Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2572144s
  • max time network
    71s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    19/04/2023, 11:37

General

  • Target

    rms.apk

  • Size

    4.2MB

  • MD5

    99747761c3d1ca513295b1bd76c9f142

  • SHA1

    c1d29249a2d0f2b1f41dc605f8964296b3701003

  • SHA256

    1a7affaef58d943d0e00a878870f12869961d62f33f4637ea7efe490aaff2057

  • SHA512

    4e2673aec7428fbe40edd0a44cf8cd02a67b496f9fbe00573c7987a85cff66a9af8111391676b0d58d9cd69b817952276d2337c61d4c0d58721e667643dc95a6

  • SSDEEP

    98304:lR5n0zt0iiTS78Yy3UUj8T4EwMFwA6CnP5SWtN3i0rXaIzN7A:lTct0KwYy3JEwOnP5SWKIzBA

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.rms.transactions
    1⤵
    • Loads dropped Dex/Jar
    PID:4760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.rms.transactions/app_webview/Cookies

    Filesize

    64KB

    MD5

    9b23e6a88d5a95f155f205cb04b93cd0

    SHA1

    b62dccbbef087a0731f226b96d15d35d8aa5e5fc

    SHA256

    f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

    SHA512

    bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

  • /data/user/0/com.rms.transactions/app_webview/Cookies-journal

    Filesize

    1KB

    MD5

    bb45829327db6252f9f7108940fc8ace

    SHA1

    4879b139091637c073587ef231dcaff2ab9f8e40

    SHA256

    79f42fb14a56ec51e473d6cf6352557828db3f4f239f6cde1dfe182601df90e9

    SHA512

    f889406a8f4c6446759fc8c6a2b79985bab948a9f0ac26f6aeab797bf5c0331f7e646bcb1b6a7b6a27b583133e7bd6b7352f7d4a8cfecfe4380776cabb5c8454

  • /data/user/0/com.rms.transactions/app_webview/GPUCache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.rms.transactions/app_webview/GPUCache/index-dir/temp-index

    Filesize

    96B

    MD5

    2d3a5546911931b7f33972a1fc6a1cc9

    SHA1

    9939ec60a6834f9e4e74b7b8b2175366412167ca

    SHA256

    8e4c9064206cc833581b8bb282678d5dae6d868d91ab0a72211a18e7583e9a61

    SHA512

    fe53065df3eb4bc55703f37999afc2aa795ed77951712243a7c1089bc783e30544fed94cdde3ff4c654dc583d55ac1ace732a0e54824c502f43e9bda9723a513

  • /data/user/0/com.rms.transactions/app_webview/Web Data

    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.rms.transactions/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    cd66d4ea4a4772ab48a4586a1d6c40ae

    SHA1

    d71793a5b8855510c3271e45653c9f46ea5a5c84

    SHA256

    af9394416ddf61ab71159b0a288f70b72452c9fc56ebfd85a4c7ea32503f5c78

    SHA512

    4d1405aeca1ac24ff1573e0754859c99e5a8ccf5c6b8cad24516b315e9399921c1b8f9a1bc96b9b7c700d4f9376b05c186e1de948935e90baaf2abded6e088b9

  • /data/user/0/com.rms.transactions/app_webview/metrics_guid

    Filesize

    36B

    MD5

    d16f1bd8e51024af72a0606f2463bab2

    SHA1

    19a78fabc8d2f6990baf08bf2b0c3bfb1e324046

    SHA256

    cfbfe65673fc65bb6f99686f40f9d101784891faeb25ac3b6ecdffd5ad29bef1

    SHA512

    f485a067ee050a78530551a495bb3142855c56a9e3ca0d2ee98f4c05cc64dc10f8f2bf310a90517864270a6d1d3b3139dc100c1287f57220b7fd3ac773447e85

  • /data/user/0/com.rms.transactions/cache/1664557424545.jar

    Filesize

    21KB

    MD5

    722310b17c81cc3d780d23e1a63eb450

    SHA1

    0a0c1a939f923570e5da88aa5c7b105052f056e3

    SHA256

    9f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1

    SHA512

    1a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91

  • /data/user/0/com.rms.transactions/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    71578822fab63dd0297ac763d7de160d

    SHA1

    134bdc6fa0021a68767c4271649e79ba91ffa100

    SHA256

    8fe68109ab5b7baa827a3a24cc3a452b9857fbd8a00cc547b5f5649e9b4c14f3

    SHA512

    70a08bfc0a8cea2266ec9ed8c08aba93b7c0c11f550d9536c7945fe8486adadd677985fa79188231839c488d8e12c5a9c254c98490bddbd7449c64f407aa73de

  • /data/user/0/com.rms.transactions/cache/org.chromium.android_webview/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.rms.transactions/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    f3f570de665ba3f08ce7494d575b26be

    SHA1

    e9c72d88c33d0c28a4529c049a21379f467355af

    SHA256

    70cace09b888578c1ea8c4cf6cdc4bb77c4965d4db9374c0e73c4b047ac4bd91

    SHA512

    d6d6234a88772aeeb2128ccd5c2998510afa4c8ad1c35ddafc9fdb75a6beca4c3dfe492481929941d61ece17494b8c20b23799ef2435137ec7c29567a3f927d1

  • /data/user/0/com.rms.transactions/cache/org.chromium.android_webview/a33d23c25bb7d919_0

    Filesize

    282B

    MD5

    8984989607527e41ae797881bdec0308

    SHA1

    a439648478cbb415440ee4186452db24e9af80e6

    SHA256

    ddfc29706d710234fa49d5bc09c274cb9a5996f652395b047c96bd6103ceb43c

    SHA512

    41ca98d910adc3d9b7dc8249a5314741c132294f9524ecdb28b4cb70c7b92375666eb30e1c4b95d692b8a6b4e2e13a0a80e2ea9dac575e1c7af5bb313f956c01

  • /data/user/0/com.rms.transactions/cache/org.chromium.android_webview/f038e94cb33282ab_0

    Filesize

    400B

    MD5

    a62b20c6608b3694260e345c1d80b467

    SHA1

    ea6bec313d9a059a7f4e1e72bf8cfbae621846d8

    SHA256

    6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929

    SHA512

    f68c3bfae54b8f75d56a63cd823e99ce8c6472db38a5120508540b4ecd1a724f29156f93dca5a61939408c74312689c0fc58084d2e2240e584c87d5a3a4bdd8b

  • /data/user/0/com.rms.transactions/cache/org.chromium.android_webview/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.rms.transactions/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    144B

    MD5

    5498fd660fe2efbe14bf33f5b4fa1e0f

    SHA1

    72621090bc01b72dd49b6498cd82e71a90aa46f6

    SHA256

    e49ba29d11f90cc28033e625dcc5cf707c0026f61a1f9c5d57f88e3dd3750106

    SHA512

    aa3f7c8e5f9485ae8329898e37d25be85dc238c3acfef7af12e8fdf298b7fa1bcef8d8dfc010b3833c0abcd1699b66e61fed678387b4ee90e3c93904c6745059

  • /data/user/0/com.rms.transactions/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    96B

    MD5

    d75fa05835981b666311642a70b19b97

    SHA1

    791fa82c6d58a23337fea05eeb853c0842fcfa53

    SHA256

    69768f7cfc3fcfffb92832590a61ec15c25c9263520ff112a9ec457e64e4feff

    SHA512

    156bd26a571f1cf84f3157a264dc650ccb6793be4f27e4aa7550b2f1617452113b53b060048dac9c39e066174fc1ce42b96b45e23fd6035c9b680f28d5e76d8e

  • /data/user/0/com.rms.transactions/databases/google_app_measurement_local.db

    Filesize

    88KB

    MD5

    c0847e7a3c39a8f4c230138f5d85f564

    SHA1

    7b821bb00b19868bc59ef3943e770b930bf80ab8

    SHA256

    a35b84ffde0bb9372be663e877801b2ee76126353faf7f45cc09b547c94672e0

    SHA512

    65650a795f383a29e19d0368594975764dadfe412a8f2a1352c35205c5e34d6d928c008bd1b5242df172cf05248acd2c1efa6e1c29faa2a2ae39c3d78593b5a6

  • /data/user/0/com.rms.transactions/databases/google_app_measurement_local.db-journal

    Filesize

    1KB

    MD5

    7e293f89e7ccd563ba8d1e8e6a69da7e

    SHA1

    c5a5ee3aa9577fe214cc4bc307f45000b7705450

    SHA256

    26cc8ac760f9a2f33dcabf5cad08801ed4a35510991d2604aa6ec75b46f43196

    SHA512

    0cfe6654b0994b49cd163588272bbdb63344f660633b0d90d984850f87b493ac37bb9ff1357dfb440c391e8fa03851a430937b34153b775b4a08fec55533f963

  • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb

    Filesize

    8KB

    MD5

    b6ca8b30661a7844ed292db75a29a953

    SHA1

    8e0d397ab1f2ced1f143829084c3f53333743bdd

    SHA256

    63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

    SHA512

    d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

  • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-journal

    Filesize

    1KB

    MD5

    a7683cc880e2ff9d65aba773f4ddf7b7

    SHA1

    994642006621165752a8ec17529291114e53cd82

    SHA256

    0dde731452131489b2ce05a4a44003f3a979e424c148ae49de144bbad6e554b8

    SHA512

    ab108049cd0dfd2533ace8f1ffe587b23c0e37f7382685f3d0845f5eaab9bf819153da5bb55c3bfd858b4e1bb6f20f2aa7bc968114a3eff2fb8c1c3a028bbbe4

  • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-shm

    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-wal

    Filesize

    418KB

    MD5

    6ef1fb325aec77067fc5b29f037fd63b

    SHA1

    c7d54f4511f0358c202993b14bafa1920b398c6f

    SHA256

    b54a6c95047a2c26b5b4d4a4d60001dfd31ebf0a81a0420bdeb7fe8bfac877a1

    SHA512

    d8908db805566577cfce905e63ee44b0670d8f2566373beece7630ec0c6aab81c4386d9c0129fba3592a4618313b8d27fe61eff5e6d6ee6ab24c1c73f952edfa

  • /data/user/0/com.rms.transactions/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

  • /data/user/0/com.rms.transactions/shared_prefs/admob.xml

    Filesize

    133B

    MD5

    7a3b17609bd7e5341dabdf040a3dba3d

    SHA1

    b321df2c4851e2f2f31fe8d916fa3d511a499460

    SHA256

    05afee4f4d3f9f0142b7d4fdf075c753898bcd5081d42b2daf167ddf44549837

    SHA512

    8cdac101aec9e9198a2339f9de4f75ca61621af6b8d02208646640f6f109e25192d3208fb0f906101beb61d110e2fdf88b62b0536bf5919f7920dc6c6eafc441

  • /data/user/0/com.rms.transactions/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb