Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3600249s
  • max time network
    306s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    14/10/2022, 13:00

General

  • Target

    pochi.apk

  • Size

    16.3MB

  • MD5

    d6a20b5e8706231a4b10ae18d1e8da12

  • SHA1

    135ed8adf6c875dbd836504796102bd41cc13265

  • SHA256

    dacaef00983a188984deb34f5620921b17a4e0390a8515c880db89aee9577e88

  • SHA512

    c7aaa825ec6a7f6da99a92fcd4c6fcf8a99939b219aaac18dd94003a37653b548c92b5b4157ea3bd0ba9b8626a22cd1493141efad4725436e29c1e9612be420d

  • SSDEEP

    393216:RA9iJw0zlQTSezkbzqSane4wHT9Ne0Ep2TJkBSEv:R4iv+uezkqS6nor0WkBSEv

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Removes a system notification. 1 IoCs

Processes

  • com.github.pohi.cdc
    1⤵
    • Loads dropped Dex/Jar
    • Removes a system notification.
    PID:3969
    • /system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/com.github.pohi.cdc/files/csp.jar --output-vdex-fd=127 --oat-fd=132 --oat-location=/data/user/0/com.github.pohi.cdc/files/oat/x86/csp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.github.pohi.cdc/app_webview/Cookies

    Filesize

    64KB

    MD5

    cb7543c4df600f2af58097cce0e334ba

    SHA1

    83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

    SHA256

    64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

    SHA512

    ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

  • /data/user/0/com.github.pohi.cdc/app_webview/Cookies-journal

    Filesize

    1KB

    MD5

    32eb9c4c27c19c76fee1bfdcca8cb900

    SHA1

    f9a1b9e566ce20feea9ec04fc68e144a42d1a9ec

    SHA256

    f3668447ee01e585e62ee9f443a8fd04dd4176aea75be76f87b4394c085f0cd0

    SHA512

    478aaeed34c5e999961841777552c4b3bf835628519a57e004a8b33a6920b0c6f4dc07110ac5c09d924ba034d62e88882f28c9a39a6a2e914de128da63cbbc74

  • /data/user/0/com.github.pohi.cdc/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.github.pohi.cdc/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    763df1f3bbe388bc345d83adcd1df23c

    SHA1

    5d6720b5beaacd36d675464fe92c801e2b431185

    SHA256

    ebaa5b66e22ffb50fdb371cb00574e4cfaedf92f1705d5246f81aa410723573d

    SHA512

    2915acc09c7d652bdca9912134156888d3a5e92bcfc84fe69eb917e62e0f95ca78bbd212a8b015383ec66d4e34b88d45241e2a3bc965f8d603b7b1b1e5c09fef

  • /data/user/0/com.github.pohi.cdc/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.github.pohi.cdc/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    2359c7f108268a4476bb0978bdb1bdc6

    SHA1

    458b4359b9e3e9dd03aba9176c9f8d4076ff3f0b

    SHA256

    ac51849d23200d5eb1f2de81cce4eb2b1a3760cdfb88f776ef45ba33a1663979

    SHA512

    eb14a78fa87dbea912e6d607c907d6df6368353e7472b41e613388a3277bbc513e7ed780d8ec64c3d9d62611463428a4ccd92b001776fe54dcf20a4671627bbc

  • /data/user/0/com.github.pohi.cdc/app_webview/metrics_guid

    Filesize

    36B

    MD5

    f2a143a8c704163e407184cb8d2d3744

    SHA1

    2a1a9adcf06ea98bab25d39d3bae4acdfd75fdce

    SHA256

    bd8ab4c10cb5fdce2510752e1db46f933aba3d308fb1aa509dd8b91f08f67ccd

    SHA512

    1bc93dafbfc73665777b64065055da9c4ab893c4214b95046c37944967aedb577fd1a28bc275df8d6c37de34faaefba72388316aae19e57b57c83c9d059e8478

  • /data/user/0/com.github.pohi.cdc/cache/org.chromium.android_webview/029f483f42f5abea_0

    Filesize

    31KB

    MD5

    0e5ab34d604439c7e2c5b50978bdb9ee

    SHA1

    5a85a96eec4fc985f5ae6c5aa1c2e03d18e059f3

    SHA256

    f79747a52007734ae395c2a5501ec472704efac5903829857c46174b4de84212

    SHA512

    68ab07460424af762c341ff29a4dc214dc0e9cf01fec08c16e4fcfb18f8ca9eace36f7e691a30ff6513f6503cfb36612ee229ff70fe82af120ef1472a6a2967a

  • /data/user/0/com.github.pohi.cdc/cache/org.chromium.android_webview/029f483f42f5abea_0

    Filesize

    31KB

    MD5

    5b47e0c374839f90edba6a2a999c3ee4

    SHA1

    8bd5df2c084836caed00478e372bac1d3a13be81

    SHA256

    247f2d581edcc47f244ca4897d479bf12a40c23de112ab54ec3a4706af6498c0

    SHA512

    d6c828df83010e343d68d69c67686fac2718e09b4a12d733a1a0955f69b782d716ff99905b373044d410306608bce42684807c9fd0e86045109ca65382600dce

  • /data/user/0/com.github.pohi.cdc/cache/org.chromium.android_webview/6b101b23aa78ee53_0

    Filesize

    303B

    MD5

    7dd4825dac4cfd62ffed2f9c8f224f2b

    SHA1

    4c47f39c1eabebcadee4ad14baf01e3537d28119

    SHA256

    7eae222014370d5dd5dd5c3f15da115c82fd87e277013c0b01098ba6195b9608

    SHA512

    bfb46ba7260fc7b313740e412905d95fc6abf4c7b398cbe09d2c54cba34ec305e76e529a6061c6bec6bb1e1a0bc97f7cb69cdb8e10372e2efe108cf8ddcb4222

  • /data/user/0/com.github.pohi.cdc/cache/org.chromium.android_webview/8a2dad90e1eedaad_0

    Filesize

    304B

    MD5

    95c40f60374729590635850289b2911e

    SHA1

    779206c02b532d33f69525a151fc7911c99fb6af

    SHA256

    ba00933582e3c0efb90a8f2da8bc1a2a614df512fe741b542513eedd34d5d9cd

    SHA512

    59ec82baf8f337e295fc9150883528d29770ccd99e2c5b96fbf26af46548e1e40bef67cee690faa3a624e016388bdd1626b102e0d301b285d310349a37d4f9f8

  • /data/user/0/com.github.pohi.cdc/cache/org.chromium.android_webview/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.github.pohi.cdc/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    48B

    MD5

    a7603d38a2054439ccd672abff6a38f5

    SHA1

    d914187b9fd5149bc33ac7a930e6eebb3288ee08

    SHA256

    cdd0cc4bea31b14a38bdfe08dd44be64d0662a143568576bb13a52beb38e7095

    SHA512

    d2a94d7132e442abb757f7d37ab83b26234fdc01e9fe5311b9794baec3f84951d94e5822506e449f405d592dd75580f82bb79d287620f53dfc04ab196a5d5661

  • /data/user/0/com.github.pohi.cdc/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    96B

    MD5

    2d6e42487f78c8189b91179280e92e3f

    SHA1

    51085bb71bbe605944e36e0329b43a77c8bd91ec

    SHA256

    89f1f51629b347b6e4359ce33acecb741d6eacbca39a5f3a4de5c6859a6567ce

    SHA512

    35361215eb5b688083d5b7925f8893ec8964b3cc141f9af9ad7f7fa59e95871f438fbbad21928f6a8500ad404f28c2ca63d526d4e9e3e2750310f7ea629c51a0

  • /data/user/0/com.github.pohi.cdc/databases/tvbox.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.github.pohi.cdc/databases/tvbox.db-journal

    Filesize

    524B

    MD5

    f1c2276e9fb7a4f90759f1d571ec5024

    SHA1

    d57dcc4c6cd142199c1e8da045ff5791fe628d0d

    SHA256

    8daa57add05799c7eae57af15dfa8e87764192651a56b3d4be4ca146ba6f741b

    SHA512

    82d2f96a3dfe202350c07e92b67bc587940abced8df68016e9b22fbb86698049192f5c0b3af4a9c82d0d06c2dd9d12f098236d7dfe61c253685f27685aaf9695

  • /data/user/0/com.github.pohi.cdc/databases/tvbox.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.github.pohi.cdc/databases/tvbox.db-wal

    Filesize

    60KB

    MD5

    42a5d94e7a5447fc9a9ab94ce41dec16

    SHA1

    e4013e1c9cac8b567a51237ccacf7cd0d2662bde

    SHA256

    5cbc176a40d3121ca97d14b0aa439a2a7342586ff76ed1941094f8ccc02a56cf

    SHA512

    406e4cbdbe13c1b829bbb55e0ea8e270873285f4b02956a55664570da36f5c01275d219945beec6511081cbd8f1eeb7179e5471dd374a015988d375f893cbcf3

  • /data/user/0/com.github.pohi.cdc/files/86ee143680466b3944dcbf5a4f51d76d

    Filesize

    88KB

    MD5

    ffe63eb687eb20e761ba484b904d8da6

    SHA1

    078d1ca9846352025d4ac0faa9d5ad881c5e8ec8

    SHA256

    66363f108e967e9e358d6971a1b119996769b06b390285bbc1c0f41da50f7698

    SHA512

    d740ee67292da7a82e4b75bc2c3c8ae5e3f898401580e8f396aed896d8634aa63701e50c0a118e01eab5c001bbf06f3fee5442cf04d7b507426194174b245ac5

  • /data/user/0/com.github.pohi.cdc/files/csp.jar

    Filesize

    423KB

    MD5

    437d1e20f231ee71f4343e0b8329ae80

    SHA1

    942e3f9e8ca1e86e78332e6c7ba4d2c2e56d9117

    SHA256

    e64f703955f9dbb591615b4c4db35796baa1f8b75c6bf7ebb783f00991798b63

    SHA512

    f640413b8eecf594d400d4a4aa8adcd24765313607a64deb8cb0cf26d0c7179a77678ce591b5c4d142ff087498d31bfff6f2918602ff15581590a73478ca6d4a

  • /data/user/0/com.github.pohi.cdc/files/csp.jar

    Filesize

    977KB

    MD5

    08c10905bc6a756b16ab13b8673bc51f

    SHA1

    96612083f624d05bc3e6ad746e17de7e603a83af

    SHA256

    db1fa1b37307a99342ffb539abf80009aa5d769874e16c48cdfd012c838da3ba

    SHA512

    ee07f69bd5142139d5b8cc3e0682ffb9616030141928dee371c057d1f298416cd290d4346019c4d3db17ff99f41a34e2b121bed514a9081cfeaf9ed03f6c340c

  • /data/user/0/com.github.pohi.cdc/files/csp.jar

    Filesize

    977KB

    MD5

    08c10905bc6a756b16ab13b8673bc51f

    SHA1

    96612083f624d05bc3e6ad746e17de7e603a83af

    SHA256

    db1fa1b37307a99342ffb539abf80009aa5d769874e16c48cdfd012c838da3ba

    SHA512

    ee07f69bd5142139d5b8cc3e0682ffb9616030141928dee371c057d1f298416cd290d4346019c4d3db17ff99f41a34e2b121bed514a9081cfeaf9ed03f6c340c

  • /data/user/0/com.github.pohi.cdc/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48