Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
23s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
03/02/2024, 10:17
Static task
static1
Behavioral task
behavioral1
Sample
Yellow-app-release.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
Yellow-app-release.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
Yellow-app-release.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
Yellow-app-release.apk
-
Size
10.8MB
-
MD5
27317e8a5d860ca1f76c2692d1f0a7a5
-
SHA1
e0cf8c4f6c36df72a5a105b02051894a406e7c6f
-
SHA256
892cc593ffefa01a1f597cdd248d708bfd13768890295414a9a55e37938a4464
-
SHA512
a7eadf8ece7b80bd8a03d0f419604ed46e86aff03fa7951cd4e85e587a925250f01944aa48f7314a0a331e53845a87b11bc8c9cfa47e4540e0911fc7e89fa20b
-
SSDEEP
196608:ShGSO9oeBwHVceul4YrLYG28HUNIaTYu/y1LHqweT8uyOeAO:ShVmoRcfGgLY/Xi+gm5T8Hd
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
description ioc Process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.test3f.video -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.test3f.video/[email protected] 4591 com.test3f.video -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.test3f.video
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD51c6a248544a7da0c2af38c326222be21
SHA15d1d0875b241d1db543df53216a5e447cd49d0b6
SHA25685758e10d3ebe59fd3a8a556f46a1c0624745d3b47cde06a5bfcb917f0d212e9
SHA512f569409410bae0921a5dc38dbbf0aece22bbef7c5204d0b4c4abe8baab2af070d69c03e38d77cedbd46a19d902f8014c618d41abf3b95d0349e53599ba2ac17b
-
Filesize
16KB
MD562865a384807b58830d6b3c4d49f8d7f
SHA18e6bc3c446d92b3da5998711c2b7591a40f35601
SHA2561644916edcd575fb17a1621671e97a480144663ea359683dc073754e07d382f4
SHA512ad0912f101f4184a61e14f8af7d837d68ada766f0af5c727a12c70c59aba555fb4b8f8d663ac78a3ce8066c5cc57b4e9c8c50ab74c9dd13c6e1194936c5eaf33
-
Filesize
8KB
MD5994f7ba42dba405fb86596abaa8c14c0
SHA10663efb375785f0b97e8b2409cdd2c295b2511e8
SHA256bf63d546eeed69f0a92ca673bb6191b5828bb406c7fe5e980462a5fc92d7e738
SHA51208a7dd7bf4eb6848e1c3136977d7770c834c7a8ce5f73938b2124a2c449a5d79b516aaab7de8ea0fbde38ad4607ecdc3af4fdfccb6616264aaad22b9df190c87
-
Filesize
8KB
MD5a3821d273214652abbf6fc2bcb6d748d
SHA1ef5b7ea93cb59346921e47dcf3074c7de635feb2
SHA2562e1a00046d22ae239cce1ee3976076a8dda84a3d7cc32525d8a6f640fc81973d
SHA51258cb850f683c04fc8d056cacfd0a9acc0f8eb6d9daca9ee5b1cf21905296a0fd089c30e91bdba1042fd0270e77cda7d8ef4cf66d591f32a620d56660e89efc17
-
Filesize
8KB
MD561e2034064646fdd47face11dec9283b
SHA1fe6b03f8d7c4a4988480e5980863e803a168d7ed
SHA2564c7e5d7c9d2e23762df40ffe876348cc4b9e392831e4b98102312b38ce64f4ef
SHA512047999274d234e0581734d12063a4cd1e1b281e940e0d7f40c767a141d6e68b2b943aa74a35cd3604b6ae6d7c3c0d841c38d6e532681ba815c86898b7db854e2
-
Filesize
8KB
MD54cbe04399167ff8a107fa33eb4f8c253
SHA14399ba9135be55fe9264d5c8398dfe2d5628c8cc
SHA2563c591a1d83f0d10a797ac1c66e9d9fe2f14620f4b6e89b13a4191c2d1f2c168e
SHA512b5b54b2980529af18d7754286f1be77d3404e8014fbdd77fbb119eccfe1ec524c309878dd21e2f17f56f2de23fff4ff6dfacca4ad789259d607775cd7679f533
-
Filesize
512B
MD52d91ba7feff89036c0414e48dee2994f
SHA154bfb2979d0a3191a5c9457d87af5ddffce1540e
SHA25684650fecad79e98a7a7f95fa24ac1cd7e940089d02c6249294788b4fe8d73b12
SHA512a2d1d9335cc53db2da1454b750632faf9b4fcded83ee66e6a5ffb50ceee25a545db64a0212aef72e24ce90cc28b37aa7749d1ce5d1f236ee55301f10bec9f0df
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5dd7be6ed02a16b7274b7e22d3e5d67e8
SHA1b13f2e224471e83b2a737bd45614325dd440f6bf
SHA256679d78c78e66f7fd58abb091d683645c5500bad64a830185ecc2c5a2709c7c48
SHA5126cc67dd0ea03f5db2de695f00d54d5ee410dafaf9c7e4edf043daf2c2f4093246afaf9ada6e0de623063fc6cc244d59f585178dcf2ed21c4e5ff44c72ba661b7
-
Filesize
16KB
MD5a7a5b0251dbfc880c348491c51e8a603
SHA16f90ed8a5424b0655279bad9685a9cc9164ae28e
SHA2561ad4980ffed96b280ae30d1d362b0a1f90b724bfcce7e8605aa7a625fe771f24
SHA512c248518f3301607f2036a4b4c50aebddf6f6470cb5d7ffd5db5552016db7bc96e0fc8af24c984f421f40294a54a7df0a3b9e98ebbe8e5b76eee1df7b4c516052
-
Filesize
112KB
MD5ce040ece392c8ed55dbe720355f47b74
SHA1e33e2f606b5346401f0239b26ab8012e2b2f74a8
SHA256c3a5682bcbcf410aac27512d9a39f5e16f84091b207193e8f9f26efe6464b1f0
SHA5121d7a651e863be0620ffcf6e4812553fade6126711a386e142e4637b45f46072d89083b43dd53be003f7cd8678bae253704bc2e6ae56f53c828beca950c36a444
-
/data/data/com.test3f.video/oat/x86_64/[email protected]
Filesize462B
MD551edd19ababdcde28f420f7a75e941dd
SHA1d15451af555dd0530323113670eba14f1eb0609f
SHA2562fecd4a66a7e33e6406222b1cf3babb90630c4f1ceb5da99a2eca8184bb18dad
SHA51296feef7ed819191e434c99171cbd8d9f2522a5130102ef8e6de0442ed6f28e0d40f666be8fe6fb91ce52870d017af62f322ea70f6e06d4738a4b40c3942193f2
-
/data/user/0/com.test3f.video/[email protected]
Filesize3.1MB
MD57a1ef0317c0ec7ce434899af1a537aa7
SHA1905084f065b9c35ef15f04657bd6c560ee42d50a
SHA2565b6d9d6948dd0fb84712c2f6535593b8bc12b7ca152ccef7d6601c0f040b6deb
SHA5125642a88425742400607474d449c61bd10a6d608a970d96028899a3a3960428a3b5b50386e29e097285a706b6aa47d9b32f5a86b3d40d030f0f52f70aaf2dc4aa