Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
88s -
max time network
244s -
platform
android_x64 -
resource
android-33-x64-arm64-20240229-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system -
submitted
15/03/2024, 09:28
Static task
static1
Behavioral task
behavioral1
Sample
app-universal-release.apk
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral2
Sample
app-universal-release.apk
Resource
android-33-x64-arm64-20240229-en
General
-
Target
app-universal-release.apk
-
Size
33.7MB
-
MD5
2b224d5ff74112f333d955570690afd2
-
SHA1
472473768ab5fa84af7a39e708ba14bde31703c8
-
SHA256
eb8e356e9419a564aa37a264a974c99585735a359ad46c13c9bd95f80112ce99
-
SHA512
4b4ae30eb38fa3b2b050e058c5ca0a37bfdb25c4fe1e6cbee0799c89452439ad42898734298e2412b4290db935da6a109af08f703ee68c87fc01b408c7114b3e
-
SSDEEP
786432:Sw6RXPvVk+6FTrdapmelEfh4iIQ3NWcEc8:SwQfCBMMfhSQwcEB
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4276 com.vectras.vm /system_ext/framework/androidx.window.extensions.jar 4276 com.vectras.vm /system_ext/framework/androidx.window.sidecar.jar 4276 com.vectras.vm /system_ext/framework/androidx.window.sidecar.jar 4276 com.vectras.vm -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 8 IoCs
flow ioc 59 raw.githubusercontent.com 73 raw.githubusercontent.com 130 drive.google.com 131 drive.google.com 28 raw.githubusercontent.com 29 raw.githubusercontent.com 40 raw.githubusercontent.com 58 raw.githubusercontent.com -
Checks the presence of a debugger
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/1607fa13257935b7ff72db008fb30af80d88e02e81e536ae93d8917b1e456af4.0.tmp
Filesize543KB
MD5dc1b063b402092c4e2aa7e2674351198
SHA143e09524b314a2c31545a35c5dee0deb83cb604a
SHA2560de02a17de7be89dc998a71cec899188c941f5c1d2ae46e3b36f1af787054fbf
SHA512c13e466b86efa838908627bb2eea8ba949d26ac75302402a1abaa27cfdae9be94103f47a21945dbfab9436c195e2f69bc8436aebd3e5db3928aa0874301c0b77
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/1be547debaf4a06440ff56f5d5b293b34ffe466a355c67efb7945e2b31d344c1.0.tmp
Filesize13KB
MD5a2348fc0d91b981109df2263a55762aa
SHA125c953b8f74bec3183456310b9fd36ac648ae452
SHA256abad406e566f19a098f2fe292132a417d9b6075b6b7b642cc09a73bb3935ccf3
SHA5124aec8edecbff9429e706b6acd01ecfb5886cdbc4ce40c1ebfacfbd62d856badb12cc2b9575f6a9bb8ea7a4a21bece05e375d37db7166f3bd515313e2d3172ac6
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/70c31a3f6d8bdd5706061c15e44ce372204666e118a1771b0186200ec07a78ee.0.tmp
Filesize27KB
MD5246cd7f69f8ef6f9340f808346a0b570
SHA1495a02968fcb357e051979cc2a8d346b536c7c7f
SHA256d5040dc82381973601e380148c221243f8d87180b2e73309b5dba24d45d8a620
SHA512604313111749283cdf7b5ddf7b2706725a6582331f691c891f218db8f394dd5a64988ea9392f834848062cb1e03d6a8d81e643dc8aa317355a81ec7e19dc6975
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/903a2fe3aeb1ec4c6a49cb7126698bd41fabbf0b055e4c2ff1675517e76aea2f.0.tmp
Filesize316KB
MD5ce255e2889d22ffb42ad1543156b9b0b
SHA1bc52816152afabda6c35db034509c5b0567fe347
SHA25611af1559acb276565ea58f6e919ddaacb2a5a462e379ec56934b6d3a41cf02b7
SHA512dea73f304c07ef0b9d9e6cc2b542318b001463d893e31a1525d40915f42cf85e6ca18e320d5e3d1fd1f65c8527a0316f3495f359d2f48d56c3046eb172ade64b
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/9c31917b2051cfe68f3ee1915ca360a721ebd26ceff47050d13ea1b4f09b4563.0.tmp
Filesize3KB
MD5ec5fd03f3aacf8192c3100b7e23f5248
SHA171aeb02841923347c775554a5371bd41ba3ea718
SHA256c5c5fc3f08d3cca0d81957d8c0d94c45e1271852b60ee3bb653631dbcb1c1879
SHA512c21de7081bfafa75f49595d22208ed396c24cf8fa8f20441eac3cc524d144091b8e5a9a8c0e2df34a0e13b820aefeaac44b533cb67df4a31c70f04689231721d
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/a372169d51137dd698d3a3cec61e97ad93d7d79e8ec81860b99c2f17644023cf.0.tmp
Filesize116KB
MD52f96987ab581156f177b8f5cb7ecb3f0
SHA1b065918f9fdad4e45f2f978e3f35bd00496b304d
SHA256bae94d8c16ce5cbc84542323b32dfade032c2caf6648e3e476a7df38e977e66e
SHA5128880a2c0f875d30ae48832e2a3fcc927d07035b2525c7d58f5b478533487c9c2e3ab9af8ed400ed240c497fc46f774eca7629e4b0244aa4d4678cbc384198033
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/b03a3c85bbd8368dc018b07fcd549b73c45f98c872bc85f7a9fc6588c1434616.0.tmp
Filesize197KB
MD5529cc85d9839d12f627442025e1f8d17
SHA1805151b3503a2e0e07a1261fa97b0f5c4fea03ad
SHA256a61710e5b2f010cbb03c1ebb3e66b63ff4d1c6927b5228469158cb8975663ac2
SHA512b626ec8bc33e7bb9f50bd262f3ad60db223820ac59560e5183f6778ffc15a9726000b6a0c6043c3bbfba7b435d86122bed9b53a7d82f541c4c64398da2769c8d
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/bedab30e3e19ac4f9148a6f29f95d1e779475ee6438d577a8c3887334b7ccb3a.0.tmp
Filesize21KB
MD5b45251161355ad5a1f484ac7e67e45f5
SHA1e88a515d73127087f0cf76199117a46b5f3eea7a
SHA256feb875aa3b06a664642c7984c5d7b0cf48ce365899712db2cf7664e460dc229f
SHA51279cedb836b5781982618fa21415c2b688170bd02814d78ab87e8db733a26fe4bd68fa9a4f0dac31ab8718926ba5215711ec81f925d8f1cb59d26bfbd4a090fea
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/ead7586802d9e1751b36515d88b3c72f9472cabfa935495b52c59b62f86337ed.0.tmp
Filesize24KB
MD50e137fe42b97d18a01a1e220c2f843cc
SHA14260955170edeaf532eacd05c8eddb1200c8e8a2
SHA25686471761dd82651dfd3e79a9b210353847dc7b359deb5b17858967276c4638c8
SHA5121616eb006b5a85b4cb9d26605d885985b13ed6163344be7b4e4f1c4c8af91b979ff1ad71cf24771a4467642525b2b64c3107799c35f4abb7f6bc85fd5763dead
-
/data/data/com.vectras.vm/cache/image_manager_disk_cache/feadd207113919448afae246aa598c7ab660ce3f59ee425fa75533a69eeba3db.0.tmp
Filesize13KB
MD5415b0d12d6ed4c2f331bbe3d3c106a6c
