Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
42s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
18/08/2024, 22:03
General
-
Target
eb19575f78b6cf2978baabccdc4f6014d1938eff16df020011f3ced5e7bb8d3a.apk
-
Size
4.7MB
-
MD5
dda2aae75e193c8aaa5343a50c8eac62
-
SHA1
3c2d48fe31353fd71c36e07788c238951b4a12f5
-
SHA256
eb19575f78b6cf2978baabccdc4f6014d1938eff16df020011f3ced5e7bb8d3a
-
SHA512
93c877512a1009bb7730f76e764a5bdff0278b7ddfcbe6bedc3e5b255f5580027bcc3e2edc70c138d0db2189a89a56c13a35a4cfc4d59563849add406975382c
-
SSDEEP
98304:SLvQgUoJzav7RMHtgFYlEWI8u3OCqjK90sQdjvo:kvQzoAvlMHt9OWOOCq290fvo
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.smsrecevier.bots1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.smsrecevier.bots/app_mph_dex/classes.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.smsrecevier.bots/app_mph_dex/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.8MB
MD5e7da2ae21cb8905a7e92797e07c60778
SHA1438ed20b9e544097a57321b8875af6d3633a7f6a
SHA256d98de50ffb9e6195e125e575791028e8603c1027439cbb4e5c1013b56adf7190
SHA512c98d64903cb731d2ea44af07a43b091e771e428b42cc2722540fc8cbb6c161e8b2344c1136f8171e1f55bfb8348884147423803cc5fec8cfde0fe1e5f89ce837
-
Filesize
8.8MB
MD515a58bb21a7079e3ca68da12f685eec9
SHA1686f277f77e2e03adc15c18828e2ab1be55cb00d
SHA256bf536d9e20305303eee6b0ca7c68863a458292e8e2ed2df10b6589effb946891
SHA51225b90b342bb82b42b8623d7681991863cd9709563c45fb6a7538cd554a23dda4e20d89a4af97eb5ef087e9520f7de90fba52a14dae293877d7a8e573654ab4f6