Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

6

d8a93477c4...7d.apk

android-9-x86

6

d8a93477c4...7d.apk

android-10-x64

6

d8a93477c4...7d.apk

android-11-x64

7

Analysis

  • max time kernel
    48s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    12/07/2024, 22:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d8a93477c467483d0dc0fbf1b881bd9d38a6baa2966b450be3ae4e9af59c557d.apk

  • Size

    4.2MB

  • MD5

    5115cf9708b6aff9b75a2b4233ca9862

  • SHA1

    7916def8075f61d07d8a6b18654e7aee4669235d

  • SHA256

    d8a93477c467483d0dc0fbf1b881bd9d38a6baa2966b450be3ae4e9af59c557d

  • SHA512

    3981bc6dc59c2340003fa612aee12ec77c6052ada6aaa9519f4397b7592799382f6dc8257ce3205987fe140268c8a1784fb57c71035ee004119781d6fb35ad1d

  • SSDEEP

    98304:+LreIlC1qoTwrIY8GEkZNDyorugyCY1/HuC:T4C1ulNDqgyBhHuC

Score
7/10
discoveryevasionpersistencetrojan

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
    evasion
  • Aborts a broadcast (usually for hiding system events from other apps) 1 TTPs 1 IoCs
    trojanpersistence

Processes

  • com.vcacdfccrfve.testjuly5
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Aborts a broadcast (usually for hiding system events from other apps)
    PID:4341

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.vcacdfccrfve.testjuly5/cache/volley/-1954231640619625019
    Filesize

    865B

    MD5

    72526adba9e663284550a5203ab0e380

    SHA1

    a789ec21f87317ceaa0ce6b3dca52cd83f9a2962

    SHA256

    1ab3994e5284a34ecf5f970cc121a7284a107216e6dab3807eeb7b91d91d90a9

    SHA512

    f03965e09885391b7e69372283a6177a3a231536057d172c640cb1d88041ec31d2bf28fd88cbaa91c0d3fc1dcd0962c522f284a81e4abb09030400f8eab09593

    Download Submit

  • /system_ext/framework/androidx.window.sidecar.jar
    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

    Download Submit