SHA1e8a86832cb5e9ab9b99113f24c6b7e36b00af68c
SHA25652c3aa1f29c16714365a6099cdde7633d3118a3833b801b6986398529c487c30
SHA5121b6484bacefc478f28f728fb8142f88114abe23e2e91507d6330cb69c565cc7e9fff66827a514e2afaf48549c8c54e0030157a7354c52656c501631bd586a5d9
-
Filesize
71B
MD5d7e0a0ae2a8deedc24d876e57f831ebe
SHA180010d5f3e8100e9a917a8e5fb92824a261caab4
SHA256d8962057516bf46a762e9c50fec8cdb2ff2a3d698e93e1b1df01b20f89e217f8
SHA5121d38ece3b1626635d7c75a677fd38af9d0091228936237d96acf0ad110d7603b2475695d5a009ff82442f38cfc77dd031937a3590224c630199b8e5615d28b86
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
12KB
MD5edb655088d1ed9f33f9d0d499b7a3ef5
SHA1565c4f4e43179dbfc285cd6331dc8ac75a901af8
SHA256bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9
SHA51298cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599
-
Filesize
512B
MD522ca10b359a2152ebd5457ed6c4aede3
SHA1196139c93380e25f8e040c697127f7adcf82bb1c
SHA256e6adef17259a11bebb70090034bf51bd4d68d7281e1af11f098faa97c5734300
SHA51248abd13b4ea330a2638c049059c44669033b165890c556c30e58c3dbb9158a13378659b703c3ee8b0af330bca958ec05eaf2ce19a21fc39c97999c115956fbfe
-
Filesize
8KB
MD5c0c4060372038ed8d511fb4b5534eff5
SHA1d234c6397fa465814f6300cd1c85965ab9af19b2
SHA25647b08df8a4eaf5ffa0e5ecd7b078ee861230b3cb506a96221171e1eb6f339c64
SHA512cb472c488ad015015e595b6af6cb58edb46ea3de81391de23f152d299ded3557440b07eb3a498ad0134c8e3f27b1cccf2fd39c6cb950dc431b26be23a2377691
-
Filesize
8KB
MD528ac7ba442ac99f8268559ee266b00c1
SHA19005ce2e3029d71e2b65024e9a5cb0ae3cbd8adc
SHA25649d8779384544305518b5a842b3288f719e3593025db2a57d4f7221e50fa4cc7
SHA5126cd9fada29f4964154ab1e53642bd420c24bc0d3d78fa2b2761add8d24b85a378f0b901b902e500d63bf450c84119e1463c0e5505fe4f3c933531e7197fe5a9e
-
Filesize
16KB
MD520a4c2cf244465a35d3a9684f7d9f3a0
SHA1a260f4dcdfc4cf64ad7e8de416ffb366bcf36c14
SHA256414892c73541edddd85a3c8bf25806b3ee5aed81c87cc94696f88c6c3dda4137
SHA5126a2e87cc559d8ebff37da041b51cda2f6d2a198801437cd3bc1efe871a5316c7501b9d981054a2cb1c7e0908b3175f4dec74d17262b9b9e0d58e4e6f2b7c4f13
-
Filesize
16KB
MD5a99086bc124557e2209bff7f5dad5b68
SHA1f980c478fd2f86e98d5f4e2f47589807d13c305a
SHA25627ddb4682355408f00552ffd210884b89e8cf0367e27da629e9441a7f23900d9
SHA51239ca400d8cbd05d2c08b8e341805e200c2e9df8313ad3449e8794672dfda51ac4890e1a2939993ad182ba1e785b46b7f948e896631bf0c0ec9013cb55af35cad
-
Filesize
16KB
MD52b9cc92e9a1b2e7247088443e13610f4
SHA12877b7a15dfeadfaa04c57c8b7ad69ecf1f5aa4d
SHA256706f374e7d1e6c0c39b1fb7c21e49263e4106e3996ffe3282599a8f04bf44192
SHA5122774591ca86f89907632375541f9cd0a55bbdc3eb06e482086a4f199ffebab981cb71c78c0335c5e14790f5ec328e879fa4771181f5a3fd37ada9350fdeb1d01
-
Filesize
16KB
MD547e4c67f78de988f0fa46a4126c168ab
SHA10d47f2f3a548edc693793025ab13947ea4c05446
