Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

15/03/2023, 09:11

230315-k5xdeaed7y 7

04/02/2023, 15:30

230204-sxpycsdf48 7

Analysis

  • max time kernel
    487425s
  • max time network
    27s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    04/02/2023, 15:30

General

  • Target

    base.apk

  • Size

    18.2MB

  • MD5

    df4ccdcc93d82240feeb83abf41683d7

  • SHA1

    0d48b5dc98e65ceed2a99448a8df3e2f4702250a

  • SHA256

    be56a97e691b8f1d8c8ae9d8c1942e8f4a287819e203d9795dd5ead7b1589045

  • SHA512

    a33b6bd168cfe70b28dbeaaa72e8fb2ba41cf2c67026dc33547cd07753417149cbe0850a2a6884456bb1d3e9f3933b60b5928af1e3ba727bd213d79843e543ef

  • SSDEEP

    393216:MHJRhIDdbTQIIwuL2dl44JD+aRaEqya4yfznX+bSv9wr9118RtvcS8:W5IbkIIwjd1ZbaEq13bubSFwruRtvcS8

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
  • Checks the presence of a debugger.

Processes

  • ai.moises
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ai.moises/databases/com.google.android.datatransport.events

    Filesize

    224KB

    MD5

    c13cf8f4f1e80471f6cf52ec018dac9a

    SHA1

    8e3b8e4b9f66447634b7c9b6c9c60afb4b1f9121

    SHA256

    9ca1816255d33f7e9b1caab9ddc1364d020f5921f4fdd350330c8c2c3fb33474

    SHA512

    7147144296efbd32f5f791e70bf97cc73d8d89288917f4919b142b8aa806a9cc362ef1912a67b5dcbf5bab33c1c8342f259a1dadd5f129d330d7ffc9c639153b

  • /data/user/0/ai.moises/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    e0b19494c2322b5b2879a45b92ddfb5f

    SHA1

    0a3c21a11d7053c75c189432ddcc576dc8c0bfe9

    SHA256

    4e0bdb234eddf7e30789284402f2694df118b817fac4cda7f864c9ac7a2a4508

    SHA512

    4cb5d1af9278787cc40d1f8ffed0a90727dd3af1c91bbbfcaa5c8d693b3775ec5d7bbef102b93350b4a7cdd5170467ee9d7622003404158027830a67c59fe6a1

  • /data/user/0/ai.moises/databases/google_app_measurement_local.db

    Filesize

    88KB

    MD5

    7bd7e08b7c157fb7a04f9701b6965b65

    SHA1

    19ed78cffffd879509071b091ba60776c18e8d97

    SHA256

    c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

    SHA512

    a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

  • /data/user/0/ai.moises/databases/google_app_measurement_local.db-journal

    Filesize

    1KB

    MD5

    33362e102544578785bfa0652c4048c2

    SHA1

    168b1e208882980e26c3b351c348505f3f726fc8

    SHA256

    46abf2137322ea95910acda11b87a6937b42959d0ab8013c5ca79a74e3f7736a

    SHA512

    80b7d553df4894c7fb824bbf29a99719ff3d63ca2c1538086ecc16aafdbba421f2eb19a14d5614ef0c1b194a73b0c7df3fb598d99c0a87316fc9494aa80d14db

  • /data/user/0/ai.moises/databases/rl_persistence.db

    Filesize

    72KB

    MD5

    539ccb95ca35587c5ce338414d700e06

    SHA1

    ef469d94462dea7a291ff69822f63eb72eda8718

    SHA256

    2757f837347a024ba6c6cb2f5a874af2c4dc8e5883a2717ed2ced54cb460d9ba

    SHA512

    088325fc72e0611befebbb321a5d55e48744c753c6807e49fbef2280681476797a8097a88b9047abf01d91fdbad915d27a9abef3cddc461bcc78549131db4f0f

  • /data/user/0/ai.moises/databases/rl_persistence.db-journal

    Filesize

    1KB

    MD5

    adb93c552315e9e566425e30b0603198

    SHA1

    8e3a782b3961d582f0ecbaa683d89effab40bfd5

    SHA256

    98dea8972acf584affe972c2055224496a7edbc96ed03755c6d80a597722819f

    SHA512

    1bd47692d25ad69bc2110d8d1c75c7ea19dc0cf52cd0b90e372d7da8675ef4ea92065207cfd22710e11bc276adfb3e9aaa57422327b288ebafdabfa0efd1ee9c

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/open-sessions/63DE7A340215000112E4A044C4F94879/event0000000000_

    Filesize

    85KB

    MD5

    0574ac4d4b145564929c18b846193261

    SHA1

    7312eef92230cd332c073643c54c94cc660d082f

    SHA256

    ccfdb2314ff5187063c149b40cc57dcfeaf93eb681e4d0ba0997bc69b17a39b7

    SHA512

    659712c8f9def98364920fa85aa5641d5a9db199a46b972f3c779fb6b7424b45d98849a0aa6a3dbc21c559464f466693b3ec1b28c6aa3fd937160b927c5395bd

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/open-sessions/63DE7A340215000112E4A044C4F94879/report

    Filesize

    733B

    MD5

    4ab0df2d79e82c2c2366e07bb9d899e9

    SHA1

    e741f92cd7e18d4bbdb389abd79ee70e1ec1d79a

    SHA256

    4bc6814ddf2c197bf94fa0058110646e9d6336997f531c96260d1895ec211018

    SHA512

    016ef8ce527faddef8d0444860881063bac54136267d1e539c23808a4f05629f0015b9d81c525f9123addf6f147cb6ef839e55a1146d91cadffac839ee7eac33

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/open-sessions/63DE7A3B0329000212E4A044C4F94879/report

    Filesize

    733B

    MD5

    e0f4b410cb7c048e9027beddf6271c4f

    SHA1

    ec347756cea79b277d9238b150c5ad8e3d3ecc2c

    SHA256

    de416acba5397d1cc4bd995d918f0dc42363740e699f6525e3051153512cbe4f

    SHA512

    c50f10b81d4309b26327d38815c80add7953d7caa6afd5ab8c5d05434373056a1460ee43908fef997f7e6b34de290042a509cedb91db4e7c3a5c7cf697c8e901

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/priority-reports/63DE7A340215000112E4A044C4F94879

    Filesize

    86KB

    MD5

    0ff93d5943e0eaabc5bf113320ba5b5a

    SHA1

    c6db4c0f1c12e23071fbe17df3b116f3c488451d

    SHA256

    6da3f758f2007123aceb25721dc3d3f3c3552fa5ca830ec958bef1e45e371e4a

    SHA512

    ad35609e458598f48a8b59122d87e7ec8c9799b49c809efb3c27e322bbea9fd420ad0aa7238d084ca737e5856f5d8de4b8abb158117143c7a5a86a26f44f8df3

  • /data/user/0/ai.moises/files/frc_1:731360694588:android:44e941524c06e7684ace39_firebase_defaults.json

    Filesize

    537B

    MD5

    fb32831b27d73e63667cb2f0c17d8c00

    SHA1

    ff606d8eba94a462af53dec400ed756364ad50e6

    SHA256

    a2664be7865f9b3e4a673f09408a60d2f999fe97d23a6e881d21b8d020db8be5

    SHA512

    bdd77f4ff959b48fbd29783938aa0a7262e6462d75315ae0c531b853449b9d926f41f9b43307f04420dc0880436f5e17946b841e2a29dfa74e1f407617a39bc9

  • /data/user/0/ai.moises/files/frc_1:731360694588:android:44e941524c06e7684ace39_firebase_fetch.json

    Filesize

    1KB

    MD5

    e7558b006d30158c9daed96d65d6ebf0

    SHA1

    b3f42cefb6e25c2c2fbd4245672eca68750e81bc

    SHA256

    3f7a762b5dc2c9a1e0929d221ce2ddac3f88c0b85ed0fef4c7008ec291680707

    SHA512

    8f8811fe9397bf0352061117d39c8b6667712d0d600fb39af5b66d584f96fb7089953cd98b5e0e8951235b3b04cbc72eadeb9569126574fca1edf2510fe5f6c2

  • /data/user/0/ai.moises/no_backup/androidx.work.workdb

    Filesize

    8KB

    MD5

    b6ca8b30661a7844ed292db75a29a953

    SHA1

    8e0d397ab1f2ced1f143829084c3f53333743bdd

    SHA256

    63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

    SHA512

    d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

  • /data/user/0/ai.moises/no_backup/androidx.work.workdb-journal

    Filesize

    1KB

    MD5

    4ed94327d755d13c9558c7bd27c85a93

    SHA1

    45b6868d5b28e5a7494ad1b9328329a5a7857b71

    SHA256

    04cf42555867fb068eb63e2fba4563840627b165d853030938e708e0d440313a

    SHA512

    890f296a34beb3752bbdb21f52e008bfbddb70e18400b889373dcc9f24ebb64187599f358cb07541369f8c6d3b482ed55cce5e6686c1e14bb511ce5a3e3b9d11

  • /data/user/0/ai.moises/no_backup/androidx.work.workdb-shm

    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/ai.moises/no_backup/androidx.work.workdb-wal

    Filesize

    329KB

    MD5

    a2e2e24f7e178b48a36e7e0f75372cf4

    SHA1

    d33fae8989453e61316ec18368b8af54733dfd12

    SHA256

    712c36b819e02738b4e545dd9df6c19965122d9e5608a797c5be3bbffe827de2

    SHA512

    baa313a6949cc7ce5de4f40f77fe7b8eb13db25d31592dbbfeaae48f4cdb21a84e9537b9931f61200a6e1d32b87184c84792eb383c63912e3ba013320d06ad67

  • /data/user/0/ai.moises/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzEzNjA2OTQ1ODg6YW5kcm9pZDo0NGU5NDE1MjRjMDZlNzY4NGFjZTM5.xml

    Filesize

    876B

    MD5

    6162cfbc6c28b2a7ad93e5276a2169d6

    SHA1

    2188318932399bf96383a94c00126152dcd77d19

    SHA256

    a31305f0096fae580b28bdd309c40610971018c4547031d8179e5bd28c454949

    SHA512

    b8e5400e961413c33eb72ef405ee37439d71f30230ed5045243d2579383daf888796236297829b98a32c1884f757051ed0886eb8869aa9c8bcfbde6f2e10a8ae

  • /data/user/0/ai.moises/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzEzNjA2OTQ1ODg6YW5kcm9pZDo0NGU5NDE1MjRjMDZlNzY4NGFjZTM5.xml

    Filesize

    124B

    MD5

    cc96d7a765cee3202e6091521f97d101

    SHA1

    9c0f699f1a342828da07ec90b1e9fbcd911ff00e

    SHA256

    f3b76e3f0ab197ae224391a5218b534d97bc5a0c899b052ec24f8d2b8148490e

    SHA512

    10ee8a9e82f50031ae72170e20801dc685908f2f92a7dbc4dad9e76052dcaeb8363a514bab3d30db47ef53becd3fa71733fb2b36e3946b9dbbd043bddc420960

  • /data/user/0/ai.moises/shared_prefs/ai.moises_preferences.xml

    Filesize

    448B

    MD5

    2e0b3b2be7432a2cd6bc7247d8c502d6

    SHA1

    208baccc818c065c8e60e9fcd26ad81f3f4e5991

    SHA256

    47d836b81034a1b98e292e0fbe43d1b3c6076fad908130179e60f47129dd64e9

    SHA512

    d487921e22906dce1190eaa32af7773d3b01853e671cb06b89a49d21d2e1de7202f25b2480302ee044b9cef0edd91be93da3d3cf6a50d939e5842382b5094138

  • /data/user/0/ai.moises/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml

    Filesize

    139B

    MD5

    34d145a1f9d7290f517f621b0e5635bd

    SHA1

    89108d6cae8d351c53efb5b70991fea2deaa8e64

    SHA256

    777b4dbcab9944d8855218bf93d3dad6bdb25c3666702a3f5ba8953f7752504e

    SHA512

    ac5ed49d296110fac3ab4ff1fe5ec3c2ed13fd15452a86ea95a3132e7625c63342703dcc29b9a84fe4c49617cd647b48efa51f0a43267eebf1f996da88ebbfcb

  • /data/user/0/ai.moises/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    160B

    MD5

    20b93010dde971fc806f5f8591465a9c

    SHA1

    2cdb5957cdc27538d2a6e7858131a2069756f3b0

    SHA256

    23f37e2b2fcac2f623b4389d3934abff3a3039ed39aa81abc5bb4787014fbcea

    SHA512

    9f9416a51dd021f951c3ed757e0cb9b661e2432cd1557079a80c4838a2ec676acdd81b5dc2f44c64623cd7f57a689432077f7ffb57068d0610e1743511d9f918

  • /data/user/0/ai.moises/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    203B

    MD5

    380923418408bbc7c48b2235b7fb890a

    SHA1

    d579c74caaf1f0d2ba2af713b41b095d06ed45e4

    SHA256

    9e27093db50155c239bf44e76758be4558f8e8521a4b355d47b9f1c1746163db

    SHA512

    8c0d5c00ed527fe54c19e34443687edbd97f7eecf77273e64278d0d339745efac664860973070eaea2b487254562a632f509cc961e19f33dfd2083a1f09c3dde

  • /data/user/0/ai.moises/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    387B

    MD5

    e0631594b8e06f5350a2afbceaafff5f

    SHA1

    6d5299db98121862066058c3718af007d44420b1

    SHA256

    7c0ea4d80d41f5634a9b9669f8f0f25f43752b040bd068dca9f5c685fdc35e23

    SHA512

    c3fa793f5727e04a1298d74f67caa24a8f62338576b00ab302a08e8f6c5dd939c1e7b608d4965812167b2c39f01a8f981a95bf7da064079d76246c3f22f78683

  • /data/user/0/ai.moises/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    395B

    MD5

    bbd3aec002516db84e22eab01b997cc5

    SHA1

    e78324e0dea4f7f2dcf03df6038e1a1a3ed693ba

    SHA256

    752a29603c2cde74cb844868d163606fdfe83752edcdd968ef1a04fd3c67cd51

    SHA512

    8e5a568cf929f1faa3ddf768dfa67fa55111dfe9600a7b3591460e4d34f7e6a0d9b4627132ba1b60693857a90ced09aa165613e4038fd72b7665cb79dc348201

  • /data/user/0/ai.moises/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.crashlytics.xml

    Filesize

    235B

    MD5

    121e332cd6d7a7256c5c55cc8922e20b

    SHA1

    cd81de5e319da2e3e3aa598ee90c52942ec73c6b

    SHA256

    2d0a4b7a503c2ee7ddb395606a095f8d9a0c8c7e6e2bf4e0951070ce6e912c1c

    SHA512

    5533419da0c6d35d73caafba1bf221b9840cbc6df512fea333fac128bac83b5892dc912c20e9559f50c270698f7d915ea731bf5b7efa53ff58c136a340063ba0

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.inappmessaging.xml

    Filesize

    120B

    MD5

    2bd766b6e5fd80862507dbc7c43f06ec

    SHA1

    d69a5d3ac0c14a37958a9a71e9bbb47cdc00f860

    SHA256

    2918e095232033d13000977516135b2777e3d4da59f2dd878b497b28c86bca4b

    SHA512

    78ddd4cc352ba419de8e490c0308a9708bd8bbfa62e1bfc643985e3d5690815e2aad6b07861485c4009b1acc897fc7e25c21b3fd7d812d6c07ac2ffbb6bb4067

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.inappmessaging.xml

    Filesize

    169B

    MD5

    7fe7bfdbe2786baeaf0688fd1a7cef77

    SHA1

    c8cc5d2b2bd5c138943fbd7cf92243e354fc9809

    SHA256

    e903b59c5267045b002498ca928b7d4a70bdf4845bdf4954bb768ced6279126e

    SHA512

    b2e89c4b1b48c072d9602b7f8bb7426415981266b28954fcf4fed5956dbcf080e994d7b0f15f293f1efc1aaccde3eb5b32e823dad26817379599be0988a6e798

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    137B

    MD5

    d6b32b6f7842c43a69d96e6bbc0f951e

    SHA1

    f09a77cc001d93e3386c5cd436a79ee29a46da6f

    SHA256

    5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

    SHA512

    e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

  • /data/user/0/ai.moises/shared_prefs/frc_1:731360694588:android:44e941524c06e7684ace39_firebase_settings.xml

    Filesize

    194B

    MD5

    0239e488ff664a4de46e903c3c5902ac

    SHA1

    eef4a1709b58a72030dca10c1c4bc5baa63ae9e5

    SHA256

    7579a949a3f64f6766eb1a1ad1cb27217e12d4588e80a764fabee77fab7cf457

    SHA512

    3adcbba39f9ba51d1e64e17f4e46e84004a29d3bdcffb882e49ec4c6712eb7342a46fcef55d2b5d61650d9a7dfaf18dae35bf4c80e5ff2ec16679d9e7efc9b38

  • /data/user/0/ai.moises/shared_prefs/frc_1:731360694588:android:44e941524c06e7684ace39_firebase_settings.xml

    Filesize

    193B

    MD5

    113bd70150ffaef53f6ce6b7a475bcab

    SHA1

    c89d528bd32e323465c53292d92ba6b157eb5939

    SHA256

    600c2699cb148ee811f2249d9b2dd3af2972450f3a1bd3dbb751ec5e4abb032c

    SHA512

    d550b494c33cbed29dfea8b2cfa6726a60d7f97b0496e7c995b42f2d4db91939d4109a1c4a036881c090c89b8efa42c64bfe42b2a9fb5ae47a470a29b7c27e3f

  • /data/user/0/ai.moises/shared_prefs/rl_prefs.xml

    Filesize

    163B

    MD5

    a7b3cae8b481e5cc28f020bf6d37eeed

    SHA1

    f1e6e98c58668e37188320fbbf38f51150f835f7

    SHA256

    de43ef09eaa075a7b42662b001d50880d994abf9fc1a631bdf579ab58d6fa14e

    SHA512

    91e1c0c5b06ef027569fec8796f6ad7a05340be7fa7606b6e707e23dd4b669fa2a047ecbc7d9e68097ff3952dcb04f41e10e3c9c1502b7590e8e7f8cf5b9c71d