Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3205546s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/11/2022, 17:43

General

  • Target

    481c2a6d5fda48b2b2ddaad00d753f9e6139be1c8bdb85db363cc0f0378ae68d.apk

  • Size

    2.2MB

  • MD5

    a5b729ee633358e85b04a5f04e2d6d77

  • SHA1

    97755dc62b83ed2d502df785d285d41ce50a6fcc

  • SHA256

    481c2a6d5fda48b2b2ddaad00d753f9e6139be1c8bdb85db363cc0f0378ae68d

  • SHA512

    11df4bf2a7072f9e8159740b8a7f22668568a1e3801b31f83c766b195b373d44ee6eede7961c4616133c6c8eb1bfdda8929b1859cb0f851f5ecd2b5ef85df162

  • SSDEEP

    49152:bHnBUTICmtrZfqwegEI3bsqBXsmYlZSgtBN/28TsI6kebnjSGoMvEjYXdbpc3cyW:72UCmtrZfqw53bsGXNWEpQbVebnAMvEi

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Requests dangerous framework permissions 4 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.google.video.sq
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4099

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.google.video.sq/databases/access.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.google.video.sq/databases/access.db-journal

    Filesize

    524B

    MD5

    eca40c5ad1cb58f31a80ac26c0bba391

    SHA1

    01938b4d9e058d24bc2c16740710cfbf4a6e9784

    SHA256

    d2d20fa3c05530d0be48ccbabb9e87e99db2d00a3f33681f6ab7523b08c31b64

    SHA512

    5833ca55b1fea474bae298053cba9313a63d72302b736d5f3bf50537c8a5d143992d73871f8b61563e9d53873291c88f4211b01f804f6f0081d0da3734a48e62

  • /data/user/0/com.google.video.sq/databases/access.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.google.video.sq/databases/access.db-wal

    Filesize

    32KB

    MD5

    ba5aded0fb42d5e5ce340e78aac5d063

    SHA1

    89a257601f5b984e8fca65f8486b653367de6cd6

    SHA256

    347918eead1f6d0d0d8360fe6799b6abd9c263247219553121e0b153b2fdb7f1

    SHA512

    05691f63e4c905333804e1fb0cf9253da3cecee71b57e1c8b630f95076d4020f3f2f8cf0a03fa25e86813357425c7c17e2b312b0c4d75349920fce1b19e9e778

  • /data/user/0/com.google.video.sq/files/__local_stat_cache.json

    Filesize

    25B

    MD5

    2d805b13f2f28dc3ca9bbcc000f49bb5

    SHA1

    9eac165b4d81258fd3967cde5cc53b53b1dabcb1

    SHA256

    c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

    SHA512

    5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

  • /data/user/0/com.google.video.sq/shared_prefs/pay_xml.xml

    Filesize

    119B

    MD5

    56be6b759e25d6f84fad17cf6f0af4a0

    SHA1

    769b9b85217158e11ad1ac346537143f3b291384

    SHA256

    742af9555a7b1c52ff65092c7809add85e5f66dc01b337c7994b10149e9dfcc2

    SHA512

    591ab4bf27cf5b08b3cd5690e1c290f487d7e787f03c25e120f63aefa53d31de5df7a47ee342db5c2784da71fcdb862ad74eb68416e3fd54da9db5c4217ddf5d

  • /storage/emulated/0/backups/.SystemConfig/.cuid

    Filesize

    89B

    MD5

    02f34924562bdaff03b03d8424762377

    SHA1

    b83de902ca056d7766a94ff53f0f5b30745feaf1

    SHA256

    9a488984c3b4b9e9d951e218ae555a811adfd27637a36a19d27c4787d790b194

    SHA512

    897e5bc35209dbd18088e9b55df86a53ce5fcf5e67220c50f9ed5992d0d645a64de228a17c41159307cbd9010b8a13ab5199bab8729967d88911ecfbec2beda8

  • /storage/emulated/0/plugin.apk

    Filesize

    334KB

    MD5

    c56d33b0275f169e091902a458e4d71c

    SHA1

    df3075754f2c04173daa69fa3146e1f06b847ac1

    SHA256

    62272dc9e592ca9752a66775ba2eb17839a7f0f1b3f47eb4a13f5419b40b1979

    SHA512

    94582c8ec7e1552067f45afce0a969425c346fae6e82e7a58a045b91a655679f1bfe0cb4a64821b2c37dbbe8aae5a0a7e99d2496560b09fd3135ddcb9d149e47