2⤵
          PID:4306
        • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/air.getout/files/stares/updates/sta.jar --output-vdex-fd=53 --oat-fd=55 --oat-location=/data/user/0/air.getout/files/stares/updates/oat/x86/sta.odex --compiler-filter=quicken --class-loader-context=&
          2⤵
          • Loads dropped Dex/Jar
          PID:4335

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/air.getout/files/stares/updates/sta.jar

        Filesize

        47KB

        MD5

        dec4f9a25f472b8db9971a37625af0ac

        SHA1

        22e0a6a6f201836bd83bfdf42836eb83ffe4c66e

        SHA256

        ad316b8184b9c676d7066e0585eee564a40392aba80d8d1112b438324790fe6a

        SHA512

        a515f7787f4e4d95941431e6d2a3dd9a06a3ee1fab42fd30c969d62a7f52762d4b0cc35d250f324869c0708e7f172f2c3e20d4e6642c555ea55b1fa9326579b1

      • /data/user/0/air.getout/files/stares/updates/sta.jar

        Filesize

        3.4MB

        MD5

        1da64b72a14359306aaeb18eaa008b37

        SHA1

        17633fe891ab9cf9c389553682a237340c43ab24

        SHA256

        a4bcac9aca7980f004fed85e2acab37b0ceefb85838fbe0e99c2e385421f3edb

        SHA512

        6a044eed4bdd6610c9d8be365d30f7cba0d55a437cf310e0ceffe47f23b10391d891e852e08c7a9b5871e7cb5798ea98ada35b5a3b528d125979926fbc64643c

      • /data/user/0/air.getout/files/stares/updates/sta.jar

        Filesize

        3.4MB

        MD5

        209b7bb34757e67e872b45e8876eefaf

        SHA1

        311f6fe57d290494ca8cb142f82793ad88ad467e

        SHA256

        823daf16a687590a35df3cefffc28f1596fa90ebec1d8841523efa0244e0332e

        SHA512

        73d1d989426dc4aa3c7e04a83afd19100f69aa331401190a69cca6cc069151058bb50290e7db8d9865901d387449fb079e790545eebf4afb2f876ea309ea2ed0