SHA256423b4c0eac8adc2ac9aa2a581fb4630af5c50a973e0d3830b9628902aa418aa9
SHA512be4c1be4e02f4fb061f92403458cc0365ea11207fe525a3bac34b8b335995bd2581b589381b07c1d32b1225bb9b3a0580299f2fe7949aeeb264c32cc6e17fe43
-
/data/data/com.vectras.vm/files/.com.google.firebase.crashlytics.files.v2:com.vectras.vm/com.crashlytics.settings.json
Filesize710B
MD5cfc907d1a0165efc79282c1e1c52a358
SHA1bc60902dab550e7059f13ae6754a1fd2a7218aa2
SHA2563f6293dd80ef0de416c4fe60069e69b0acc31660fd6d11e69b67f240e27a8973
SHA512c2200220d4f99933dc6794db617b2ec35641fc505f7379e269dba9c08a0c1ecdfe8d99d552a473488df48400ce6d9e0c4230f98750e70e08bbd3dfa257ea1e17
-
/data/data/com.vectras.vm/files/.com.google.firebase.crashlytics.files.v2:com.vectras.vm/open-sessions/65F4158C03E7000110B4C1C7E76CC942/report
Filesize787B
MD5ca8c9779073d9dec827685f6e0b85693
SHA116f763c145f009aa614822851aa2f9844529313d
SHA25652254413d37fc9ecc8f646196835c2d4fdd1ba4444f3fc21ff417862caa3ef5a
SHA5129666f596043c914f865a6faa3d869dd6b8c89cc32116dab21f2f9b66da911c17fc0674cdeaa900c2a07278cb46ecf82bed4aa25c0df1fb051821d6699bf2295e
-
/data/data/com.vectras.vm/files/.com.google.firebase.crashlytics.files.v2:com.vectras.vm/open-sessions/65F4158C03E7000110B4C1C7E76CC942/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
569B
MD5127fa34aa2e0bb1a088421fcb5179abc
SHA1e3b4f1a0939c5581d819c48f06be1589d67a3877
SHA256e601c13a77de3bfdc7fbd6dd4a5922775cdd218723c1b12921a0efd309fabbf7
SHA512cb25ddb643dcd120e8ec5d9bdadfa1dd8b74b154b91992ed81c5e96da124dd0d25f9adbffde4d9d3b6bc51e373e9d0e3b4d854ec85c343a5f605065b14435746
-
Filesize
90B
MD54deebc9d9ddbe6f0368b640da39361e6
SHA164ef6d63313d78ca24f4cc8c04848e1787c465eb
SHA25699e87ccfb15bf518eef6b29d9a33ec61625d74f4a4567a2bdcf095c3a158aee0
SHA51274ec701f73d33901f8fd71fcbef122d866a7562c1d07f8c62c13ed6e32538190e0b5df58fd095981ee4a00ec59ca0bf01a501bb777ea23b4f1c79815a4e9d7ec
-
Filesize
33B
MD535b51faac8b5af3886e70bb5a885dab1
SHA1e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA5126ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa
-
Filesize
75B
MD5944e6a5a08cb971370c65c06061f0ab4
SHA184d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783
-
Filesize
121B
MD5ffcbf87665a36fc21782400bd0537e79
SHA13dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA5127f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57
-
Filesize
163B
MD5dcf7d6c1cfd5e7b56074e3001577c78b
SHA1b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA51242d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d
-
Filesize
212B
MD585d056fb786bbc4f313a93384cf225f0
SHA12170a731cdbef3d13b11788b05c9f446421e8fa7
SHA2567e6a64a6bda99d851a6d3ad35240fc490e3be6c5452fabed49e4f13019f6fc95
SHA5126d3fd4f2e8d34421d819b7038ad149fb17396856047a561196d72df6fe352ecc34545ba5a213678f21d603d2b1c88b0a6b5cbdcfd6d9df31c06a24950afe7778
