Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
152s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
-
submitted
03/03/2025, 22:06
General
-
Target
b46619fe854d4f66db90c7da635ed183d8ee509396b4b8eac9feacf5889bcf38.apk
-
Size
2.6MB
-
MD5
6e4d35425bfc52ea86d0b0b71ea91d54
-
SHA1
8120cb33959a3f394f3b770e5a88b663a47f8ad0
-
SHA256
b46619fe854d4f66db90c7da635ed183d8ee509396b4b8eac9feacf5889bcf38
-
SHA512
52fdb4cc3530bdb30ef10f0f3710b32223c1bfbc8b625f6dbe84e1a9537eb33698701bfb59ef43591381831347a7511e26fe25c06b34015fb817295bbfa7ad11
-
SSDEEP
49152:kTEupy8Cp2RRDKdkxdwz6AqrZLNT81d9nccjziV+RK/GtiTw2Gk:kT7yPbdsdwz6JrZFKd9coziV+s/G8T6k
Malware Config
Signatures
-
Antidot
Antidot is an Android banking trojan first seen in May 2024.
-
Antidot family
-
Antidot payload 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
dev.decryptapks.downloader.qwertymods1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
MD54589f70f611f208d125f5218d0efaebe
SHA1e3d1209be603ce04884fba8228a71390958c1db9
SHA2567d081b4f574ff147fc9daf0e20959169bdf57fe0e6005a4483a657261dee6616
SHA512bd7ba483e46e65f24ac7d8657cb02d4541a45ed79a19052fd47f6d9e910189391954232e35ae24c8cf7e198ea1f4f9482903ad868541abd4dbb1788cd36fdfa1