Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
65d92077a17...87.apk
android-9-x86
7bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
muzhiwanapp.apk
android-9-x86
7muzhiwanapp.apk
android-13-x64
6mzw_d.apk
android-9-x86
mzw_g.apk
android-9-x86
mzw_g.apk
android-10-x64
mzw_g.apk
android-11-x64
stasdk_core.apk
android-9-x86
8stasdk_core.apk
android-11-x64
8bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
Analysis
-
max time kernel
2611998s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 17:54
Static task
static1
Behavioral task
behavioral1
Sample
5d92077a1727c65bdf37d55ca3b2d450c516a70b8fd1e5f3f319d233ed211987.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
bdxadsdk.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
bdxadsdk.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral5
Sample
muzhiwanapp.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral6
Sample
muzhiwanapp.apk
Resource
android-33-x64-arm64-20231215-en
Behavioral task
behavioral7
Sample
mzw_d.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral8
Sample
mzw_g.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral9
Sample
mzw_g.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral10
Sample
mzw_g.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral11
Sample
stasdk_core.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral12
Sample
stasdk_core.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral13
Sample
bdxadsdk.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral14
Sample
bdxadsdk.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral15
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral16
Sample
gdtadv2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral17
Sample
gdtadv2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral18
Sample
gdtadv2.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
5d92077a1727c65bdf37d55ca3b2d450c516a70b8fd1e5f3f319d233ed211987.apk
-
Size
25.4MB
-
MD5
135aa22fbb1b800e729aaaa4232ebff0
-
SHA1
ac450e877a19ff47aa08f4879c762266c4b343e6
-
SHA256
5d92077a1727c65bdf37d55ca3b2d450c516a70b8fd1e5f3f319d233ed211987
-
SHA512
9bc8183181fa2a18e54fd8662385a5f341719e9b5ad170405ca87c561ae2864422fdcc609bf1b80104da1995f9d9deae8656ddd2bbf5ab622f34150a8ec1a8f5
-
SSDEEP
786432:27SF/ClJLvALBycG5W354co2vXEHUgZa3BW:2WF/kLwmALvX93BW
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/air.getout/files/stares/updates/sta.jar 4335 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/air.getout/files/stares/updates/sta.jar --output-vdex-fd=53 --oat-fd=55 --oat-location=/data/user/0/air.getout/files/stares/updates/oat/x86/sta.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/air.getout/files/stares/updates/sta.jar 4252 air.getout
Processes
-
air.getout1⤵
- Loads dropped Dex/Jar
PID:4252 -
getprop ro.board.platform2⤵PID:4285
-
-
getprop ro.mediatek.platform2⤵PID:4306
-
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/air.getout/files/stares/updates/sta.jar --output-vdex-fd=53 --oat-fd=55 --oat-location=/data/user/0/air.getout/files/stares/updates/oat/x86/sta.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4335
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
47KB
MD5dec4f9a25f472b8db9971a37625af0ac
SHA122e0a6a6f201836bd83bfdf42836eb83ffe4c66e
SHA256ad316b8184b9c676d7066e0585eee564a40392aba80d8d1112b438324790fe6a
SHA512a515f7787f4e4d95941431e6d2a3dd9a06a3ee1fab42fd30c969d62a7f52762d4b0cc35d250f324869c0708e7f172f2c3e20d4e6642c555ea55b1fa9326579b1
-
Filesize
3.4MB
MD51da64b72a14359306aaeb18eaa008b37
SHA117633fe891ab9cf9c389553682a237340c43ab24
SHA256a4bcac9aca7980f004fed85e2acab37b0ceefb85838fbe0e99c2e385421f3edb
SHA5126a044eed4bdd6610c9d8be365d30f7cba0d55a437cf310e0ceffe47f23b10391d891e852e08c7a9b5871e7cb5798ea98ada35b5a3b528d125979926fbc64643c
-
Filesize
3.4MB
MD5209b7bb34757e67e872b45e8876eefaf
SHA1311f6fe57d290494ca8cb142f82793ad88ad467e
SHA256823daf16a687590a35df3cefffc28f1596fa90ebec1d8841523efa0244e0332e
SHA51273d1d989426dc4aa3c7e04a83afd19100f69aa331401190a69cca6cc069151058bb50290e7db8d9865901d387449fb079e790545eebf4afb2f876ea309ea2ed0