Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

21/10/2024, 05:56

241021-gm124atekm 10

26/07/2024, 10:06

240726-l5fw4a1apm 6

26/07/2024, 09:57

240726-lzfddatgke 6

26/07/2024, 09:52

240726-lweyfaterd 6

26/07/2024, 09:48

240726-lsrg3azekp 6

Analysis

  • max time kernel
    80s
  • max time network
    300s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    21/10/2024, 05:56

General

  • Target

    chrome.apk

  • Size

    12.8MB

  • MD5

    2d31261264020e4c630dafb101a472dc

  • SHA1

    b1d19008f6d6e138bd0b7207bdb2d30a7b47a8db

  • SHA256

    20c21a0bf466412118a8b79e890e2ce5dd068a9a2d354f43f6b4b7c94ee16509

  • SHA512

    f7e8505c6a3fbfac982571952f54fc08f57d4f853c49268033b4225598a7fd8f3238f56ced69004bf44f65aa1a69ebb79dc5753f0f3257de49fce97757df047e

  • SSDEEP

    196608:oNzbW0tWEeoOFidthSlGoFVfaHmNorOv6/xCWKKV6pPycX/zTa8rSI8Nd:IPuoOQ9yfaH+ortGKwLJW

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.caught.provide
    1⤵
    • Loads dropped Dex/Jar
    PID:4328
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.caught.provide/app_loyal/Myj.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.caught.provide/app_loyal/oat/x86/Myj.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4353

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.caught.provide/app_loyal/Myj.json

    Filesize

    2.8MB

    MD5

    78a43d2044f63bbe1364a8b1c87b1f97

    SHA1

    2bf3ac88dca6b3e698630e16833bfce0d828e30e

    SHA256

    2437c4a29c08bf4a449ac58d3e2bb55d5dda9300f34398e7546d4245281dea69

    SHA512

    0c34c39fb0f905971593421f1305b87d1040217161645e327c55744e722a7990e9f51d5a4a6031954848d8c4fa298c196efc483aa33f7d2643d9d3970e1b99e8

  • /data/data/com.caught.provide/app_loyal/Myj.json

    Filesize

    2.8MB

    MD5

    0eceb75c921a747557aad1552a44e0b5

    SHA1

    ad2b35ea53de7aca35d96cf1127709ba47ba2bd5

    SHA256

    503656b90cb88be0fb74dfd436e8225b43fbd5074dc3deef2c33858ba486dace

    SHA512

    cf8339026be55f2608c90f4a3dcdcbefb6514bc4e69207ce3ab1d071696b46927f1ae75c1bcb9914cfc028ff3e89bf0722d4e0f0f3e977d402fa355f36a5e0d8

  • /data/user/0/com.caught.provide/app_loyal/Myj.json

    Filesize

    7.2MB

    MD5

    6380162b8bb52bc08aa0327a7ca4371c

    SHA1

    bd150803c8ffcee360b622fd79df914b82708750

    SHA256

    4e596bf45db91bd8a49d07ac3b054340ec58e0911a8a96071073e1dc2072fdc9

    SHA512

    2b62bd8396949c929720a0d2a4c616bf89fd303414a2cadc400e5770190361ca148c91f99968a3ab372221aff493ac1a3337cb9bbe4ca50ef4fa4fb4e6048915

  • /data/user/0/com.caught.provide/app_loyal/Myj.json

    Filesize

    7.2MB

    MD5

    0349ac6c897ef7773b770d0fc51da900

    SHA1

    cc81fa3960b03a3c24f17bcde42462c18ac3d91c

    SHA256

    6323bd28d476598dcbb9275cf954597780439355d505d1be2c69ee7b152e7211

    SHA512

    b80ca08323e0cf453321545137fc763c5cea9dcd5e3ea7ab20f7865dd1b76361248b66f35beac720910c3af2d4ffad2315b031d7b3cca1939bbbc27d0da6e9ef