Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2572137s
  • max time network
    72s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    19/04/2023, 11:37

General

  • Target

    rms.apk

  • Size

    4.2MB

  • MD5

    99747761c3d1ca513295b1bd76c9f142

  • SHA1

    c1d29249a2d0f2b1f41dc605f8964296b3701003

  • SHA256

    1a7affaef58d943d0e00a878870f12869961d62f33f4637ea7efe490aaff2057

  • SHA512

    4e2673aec7428fbe40edd0a44cf8cd02a67b496f9fbe00573c7987a85cff66a9af8111391676b0d58d9cd69b817952276d2337c61d4c0d58721e667643dc95a6

  • SSDEEP

    98304:lR5n0zt0iiTS78Yy3UUj8T4EwMFwA6CnP5SWtN3i0rXaIzN7A:lTct0KwYy3JEwOnP5SWKIzBA

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.rms.transactions
    1⤵
    • Loads dropped Dex/Jar
    PID:4544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.rms.transactions/app_webview/Default/Cookies

    Filesize

    64KB

    MD5

    dfb2098ca7b3bf16d6f5f1e7d3839af5

    SHA1

    ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d

    SHA256

    e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224

    SHA512

    fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

  • /data/user/0/com.rms.transactions/app_webview/Default/Cookies-journal

    Filesize

    1KB

    MD5

    1be6e3e1f74d4385c299a612882a8a94

    SHA1

    17d4a72360eff58b9f40a3f0d522ab613629df24

    SHA256

    bba6ddf4fadc290e8b731e6e786f028bbb7a2ccf75faa053dedf8f8f190688e6

    SHA512

    2d4c23a9c791e1a8459717af27a5521c46874c525efddca1ffd73271c30afbd39863567eeb8da828f4ec59ee6dad9841f43981af4852023fc1dbcb6a091cf942

  • /data/user/0/com.rms.transactions/app_webview/Default/GPUCache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.rms.transactions/app_webview/Default/GPUCache/index-dir/temp-index

    Filesize

    96B

    MD5

    2b5c0b8febb3781952f29e7aebf29480

    SHA1

    7d965ec3c7fb6215e2e0cf44cb8fc0cade135819

    SHA256

    c76c125c37927e32b23a259f0c26e0c13aa8ce579bcd47a0e70c8f3a5b26a96f

    SHA512

    430a08e87813e75a8da4e5f5824f7bb1eea3d4ae1634116086f3692c2a5f950afe3753db9abd5f93c0267e3426793ec3fa1a94cc305f53c490f124ab1c316dbf

  • /data/user/0/com.rms.transactions/app_webview/Default/Session Storage/000001.dbtmp

    Filesize

    16B

    MD5

    46295cac801e5d4857d09837238a6394

    SHA1

    44e0fa1b517dbf802b18faf0785eeea6ac51594b

    SHA256

    0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

    SHA512

    8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

  • /data/user/0/com.rms.transactions/app_webview/Default/Session Storage/000003.log

    Filesize

    61B

    MD5

    9f7eadc15e13d0608b4e4d590499ae2e

    SHA1

    afb27f5c20b117031328e12dd3111a7681ff8db5

    SHA256

    5c3a5b578ab9fe853ead7040bc161929ea4f6902073ba2b8bb84487622b98923

    SHA512

    88455784c705f565c70fa0a549c54e2492976e14643e9dd0a8e58c560d003914313df483f096bd33ec718aeec7667b8de063a73627aa3436ba6e7e562e565b3f

  • /data/user/0/com.rms.transactions/app_webview/Default/Session Storage/LOG

    Filesize

    132B

    MD5

    79122ca851eba79a39934842ee17ee40

    SHA1

    ce2586df1bfe33e156ab344fffa3380975fc905b

    SHA256

    be1565e5c51e7c2193ee17a71cd19ffa97bdeac159e4055beccc3a7fc8fd0ba7

    SHA512

    bca4ca9ef35f7f770980afff62a257704093ed2ce83b0caf996f7efad57d5bb79b7ba42a6b5ffce1f127506ea4ae2289548828599105ac1204370d717c7b777c

  • /data/user/0/com.rms.transactions/app_webview/Default/Session Storage/MANIFEST-000001

    Filesize

    41B

    MD5

    5af87dfd673ba2115e2fcf5cfdb727ab

    SHA1

    d5b5bbf396dc291274584ef71f444f420b6056f1

    SHA256

    f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

    SHA512

    de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

  • /data/user/0/com.rms.transactions/app_webview/Default/Web Data

    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

  • /data/user/0/com.rms.transactions/app_webview/Default/Web Data-journal

    Filesize

    2KB

    MD5

    85036c845b3330ea8bac59deebaaabb5

    SHA1

    614609361ba4c5f784a8e1aacbae7ea1cf5ca8aa

    SHA256

    c31a6724ebaf082b5ab42913b3eceb9574a52e27f781f1948b358ceee4566c71

    SHA512

    c48e43205310000653ba5083d675d08257c5a78f889815829134c12766406ef3addc50c0f975723a1775762c937357e557c98a1e7d398e7c23d03bc0c92b6444

  • /data/user/0/com.rms.transactions/app_webview/webview_data.lock

    Filesize

    26B

    MD5

    170abec63a0277d3751636da801db2ed

    SHA1

    64a0badbd2bbd9f0b914622e7a0ed34827237e7b

    SHA256

    745882dd85e7d2b34dfb36b6c2b71771f1be76533855d0b54cffa147312fc322

    SHA512

    23735a1fd2ad10dcebb7d98868e356182e1bcd2debfd9543331515d708fdd90178ab6dc4a365ddaf04a557aae89378a64685cd5ab409950425cd831359a8c46f

  • /data/user/0/com.rms.transactions/cache/1664557424545.jar

    Filesize

    21KB

    MD5

    722310b17c81cc3d780d23e1a63eb450

    SHA1

    0a0c1a939f923570e5da88aa5c7b105052f056e3

    SHA256

    9f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1

    SHA512

    1a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91

  • /data/user/0/com.rms.transactions/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    aa6ec9756d4466b6cf06da08ae7f2f7d

    SHA1

    651e8dfb6c2bf898b8df05d018ac8b4b9e15d7e6

    SHA256

    77eeca31b6f95fe4993b38f8f82381865b481b1435e2f7a6bfb544e36457e698

    SHA512

    0a6ede7d2ad6365fe24a8222f86c4a59f9436a690c5810716e46ddd6d141b4a9ac7eebfe4668409433f0a7464fee4b23de4c0c227b23f3f8b06be423f7bce6ba

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    634b639bb3fb51b577e839eaf3f2e3e9

    SHA1

    442ce3dc1825ecfb7302dcc87634ceed19a883dc

    SHA256

    f233389cc87586419659f48534a6f6314d8ee5864fbe76e4a1d82750ae052f24

    SHA512

    55febf31126c00e68870538ca65ebe6b59ed8b584468ec88e9e35366b736b07f4f6585fb4b7b99e84c3d0fff04e410f59c7fdc351999854ec904ed36869c1b2b

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

    Filesize

    96B

    MD5

    ca19ad79b850b1502639a9758ed6be5c

    SHA1

    12dc0b77a441d1eee7c309d803ce119265b81cd4

    SHA256

    afb47116da453a035ca212576a131e0740408f6002051c4d9e7261fc7cb822d7

    SHA512

    2f2d2b0996defd286ca44227ee4a73439e0fcab14c4bf16902b5780d3920b0d021e3a06ccbe843578e17ab4354a24c6d3c3b7091345700a14bdbcf9351278a46

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/a33d23c25bb7d919_0

    Filesize

    282B

    MD5

    8984989607527e41ae797881bdec0308

    SHA1

    a439648478cbb415440ee4186452db24e9af80e6

    SHA256

    ddfc29706d710234fa49d5bc09c274cb9a5996f652395b047c96bd6103ceb43c

    SHA512

    41ca98d910adc3d9b7dc8249a5314741c132294f9524ecdb28b4cb70c7b92375666eb30e1c4b95d692b8a6b4e2e13a0a80e2ea9dac575e1c7af5bb313f956c01

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0

    Filesize

    400B

    MD5

    a62b20c6608b3694260e345c1d80b467

    SHA1

    ea6bec313d9a059a7f4e1e72bf8cfbae621846d8

    SHA256

    6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929

    SHA512

    f68c3bfae54b8f75d56a63cd823e99ce8c6472db38a5120508540b4ecd1a724f29156f93dca5a61939408c74312689c0fc58084d2e2240e584c87d5a3a4bdd8b

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/index-dir/temp-index

    Filesize

    192B

    MD5

    69700a3c742d2343abf5e5defd52629f

    SHA1

    457c4738d2f563bca4a3dd5bbff19f7737c5ca6e

    SHA256

    858a11a27a2d6455b5a0628956117fae9f907c050b34652d1c3fb3b69716e251

    SHA512

    c33a17a177741f67824c4a0385de25113ad6330809cf3ab22a06ae9f1f631a32e89f34eb90ade71e4077e54251fbfd76997635810cfe514044bd7093cf40b50a

  • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/index-dir/temp-index

    Filesize

    96B

    MD5

    4b5e9acd3844513d126af443cf06e074

    SHA1

    abc91ffb1756114a536db0b50675381255a18055

    SHA256

    53613cd95295e3c24ad1a6c57423d6d62a93bd4947dc4ff3e1eb61116cc75bf9

    SHA512

    fc625ba9888baa3a689552041bb5c27c714927dee4aa3ceb12d29f67d1771670cdc76d332d1e1837f415af08eb27143e8cb308a339c234fcb4850ec20a185d4a

  • /data/user/0/com.rms.transactions/cache/WebView/font_unique_name_table.pb

    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

  • /data/user/0/com.rms.transactions/databases/google_app_measurement_local.db

    Filesize

    88KB

    MD5

    5036325c2ec6cc6e0b9559d681bb3b2a

    SHA1

    7908903c35359628b858d88c7495c5c8d9140280

    SHA256

    ce587a458dddc6668da3d9c0e38ff52e1dbdc6792c1a595a9e8005fe1a70cf53

    SHA512

    9f709045ad010e4ac03ba6ddc43728aae589ba36f057b62619e996f5a4e6cace2c460f836e4573b8ba0103822882bb98f0c14a063cac05de37debeca969271cc

  • /data/user/0/com.rms.transactions/databases/google_app_measurement_local.db-journal

    Filesize

    1KB

    MD5

    77f95d5aede09e01f415bb7e268a441d

    SHA1

    d2f53aecce3927b2cfb2bb2052639ef5e4b274c4

    SHA256

    d9e020d8b03a28ba36df60cc43f2eac59d08d3255170cf6227fce6e250259d66

    SHA512

    7f8c3711c8e2056011575d5bfd381b6c9cdf18e0eed771a610617a00ee4904451e141d35d3f51b1b2900e1c07409412eba1d4660c5c896c447a9c34f53aee72b

  • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb

    Filesize

    8KB

    MD5

    e579a6b00eef1318f9166352228eba18

    SHA1

    76988896854f0139083e77862eea1a4846cf039f

    SHA256

    4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

    SHA512

    c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

  • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-journal

    Filesize

    1KB

    MD5

    7f8f6652052c9616d7ea304bb3a6c5c6

    SHA1

    ab45bd9386a2cd96035da12afc83210412506b47

    SHA256

    17f8e346804311302165be78500174b32419cb8dc3961af45abe590edb25d958

    SHA512

    434d01310e1408a53aa967b923c3ed9873bd8d6d764c3a1a04c0943e67e882203df27f3217f39f2b89e09d33013e55441f9cf6f19849941d1ad5f37adc61acf6

  • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-shm

    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-wal

    Filesize

    402KB

    MD5

    c9aa0b11d525ffe72ddf4c61e97d1a79

    SHA1

    e28f1048839656e3aef7fcc292184f0e4af2f9f6

    SHA256

    caf5afea3aaea68b83886939c3b8333590c2a815d6c70977f55cd36464dacd9f

    SHA512

    6e54b6ec6fa66a9867d9750faa30d8b15e14277c1e784e9e932faa4bdae553983e7c2d2b9dba940ee0a07f50e6ee7e5e5779a65e7689903c28e82533073dfd4f

  • /data/user/0/com.rms.transactions/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.rms.transactions/shared_prefs/admob.xml

    Filesize

    133B

    MD5

    67d68543a2c7e42acb906ef4a466aeda

    SHA1

    f16421b860abc0be941347da42d55b07381b4432

    SHA256

    a4c9ffc413c6718cc6866010c1ce846ba2ce1892309ac6ba09bb2ca012cfc9d0

    SHA512

    9aff9a5e220b50a1b6abccbf40d7bdb00b0b99c9e5001b6b334140a43711ba2ef92a8c39611afb9bd512f28522771aee803eb68b4e75db16d69bf0240713f6e6

  • /data/user/0/com.rms.transactions/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb