Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1343408s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    14/02/2023, 14:14

General

  • Target

    Download.apk

  • Size

    2.0MB

  • MD5

    dfcab9bed533d1a2c1c3aef5bf5593b1

  • SHA1

    b3588eea35f3357bac205efb502246f2ce9e866e

  • SHA256

    5f7ddfea1ef181280da7a294421cbfb808397cc683dc17f3c968af9cd31a5342

  • SHA512

    2347d3a41e1c62c609dec91dbe1a71c8ccd0a0121b1d41c3301d4ef44eb6b2e53ccfe674d1845e170f36fc5a6d4e8f0a57e1fbe65f8aa6663f2272a51a0dce64

  • SSDEEP

    49152:SqRu7fO3CvvWu/EPiD69b5BfML7wRXNK7FxqEjB:NM7mSvL/uMEb5pMPqdiqEjB

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.montecristo.linkto8puzzle.nearme.gamecenter
    1⤵
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Removes a system notification.
    PID:3992
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/21c78a5c.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/oat/x86/21c78a5c.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4059

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    ba85a8d5fb7b7b297c837148ad5c4672

    SHA1

    ee837c1fabde8277a08dffc0c11e07e52b1126cb

    SHA256

    443c9c1982f316f001d54059f9bf4883ec90490da889bc2e3adfdb96ac634c05

    SHA512

    4536297cc8c52cfe6952580b5b9b905780860136bdc468b3ffd563ffff95a620f161f6c19ec14a1078c84a171aba73b3c04bf7b27c7937736483b1944101e090

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/app_webview/metrics_guid

    Filesize

    36B

    MD5

    c41756bd18f7459ee17ef98256604801

    SHA1

    935d539a8c326c6aa59f95c52aded15ecd7ca87d

    SHA256

    d2c04032178d1e626e152f489041ddfba0f325b0921974174634fa2d1e3d17c7

    SHA512

    466f56b6bf3f63384892b142e40f135634dc2115d61daab7bb2f53d35463baeb2c117a7654404b0eeb47cb0045532c6af61430adaa0e8205bc04a90f43b02bcf

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/databases/com.google.android.datatransport.events-journal

    Filesize

    524B

    MD5

    4b34ddec3bc65b7c3c39b1ca370c8462

    SHA1

    bda96d5aa963e702007d735893ab515c64fd1e42

    SHA256

    78b60b0c92bf8eaee44e4904bda7cc25d5c883f771d65379cb6fbe6f4359489e

    SHA512

    c13c9fb8ef9ffacbd5f1c6894974871848e424e3df4910a41d91621d4007197b7fd63327bd1b0322de5c5465e29cd6a27ad36157d6e6fa1014d8c3a9fc2ca600

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/databases/com.google.android.datatransport.events-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    1237122bdc8a76e424c7bd3f89f21646

    SHA1

    2d6f1f244bf786ed24ab8704e54b54efb4c8c9a5

    SHA256

    eff1d55aa65b232db6fcefe34ebe2c3e83e0cb4f183eae249413edba0a2a5f98

    SHA512

    64e436ed876bed949003c0e09a212a0122f2c9bc8e22eee2069e16b95d5c62398609eefed0b0e54aae30b33de8a9e393de1d09a4e973afb1d971a23c0e297135

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/21c78a5c.dex

    Filesize

    2.8MB

    MD5

    8b67d5267957d9efb8fe3bb0a458be6d

    SHA1

    88833da94c4dba7c5c707a8caed401303da6ab27

    SHA256

    981287219198d43803af26648efd84d1dbf5699cf09a3f93414b31590e7e5d9c

    SHA512

    600eecb56d1abbd4a52534e51000df5b5b87685b05a13bc6bf03e3095a9834c4b30a74e0ec25d5e98537a03133af02320d3c8ef529aacd22227f58733fd1cdd9

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/21c78a5c.dex

    Filesize

    2.8MB

    MD5

    8b67d5267957d9efb8fe3bb0a458be6d

    SHA1

    88833da94c4dba7c5c707a8caed401303da6ab27

    SHA256

    981287219198d43803af26648efd84d1dbf5699cf09a3f93414b31590e7e5d9c

    SHA512

    600eecb56d1abbd4a52534e51000df5b5b87685b05a13bc6bf03e3095a9834c4b30a74e0ec25d5e98537a03133af02320d3c8ef529aacd22227f58733fd1cdd9

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/QLAR

    Filesize

    428B

    MD5

    47607a6376ab70b265b9687890b10fe2

    SHA1

    2a8617fbfe5d53c9b55da1e8188c7c8e95aaf901

    SHA256

    846045962348a15279f50a46582f66eb2cc6d015fc9011da907c17ab93594c06

    SHA512

    bdd0dbe5a976b5eca25ca0e7d8a6ffffe7428e89c034d0c0fca011ea2979becae0ca81e26a2f5c3ab40bccde25390929a39c1fb9c58f78d2843711ddc7feaf8f

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/files/ykK

    Filesize

    231B

    MD5

    23a18d2146f45200e4238fe067945388

    SHA1

    5502474af1fe0af30101cad6c99587dcd96c0c03

    SHA256

    19ca81c9085d2a7e68a39afc180ee61634eea4f0aefe563c676522a1c50ea85a

    SHA512

    1481ed1000c61c7d8c99a48f7aa2ed5fd3fdd246cfe5b86932e418f40ba88f4c5db270965c872067ab4193601d27534b7f8c64617e7b891ae12285d1752a4077

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzkzMTczOTYzMzg6YW5kcm9pZDo4M2MxNmQ2MDZmYTllZmQzZjAyM2Vi.xml

    Filesize

    519B

    MD5

    9cd7614164960caaab08781a34d2059a

    SHA1

    242ffec231f8c985f2dbf4a64b5df62af630a430

    SHA256

    906750c1e38d638863ed687d50804fb3a42f1f5a8c0cf1137ce2d1a0b0d272de

    SHA512

    fe7f5ea6346e4e9fe041a242c5da826e03143f9fdbecb952c06039961c7b7263d84416863e653bc49ed59ea51c74e613c34dfafa442539871bc3097ed4845c4c

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzkzMTczOTYzMzg6YW5kcm9pZDo4M2MxNmQ2MDZmYTllZmQzZjAyM2Vi.xml

    Filesize

    178B

    MD5

    54c043976a68fcef3e3c241f59fec934

    SHA1

    95691f27f6a22fa5057b19b9f197a46a2876764d

    SHA256

    f628162a1034a9ca76557cabf3dd36cb99c5b7f20c14f3e758daa829cae8a187

    SHA512

    94319064fbd083c9335b2648d556af0168bd0344b9b6f4100637b238498e89f3106f7753a69a6fa94f8775a979d9f31cfd958a973bdfceff3a237ca08a5a9c0c

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzkzMTczOTYzMzg6YW5kcm9pZDo4M2MxNmQ2MDZmYTllZmQzZjAyM2Vi.xml

    Filesize

    465B

    MD5

    a77c9e9abb8a8b3306476d09ccee6f3b

    SHA1

    034223e93ea6f0e09c3866c7cdafb88691686e74

    SHA256

    b406705df660388068d752aaf21730d167635af44ecb26b5d5de6f0aa89b73ad

    SHA512

    8d5dad180bce57e02734c03739766539f640cb36e8adc02f62b26ad2c448dbb2b21e123e957f018c4468d7a10c6dc3d93b3fdd8bebedef1f6b9699a87631242c

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.montecristo.linkto8puzzle.nearme.gamecenter/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    387B

    MD5

    2071348f568f40e95bc54c583cee2963

    SHA1

    e51f2a315b39b1e89aa4f6c0d617e7b5f3c9f643

    SHA256

    3b73327f514be965c72dad07ee8f54f5b8745b68b24a88265d8254eecb14c9d0

    SHA512

    bafa38115dfdaa579c42ce6acdaeedaf6ea80c38769c008664701b8de2013c0f6da166c55742462228c74c095ceb3cc799e56484821569c978ec22200757c51b