Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1131280s -
max time network
156s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
04/11/2022, 16:14
Static task
static1
Behavioral task
behavioral1
Sample
Chat Customize Messages_2.0.0.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral2
Sample
Chat Customize Messages_2.0.0.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral3
Sample
Chat Customize Messages_2.0.0.apk
Resource
android-x86-arm-20220823-en
General
-
Target
Chat Customize Messages_2.0.0.apk
-
Size
18.6MB
-
MD5
5450826c6ee9a148063b0c0bea34d6e4
-
SHA1
86e6129002009dac4f0223948511c10e6b6912c4
-
SHA256
970c9ce7ffee87946635a2d629b099f215048ec6f2d55de28ae850a3967cf0e8
-
SHA512
22daf5a720b676f54cbce4f036fd93411c6fcfa9650d2437008d47dce1244b718cba217fc55c5de21581305fd9206f8669d57377302fd83a6ee40df1d4435cbc
-
SSDEEP
393216:13XcYzvBPZgDKQ3kkSiVGFratTfjG5TWWBHYhriA2PxvPA:VcYzvBhW0k0CTfqWWBHYh+AMI
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.enos.chat.messager/[email protected] 4603 com.enos.chat.messager /data/user/0/com.enos.chat.messager/cache/1610724645094.jar 4603 com.enos.chat.messager -
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.enos.chat.messager -
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.enos.chat.messager
Processes
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.enos.chat.messager/[email protected]
Filesize3.1MB
MD5af02dbf436efc92b63dad16a71acba33
SHA193fd330f83c76ed7967f320e6f6cd2bbb937efc9
SHA25638c5c0584805386dfce413656c636c4e73a968ade86cabd7a4ecac4f034a842b
SHA512a3c77f369abe214b27aba3b8e98def476e20790803db49e2d357cffd9c0ea063b246942f2556ad125aa2e6406a3edee4c7846893befa9d50e08dae849a4e95a3
-
Filesize
64KB
MD5dfb2098ca7b3bf16d6f5f1e7d3839af5
SHA1ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
SHA256e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
SHA512fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50
-
Filesize
1KB
MD54ed12b2c2ff186cc0b0bee5c25fc163b
SHA179a865bc07ebeeb9a7e3881ef5914adc34033234
SHA256cb8cc36baad31db8cd0ba37ef0aaf4bb029f5ae78affa0fc707c54779846dc01
SHA512fdbcb7799a38cbe7d4379077d72025af0d7219a9727527654956569614e402f8cf9f073cc5262a66c1bb7ff9a8db870a4d5fa8da494951babde8e3ed8cced1ca
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD588fd55a80c7922abd8e13c6e4b27c9b8
SHA108082c92c42285606bc83c700ec26de77f298d29
SHA2562f6a059fc77a9d780c22799fe9f2dd8beae4d2771eaa2bd3387f36de1231efc4
SHA512315099360326519fa14b5d8a0c14e3bf8709c685034c621bb6cb7c57d5c7e8b5fddcd6f165100463faaa9421ed4977f36356100161978ab6a8ab99ed2c3c35aa
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
495B
MD58dc6becc57b9cfe33b2a828d855a0c8f
SHA112382b0147e003b3b36cc3be1ccd89da922c8f9b
SHA25669718fcdc7791225918522051309eb589e8f43b87831df7dbe13217d02f7bf96
SHA51231b321f59fca220cc68bb9cd76a8ea297fa07837c45926b9aa106380626aa5f87404845cee1b2f98badbbbdd8b0fa3958226f0c1f9ca0c22a834530b7634174b
-
Filesize
140B
MD508367e224cbe3692598a7bb21641d980
SHA16602f1b3812266dae4d453cd464ef5496983ab05
SHA2569dc6df53e05f5b173cd8a69c19cb5fe006c0028abfa7f0ec5ac18d4dedf5a529
SHA512d2500a17a5fb506e3d14f5028a11463cb50e40f0b9822d40978f37e53d10d679052c9df20a3f43aaf09a21fd5ccb47f3665c094cb066db827fd0a5a7fec54f00
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
120KB
MD5a48cd9324b1f8754b07f00d863b840f3
SHA111c6614775b35a58f440971dfc87c8aaac6d6173
SHA2568859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA51235fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
-
Filesize
2KB
MD580f80d9edc18ea65e9b06fcd618887b6
SHA16c1fe446b8037bb58d94281b7fc36644db77b124
SHA256066e1624aa2b598f1da5966e6dfd9424061d7a87740032071ef5f5dbb4e60d48
SHA5125fe1eabdb3138c900d5ca8c90b752bbc1bef00dfea5329f60c99874ec51ac635fe2eb705845965a9a3f2efde44145f5c1d3c3622d20f0996cf933406218e726e
-
Filesize
28B
MD5469bc7585aecb4f3ab1198df587286a1
SHA1afc1a79ef5ef5f882a48437f572ab20e1aad366f
SHA256e409d6945ca12c1499701f7df9bc10b0b6c8162c4dee75c4be380325d18180dd
SHA5122ed701fc7217625d2eb949fad0f022b3485cf5c0f6f82279ce7d54a370a9c2aa4e200ba1abc861476959a5a9f7321eafd66dd8a1bbc9493c6d843500d1faffa6
-
Filesize
19KB
MD5cf2ed89992c1145a27f078b9da17e96c
SHA12afc75b5bc6329198ec01829e6c6acbd0c0dee01
SHA25684009ae4f9125e2d61a670b88e41ad81bba2161dc0910b4506ef6356f0ebeb78
SHA5128240cd4dcf4087b5f02400853f6820afe4b2a8825089aaa661662539fcb857b78013f8f3a9dc047034f6f42168fffcc6c1727076ab0e4eeaffcad956659de6f5
-
Filesize
40B
MD5b63efa65c4cd95285bd3758fcb6cba1c
SHA10bbe5f2a5826b33719aee778c5d91817d0fe4148
SHA256023396c1735a702d76152a047307910d8937fda1bfca3e1d22bcb503f133fb63
SHA512f76d11b7faa2be8739094d723fb699c67169fea3210eeafce73939b221da924c5713f970e47a0f59800e8e0b24408020392bca6717b67cf3fcae502d424d0ee2
-
Filesize
10KB
MD59a0f5e6c81ecc731492e3550c0c8d547
SHA174e3e2b17e00abec0883f5725c4dfb0521fd3a68
SHA256ff3f075441c1fc2436a0648da4de3bd38d2f2bcdd2579b537075452374436a2c
SHA5126f62891831544d2260794f61398e32ad1e69afce87a30a633ba56768e1594681edb329f8f1174732a59a11c2c415c3071577e31c56a39a6606b2bbcc9b61fbe8
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.enos.chat.messager/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
Filesize96B
MD5f56a0c1089395f5925c34a1979437b04
SHA17f633f736fdc85d2a97f47993bae5e04d5827473
SHA256b353a8c40ed8095ba0761d9593634dc2ee6b473cc278f100c5ce7fd39bb9a989
SHA51211e7596e7d935e265793ddcf2da3b87d59aea78a115c2a8c4a2d9cad4db08b29ef79608ce74e61baf024c2087ffecdd4ead9f4e79eaa81a9fc68d1adad59bb1c
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.enos.chat.messager/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
Filesize96B
MD5f63d08b85d3217fc646f2bd4b01cfaf1
SHA1f62cf72041f0b75e8b621c4fe3d2573da5d18be4
SHA2565cd5f4cc27185da84b2171e3d9353c1f5fe91037a7036efd628f6d049096f043
SHA5123753f903a12705af0b7a265b795085a7a9326b1e117d1850084e7cad79c35a88f15d14b76ccdba4042e76e327eef26874347adb6759ab20a2ca15b1eec658733
-
Filesize
12KB
MD56fdb1b7968653c071d55dbe95ba27bb1
SHA1b6f7787a8117b75144d40ef19773793813572d6b
SHA25656eace56dbab082cb65a7c19ea66b01eef2573cef8d13186ee60fa0d39942696
SHA512744ff8e299071e671a6fc2912b42177cfed3fe8774f33f015c636d1da3ee2e8ff8b248249613d836e66d1af2e205ab7e5c6340b52781c9dc32145ed772f347b7
-
Filesize
245KB
MD50a095d0810c4f1dd505ecf1539b666fc
SHA1be032d69ab4a25cf1f9393837511ac4fa4aef81f
SHA256430a76db405a2b50ed663d09fa07f8624cff69f3914893a27c3f9e324781aef2
SHA5126f7a6f675d56221400456ca1b077d3a9eb14ab0c0a38933427ac24aa60acbec2e741e1b41e5cda504ee88bd034f85f0c81240d6fa73d254bcebab87d1ab533ab
-
Filesize
114KB
MD58c35e1b6f128e31f808b495f6b00d6e0
SHA17b254eaae7af03bf78cdd4409d26c13851477726
SHA256c52e9ac3d1a504e19f0d030d5e82acf57d3c4709bf7645ebb3dd959b1d7b38b5
SHA512567f437ef7ddbe293a1a32bbcf22088674b3706042d4127956e45738e08b599283820d9bb8d323e18766464cd482660f24c603d9e2c62198b5f79a1a1f68b0cc
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
144B
MD543ae55f67257aaefca4b607d663caaef
SHA17fcd3b6d2e824d232f3e8dc362a09702d45587fe
SHA256dc40a1822af516c0d28dd2b2116f527117fcd8fa3240ed76cbeebe6cf0a9148f
SHA512b7d64fa510ef1513c863e476a1daa6713c9b85a5cff6dbe4b8ddc79cf6bb2a3ebfb3289f8b016cd885b063bee1be95f891527e63b5720517feb53a1fa69e89dd
-
Filesize
288B
MD59dd566dc6b6f673ff66603fa7e210e5f
SHA188f6c23803cb1b5ece8a64b35cd608a53edb2b62
SHA2565e4bbe9c83355a236bb21f89c9b2d4479776f641faf447302dfd718170c5310d
SHA5122db2594747599b37402e8ca56d2a21b8a3b9a74460dcefc636a282d2f95541a59ae6f5b552f3b811d98b81cea44165a6f24d90a553d95ff2608b9787c8e9ef18
-
Filesize
57KB
MD5f080fa2a56ab5479d58063e5ea871447
SHA14b3fd57a98916fa5784305b76ba30af26b5253d9
SHA2560aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA5128aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
-
Filesize
10KB
MD5114890b2a863e31ba619cb725c948aa7
SHA17f41d1b08e8e06e6fc29f9611546028f0bb07a47
SHA256d898f1e9bbadaea215d75af41e72695e70a1be740f8cdd6043dbef6e9abd127b
SHA5129497cfd5b5b65ddfde31d0711ad3d60e812bbb23a4016d9dccee1549c161a85521945cdfe4399772f57bae23af7c85eaa74cf681803f8c8b3f2014fe532527d3
-
Filesize
8KB
MD5e579a6b00eef1318f9166352228eba18
SHA176988896854f0139083e77862eea1a4846cf039f
SHA2564b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
SHA512c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699
-
Filesize
1KB
MD5680998967fb850bc9d7f6a965c00b017
SHA10172b67cc0b239e0f266a0b9d91d4d09caea99c1
SHA256bd74f21068e30bc6c096bfcef63da44d15eb734481fc5ea10370bdd8593e4903
SHA512a145a454a2925398764025e4fba2e0206a7fb50feb93828ee3afd6f6655812e4bf5307d5af8422ee25f03d640c86ca4aba8fd3a4c9eff0c3ec3c1a5d157b4a67
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
177KB
MD54437c55fd73e6902104ff2619bc26821
SHA14dc8b875d010440aaf66c133308cf008fbdb4ef3
SHA25662c8bbf420fd412bf60718e2a280ec2330d0afd23eec8b5de1891da6cd5516da
SHA5127a35d00ec988c6209c971647618a0689851ab75fe9e06bb95d0a213ffac5418668d5f70893cb93cbbdf72298a222f53cd3bbeebbb849df573da67391c53c9c54
-
/data/user/0/com.enos.chat.messager/oat/x86_64/[email protected]
Filesize529B
MD57fcd824ae434d510194e6279226be88c
SHA1f582b164291d8714a349714737d784b19d2af3f0
SHA2569cb4e0bc91f3357422db533470e9e2ba2e7963c9562426ce4c21c6a96539622a
SHA5122e7902c13b7446b6a4d9e74a3fd5894d881459c2fe97a0e383433e45a0a7f10cd6bf2f92443431608c772f453fdf17e9d6cf2f6fcc3d8813b6a4ad82224e8ccc
-
Filesize
148B
MD5e23cdf22eeefeb4c3c628176708e2452
SHA125128c856d5457030011fcc790fb3d1fb9b805fd
SHA256476211c2db791b35990fd4956316334b8d5fe45b89ea0212fa6dc20ce96b2f7f
SHA5122405bce245f48e44083614b1a69d5ac6785dee0ad20c07df95c3fd5ad207af8c8140e8bb13d2f0080f2c36982110478730907ed238e5fd893fc2dd11a64ca3d6
-
Filesize
266B
MD51a52c030307b6ab7e5b4081eb6c2f609
SHA1f457144333308ca2f348da220d6b73493318874e
SHA2560467e9673e58d8813ec1f1d605a5207693c9cee364939f64d3f35596e135f4da
SHA512683bff76d0fc52d1578751365f7570f4613d67b0d4c125888351d64805f3fe9e33f2804d0d74d0fcc008d8ec369d2a89f4e2602574fd2b8380565b7cee857199
-
Filesize
127B
MD597ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
175B
MD5f23c2bd3ee8becc7a64427547a081711
SHA175ed0bda5856fb599c0e8af68ff2634d844d7c8f
SHA256907f4384340cd049b0de414aa2c55e81eb9c8a5539802b1a53d84de0178c19b4
SHA5123cea1755cac2785a2a596a2138173149e13aa0f8e01b0ae229d4b5f3fbce9e5cc953c47209d32b440a0ef58ba5aafcc79e291f93deab08f6e5131d9d62a423e1
-
Filesize
299B
MD5802ebbb37794a2ee512da1b7b09b0836
SHA1ecab5a3c177a1439e0325a0302d79e6643c574fe
SHA256cefb871bfdef1f4c84797a0a67a0e7bcfc77bba40cdfa5ddd37e1f42723c072a
SHA512a2fa7bf8d5956dd9c83aed6c572f315595b7d7641df874aff68f44c78060bfb5e26873325c34f84d97ecbf830326c0dc56c592a9c5519b9ed017a061656418c8
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
Filesize
119B
MD542517594294a5ebb2c9d4cc0d88bc0d4
SHA1b3647836b9298a4f1166ae30dd2c8a2a5d539895
SHA25669715480e25b003f655dc8a639e64cfeb3644d11306d491354aa24cb7812293f
SHA51253364a4ed879ad52d66cd23ad73eea4d63c27192daa8544ba0cb44fea07426d562bbab67f6674177adf38d1c4241b5bcfa458c1e6efb460872b6deaa15fb8b15
-
Filesize
157B
MD57c1e40e324fd3185404398f34503a0bf
SHA11ede54b52775f1b2e485d78284312c705d803281
SHA25636f21805d9dd31e37d40d36733ac14b668b6caf0c9deba05cb427cacd092a66a
SHA5126e30fdb92b53ae713ec345f2ae0a3e1ee1625bb5e0fd5ecbe1fd180e531aa1ef2e891d23363996cceca64c3306638255caa43e7d65b91afe680e3dbe40d24c6d