-
Filesize
24B
MD5b4b576b209dc055c43458bc39a293dd8
SHA1649bc29bc08a96c3440d6a9cdd63b32a6a3667a9
SHA2569b6c749ba02ac050000ebf30eb30333da7678635368501d066c2b7e32053c5ed
SHA51264eda06739387589da29380c08da7fda0f1dfdb25d718d1622ddb9decf334edb00899758539d94214daf048458213e35c653ca65b044bee84dba17cfc401a509
-
Filesize
8B
MD56e56469f1a18b346e30863f730ddd3b8
SHA1c2bc21b58d17f4125e5209587f5c467c6f14b2a5
SHA256a5729447e49d5ac6bdaa4ea46e4633bf6a0e97e62b6e0399d8a50a7adcba300c
SHA51285533c56574d6903110fa8dab8443e4fe71ea5e08072d1607885f0a5f67bd2ab9f3104abf4ce61842dd102ef9ef473bb07fffc1319aa774c341eb192779431e2
-
Filesize
4KB
MD50eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1fee434f784e73cc7916322e949f727caf8363102
SHA256b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
-
Filesize
512B
MD5dd500deac47a371ec7860bc6a1cc27b6
SHA1349df6ea58a60b1b5260c951b54b6f780fe04291
SHA2569ff037d54f425cf7c8cc1d6c9f28db581ef44702eedf75d21337198e79ad9dd1
SHA5121d4030d0c469533c4bedc25519528764d0160539ec84f59aa6e757ded26e7e765d0edb2e11b11ebb5f9d7743472777474ef2a0a1581c563548cc2cb28240f8ea
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5e1366d6cd9a4c274660c29dae280eade
SHA1ea0638c269c0f2c7252723dcc1fb4f9d59b72b9d
SHA256994aa08e1cbca2094484fcd53539d2b44b7545acda537f35d9cb6aad8173dbe6
SHA5125d9a14fc3a25073a3be0aba04e02c37e5d3131e4ea0145fe577b1af06f967cdb51137bf11a4a869d0d84a414e48b4cc9e183f9ac9c6c6c826eefdb5837371535
-
Filesize
3KB
MD516973eced9b49f375ea5ffb7ad64bba3
SHA147cda989c41c5af5f0c597701a6e0f24e5857678
SHA25680f02c58bbd03af7af9ac716c50a8894d67afa37d5c1b6fda06cf80890c2ef8e
SHA51261471ebee230482e0f44621d1a5f4a660277053446060dfcc18b0d2cf8bfda8832bbc6e03e59b0c69f2e90c8acb68704afe755b81e73a9e483cd06c0051eb2e6
-
Filesize
4KB
MD575042a3d6821688873ea5ab76f1d07c1
SHA12ef0f63a489eea08f27c16c5cb639a4bff5793c3
SHA2563d6ac5916009b1c8cdaac5f487bcdda2acfddddfe2252e63a190f7f30ab9572e
SHA512851f733ce0dcb5119cde7f3aea94dada2ae8848ec7cd11a87a4446ce4f052f01c3350b216af43c7336594dd46d23bbfaf5cf2877c32915e0a154ffe422d152af
-
Filesize
29KB
MD58fbdfe2a5fad0d809f00b39f1f31f804
SHA1b850ea12c8f0dd18315de846461e0866592fe6be
SHA256456136fde4358fee279ff4c2dd8f69587044f55732261689bb6f0deb75a2ff7e
SHA51244ebad8e4a68ba944c4e41b87da44535c9b442513b7c082a488f5290bda64b020a837cd036c48aeadd04219d5f915a8fab84bcada926e7f1b491cb5fb5c9bc40
-
Filesize
123KB
MD53056e1bdb7d4e19789d0319eff484bd0
SHA16791ae47aa9466fe0bca27ad6643f846853bbee4
SHA2568e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
-
Filesize
25KB
MD529469324e59dfcc052f24b5af4e7b2c4
SHA110c1e17ac6f598037bb51baa07945663645de4eb
SHA2569195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA5125e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2