Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3167288s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    27/11/2022, 10:06

General

  • Target

    d524ca3c66c1b9ac8d1caf74f3aeaed2e165d1cb53df1437cedb86616c95d2a7.apk

  • Size

    3.8MB

  • MD5

    92f74331a099ff152ccfdd8d1cf399e8

  • SHA1

    5ac381642e3fd72ced61dcb694c2449857369ddc

  • SHA256

    d524ca3c66c1b9ac8d1caf74f3aeaed2e165d1cb53df1437cedb86616c95d2a7

  • SHA512

    0e20d24700e81f8e6b407d861903f723a871b3359c828bc1b8d30a50abc35189c80c6ac8258b8b7f6bfb2726995f05903528b44ecc9c592ffa306710509fb74a

  • SSDEEP

    98304:SP31e+ADQ82eYk7SsbpOl7aXW3vwtr70xE1vxj4OMgPB1AC4m:uADGeYkWsbpOlWX3+MvSMrAC4m

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.poxiao.hlddz.standalone
    1⤵
    • Loads dropped Dex/Jar
    PID:4769

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.poxiao.hlddz.standalone/databases/startup

    Filesize

    36KB

    MD5

    4d8cbc80b6d64b211eee809528ea997b

    SHA1

    4c21a60610ec79e9a789c2c323ba75f9e10852c2

    SHA256

    01d16521c407bce3e37c4e90d003cf2e0c18f4dff8bbbfac05aadd35f04ccafb

    SHA512

    5099ec4ecd3451866a155cae822eef615334ce5f45f481f2e53bb13bd74a6113d63a31a60579c137bb96aa11e55cc296d9b90b07f1838357388c90178927f6ec

  • /data/user/0/com.poxiao.hlddz.standalone/databases/startup-journal

    Filesize

    524B

    MD5

    89facf07d0ab32e941c1f2d7356a4261

    SHA1

    e71732f417046874a7457297d860a6d3179a7267

    SHA256

    03f1f244ff20e23a6f252cb7d6cffe1ad601f92d95c94b0fdb75585b73882c85

    SHA512

    18de52da8de65b89de8191d56e5e20b4e82ebcb2cb2697eb4913311d6ccf31acd4c8e7772ab1c054af3b5286f2f1151999d85beb7cfa3acdd4f3b544a3d41f88

  • /data/user/0/com.poxiao.hlddz.standalone/files/classes.dex

    Filesize

    1.1MB

    MD5

    f413c2f668b726abadaabcc58c57cad2

    SHA1

    bbf9d30749fe9dbeb4deee35bc310398f6a0a78c

    SHA256

    4491badeefa1e54df2ec1c0275a78df2ffe53680d0cbb2a691ad4be434f77a75

    SHA512

    ddf5b3c9335cf8b8c8751112c10c21c62e233623da22a818b70792216f464d7c0660b1710557c67a95f012e0efff9702113fe58b2b883562520133085c8a4c4d

  • /data/user/0/com.poxiao.hlddz.standalone/files/com.skymobi.appui.sole_v1001.apk

    Filesize

    18KB

    MD5

    f08052afc8f1f029c9329df41c5f7702

    SHA1

    6748174e22bc37eaf86a20156ba86aa3a70e9c74

    SHA256

    efb4af4c23769a47c8931b6eeb2179a864cf9c1f8c4db31f883cb5830cc6f177

    SHA512

    82726f3a5b104fe0b60f823871f93e1525e3e3fd5ed3a301ae66edf95b232c42002c3c387c3251055a62be248785fef32d2f005babc2664ec818d225bbb1ea8f

  • /data/user/0/com.poxiao.hlddz.standalone/files/libndkutils.so

    Filesize

    13KB

    MD5

    79b814cce6253fc5e4d4386674bfa7f8

    SHA1

    8ef08cfb0154fd400e2535ed24be2cbd8baa05b2

    SHA256

    08f8e79325ce23d7780217ba1dcaccfe3d975dc25bd01d7dd2b6f28afebd3923

    SHA512

    b4aa994cb8a7d437c733aaee2316cbb6cb8b715641447a6ba1f711577d36059e32265704b8efc566af51cfd6cb26898e587816d24e864e7c51f92028ac84084a

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/APP_START_TIMER_INFO.xml

    Filesize

    117B

    MD5

    e6509f65dfaffa352d059783aac9ef7f

    SHA1

    d57593e2eb09e8b0eecf602d0de13e1c11b27407

    SHA256

    2aaf86b917eb30e6d049dfa7390c2cf041ac64aa1921133f4616691ea7eded4c

    SHA512

    468123cdf03b955e90e39467bc50ca93c924a07090ed599a51e64e3336477b5dd229454406539abff9c06b85fc2291d1dd142e90c0e1d35c1366860e2199b551

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/AppStore.xml

    Filesize

    142B

    MD5

    e53f1c498689d8cf56351815fd4d47a1

    SHA1

    5b50201c1af08c453dffc26ef2d1935ab15a8b7f

    SHA256

    21255c211b3c19d3bb5262c427f9231245ce0cf857483d3608a74025b771e12e

    SHA512

    65e646a53ff388dc6c7625eb1a92cbea9979e8a398a22ec2e37b5f9b57dcfd2a219d48b07ea07f700ba78f11a9f10224fdec0e0028ee7fb70d93a87db8e739dc

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/AppStore.xml

    Filesize

    185B

    MD5

    9ed2898846beda1fa25153a7c41a3900

    SHA1

    159b3756b9e3a7313f7802ab73ac59dc9e7c7310

    SHA256

    d6b9600f9918fbc83f7318c61cee54e7e0b6141c848068ad4cf4716f0b14b998

    SHA512

    2c97b1fe8799b5dbc7c91adcdbe6f3d4b32eb780fa179949c0522a0089d3337f22e2abd8c0164bae709bffceb0c31d7f9d3c276228e6d36aadee3ed9b7c1a666

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/AppStore.xml

    Filesize

    376B

    MD5

    4ea1f73d02bd413e99a5a9a584a56c74

    SHA1

    06577ae9876a42a6823a76d7b23d9b287055ab72

    SHA256

    15c0b94da4d17b2a336d4952e9b850277812b3a49729442b52af992a0e1acb72

    SHA512

    86dc03b2084f9aaca0b357c39a441861b5d86078380ac749d0c217a4401cc616fd87ae20615eb6010c0b2214e6d63d3ee36641d859e229e37788d4f446d649eb

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/AppStore.xml

    Filesize

    425B

    MD5

    29086a93e26989516ee1efc0d8af5b98

    SHA1

    1e6d2f3b6bac35086cad6c4e7e827c2ba95bf5eb

    SHA256

    a25d3d3928ed331ab96ea575b75c28ff1f029fc68494bf1cb3a0f0a71372096f

    SHA512

    5a1385040ab5da32e55cfcc8d494e837015f8c0c6b37020a053760da4391e68cf83b83f6b9a5f22ffb7f6ecbb15695966d37bd00685074f9047ad0cda828dbc9

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/GameConfig.xml

    Filesize

    1KB

    MD5

    6bd8095d60549618a731fe10f75e9395

    SHA1

    2903dde9cb8959e7cf4d15679517bfad6e653ef6

    SHA256

    f1da0d86d00af7cd7a1cfe54335a70f9970d8edf7978f07a8d4d75440a3dc01a

    SHA512

    f2bb00813689c49563e125ddba4a829fd5e1f87a6640bb6433f4de275e4dac6b9bf0bdb92ec99ad9ae613e7b209083bee53b81cbd12ee305ab62c01408e9fecb

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/playerinfo.xml

    Filesize

    242B

    MD5

    b3a646ab6c6d2b83c071f173888af031

    SHA1

    7a64421d23284ea3948df3d7df2610ade4beb60f

    SHA256

    66f449af527c90114e590fa8c5c38babe2ecf940400e408ec368db4878e28f18

    SHA512

    298bca8dce2245046c6b38d1cfc148eabc1c0307eaf0ada4cb6ffc39aa0cf7d6c891cd414ac9894067fad278685cc9368e3002188968c41f12acdf4c45d7bc3f

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/playerinfo.xml

    Filesize

    290B

    MD5

    ce7bddf3d9bd581b9276bf16eb284843

    SHA1

    957c9d49e9a5940532aa01c340f7b90fc4b3f027

    SHA256

    e80dadcac86c1f797a22cec446b859c04ab70537a617da7b96057bc725a43016

    SHA512

    09a4388152d22f3b010c96d9ee8f67780bdd2eabdd1aca7d75ec157e088ee5d8b753f201522a573780fa56784489907c88f69f834a7baf3cacf4f7716d97babc

  • /data/user/0/com.poxiao.hlddz.standalone/shared_prefs/umeng_message_state.xml

    Filesize

    119B

    MD5

    964952e3177f9dc329d5482f36020040

    SHA1

    b5528e133be52fc4c5aa40b2b62c7bc8885442d0

    SHA256

    9a1c06d8a43dd0a4cc8ff6de73a505ab3ae01e724c4cbd04f4ea6d5b297c209d

    SHA512

    917212f46559acc0d4eceddac7c8e98485316f5a71d22f4c7036530781d6b98b672397a5f3f1e4bf0afd7903792586973a8d9d14c6b69eb6caf67c2629d1dda1

  • /storage/emulated/0/.AgooSystemConfig/AgooCommon.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.AgooSystemConfig/AgooCommon.xml

    Filesize

    111B

    MD5

    9584e1f34af00f20df6dbda4e32ddd40

    SHA1

    3bb27495831fce7637bce608e99fe48097bae4a7

    SHA256

    8a83889eab37889ea960b431f89a41e059732be75530d6dc9c6917a438aca803

    SHA512

    bdeb857052d52c79b7361200c319645a53b4d8ee16019f09b9b6fa1e95dd5788cee2e6f1b3e794c3cda86c8c86c548f4afb450870756f0b6993e0ad58428cb1f

  • /storage/emulated/0/.AgooSystemConfig/AgooPackage.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.AgooSystemConfig/AgooPackage.xml

    Filesize

    111B

    MD5

    000ad47632477cd6be37a3e3d52b3041

    SHA1

    3abbf89beb6915c978e5621cf458254fa94ca2e5

    SHA256

    bf5de1707fa5dca52f9f1a6fae8c8700ad6395aeb327fa458e8796a8f5401744

    SHA512

    61b9ed090faa0edf17592f9366dc5974ff004efe84d7567c90e624d17f5f56e6c69eb30aabd58ffb6c8ed2f9d728a976ae9f7da9fa1afa55d1d5d2bc6e47b6b9

  • /storage/emulated/0/.AgooSystemConfig/AgooPackage.xml

    Filesize

    631B

    MD5

    d38e203e6393b5025e20dcc297830f8a

    SHA1

    afd001bd4b60636c592ad8946f307f51fc662749

    SHA256

    43f2eecdc018e1dda468ea9df6fdff6c29c151fc1aa20554cc3ba871302d77ea

    SHA512

    ade35d71b48d9fae2cf507cf04f13f92b263e3d7139bf6cf7622acacf52c63ab1c70ffefe66af9a40d121e96dd005c7e129c0e9314e0137c08f9ee1b35c59787

  • /storage/emulated/0/.AgooSystemConfig/AgooPackage.xml

    Filesize

    111B

    MD5

    000ad47632477cd6be37a3e3d52b3041

    SHA1

    3abbf89beb6915c978e5621cf458254fa94ca2e5

    SHA256

    bf5de1707fa5dca52f9f1a6fae8c8700ad6395aeb327fa458e8796a8f5401744

    SHA512

    61b9ed090faa0edf17592f9366dc5974ff004efe84d7567c90e624d17f5f56e6c69eb30aabd58ffb6c8ed2f9d728a976ae9f7da9fa1afa55d1d5d2bc6e47b6b9

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    9b971ac9a2d19a8504ef45c79cb9d721

    SHA1

    125262b700b71a441443ca114c56b733522481fb

    SHA256

    d09e7842daf8fe58d338154e4a380050c9f0220e06d397efcdfaca2c41d28162

    SHA512

    d280c193b0166111cc9c8ed01e347c0285c67bc8a119a355f86db851e7f6957ca85f3f2df5fd47736737cd753ac3f0710f6277491ac84e2b6046c1f45e015381

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    0fe1063b22db14d03d915d9e3b700c5b

    SHA1

    fba81cea9d5b3bb2bc8b70d69a875ce91a1edef4

    SHA256

    32c419f9f093d5d44eb45003afe852d7115cd47c9e36738b01b2fb64f27349b8

    SHA512

    0f60726cdb55296f790585c3c336f65ac1ebf528d32bb02faa24ea9d2ace066de5eb95a3ae273f88928d38e74e8886fa17b4fefc950dd2e229a79d4e957cd5b2

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    408B

    MD5

    e81d22a5351c717780d4cc3bdec2824d

    SHA1

    457d79d21eb6fa76755f2e9d4ac13c66730c3041

    SHA256

    803d630ca561a8bd7356c99c17e7ea0e3fa68bf0c6f7a8538095a89f3bbafb30

    SHA512

    da7cc9502e68d370c499fbd1f957f9e52224d999663dcd0045c087fe721c3ea078b522da539b68c08b71408e87ee58c1e616ba43e4f2f2727ae221785e277813

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2021.apk

    Filesize

    386KB

    MD5

    4a1fb248e672d39457f2cf9088c17880

    SHA1

    b500b2528ed6cee5929603b862b14a18655ac06d

    SHA256

    b2831dae43d2dc8daffc919456c244b17f15f5453dca097d665979e7254f8c23

    SHA512

    b434ee9348e7e2717b35c4f64bc71aa58aca634741045b91ec61eea5bdb536ece7449fe8d376f724bb0006cd2bc7976c9695bc3aa47a59a26ab6c6c09096279e