Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3182036s
  • max time network
    134s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/11/2022, 13:31

General

  • Target

    e8f116f00ea92c142d791aaef8d0f4bfc8db50115f124db2ad25e8ed5ef61ab3.apk

  • Size

    319KB

  • MD5

    2d919439f7e1195afde3b59660d40db3

  • SHA1

    6ebf247925b2cf71e9b781a6108733320d576edf

  • SHA256

    e8f116f00ea92c142d791aaef8d0f4bfc8db50115f124db2ad25e8ed5ef61ab3

  • SHA512

    988408618e6c49d79a1734d111d31040d3ece98eb91a746a90ac4bd5c08cbe0db6a778cca013b1d1a95dcdd10ed8763cc47edef78ea109668014e8733c88656e

  • SSDEEP

    6144:lEWdwVHCzV+dgMGXPCuQXGe8Zq3E+ynAaccu/Jl:lIHChy26dGpZq5Ou/Jl

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.bjoeajfpa.tkfp
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4045

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.bjoeajfpa.tkfp/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.bjoeajfpa.tkfp/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    a74cf5e66a51449965d5b7ee2abaeccc

    SHA1

    0f19a14f0c056e3f111c02941260ce7ba1121d6c

    SHA256

    93c2b7b819745280559ae6b2319665f7711a8eea990896dc1251ab3190f1fc5e

    SHA512

    5e8c6b6c7ca12ce3f87e23430837776a4e8b101d9dd3c15234d656abad1ee9662a4d03adb596b3d5cbaf42d354d7b83065224567b65484b6920e55e0533d3b10

  • /data/user/0/com.bjoeajfpa.tkfp/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.bjoeajfpa.tkfp/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    e373c8c3ddb28ee3795d6b961fa84919

    SHA1

    0779833eea14df96910f5c5aa4f229797e3b1a86

    SHA256

    ca5bdea1befb3729eaee2f2c5d16cb65c40c4d6b282748487dde8d9884ac935b

    SHA512

    f8fa092820ace613443aca05d9c922f04c1f3a3e4b41c437d9edfa8645ea7acb4afebddfc2cf477a653d8215a83a9771c5751ab673b1b93069779307e31f12af

  • /data/user/0/com.bjoeajfpa.tkfp/app_webview/metrics_guid

    Filesize

    36B

    MD5

    95cef00360de4983a1a59794ae630903

    SHA1

    1ee8953cc6cb496abb818d84234a201665a03f6e

    SHA256

    2865c743e7bea49d0c4fc27445f86cc52e8ce1ba08bf7b0ab28223572140fae5

    SHA512

    30636c579b6c4a61af4c316174a1ae61983988ee48362a0071e0a57c63f80571722c6e4a0f16a70e395be849007bb99e3a98a72121762aef06d95cec32d6384e

  • /data/user/0/com.bjoeajfpa.tkfp/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48