77b5b8adc11e80133e73eca4163b76182578dd68b37409d2af5ba97f05c509af

Analysis

max time kernel
7s
max time network
154s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
28/09/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
trippoa.apk
Size 25.0MB
Sample260928-pnwsrstema
SHA256 77b5b8adc11e80133e73eca4163b76182578dd68b37409d2af5ba97f05c509af
MD5 7602bc154887100814df77b2db4ae333
SHA1 e09243a84da36512785f25764bd6384245f1e2e7
SHA512 e567a42f7eb86683643cd424ca264917af31553d70a066accc1a80ec1921a3b4a1bc929fb927b1fc5eddd915b7c7af28e4ad1ba3bc1d5ec634400c98a8cad1d2
SSDEEP 196608:GWxhIO9lNMg6KZsVmYLlgRyoHx8T8olHiEZCvaGN8PivIxvVIbhcQ/hE+w+zYj:G0hglORRHSlH6aZPigx9Ib4+Uj
TLSH
T15647BF4AC51CC532E5DFF17C6F3E0A2BB139587805A9C456B92CA148FBAB2F045B2F91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4143	com.trippoa.trippoa
/system_ext/framework/androidx.window.extensions.jar	4143	com.trippoa.trippoa
/system_ext/framework/androidx.window.sidecar.jar	4143	com.trippoa.trippoa
/system_ext/framework/androidx.window.sidecar.jar	4143	com.trippoa.trippoa

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.trippoa.trippoa

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.trippoa.trippoa

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.trippoa.trippoa

com.trippoa.trippoa
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
PID:4143

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation332263198178899830tmp

Path /data/data/com.trippoa.trippoa/files/PersistedInstallation332263198178899830tmp
Size 90B
SHA256 9def684eb361c8ed4375a3c5e4403ffa1ba312d8d8ac171ba12735f01284e706
MD5 24228f1346f0ff4c022ea67156d4bf98
SHA1 c8a84555704ac260116751cda40edfef42494568
SHA512 72550f5a7e54760f40b71738e01d78b3c287cd79b0c5d06a89ebd4a711ada297f6ca339f64ff1526aae9c3884577142cd047be8b6519e44c5899105c6300f7bd
TLSH
T183B0120046304197C4C9E2039C4CD2007D741440084ECA040F09A24090C21F1C2039A4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation93398737978617032tmp

Path /data/data/com.trippoa.trippoa/files/PersistedInstallation93398737978617032tmp
Size 569B
SHA256 3d094c63e6701422d3b9922635abca65f4a3a079bae551a3a3889de4da204e31
MD5 93f55f10e088e4f183a3de63de056f6d
SHA1 257864012253f67819498ccca84f5ebdcc6eba8a
SHA512 37018d77667fd62067bbe516db305048dfc71f4b24f3d9069a461f04c390901e666d679fbc2122d95a7bf6dea7d208b7e9bd430843f690d926a2803c8dc35e2b
TLSH
T14CF0414A5AA4889DD8816243944CFC046E2C08911AAA14E46E570860B2A0963F287000
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MTo0NDY3MjgwNjY5NzU6YW5kcm9pZDpmZTVjZDdmMzUzN2E0NDg5YzQ0ZmFh.preferences_pb.tmp

Path /data/data/com.trippoa.trippoa/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo0NDY3MjgwNjY5NzU6YW5kcm9pZDpmZTVjZDdmMzUzN2E0NDg5YzQ0ZmFh.preferences_pb.tmp
Size 370B
SHA256 981aebb2d2b704079da6ae8b796da1730c2fa6c45b15b7842770485292216b17
MD5 1e649e4edc02546eeb8566477ce17571
SHA1 8aa5026730c3772f341cc778e0aa46350be548d9
SHA512 6becd529265090502d07a42355af37add67b029688ed8e51fea436ec4d639ca57a2f841123a5ab267f01360c3f4a0de4395231a72876c949346bd97e63023487
TLSH
T1ECE02240EBE16FE0292B564C7B98022C0F1FF38161B645A924E80084F84A64941C1E1B
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MTo0NDY3MjgwNjY5NzU6YW5kcm9pZDpmZTVjZDdmMzUzN2E0NDg5YzQ0ZmFh.preferences_pb.tmp

Path /data/data/com.trippoa.trippoa/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo0NDY3MjgwNjY5NzU6YW5kcm9pZDpmZTVjZDdmMzUzN2E0NDg5YzQ0ZmFh.preferences_pb.tmp
Size 394B
SHA256 9a1aff1ffd5c1100670da22e988f0552a0be14b3ce62e1a46fec05e663003344
MD5 97879d6ef69d40691b36221781ff8285
SHA1 f9dfb67b269ba4387a82a3dd25508b70dca1fc95
SHA512 acacbc12992177a1c9030da823bbd8622dcbf688b978d71bd708535a0733382b6a0ecb6f6c034f5bb18daa5f49e3870df78a1b7543e2a6fe3abada0b7a25e832
TLSH
T19CE02B44EBE15FE0257F564D7B98022C0F2FF38161BB45A924E80484F84F74951C1E17
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.trippoa.trippoa/files/profileInstalled
Size 24B
SHA256 76033849a95b0d1b3a3075c48714237d41771a2a60ee99588985a6fa0b15308c
MD5 8d87870a23f7a35197c35e0a09fffdbf
SHA1 c3168a49521b351f06fdbc8d3a2c0427972c209b
SHA512 4c5ef33505f07bcf2468f8495c16c58248ddc1b86ccfba45ee631c6a44bc3a544955316d855ba9c6341e0ef874af69aab1050e338976195d810f7d3017422468
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.trippoa.trippoa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 e3467fc405237af6553149f81e389cd0b11425ee8e421c40897a205d75420621
MD5 09cf803dfda474c49f6f0063062157bd
SHA1 bb4c922166e3ff0f3a7ab2500a6c058d55119097
SHA512 9d902008794e696b86d9227e0a68578d2e0c730f3152db9f5734a63518a67f0996ae10e5564435eea59b9b392a6c5c39b5614e1ba98f8aa1b2e81a486841b14e
MD5 SHA1 SHA512

Submit Download

io.flutter.firebase.messaging.callback.xml

Path /data/data/com.trippoa.trippoa/shared_prefs/io.flutter.firebase.messaging.callback.xml
Size 135B
SHA256 02c6c304c63cc3d86a9fcafe34800ceb72ae9cce27b4d0b6a85fc196ad186794
MD5 bfd1a1def05746570c6792d0d10487e2
SHA1 17d915cfa5da16454fdb025acd20991c5b8fb030
SHA512 57e895a051e5d597b9a81c6abd26da932bf37814fdde2d210ad2ea2940f642ea5cb4d4c0aba6e25a5e291608bb349caff730c74e663f3dfdcf43f5c531b07666
TLSH
T160C02BC0E3ECEC632A800E010510C30652377683160C32C60E129A290FF63470158040
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.trippoa.trippoa/primary.prof
Size 539B
SHA256 ddcdd5090a769f38c644e9c3ec25ca75cefc4e6ae6105d7db775145b73c286b1
MD5 2191d979f28a69306c50f6e3dbea46b3
SHA1 d8b0c899aa31c5bcccd21f82e61640b6456eaae4
SHA512 1da78c39a3e633f4c8d90765f3ca18f424c97141ccf326ce4f6232106e490f64853bc06fe92dbbedd0bad1afae4300c08d1f69bd96cb5bd3925638136113a621
TLSH
T19EF0750B86370A82CB3E7A38394B661D908CC14940101B0FBCF46F06C4320099F7B0C3
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.window.extensions.jar

Path /system_ext/framework/androidx.window.extensions.jar
Size 123KB
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
TLSH
T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 25KB
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
TLSH
T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads