Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

15/03/2023, 09:11

230315-k5xdeaed7y 7

04/02/2023, 15:30

230204-sxpycsdf48 7

Analysis

  • max time kernel
    3834276s
  • max time network
    23s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    15/03/2023, 09:11

General

  • Target

    base.apk

  • Size

    18.2MB

  • MD5

    df4ccdcc93d82240feeb83abf41683d7

  • SHA1

    0d48b5dc98e65ceed2a99448a8df3e2f4702250a

  • SHA256

    be56a97e691b8f1d8c8ae9d8c1942e8f4a287819e203d9795dd5ead7b1589045

  • SHA512

    a33b6bd168cfe70b28dbeaaa72e8fb2ba41cf2c67026dc33547cd07753417149cbe0850a2a6884456bb1d3e9f3933b60b5928af1e3ba727bd213d79843e543ef

  • SSDEEP

    393216:MHJRhIDdbTQIIwuL2dl44JD+aRaEqya4yfznX+bSv9wr9118RtvcS8:W5IbkIIwjd1ZbaEq13bubSFwruRtvcS8

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
  • Checks the presence of a debugger.

Processes

  • ai.moises
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4743

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ai.moises/databases/com.google.android.datatransport.events

    Filesize

    456KB

    MD5

    39e4605d5488b4d826c1a672ba5cd85b

    SHA1

    c1c94d317bb15c5b6d631b31c42fab69a0dd11f6

    SHA256

    6d16f46f725a7eb1528c92ce26ad58e8b5c1dee6d80e360c2885c362848e7701

    SHA512

    5aba9b8059079458d229216b6cb53c06a97414eb6f0358997782c9c08efc672a2d80e84175722727dad15e9cfa5c3a7f9a18855b43dbd828a3add171b5c67b87

  • /data/user/0/ai.moises/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    03159b0979020ea27e1f768f3429cb76

    SHA1

    0f1a88f03f03be7946213c0b54bc6e8298678def

    SHA256

    9e2e3f0c64af651ce07f56f5154506abcad63af24805f485b8c1e63cb1523ab9

    SHA512

    3d14e038e3ca37a3ea16622740c2fbc8044fea7b9de2d6118ad5b4e6ad30cf87ba8f3067ea32e2a8c60340e71e4e5237a369951f9abfdfd87517fc005bbda480

  • /data/user/0/ai.moises/databases/google_app_measurement_local.db

    Filesize

    88KB

    MD5

    7bd7e08b7c157fb7a04f9701b6965b65

    SHA1

    19ed78cffffd879509071b091ba60776c18e8d97

    SHA256

    c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

    SHA512

    a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

  • /data/user/0/ai.moises/databases/google_app_measurement_local.db-journal

    Filesize

    1KB

    MD5

    6d88b91fb1ad0f2ba3d025a279d352fa

    SHA1

    61d0e0535d40bcab96dcc68059e91ef22cc47d0d

    SHA256

    72fc704028eb3decaf5abe8aa9eecd50d73ee89d00b3edf85fc0fd12ea085228

    SHA512

    290092f8f52b176899b29e5625944e8413445be13ebd455236ac5111c79dce0368133e3200dd1bb403b40cc4a5818ff98f56d64fe27be05e7a4ed73a453efb2d

  • /data/user/0/ai.moises/databases/rl_persistence.db

    Filesize

    72KB

    MD5

    539ccb95ca35587c5ce338414d700e06

    SHA1

    ef469d94462dea7a291ff69822f63eb72eda8718

    SHA256

    2757f837347a024ba6c6cb2f5a874af2c4dc8e5883a2717ed2ced54cb460d9ba

    SHA512

    088325fc72e0611befebbb321a5d55e48744c753c6807e49fbef2280681476797a8097a88b9047abf01d91fdbad915d27a9abef3cddc461bcc78549131db4f0f

  • /data/user/0/ai.moises/databases/rl_persistence.db-journal

    Filesize

    1KB

    MD5

    4de58a95d16ad89eb8e0e46080c2b622

    SHA1

    de5c615eb16bf93538f31a276e603e3e8198c650

    SHA256

    f44bda6b8692e2ff3c469a691ccf8f0895f1ba3d333d88908a468846ab1f9d81

    SHA512

    0b9755c3679728980c326861b584f7ece7f85a94d0fc808a2b61341fa2a5225049ebd23f9b04143695754df9c936b0c3e18792489e86344169ef2bab2f25e559

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/com.crashlytics.settings.json

    Filesize

    704B

    MD5

    3055424e15e4c167fc9888a8d9405627

    SHA1

    11ee7a4989e1af649961eb219d4720220f741b10

    SHA256

    c50af05475f63d70aabccbd3517ed8c2a1c061822235c4a54e180a5e5956e328

    SHA512

    7829f97df36f4d34b0809a94b10c2fef3cf0de6adc4560a6657820f2d41bda4aa63c3d2c87ab3d3962173cc33c16ea792c78366478260c3898bc7460862e75c6

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/open-sessions/64118BD900CF00011287C3495B173DD5/event0000000000_

    Filesize

    80KB

    MD5

    cfd62d4876eba703760c81287e38a395

    SHA1

    bab6e89ea712255e8092e62678c6613ed373844b

    SHA256

    3d18fad5a7c685a45c1537744fff35a32a632db29975334d2b6747601820ecc1

    SHA512

    f5f5ecfe2c04d6364837f244273189775240e8e0d59b66d3a49a7e55d53f2b560de431ea4a15ceaa8de373c6b3d01cadf2987a27073f992306ee2586318753fa

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/open-sessions/64118BD900CF00011287C3495B173DD5/report

    Filesize

    733B

    MD5

    738caba44405403294c86bb44f30ee76

    SHA1

    d4538154ec022b4741e654afd557974010dc005c

    SHA256

    0423252bdc2c5e2740f89f6f7fcc690caeab4605390ca6490cb00ed2ced0cfd5

    SHA512

    435a6081e33395f46b501c461b038b053878abc6763056ce534f1e14cb0469f8c6bcc56f3ef071c4bd8f48104ed8ce5208932b3e43686df9bbbb7bc9b679c903

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/open-sessions/64118BDF02D400021287C3495B173DD5/report

    Filesize

    733B

    MD5

    14e73373adf412286afa9bc7270abc5f

    SHA1

    cfb92a024e43830679cf2909290493a3d26d6532

    SHA256

    c23f1c771129f1ecdb61e7a7dffe1a391b2efac1ba3b14939f3cc681aa1adf42

    SHA512

    915aab451376b0329be81c3684065a2e60d0871280ef6d9154c5e7795f4b19e3e9f8bf0148e3e09a4bbffee107e040cbedee56402ba0c9ca13d1ccc060366e03

  • /data/user/0/ai.moises/files/.com.google.firebase.crashlytics.files.v2:ai.moises/priority-reports/64118BD900CF00011287C3495B173DD5

    Filesize

    80KB

    MD5

    77177bf853cb958dc871b1e577549ef2

    SHA1

    d735c9513979c79005b72befe738b1500149cb10

    SHA256

    627cca24bd8a02fe92e3eb9d19527064ad571a468fc7cf7801e66a4a99fb606a

    SHA512

    efaf0f76097642964a9a3a59b57b32e7c10c44de08fcd04b6ebcb8c4e6e96f18e8a86a2183e5a87f3298d52d834da4ae9e52b31610b630f9da26a21a9cde8e5a

  • /data/user/0/ai.moises/files/frc_1:731360694588:android:44e941524c06e7684ace39_firebase_defaults.json

    Filesize

    537B

    MD5

    fb32831b27d73e63667cb2f0c17d8c00

    SHA1

    ff606d8eba94a462af53dec400ed756364ad50e6

    SHA256

    a2664be7865f9b3e4a673f09408a60d2f999fe97d23a6e881d21b8d020db8be5

    SHA512

    bdd77f4ff959b48fbd29783938aa0a7262e6462d75315ae0c531b853449b9d926f41f9b43307f04420dc0880436f5e17946b841e2a29dfa74e1f407617a39bc9

  • /data/user/0/ai.moises/no_backup/androidx.work.workdb

    Filesize

    8KB

    MD5

    b6ca8b30661a7844ed292db75a29a953

    SHA1

    8e0d397ab1f2ced1f143829084c3f53333743bdd

    SHA256

    63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

    SHA512

    d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

  • /data/user/0/ai.moises/no_backup/androidx.work.workdb-journal

    Filesize

    1KB

    MD5

    11d2925dcfc04b5c2744637aaa9f89a7

    SHA1

    29ae5ff1297ab82d58853fb7aca666afd6aa11a9

    SHA256

    bbf705c4b5b501fe381fb2a245c6fed303e366371f62fe3a1a4b80f406e5322c

    SHA512

    9fedc682fae64650644a14997c3a3dd41549876a3f30803ffe75829f99e3c49b9fc8322f82b51036e723ef2daaa9ab000bc8c8e0b512306c6bf1e480992ee91f

  • /data/user/0/ai.moises/no_backup/androidx.work.workdb-shm

    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/ai.moises/no_backup/androidx.work.workdb-wal

    Filesize

    329KB

    MD5

    e4df9dbac55299b7c76adb9be969c27a

    SHA1

    09102eea5f387d54e3be8779f4cbcb5653f2ab6a

    SHA256

    6604ed551bb2d897f59df7d564a42e8ccf149b2a43514045e081dff951611556

    SHA512

    2126cc59a49a36d6747dd219e4067b7aacfb5d7c6237cc80095ee8602022b49b052aff910e1bf87e19d71b927b49eae9b593e3060cb50087dec9cbf38812b32c

  • /data/user/0/ai.moises/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzEzNjA2OTQ1ODg6YW5kcm9pZDo0NGU5NDE1MjRjMDZlNzY4NGFjZTM5.xml

    Filesize

    124B

    MD5

    8e437df4f7fb1648cad008b5a6a48693

    SHA1

    caeb87436aa6306fc075a804010424a7be4dd157

    SHA256

    e09f24b30461a147176b92562a8af75bfa3ef38d7a142f3eab226ea7afaf513b

    SHA512

    16662ac7b141aeaa8cc607f09efe799ec3d79b1bceb7a59b74185107b367d8b31a98858194cbc18a6c5d13712246bf33670026339a7081a7d1a1ba92a9ac2af3

  • /data/user/0/ai.moises/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzEzNjA2OTQ1ODg6YW5kcm9pZDo0NGU5NDE1MjRjMDZlNzY4NGFjZTM5.xml

    Filesize

    876B

    MD5

    abecb721674cda6ff20dda3575e99085

    SHA1

    faf446affc34bc26eb30045471263e230bc33530

    SHA256

    45752d7c50ba3970063d5390eb3af62d8bb8485c091f274bbc61eeb087f8fee3

    SHA512

    0a96e2595f8b883b5d8f3458dcea6d4ebd27b6bc01b95b478960a6277da9c1e6dcfe944f2f62464535fa5bf1687782e6680d7b55eb734d6d7336a7e56d0521e1

  • /data/user/0/ai.moises/shared_prefs/ai.moises_preferences.xml

    Filesize

    448B

    MD5

    976ae098461ae434cba3ae7bc926b6a0

    SHA1

    54ae2fcded7e32350ffe621d97514d6628e1983b

    SHA256

    8b22d1e82d3e2f732deffcd114f19dcaecc55b44d2a9abbfa9d0a28000fda4d6

    SHA512

    c8fd1bdc5f60dfb9d0ec47cdb94b7e0914598a4b6fe5cb59a71d84e7ab3bc92ccd93405ecfaf41e709cd940bb3e025b54778fcc4f23aea448e0170c472f21709

  • /data/user/0/ai.moises/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml

    Filesize

    139B

    MD5

    34d145a1f9d7290f517f621b0e5635bd

    SHA1

    89108d6cae8d351c53efb5b70991fea2deaa8e64

    SHA256

    777b4dbcab9944d8855218bf93d3dad6bdb25c3666702a3f5ba8953f7752504e

    SHA512

    ac5ed49d296110fac3ab4ff1fe5ec3c2ed13fd15452a86ea95a3132e7625c63342703dcc29b9a84fe4c49617cd647b48efa51f0a43267eebf1f996da88ebbfcb

  • /data/user/0/ai.moises/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    160B

    MD5

    df952d0717e3be968df26a62cef5ffcc

    SHA1

    fd3596b9368d921f5f5fedd610cd917dc1b5feec

    SHA256

    1b1875056959900357e23f035690e28503b0b19d87a70a41f14904f329a10cf4

    SHA512

    e438322dfdce938e298ce3e7f100573bb6ff7e514f7e819f97ecc641537e315b1acb35825c5aa757ead4e50602c274bbfdf3aae9fdd3a79cc60e5165bfd38a66

  • /data/user/0/ai.moises/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    203B

    MD5

    7aeadf9002c0ef301e323c76ca07ddc4

    SHA1

    c9e7acbab2d9d69a072d7d63492236a5ceaab5d6

    SHA256

    8b03c516882e4ea02da914d9adced09fb5c57aa757ba8789728f3830879a039e

    SHA512

    0fe5f02aab838792319e8e6e0cee85f23273da0f7e1bbc7c51bbf1060259bbb0f42572ba3364af409b9d9f5dee8c3724c2aefe84eca83a0b552b1eb89365584d

  • /data/user/0/ai.moises/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ai.moises/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    395B

    MD5

    cfc0bd773202b22b46a6bd30fc43c57d

    SHA1

    b6916f4ee126fcc11f01098e250449aaf8363326

    SHA256

    640668421c5455c2f45a2874baa6bf882cfabab2de738e1a4fcad75cf345e70b

    SHA512

    f3c6978c085105094f38926bd5f05893cf8d2dc904627be4ee5d9ee8224acd7d40cff215ec2a894d822520880c205afe40c7bda782bd3c64d540a760aa2b76c3

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.crashlytics.xml

    Filesize

    333B

    MD5

    cb8efe468eec8296c44b5bf1a3d6a058

    SHA1

    408720d9b80971f8bca647d886c3a20963261444

    SHA256

    8e358c4dd54b62eb9d29a1b1a1730e78af7463ea98ccf07341c314858e2587f6

    SHA512

    923dc616548ab2fa160355a3af1d1549ed11cfecd50a97de5bc4d87fd113d5a45d8b46950f62b83375b47eed59e1b6f12f2ab81bd792ea18f5cb7b2bbb31e493

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.crashlytics.xml

    Filesize

    235B

    MD5

    7412ca2b9fcc965558b097d9f8815f28

    SHA1

    fada5e512a477525572dcfeb082c3fc12491e6eb

    SHA256

    585ad366d836765163c2db87c48e70c5b70be5dee4b3149316af09342f837aef

    SHA512

    1e7b9c71d98b7577dd4c1296b6143bc5e49a41228f1e3c377a7e19f7b368a97aedc36637435b4fa985eba9721c3501d4d6c7f8dbf6b02638c4b2668e40bf037b

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.inappmessaging.xml

    Filesize

    169B

    MD5

    7fe7bfdbe2786baeaf0688fd1a7cef77

    SHA1

    c8cc5d2b2bd5c138943fbd7cf92243e354fc9809

    SHA256

    e903b59c5267045b002498ca928b7d4a70bdf4845bdf4954bb768ced6279126e

    SHA512

    b2e89c4b1b48c072d9602b7f8bb7426415981266b28954fcf4fed5956dbcf080e994d7b0f15f293f1efc1aaccde3eb5b32e823dad26817379599be0988a6e798

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.inappmessaging.xml

    Filesize

    120B

    MD5

    2bd766b6e5fd80862507dbc7c43f06ec

    SHA1

    d69a5d3ac0c14a37958a9a71e9bbb47cdc00f860

    SHA256

    2918e095232033d13000977516135b2777e3d4da59f2dd878b497b28c86bca4b

    SHA512

    78ddd4cc352ba419de8e490c0308a9708bd8bbfa62e1bfc643985e3d5690815e2aad6b07861485c4009b1acc897fc7e25c21b3fd7d812d6c07ac2ffbb6bb4067

  • /data/user/0/ai.moises/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    137B

    MD5

    d6b32b6f7842c43a69d96e6bbc0f951e

    SHA1

    f09a77cc001d93e3386c5cd436a79ee29a46da6f

    SHA256

    5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

    SHA512

    e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

  • /data/user/0/ai.moises/shared_prefs/frc_1:731360694588:android:44e941524c06e7684ace39_firebase_settings.xml

    Filesize

    194B

    MD5

    0239e488ff664a4de46e903c3c5902ac

    SHA1

    eef4a1709b58a72030dca10c1c4bc5baa63ae9e5

    SHA256

    7579a949a3f64f6766eb1a1ad1cb27217e12d4588e80a764fabee77fab7cf457

    SHA512

    3adcbba39f9ba51d1e64e17f4e46e84004a29d3bdcffb882e49ec4c6712eb7342a46fcef55d2b5d61650d9a7dfaf18dae35bf4c80e5ff2ec16679d9e7efc9b38

  • /data/user/0/ai.moises/shared_prefs/frc_1:731360694588:android:44e941524c06e7684ace39_firebase_settings.xml

    Filesize

    193B

    MD5

    113bd70150ffaef53f6ce6b7a475bcab

    SHA1

    c89d528bd32e323465c53292d92ba6b157eb5939

    SHA256

    600c2699cb148ee811f2249d9b2dd3af2972450f3a1bd3dbb751ec5e4abb032c

    SHA512

    d550b494c33cbed29dfea8b2cfa6726a60d7f97b0496e7c995b42f2d4db91939d4109a1c4a036881c090c89b8efa42c64bfe42b2a9fb5ae47a470a29b7c27e3f

  • /data/user/0/ai.moises/shared_prefs/rl_prefs.xml

    Filesize

    163B

    MD5

    a7b3cae8b481e5cc28f020bf6d37eeed

    SHA1

    f1e6e98c58668e37188320fbbf38f51150f835f7

    SHA256

    de43ef09eaa075a7b42662b001d50880d994abf9fc1a631bdf579ab58d6fa14e

    SHA512

    91e1c0c5b06ef027569fec8796f6ad7a05340be7fa7606b6e707e23dd4b669fa2a047ecbc7d9e68097ff3952dcb04f41e10e3c9c1502b7590e8e7f8cf5b9c71d

  • /data/user/0/ai.moises/shared_prefs/rl_prefs.xml

    Filesize

    3KB

    MD5

    718475b3fa5edcc52b3c45d719a5c8ad

    SHA1

    e0cb7506bd85538142fce45d5f7f6553e3929b8d

    SHA256

    19af7336d031bcf4dd3f6cfd35b34f7ecc09d89fc78922cd4ea38db79282b647

    SHA512

    54183e38e728c4049dfbe3ff3c6efb361a51031636a461435b069be8f622550876989feb9c8fb0955bb4357da1214141970f3b4f67ea75317e96f3d16ba232ce

  • /data/user/0/ai.moises/shared_prefs/user_token_crypto_preferences.xml

    Filesize

    631B

    MD5

    7971bed2ee6d74b3c4ff8df0eb9a97bc

    SHA1

    c469e9d06855fa59facdde8a2a217e2d757f18b6

    SHA256

    6b3f0a982adb9f9051ef9eeec32975e4af9ca5103f126d0dd32583ff4e447909

    SHA512

    6118004a3facbe85ddd554b0114793b59aae9fc6152bd067f6cb33d1fc68f0bf7dcddf49a095c097b1f0f187cc2065595bff49f32cf8fa0bf3290ae816cd2eba

  • /data/user/0/ai.moises/shared_prefs/users_data_crypto_preferences.xml

    Filesize

    639B

    MD5

    10498f5cdc5e6377a8ca407ce680cae5

    SHA1

    3456cb82e46087d1b3db0d3de1586a7d1153f38d

    SHA256

    e1ecc3606f370e381c3acbd7ba38b032ed1b5030eb24502125df32c6f4a003a9

    SHA512

    4c530c88c28bdd044ca599759d0a1058fa44f2c1612f5d1d6affb31dcc2b4730af11ab806f9d8ee28bf8f4e0faefed64f21c6b906afcbd42250dae0a896ca430