Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2130223s -
max time network
164s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
27/09/2022, 12:40
Static task
static1
Behavioral task
behavioral1
Sample
Corn Scraper - Cut Corn Pipe_1.0.4.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
Corn Scraper - Cut Corn Pipe_1.0.4.apk
-
Size
25.4MB
-
MD5
d52e59b3fa3b70864afbad2c937b907c
-
SHA1
ae25b4df1d1c8051c01a152a18e5e9c1d5be7930
-
SHA256
6352a29edcc7ba7932a0d5599199b1a9a26fe3b83960845eba8a9888e7c5d487
-
SHA512
12bd1b9b80ae98b3a53238303167d3a185e7ae23f72bd39c07e092783043b1c29e9493f5290d0f2cd0e8eed37a8e3936cd142a4acf47c38b89a5d168f022756e
-
SSDEEP
786432:dyKC7MMJlW8IM/y8nLBD4EAfICjkbv18Jodym:dyrd3LIqy8LBDV2IuYEoJ
Malware Config
Signatures
-
Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.corn.scraper.cut.pipe.siling/[email protected] 4580 com.corn.scraper.cut.pipe.siling /data/user/0/com.corn.scraper.cut.pipe.siling/cache/1616432909849.jar 4580 com.corn.scraper.cut.pipe.siling -
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.corn.scraper.cut.pipe.siling/[email protected]
Filesize3.2MB
MD569cf159b893eefff9a8106cc3ee37e03
SHA1165207adfe8c6047ce9f3dd38aed50796c1660d1
SHA25626fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf
SHA512379960366739517c1c856834227aaa1a30a20a9bab730d4229f200192f2c643b69a3e2e114dbdd743a69577e0b7b477c0d14e71c31ee491e137ec405f79e71aa
-
Filesize
64KB
MD5dfb2098ca7b3bf16d6f5f1e7d3839af5
SHA1ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
SHA256e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
SHA512fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50
-
Filesize
1KB
MD56898f861c5130ca75f64162aefdc03ec
SHA14963abdf4b0e56dbc5a30f7badda4d6b32289ddd
SHA256da6a5895afcec3be4da1fe3590cddce237bf7556eaecbdbe6415e367d2ebd65b
SHA512fc4674ef292a5d160e1d3f513686ced53a425f7509a8ee323ed86c90d3295de27b3935ed33e1c0b5285ff616b93651d5430757f774e8a51d3661c215d3a53f5a
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5521cd090876c12ea6603fa0bfec89b50
SHA1cc9d382569c886303275ceb0695d66abbcb2060b
SHA256668a71405fc288d7c78e5bc450b0a6b0b22f8af4bce7789e952593dcc1faec44
SHA5122284e809bcf35363254eb6c85265a65b1f26237e7cdf694e57ac3e23ac8f9dcd5c1d855c0b804422989f53705f8c353d9f50ec702f3418b43b5e4d67880a1874
-
/data/user/0/com.corn.scraper.cut.pipe.siling/app_webview/Default/Local Storage/leveldb/000001.dbtmp
Filesize16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
377B
MD523cab7a519cc23d8f45ab256285f6a29
SHA1820f41f05f9edd80ebda4780146f8489895229eb
SHA256f4c75f081564f34fb36f4357fb3ef1fb96dd8b9bbda121ecd262187f5ee81889
SHA51295ee594aa96e7410e795807f7e124daeb4b59ef701ab33cfa30b87fda3eecdbb690e411229e75a9fc25ff475b47b98ff2676a4819f42259df62b9119eff98159
-
Filesize
150B
MD5ed3f59ff68ee014b948c4639ed2835fb
SHA117e281bdd667f190ae071e2c943e3f5edb930418
SHA2566dafcc8b109e95faf51d0c2c63c7b89fe127e35151be3f8c7430cf757cec7ec8
SHA512e7f84ef04e11d09f123e36c9a57d4a48a7e763a9ccc1d5907ea1d3490094c4272d401e8c75b31545cccb8640dd3cb416e5304721a2434697ba9dbab03c82b335
-
/data/user/0/com.corn.scraper.cut.pipe.siling/app_webview/Default/Local Storage/leveldb/MANIFEST-000001
Filesize41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
120KB
MD5a48cd9324b1f8754b07f00d863b840f3
SHA111c6614775b35a58f440971dfc87c8aaac6d6173
SHA2568859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA51235fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
-
Filesize
2KB
MD5933ee018b61d5b69f3510f93a772c021
SHA16e00c39ad9e747cd88dc81030b53fc54def86b46
SHA2563f912444172ebc35a74d3a9039a65c1891f14838c938b9d224ba1688d5988dc0
SHA512aee63ad11cd7633ef90656f9b0b017537552970dac471836f3e987828ae2208aee7c35540ff3404684d1e9ae0342d756affce7c264cdbe197f3b8ca5f0ca8e58
-
Filesize
38B
MD56f237b017399a3976ac9ec95b2f238d8
SHA1ae11b02dd988466c7327ba43faf4b65efc0a335f
SHA256f18052fea4cff516a32fc0d317e5ac1f27c306567c8cf9646d604957cf15942b
SHA5120d333bd7a0e89cadbdb2103703c96311b9fd1d761638fe8d3838ae0dae161a0c0249bffdbc7c72efd7e666fd698016d610db62c5501f719fd6a6d714063c0d62
-
Filesize
21KB
MD586ce3683020b3f28f4110aac9c769ff7
SHA1876e0686440524927639a4797b2f13b12a26ce4a
SHA256be852340e03b169a28811d1ff41582d19638d9fc0540f237ecb960c45bd07071
SHA51204d03a9963ba49adf5d0d26a21b57e85e21416fcc3d479ce7522149d45f5ab630ff78e590e724695fe29850b08b4dccfa5051daf5d4e4afd9384f7183f887ddc
-
Filesize
40B
MD5b537cd52ef769ed002c357d2e4be8468
SHA15c12c7761e25df04741c2c88f386fd97f1295ef3
SHA256f5cb7c94979633e8f734a3ab5ac955519e75ccda41e10382e06a419d5cb287d9
SHA512b2c8e3c8a6cf7eb96a97362f85a7af6cdaf0ca17353ba3fc4bffff634ca71695477f5a247e895b421e39dad736db89f358c49db67b662c098249411fe651967b
-
Filesize
10KB
MD508f7f41be0813be4be97a7248766243d
SHA13c853fd86008ed2013a712315ffe80568b382359
SHA256f6ad7d059bccde0edeeec852a80176307df15997b3e8c995042e18fdd36575d5
SHA5123cb5b147ebced61635e17475f4901ccbdae1b6ce9db8d75bbc519184f7885292401350ba55f68d679310daa00099eb55a05ff91490ffed3576c95d5cfaf0a441
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.corn.scraper.cut.pipe.siling/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
Filesize96B
MD5a185cfec1e49d815c579a24bba240132
SHA18b320967617f937ca4aff9a90a8b00c7717367d8
SHA256838d81e3f65131fbd2c11075e941c8c4daee7e3960a7958a11b84c22ee5f2377
SHA5126d7f536bdc85c36b2ce65adaf8a59b1ddc7176b1fae5ccd41c5d3cc6230203d87d1d93dafa1c28ac43210601cf09ee07e73b26a915e10387edafb9af4879f181
-
/data/user/0/com.corn.scraper.cut.pipe.siling/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
Filesize48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.corn.scraper.cut.pipe.siling/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
Filesize96B
MD5bf1763c73fdf23c4c285967d2f0562e4
SHA113f5de059651595667cb282080c324de6e78641d
SHA256e3bdc5f3bf4d97b6c8aed953c528450f7d9950517d5a63bf6bc75fbae7a71c92
SHA512b338e3cad911e98c51099e506121212e4e69f3d49ac5c8386a7b7ef81211a6d16c757f6d366efd0cd7d6d8fffd502044026f7c3ac435a5bd01e88fb3da11728a
-
Filesize
12KB
MD5681e00ae876f6afebe5671874be5545f
SHA12ff19fdfbe5005d773b79c8f6952a1a75ebdcacc
SHA256bc083cf6f291ea643a5a9d0d303101d5ab4a5483f58e1b248a4eb3845cdfe857
SHA5129c43fb2a9216a7f7616902b86b04a24a3eebc6b12daba9c947bb87178e676425780fe3019ddf06fe50c11c0ffeab0411c7cd5307b46aa0819021eb0637d0d8cc
-
Filesize
242KB
MD5c28725d34858aa6fe3904e409fc18681
SHA1dfd019d896bedd7bc78e2a2fbd93fe4681caf485
SHA25606097fde690b4a5f4288254d2c4a2da8aed4b395a237548321e048703f144a72
SHA512c928dc52eb3fe8dd197f29910a891299f76c99ed89394d3747cd3175a2dd5ec5db000a6648553420adabc9395c422c1b0b83004d07d237f84862e22667aaee1d
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
144B
MD52da888532df8df5251864d864a495be2
SHA19dad1cc5b6c8feaaeafec376e5a98f934618428b
SHA256ccbf20aaee1dad998816c45ee00d1b03b6e7302bf93ea1aa452f7894b6fe9da8
SHA5121d31175e166ad24627ff7afe83fb621dc261625d1e7a462fbb7c356ff222067cf6e7295841295bbb0bc72ac06675f50f2a732a03c31a91f7367af36c145ea469
-
Filesize
240B
MD5c337f0fc5473e4877b8fa51685886bf1
SHA1ac93d200f974b06f33b0ac5aedb3c62be732a144
SHA256e06e7c515a4f27b205a2a4dba69eeabcbf682b4003215c5301776fdfcf9ab119
SHA5124af294678a0f971c1bfee2a82340370a3a1ce35ebd2a36944041af6c203fe11c9aed56bf9a08ab6b87a5f265764aa2624d7ba35de1ca734ec44f56317ee2db72
-
Filesize
57KB
MD5f080fa2a56ab5479d58063e5ea871447
SHA14b3fd57a98916fa5784305b76ba30af26b5253d9
SHA2560aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA5128aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
-
Filesize
8KB
MD5e579a6b00eef1318f9166352228eba18
SHA176988896854f0139083e77862eea1a4846cf039f
SHA2564b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
SHA512c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699
-
Filesize
1KB
MD575c5b21f45ac5be94dde6aaf790c87d1
SHA1f982ee7a2bb79305567ea982647338bbb723476c
SHA256e8fd51299a84485eb52a2ad40f092c88b4baf2a74da2db25cdee9dfa8de781f8
SHA5128bc3374bb13719529fa1c7981ab5f3e0c88fa18b8ad0b6065be2b35e0980b1a7f5a2a4544cca2c9a96788c5f0ab5cc6517f5f917450dcc463e17e9bf781c4d4c
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
177KB
MD508f94008d76981c4af3e50d5c6e2438f
SHA12869b820f661338249c0127540e1101130ab5d03
SHA25673054cac4154f24ffb5fe9adfef71abc118c90d60d4109a66be02209e7c4c3a7
SHA512be9a0f8a6016c9764b2b704690dff1ce89006dca6717d577125d4db18671bb5787ea6d357b3c130c2f1fdbc8f2e3b2b22de11b85fd42b4059b3f4924fc259320
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
350B
MD51e482cdc25ef44b66484624b0847a430
SHA1ac7de7866682af51bf15f4badb2923cb6363e988
SHA256d83e35e4cbf9740b5d1fd861526d570913424a67f79894fd436208b88226b35a
SHA512f783f3c1b6a12a7f45fb031aef741ea3edb162ba8f9a040773223c0a33a040b28283457d761955419c81f138763536843403b70691dab7fd51398fe0aa4acd01
-
/data/user/0/com.corn.scraper.cut.pipe.siling/oat/x86_64/[email protected]
Filesize798B
MD53ccbcd2bc80a12233d2cb4cbf9cfe938
SHA1c5276faf6a6fa4084767c15b71da14b5e80f08ad
SHA2560cfcfd192137affcae23cf84d26ec37690ea54b2123bb8f91184900b3f126242
SHA5121cd5ca7f82cdda670f4ee0345602591d2efa64986b613d16e43d1363cb06f5a6b768651d9d6a0628b61234a1b34652e3288d1517e6c8c1c2e0e1019909d4a53c
-
Filesize
127B
MD597ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
Filesize
133B
MD5fbcce2e9ddeaa59e5d88b682effcdf26
SHA1f6d8b3b0dea3bc6814e062fb5a23e7f0f3a74f53
SHA25613ee89145e77faa1952205dddc6f7bf7319f39f4ebfb0309e12bcf52be592b44
SHA512ba6a15ad9b6c37635ec818d62e5366e03d19fe1fa9fd9f68f445c8474c6e489a6f95b44c2f2dd35f63292614a68e9fa0ce971e8249a67319a89e9ecd58a787a4
-
/data/user/0/com.corn.scraper.cut.pipe.siling/shared_prefs/com.corn.scraper.cut.pipe.siling_preferences.xml
Filesize448B
MD5b650a1a41d90bdcb8846b69e68d6fdae
SHA19254d16070bdc05eea9af1f32414b8027087cf86
SHA25676124ae128ca49a285b4660a5fd1193bdc861e674569d6ac59b36fe4150cc87b
SHA5120aa8829ed983abeb4152a3ae8822da67e1b46e06b8779219688adc1b3f522444a38a47309a4e85570840b6598ead93a91547e94e9445aaa5f8a296b15e4fc090
-
Filesize
132B
MD5846ed777ab437f86541440fd13f0f99d
SHA1a92556fc4ec0c4fcaab2884410e9274920bae197
SHA256672b7ed43bc73ecddef7d0e84e65f1b91193aa444d7f9e63602a344f216f377d
SHA51255d07e8b9d32acd1ea9596913a6527d5045a450a35baade606d916c3c9004930c35b6a90f2cef298f26f640f48c10774b09769de675bc0c14a5a3c272f97f9d8
-
/data/user/0/com.corn.scraper.cut.pipe.siling/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/storage/emulated/0/Android/data/com.corn.scraper.cut.pipe.siling/cache/UnityAdsCache/UnityAdsTest.txt
Filesize4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/storage/emulated/0/Android/data/com.corn.scraper.cut.pipe.siling/cache/UnityAdsCache/UnityAdsTest.txt
Filesize4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/storage/emulated/0/Android/data/com.corn.scraper.cut.pipe.siling/cache/UnityAdsCache/UnityAdsWebApp.html
Filesize1.7MB
MD55c415aef3b7db5b73ae4628afcb199bc
SHA14bff9ec9333c09d25fa529b0bcc9c9f7d746f9f3
SHA256651babe3d17e0dff97a5f88dd56f5ca01af4d63cdb51426fdba66cb5665024f9
SHA512e8e1cb0752394d2194b30ac4634d939bedacaec0c7ed75c849239cedd85587259e4ba046a625754be5aecb5a41e0c4c749fcc399dd1accafe890beeb16164e89