Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3147305s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    27/11/2022, 04:48

General

  • Target

    171b3db11544f064404ec493c243d91e9f0835f3c5bd8e37a8bafc842ba61341.apk

  • Size

    865KB

  • MD5

    062ae02cd2c2d6204c75e1c4cd13221e

  • SHA1

    025be407147dd44aa85d1c1be30220ec2cf130e6

  • SHA256

    171b3db11544f064404ec493c243d91e9f0835f3c5bd8e37a8bafc842ba61341

  • SHA512

    4445434e0a58b769277e996be535d0fbfbcd453f84f503f875c7c0cd5edce7a88ea85a7d4ff769d211147cb259b4d0b9d39023d6dc4c0dc9543e32e1c46ca532

  • SSDEEP

    24576:4UuckfQo5RmT3AK1J/bYR6S8/uC4k9P8cTd91:79kfQonmcKXbS8/u49PV

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.as.ytb.downloader
    1⤵
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4838

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.as.ytb.downloader/app_dx/do.jar

    Filesize

    14KB

    MD5

    8b6f4f87054c23362c817ba96a8793d8

    SHA1

    717cb06f290d109d563797f614b312eb421ce8d5

    SHA256

    2619b28fe671dfe6f945a48c552f39405113452e3e4879fe8cc8a0cf32cb4804

    SHA512

    97b3d1d00546b7fdf53c5d0ba396388bdb5f1317da8cedafec5e0113853210670892dc8f346675d53ee8f0b7229f1ed47c6e5ae63ac9eaa106eb79cb1ce1b87f

  • /data/user/0/com.as.ytb.downloader/app_dx/do.jar

    Filesize

    27KB

    MD5

    9ed3fca9f4462b61a3d6c6842dda4f38

    SHA1

    8cd409273c5c6021d67909b29a9be0401f519831

    SHA256

    5476817121c0c5437bbcd9d95511717b5e364adaf99ed5435d8fbf4efbc31e9e

    SHA512

    0a19e53acabf2cda0d3fc89dcab7d0d411c381ca1350111dfbc52388e84f5d51a5661f0114e71eeb9b1a9e694934ad072bad7aeb6e5060a86354d7b40c1a2092

  • /data/user/0/com.as.ytb.downloader/app_ttmp/t.jar

    Filesize

    99KB

    MD5

    a191df1f25230bd36e07a0c50a0868ba

    SHA1

    436e134162a1828aaa6029677e2548ac7b8f94c8

    SHA256

    d850d41e7465a696ba473a0f751e63e2996cb7a7ee5ed0dbd3af930e8f2284a3

    SHA512

    08f0061d36d087214b5e3747ccca5858ba60949580133698c49bafd97add832784c3cb3a3ad78878af66b7ae9d0097923224232af0b1f25e41fac2f0a3fe0bb1

  • /data/user/0/com.as.ytb.downloader/app_ttmp/t.jar

    Filesize

    99KB

    MD5

    241b415fc68a3afc6df259b5d50d422c

    SHA1

    59cc74b88a19eb4ddff8e441c9f77dd07d68938b

    SHA256

    7a3f11f9b55bfc19f338d2b0b1c1ecf120d402e5828a35b161dc5682b593d2d0

    SHA512

    6ace5a3a6930f4fd13c763d3855af14e14a3b085abba462811545c7d1f5fbb45389e06c75b63f40aba79b3fe070b3fce4ae0cf1decc1b9fea524ab8ca671660d

  • /data/user/0/com.as.ytb.downloader/app_ttmp/t.jar

    Filesize

    234KB

    MD5

    b134082916bd6eb34bc34d51c4d04191

    SHA1

    b6b0e720f61196755d69713c6fbefec9c1cd6f79

    SHA256

    78f1a4ec1cdae0828a13f65fa98ecb74d3ca0934b5a7888674f83f274e0291c7

    SHA512

    89695c59b4cbdbb068aa9c059909915c66636bb94c65866a3498accbf3b495ad77e473954a08528b6b72d4b8e8137f5992d1b5e8d397f9c01935035c5701a6a7

  • /data/user/0/com.as.ytb.downloader/app_webview/Cookies

    Filesize

    64KB

    MD5

    9b23e6a88d5a95f155f205cb04b93cd0

    SHA1

    b62dccbbef087a0731f226b96d15d35d8aa5e5fc

    SHA256

    f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

    SHA512

    bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

  • /data/user/0/com.as.ytb.downloader/app_webview/Cookies-journal

    Filesize

    1KB

    MD5

    04799c6a6d02650174ade4650b5fd61d

    SHA1

    40285828a2a30fb1cd92f38fbf8c066889df8e81

    SHA256

    ab8da8182ef088e0b69dd4669d7d92f9bc3ec3c2627178c70c089e2e7f4fcddc

    SHA512

    ce782935e01daac71420764684be1e165bf375ad4f2549f6b95cdd38fb65b822342488544154c1bd485f673a60800f5b6e293fc32c723de1b72beb6f5671fc6d

  • /data/user/0/com.as.ytb.downloader/app_webview/GPUCache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.as.ytb.downloader/app_webview/GPUCache/index-dir/temp-index

    Filesize

    96B

    MD5

    07c62dc2d773bbe86e83edaa52fefcdf

    SHA1

    0a1f8ae5dcffbf7491983a9a8d16a0fccb27178e

    SHA256

    f6b8d3c6ac20b66487bc7faf3b59e9dda0e04ac1f69fa9f05f18825e2ccf939a

    SHA512

    615a5e42959338104443d917bd4e6e4fe17707889196d3cfc519d589983fe4ffc105e90cea23fb9b281490d69b4072e1dae29b38de1b939d8dde0acd60300c9e

  • /data/user/0/com.as.ytb.downloader/app_webview/Web Data

    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.as.ytb.downloader/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    426eccb0a01db0f2336afc381a9c991b

    SHA1

    9ee566532d34dec0359944fd8a0d2e5d3846a575

    SHA256

    8644f1932afdcc6fe92e15456281ef46b6f7b1cda818b127d00913fee315c477

    SHA512

    79002e610879d25beff1f3a48e56e6c7dcd2f26f865c413869514c1382e2387edea900c884ceb01f92238cf2515f140178cfa82cab7d1bb5688488573aa585fa

  • /data/user/0/com.as.ytb.downloader/app_webview/metrics_guid

    Filesize

    36B

    MD5

    de2e017274e4ee43cee7d2130d2b4915

    SHA1

    c07fa762c78a8913d6c570497de73dbd083da714

    SHA256

    ed066245fc64c2ccf3755b7c803e3a4af61bb0fdde39c92b9e7d0989ffb5f31e

    SHA512

    211a6c1f973afe26030544ebba78871edbdd3343ccadca4c8f731fa743f9719e4dd06c958e12c2c701c1f1e5321365237bceffb9a0dbdfe7a183e84fc2d63d33

  • /data/user/0/com.as.ytb.downloader/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    a39eaf044ed606f93aae36084ec4079a

    SHA1

    6dd239ff744c5d578c507cd61578e5a259ef33e2

    SHA256

    2842a62bc1b75f5fc825e6f850c104aa1bb62184b1d7d835d7ebf6606acc50e1

    SHA512

    3fbc619de6e32c64412230ec2a6cc1a6c1244896aaf49a3516abae4f1b45bfc13da6b488c40b216ddc15f5f5c914b054a6d60a40f4a6958013b29414398bdbc2

  • /data/user/0/com.as.ytb.downloader/cache/org.chromium.android_webview/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.as.ytb.downloader/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    ff6bdd14822697087b5885eb3b7160fc

    SHA1

    12f5ed43ec157d00f9217ab22d9fc5fb546ec5f2

    SHA256

    42aeb1807e71d6e27cf408f768ad88d3f0532530f883ea018dec2e99fac789f4

    SHA512

    6cd1f6f1d4b4a7c604bcea2b2c4319e33fb4bf0d6491987af5317fb46cb2b99ce5bcfac554fef8400eaa6afa60327a877518da923a48e2442906071f67040dc6

  • /data/user/0/com.as.ytb.downloader/cache/org.chromium.android_webview/e94e5126e9667e63_0

    Filesize

    250B

    MD5

    7f672d5ebde15c7c646237fa61e94349

    SHA1

    be5919c6e1c5ade7de79175130a64770baa523af

    SHA256

    44d182c4936d9b3a78871637c0ac1a3f097fc425b809f8d72e00a495dc6f3908

    SHA512

    42cd37bd5aac8ca570f39ef3bff81f2b3c6a3a351ce9daf718bce13e4c5a6871aa31afe4005ab76b3a36ddf9cf5b8f7801e4816451debc07e7a2568da01af5f0

  • /data/user/0/com.as.ytb.downloader/cache/org.chromium.android_webview/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.as.ytb.downloader/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    96B

    MD5

    1df6d95a395735bbd8830fdcede426d4

    SHA1

    c1ebdd4df65c7d9fc2811b3035ef36856ccce7ce

    SHA256

    874f3dab082158a4422e282bd4585d54c2045edbea4d84b92b2d1a08a8c8179e

    SHA512

    ba0f0cb36fdf57658033d9d3fb27f5ca55e6a7b0529f36968deaf3c3dac7d6f10040793afabb45135fca75177ef3641f3611f35c485f21e9f2405a62460d283b

  • /data/user/0/com.as.ytb.downloader/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    144B

    MD5

    9bf4456593690d0e6fa2eff07e006198

    SHA1

    edbf970f36392d86df80085384a676656b3d12a0

    SHA256

    d0feb9f1691102e1525dea3c01c6f5512bbe296b30c018d20235db46e74aefa0

    SHA512

    9ffe438a46097647845876bc3b5284932a158d8682efa0ced727dfc6d2ea1ac5148505c26c3cd761adc4beff5793d40a4f81ae982a6cc9ddb82e9114ac04666d

  • /data/user/0/com.as.ytb.downloader/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    96B

    MD5

    5d838530a4a0a7368ef57dbbc035cc1f

    SHA1

    b0fffa5072580353b41aaa6db15dfd082e1a323d

    SHA256

    6f265a73fe8e5539ea62d91a7821273bbf42f1e5cd1a9620343ce8619fb99111

    SHA512

    9e412d5837af861ab3c6d41f2a843ba344fa46d2c0709cf2bc92d8c6be1ee523168869cbf29cea8b392265a0d39c991bb5ead66ec985c5888c8eb18d55b75cff

  • /data/user/0/com.as.ytb.downloader/databases/downloads.db

    Filesize

    72KB

    MD5

    d5a4c25e468f2aa5640570bb367aefac

    SHA1

    429c55f530fbbbdfbd653f28e3cf2070ab3f7c2e

    SHA256

    eb71a47a94214be9b4bc9cf24392ef26aea088d7d4bbdb34468b496449027289

    SHA512

    c3ff66c14234f4f252f478d6cc494ecdec702d868b69c69852f7ae3c4b18a493517c29bc1d01f5113e7ff4cddbcf5b1d1598e3bbb543e4cf3eff32361ae385ad

  • /data/user/0/com.as.ytb.downloader/databases/downloads.db-journal

    Filesize

    1KB

    MD5

    135e2a02544f638200e88a0659ea7398

    SHA1

    266c24918fb335edbf702215815504f5d863e0d4

    SHA256

    f0847d6974fa2e11e87964ebf302ef1f6b1f13cf53e6d925347f466f07a8e286

    SHA512

    5111b21aa9fc4be13b2b3c2e1e23db4a569bfc9d7f4f28d1381fa39c7149c1e27108be912969efb3c4ab80083d7e04130f8bc9a7a8cd041fbc40e1b6b04d371d

  • /data/user/0/com.as.ytb.downloader/databases/sdkdb_data

    Filesize

    176KB

    MD5

    cec153f9f5888a712623bca86297f582

    SHA1

    18ad497251c67fc5882df09137c10efebb45b054

    SHA256

    0dbd67f83210640e516f873f680ba95b694da55445e2a6fb425187e13ff0cc2b

    SHA512

    234a2d1c57b4a6b164f4349bedd5c991ffee999b8ecc3a1f2d0c1ccec4f5d2a1e465f880b73e40a22cc041b8644221d764b6441ae4ab8c77abd95b1bd1e7d8fb

  • /data/user/0/com.as.ytb.downloader/databases/sdkdb_data-journal

    Filesize

    1KB

    MD5

    7b02eb716a54ec9d1877b88d5d6adb0f

    SHA1

    23809c713b1e70a9eef7bf2696ac5d62b7a69fcd

    SHA256

    a9814aab2691fe71c6dec08ebd51082cd9aa961ad6882673467ec854cd6be193

    SHA512

    0fbd6a7c2657f3096e166e57fe8a18dfa4d543ec91639e222c312ca675b91f4a482b8dc1f6f5b2fef1f0653b216cd5db6aff21c71b95f616638396e17155318b

  • /data/user/0/com.as.ytb.downloader/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

  • /data/user/0/com.as.ytb.downloader/shared_prefs/com.as.ytb.downloader_preferences.xml

    Filesize

    102B

    MD5

    5b0e21b9a5b2e1d8627d92df598ca4f5

    SHA1

    f7af60d543f857e9efe92a36f208f0c7ecc716e1

    SHA256

    a1b8dacf1020775ff147e4bd3510f9c8df70b80b52f5371b4395aeeeccb11a55

    SHA512

    7b7197f5c451f0749f9b627d19d70e303581cd85715fd33f194119b8168dc4c26250fa50f11619476af284d6e553375cdd69f1f31414713fe864ef74b3ab8628

  • /data/user/0/com.as.ytb.downloader/shared_prefs/com.as.ytb.downloader_preferences.xml

    Filesize

    146B

    MD5

    7ebe946e4eb2040b3f83566a6e07e339

    SHA1

    44cac6a485fdfcbc9829491bf65e2d84215a6b91

    SHA256

    5657b5d9b902957e64ada2321fcca004e181caf042034b879e480748e04e2ebd

    SHA512

    6f864d7ba21b5128e02684c1ca7af0333bbf88840df76f4e23ddcb8bd7bdcaf12baa21dcd5099f80fef4799048b875b07626c026ec1d673f5742e28711906875

  • /data/user/0/com.as.ytb.downloader/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml

    Filesize

    464B

    MD5

    80b3fe45e72e8833a9b105917a2cfb1e

    SHA1

    3bfe94f38f36eae0c4484c62e21af008734768f4

    SHA256

    25260cea6cbc6b38c3ffdf458a945d49e7a4c32fc984fd63091ffaa2c6682e29

    SHA512

    fa96ca43be3c2629340f49c003c46185e8ee2b09f6b14152ce34ec248c3bda71471190974ddb2a6d8e66d45ae9e77da47711a5aad4527a78f878db6d55fce16b

  • /data/user/0/com.as.ytb.downloader/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml

    Filesize

    532B

    MD5

    a77a138138d4a7deec2b17ec9027aeb8

    SHA1

    b0e0f1779ce87b1958980700d57ae4a9e7779b51

    SHA256

    8f33a9d7381664950751d1cb1eb0022db50a748e98d61a47d1b7a37fa5983e71

    SHA512

    29b0707565e3ebc3a10c012ce88ca01eab132efe7ade06acb4cc0446cfbc0a87d113db4dfbd47962ec9454c269e0abda1b563d9cf06c3a3588d0f09c04fcfe64

  • /data/user/0/com.as.ytb.downloader/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml

    Filesize

    922B

    MD5

    bbf1cdfb8f20f4bdde4c985b766872b9

    SHA1

    ad453c12b3ec60f2113dc0d24ad1ae79ba69af7e

    SHA256

    4d791548d732a8f987eae6fc4803b972acd1ac0f87e656ec29984bc8551ae822

    SHA512

    4728c71905c45348cbdcfd325009cf46ade38a082549c63713a97d064fcab1f0d93fbd952e7659880845c6e365b616172ddd17a2a112c525670687f3a243664a

  • /data/user/0/com.as.ytb.downloader/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml

    Filesize

    954B

    MD5

    54045159ce71ac9498099f414e3fdc8d

    SHA1

    dcab274937a2ee7535318be639dff55bbb6161b9

    SHA256

    e218b40d3cbde69b72d8dc5f19988ddcc1363eb0a89b429fb9a75a5404a512e8

    SHA512

    08cce458b6e8956f6b192edef0ffd2ac81aff2064d1a62de792b17eeba333a4664bee2065563c3c6123e5835a9ced34d9df47b716813e47e143f5617d00266f6

  • /data/user/0/com.as.ytb.downloader/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml

    Filesize

    954B

    MD5

    d6224ae18102ccd47b86a6442025ff45

    SHA1

    6f5de3a8ff5660cae330ecd50b6be10e2a3a156a

    SHA256

    3158e75cce8b401f6bfa09c16c983e30c632181c2ea5727fc21623da50b341d2

    SHA512

    f318955341c32217506f29d0bea217e1dd76874f324914d06d134f68a1c40722baaa8619897cce35348ba62159fe14efcfc8e73ca2bb59b52a0b7473f8b8e5a9