Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

04/10/2022, 09:59

221004-lz275saec6 8

26/09/2022, 05:56

220926-gnh8nsaghm 8

17/09/2022, 08:02

220917-jxlfhahdf5 8

06/09/2022, 18:32

220906-w626tseffn 8

06/09/2022, 18:14

220906-wvcrsshbd7 8

Analysis

  • max time kernel
    335980s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    06/09/2022, 18:14

General

  • Target

    bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151.apk

  • Size

    4.1MB

  • MD5

    cc551ea1e9bb262a25f25a2f15412905

  • SHA1

    5856d942486d0ef997527591c7ae58b6d6a4bf07

  • SHA256

    bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151

  • SHA512

    8b511c9e9cfd784a0537027c738ae6d4c722f0358814b4fb8089c8302a07320e49990183fd5f6b9006e99e5c1622a17d5f7ef21613c7075761d3386e3cc44f62

  • SSDEEP

    98304:Jeq7CtjZunGGO2mASwWX47tll0FCYHBjnDSY6vkyFmwnM/yd2ofrHS:5ytun3O2mAJRll0F/hLGkyFm//T

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 3 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Removes a system notification. 1 IoCs

Processes

  • com.ohalqpdj.discopet
    1⤵
    • Makes use of the framework's Accessibility service.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Removes a system notification.
    PID:4162

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ohalqpdj.discopet/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.ohalqpdj.discopet/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    62974f7f3ae70ee03945f68832625076

    SHA1

    b540457467d2bef0a97bd55733d1d016710b65b7

    SHA256

    93dcbd95390dbd2e25be3079a4a03f1d96f6c3f40f968d0a878fc1ded5b1e6d8

    SHA512

    31a01608130b8ef102421a27adeb2655ffd173be4645ff92b697047687f9f1ceb4809ef4e25bb4dc726b53f94b68fe6532d6da73f3fe7365503178fbdb455842

  • /data/user/0/com.ohalqpdj.discopet/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    526a0c2ea879d73d01ea9dc3af94c8b7

    SHA1

    b7bb93f951a015dee1083b65e878718be171d90a

    SHA256

    ef38af825425cdddb09acdd2088330316ea8beab5385aaf0a5c77a7f035e31b3

    SHA512

    392f8a4838637f235c833c94635eccbf636b98229fa993813ecf96e8cdd4743af3197a6284b31aa5939248496b849a6fed420c6e472aacf17f9c51f94b924eca

  • /data/user/0/com.ohalqpdj.discopet/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.ohalqpdj.discopet/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    ed70b8ed2907e87fb35e573066fadb1e

    SHA1

    3e2b3e465ea7d9db4bb84c92761284dfdc722304

    SHA256

    35785ec4a6cbd6b22bf6a08bd59ea9f28540fecf3fa5bea870130f4e1c85f790

    SHA512

    df353156bc3bfcb156bb4d959c761b3670656db74357fc9ec889932e59b4ec14b611267346a6f6358684e75992c7503873c71617a04860146560b145d4c291ac

  • /data/user/0/com.ohalqpdj.discopet/app_webview/metrics_guid

    Filesize

    36B

    MD5

    beb7734dd2ceddfd41070c47b44a354d

    SHA1

    a55447fc66e72dbc964a4d385867bc7515d4a68c

    SHA256

    01f1770de476d384d745c60fb5a149028ae01da9c103d31f63c1d1976abb4a2d

    SHA512

    dfd77ef7b72e402dd7a1eea199a10713705b9e5e5e244efa7e1ee6feab586ccc9907d0eb2e66ef4fc2e8b271a1b42be45e6295c834e87742b9bfd30a2eca56eb

  • /data/user/0/com.ohalqpdj.discopet/databases/database.db

    Filesize

    68KB

    MD5

    fb5b3e67752438d4992d139b651abc07

    SHA1

    417233757b978fcd1486d8c7786d7ffbe3ce7d98

    SHA256

    6d526fb6d4af24327fc76e5b13606c1933b365aaad42d6d428f854504a70084b

    SHA512

    108a3deea144566566d213285801f3d20b8301e24edd3db9f6e90efe0ffe11c11b9695fa2976a85a4490304b7eea66d023963da3aae858aad2e5682f26cec1b7

  • /data/user/0/com.ohalqpdj.discopet/databases/database.db-journal

    Filesize

    524B

    MD5

    a019b552501238c54b6f5ceb2895b8ed

    SHA1

    f99a3e551bfda517eada89999ff5122975c1bc3b

    SHA256

    78ba42697a996987cbf8472d74c52670ddd5aea28b2b381e38db02478ef74d6e

    SHA512

    d35934ea32a26754cbff56ff13001bf951b0d6b1506cfea2d32cf2711e5f1bdbb1111ccc9a285999788d2e68ab05272c197d278c680de7cd9b2bd367a2df6d77

  • /data/user/0/com.ohalqpdj.discopet/databases/database.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.ohalqpdj.discopet/databases/database.db-wal

    Filesize

    108KB

    MD5

    f4b1eddd6d0be55f5ba71eeb196cb325

    SHA1

    70b04376e9d37df3e10010fb9fe981c200026fb6

    SHA256

    4e6f4f24c1f17ac84732a4553339edb44bc911ba6b22eb687504bc4dd0f705d2

    SHA512

    397c2c90794083fab40c15d6a4e13ad089e8574b1b83719346987c710848a279751a1ee4193d2aa2914d61524a915ceebfa7af93f322264cde9100853519effc

  • /data/user/0/com.ohalqpdj.discopet/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.ohalqpdj.discopet/shared_prefs/preferences.xml

    Filesize

    152B

    MD5

    54ac2f9a144c31b25ddd041dea6723b6

    SHA1

    2d4082ea6ba7bdca2e74a22119a6f5d302d701f1

    SHA256

    f4479caf86557fc017c67832b8af210f1330eda5ad948f6a3d8f2924fbf5b160

    SHA512

    7e3ec7daabd0c734c3bab7a3b314e855c69cb036c84b650d08597234e4a30cd86aaeae30ee8a28b841def8d32e83571a022e206d93c3147b242031732e2ba4e9

  • /data/user/0/com.ohalqpdj.discopet/shared_prefs/preferences.xml

    Filesize

    398B

    MD5

    1ccae0e526cca84b2cd856ada017ce31

    SHA1

    906ad0cc618d2201d4ddc614fc7fb2aa171eaab6

    SHA256

    fb20dd3c441a3a8acc075bdd6e2408a0d8989a7aa65b3bba5153feda13fda27c

    SHA512

    28f51d7fd3eb6faa5ade7a11620140193c90e73e583d90aa08df3aa471d1511dbbb05066ab570b668587fc5d423868fb9d6f068d369c73b9629963c95e1a03cf