triada | hxxp://happymod[.]com

Analysis

max time kernel
482s
max time network
485s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-en
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
submitted
16/03/2025, 18:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://happymod.com

Score

10^/10

triada banker infostealer trojan

Malware Config

Signatures

Android Triada payload 1 IoCs

resource	yara_rule
behavioral1/files/fstream-18.dat	family_triada

Triada
Triada is an Android banking trojan first seen in 2016.
trojan infostealer banker triada
Triada family
triada

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4456

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
103KB

MD5
f5d63891e89822b27c837096a2a96a98

SHA1
e802c21729afee9fec8d406dccb5de2b040003bb

SHA256
7e2d98d73b5cb968f49e0e32fbf9b074ea4520c539acf709b16241d9f8655a54

SHA512
24a7fe0aaab9a6cea90cfcb5063edfe307f2d2e042cf3841102f4bec58727a32a2a97db79267a0f5f7ec28f71733e38020a79ae0cad0524b054ee511978dd06a

Download Submit
/storage/emulated/0/Download/.pending-1742752991-up-mod-roblox-corporation-mod-apk-2-661-713-1760.apk

Filesize
1.0MB

MD5
509e52c874b7a78c150498890b91a824

SHA1
c0f5e6cc9d4318c5423c47b3868221a7a91aff51

SHA256
c8da26ca166cf4f1d1c218db36dd91e3c86f78e701ae43201129b45d8de644e9

SHA512
3d1014e9c49b1d618ba17947e0307a4747f03980f0bd9d8cf5a6cce67b2a95ed9eb50ef59f42bc13c3fdfb65bc8332476f66bc7f39dd557882945d8a5262876d

Download Submit
/storage/emulated/0/Download/.pending-1742752991-up-mod-roblox-corporation-mod-apk-2-661-713-1760.apk

Filesize
169.9MB

MD5
7847aff9803d2336614c258d7366d87d

SHA1
85eb57816755c0ce1ee2322d9915be41e47a44ea

SHA256
996b48ae1d0fb8ef462d6fad1b2ed70919519f0c7615f2fdb02c2ae84049dd70

SHA512
ab47030f5fbf1ee25590f22d1243d96e77fbe68cf1630e05540b591c4a3c0081a4fb034f7bf8185487d5cdc57dee920602ec217749cdc631f9aa5511dd5611d9

Download Submit
/storage/emulated/0/Download/.pending-1742752991-up-mod-roblox-corporation-mod-apk-2-661-713-1760.apk (deleted)

Filesize
782KB

MD5
b611c7af22700b0d360ec4a4b1a7908d

SHA1
83300dd2021200ba51c94959a1378260a5b311d4

SHA256
4270b1539f9561145eca52ab5b0436e14b3864cbbcd690ba7514929048f580ce

SHA512
b6a5e1c66475db63b6277cd6e6720d41fa4d36a25de02892f139d0ae57887000e0c2a2e8cf0fefb0b1089f87e247c37ef0ac9929863be0e1ffbfd645ba3f8b8b

Download Submit
/storage/emulated/0/Download/.pending-1742753127-HappyMod-3-1-5.apk

Filesize
17.4MB

MD5
34810e48dab5058edb22e73b7db56fd6

SHA1
61bda9ea127ac701239ec8767e26719ec61fa4eb

SHA256
53e2203da2ccc6b2167eb29dd89b02610dc0a249e289efacb15e09557ee28ce6

SHA512
e644ce4ede062d7dca59aea80201a50680bcb04bbd9f235951dba14f545457aec94937ea125e848bd970c65fde2dd36fc6a9ce413a4a0eaa61e9d52bc8c7f11a

Download Submit
/storage/emulated/0/Download/.pending-1742753127-HappyMod-3-1-5.apk (deleted)

Filesize
751KB

MD5
a47b3c573ce30a8d51f4fceb7b6afa8b

SHA1
25e12b28f99ef034d27050f812ee3d566a6408f3

SHA256
530e543f4c11334d52f3c9e139071ef7a6185fac43366368b8b611b6b285f82b

SHA512
e9ddc0d0d5dc7498e809906d2cf2e55d68171058a28b06132d56b2da07b66cb3c4073cf61e53f2ab2aa7db5fca6cf26dd777bc816e2fb2357ea14864152c37c1

Download Submit
/storage/emulated/0/Download/.pending-1742753263-com-mod-download-whatsapp-messenger-2-25-3-82-250382003.apk

Filesize
234KB

MD5
7f3f6821ef32c5dcbcdf300e7672229b

SHA1
0937cbf12aeae116dbd340adc75702aa3b5f8043

SHA256
39eb9a52e54e3759ce037805938c33c71ec831eb712be85614042ec45abe637a

SHA512
93a73b505c072e531a54c9df194621e2c66632c7f92e71191272cb5fc508ca00e1f25c72e681250345bd8e7b985297798c3ca4135a6343977de91f625f18f926

Download Submit
/storage/emulated/0/Download/.pending-1742753263-com-mod-download-whatsapp-messenger-2-25-3-82-250382003.apk

Filesize
59.8MB

MD5
6ae53694d4155bbff75d284c9fed9491

SHA1
a27afb4bb05ba2ff8764ec217556b2194638a5d2

SHA256
199a1a405e508bc98bfcce414b4f13445002c3c56602a351fb59df7a839f93bf

SHA512
251327855728869ce017dcb5bbce519db9ad8b1a495744d97d5855e38fa7b3b651df7ab447396c9004dff555058740cb2063a84b63427d7e8ea5cd02876a2e07

Download Submit
/storage/emulated/0/Download/.pending-1742753263-com-mod-download-whatsapp-messenger-2-25-3-82-250382003.apk (deleted)

Filesize
599KB

MD5
c7e7fc12f4764118f52b4e4d0b46499f

SHA1
5ae8edd905a745b0b54817c0f5c2e04508005bed

SHA256
860b28cbe2f97badd7ebe1495f30dbbcc3e6ba4c07eb4b6ea19a6c888f9db121

SHA512
0b1aa7d1f9232f4af9bbe7e537798ed3f1ef93439babad2018ab44ec406b9cb96422a13c5bb64c0e7de7bffea2d95a6f88b866feb92a782e59e3a37e638dc95f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads