Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    189791s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    11/05/2023, 14:33

General

  • Target

    bed3e665d2b5fd53aab19b8a62035a5d9b169817adca8dfb158e3baf71140ceb.apk

  • Size

    6.9MB

  • MD5

    de8f8f4eabb456fabb28bae35086a18b

  • SHA1

    968d978a134179093ce75e6a90ebdbed9bc3bcf8

  • SHA256

    bed3e665d2b5fd53aab19b8a62035a5d9b169817adca8dfb158e3baf71140ceb

  • SHA512

    64da98e75d4684a7cebaf26eb41322e11acdfc0114750e2abb09a5162f880a46f6f527fc8000e60b66c0425d55d409b1a2366d763516233c3030742274062c01

  • SSDEEP

    98304:mAet1rE4VBEeKUvUh2VWRjxsSBMJKB6Da+cRsAchoKfsIXiqf/kN0cDEuUxyd5Vd:mpDIbc+Y2OdtoSil0cDEuUxydmIdR

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • lmh.android.jjbus
    1⤵
      PID:4358
    • sh -c chmod 777 /data/data/lmh.android.jjbus/curl
      1⤵
        PID:4616
      • chmod 777 /data/data/lmh.android.jjbus/curl
        1⤵
          PID:4616
        • sh -c /data/data/lmh.android.jjbus/curl http://www.yongmooncamp.or.kr/image/editor/btn_layer_search.mov /data/data/lmh.android.jjbus/libSound1.1.so
          1⤵
            PID:4648
          • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
            1⤵
              PID:4677
            • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
              1⤵
                PID:4677
              • sh -c /data/data/lmh.android.jjbus/curl http://hferry.co.kr/data/popup/pop(I).mov /data/data/lmh.android.jjbus/libSound1.1.so
                1⤵
                  PID:4792
                • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                  1⤵
                    PID:4817
                  • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                    1⤵
                      PID:4817
                    • sh -c /data/data/lmh.android.jjbus/curl http://img.kindermom.co.kr/frameart/print/footer.mov /data/data/lmh.android.jjbus/libSound1.1.so
                      1⤵
                        PID:4854
                      • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                        1⤵
                          PID:4883
                        • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                          1⤵
                            PID:4883
                          • sh -c /data/data/lmh.android.jjbus/curl http://www.yongmooncamp.or.kr/image/editor/btn_layer_search.mov /data/data/lmh.android.jjbus/libSound1.1.so
                            1⤵
                              PID:5002
                            • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                              1⤵
                                PID:5031
                              • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                1⤵
                                  PID:5031
                                • sh -c /data/data/lmh.android.jjbus/curl http://hferry.co.kr/data/popup/pop(I).mov /data/data/lmh.android.jjbus/libSound1.1.so
                                  1⤵
                                    PID:5062
                                  • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                    1⤵
                                      PID:5082
                                    • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                      1⤵
                                        PID:5082
                                      • sh -c /data/data/lmh.android.jjbus/curl http://img.kindermom.co.kr/frameart/print/footer.mov /data/data/lmh.android.jjbus/libSound1.1.so
                                        1⤵
                                          PID:5109
                                        • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                          1⤵
                                            PID:5138
                                          • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                            1⤵
                                              PID:5138
                                            • sh -c /data/data/lmh.android.jjbus/curl http://www.yongmooncamp.or.kr/image/editor/btn_layer_search.mov /data/data/lmh.android.jjbus/libSound1.1.so
                                              1⤵
                                                PID:5361
                                              • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                                1⤵
                                                  PID:5412
                                                • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                                  1⤵
                                                    PID:5412
                                                  • sh -c /data/data/lmh.android.jjbus/curl http://hferry.co.kr/data/popup/pop(I).mov /data/data/lmh.android.jjbus/libSound1.1.so
                                                    1⤵
                                                      PID:5446
                                                    • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                                      1⤵
                                                        PID:5465
                                                      • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                                        1⤵
                                                          PID:5465
                                                        • sh -c /data/data/lmh.android.jjbus/curl http://img.kindermom.co.kr/frameart/print/footer.mov /data/data/lmh.android.jjbus/libSound1.1.so
                                                          1⤵
                                                            PID:5497
                                                          • sh -c chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                                            1⤵
                                                              PID:5525
                                                            • chmod 777 /data/data/lmh.android.jjbus/libSound1.1.so
                                                              1⤵
                                                                PID:5525

                                                              Network

                                                              MITRE ATT&CK Matrix

                                                              Replay Monitor

                                                              Loading Replay Monitor...

                                                              Downloads

                                                              • /data/user/0/lmh.android.jjbus/app_webview/Default/GPUCache/index

                                                                Filesize

                                                                48B

                                                                MD5

                                                                6d7d499960179766cd4261d12dacc411

                                                                SHA1

                                                                e6f8553b0015e12b23cc551afe98763f3b1c9bed

                                                                SHA256

                                                                c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

                                                                SHA512

                                                                6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

                                                              • /data/user/0/lmh.android.jjbus/app_webview/Default/GPUCache/index-dir/temp-index

                                                                Filesize

                                                                96B

                                                                MD5

                                                                b78103050181bbd0dd676ccb021c600d

                                                                SHA1

                                                                d55a90cae3efa8e2ab29c2a88311ce27fe64176f

                                                                SHA256

                                                                3791d8538cfc5a91a9a774cb6a658974197efd9da400f4dd2f8d75a28be17b74

                                                                SHA512

                                                                d38b4c26efe3b265a8266593f5e976b86bfb7d0c7ece5f6e3b0c5d71efd54300b231031b97f37cb11b68ba43afe4993ca936f68b330480346a48ef7900448960

                                                              • /data/user/0/lmh.android.jjbus/app_webview/Default/Web Data

                                                                Filesize

                                                                120KB

                                                                MD5

                                                                a48cd9324b1f8754b07f00d863b840f3

                                                                SHA1

                                                                11c6614775b35a58f440971dfc87c8aaac6d6173

                                                                SHA256

                                                                8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

                                                                SHA512

                                                                35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

                                                              • /data/user/0/lmh.android.jjbus/app_webview/Default/Web Data-journal

                                                                Filesize

                                                                2KB

                                                                MD5

                                                                08d8b665551985ac4885249a5e952f55

                                                                SHA1

                                                                1cacc101f93808b3f474574a417b7f01fdb65fc4

                                                                SHA256

                                                                2d494d3ccd50f6c7b8fc4433b9276f6d6f361110d1dfd15917754b4ab936c96f

                                                                SHA512

                                                                26b78ee4854259a211caafdaac91c905345ecae10beef02294369391c14c667f44439c60f6b7c22ca44441ffa3289a3714d9fe503dd4cc133adc47451fd30ce3

                                                              • /data/user/0/lmh.android.jjbus/app_webview/webview_data.lock

                                                                Filesize

                                                                23B

                                                                MD5

                                                                6bc848b0ede7dc5cd8df8c5ca479ff49

                                                                SHA1

                                                                ce15b3d5f2f12ab390056e5aeb24c91ce21b4837

                                                                SHA256

                                                                ba8eb53d077622c10913f5cb0762bc4d549837c406051c9927ab8382c41b183e

                                                                SHA512

                                                                06a88435116d9744b8acf97d8a3ad62b2b30c8981f31e151782638c0e11f2c9ad8c377e601365ea2e4599e5a093034201a44838221d3b9aa33e9e47d5e24b4db

                                                              • /data/user/0/lmh.android.jjbus/cache/WebView/Crashpad/settings.dat

                                                                Filesize

                                                                40B

                                                                MD5

                                                                6bf00c549db6ef5742a23e92c54073c6

                                                                SHA1

                                                                7663fec22de4d28dfcff464d010d23d3d084eb3d

                                                                SHA256

                                                                44adc7a0d3a2bddb83fee9809f0fdc27581e241b6b6f58411012e31caa2e8356

                                                                SHA512

                                                                6a3dff1698fbae61f76213cdee473fd8279e553eb374bed35da013e1c4b41c99f4d09c5eeb869b67b0c6ac397ac6f6c060f12412f54f820054e70ec266f2eb65

                                                              • /data/user/0/lmh.android.jjbus/cache/WebView/Default/HTTP Cache/Code Cache/js/index

                                                                Filesize

                                                                48B

                                                                MD5

                                                                6d7d499960179766cd4261d12dacc411

                                                                SHA1

                                                                e6f8553b0015e12b23cc551afe98763f3b1c9bed

                                                                SHA256

                                                                c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

                                                                SHA512

                                                                6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

                                                              • /data/user/0/lmh.android.jjbus/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

                                                                Filesize

                                                                96B

                                                                MD5

                                                                8bb047d69433911413debaaf911edeb1

                                                                SHA1

                                                                2a9a395e9496d6133b895fd198adc8cde4cccd43

                                                                SHA256

                                                                0be202f3c0c7440881efcc76b7d205324dbe0988955054e171e23702eeec99d7

                                                                SHA512

                                                                3b27575b907fc15e5d8ede423e51e3dea7f474ea0cdcdb118196342e245942f16f5d8ad87e65df9f71515488f9e7fe11e7a572bf2879a84df28313cb10526787

                                                              • /data/user/0/lmh.android.jjbus/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

                                                                Filesize

                                                                48B

                                                                MD5

                                                                6d7d499960179766cd4261d12dacc411

                                                                SHA1

                                                                e6f8553b0015e12b23cc551afe98763f3b1c9bed

                                                                SHA256

                                                                c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

                                                                SHA512

                                                                6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

                                                              • /data/user/0/lmh.android.jjbus/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

                                                                Filesize

                                                                96B

                                                                MD5

                                                                3aa9baa373b449e410c6b0d91e203db4

                                                                SHA1

                                                                40c2ad8b476bb73887e492a0823cab097c45d811

                                                                SHA256

                                                                6ccfd425e35e6a79bff6803f082bf5284e91acdf65cd939a855a09af22ea1d6c

                                                                SHA512

                                                                b678a26a81d109adb52b66083c251340e57b6fe7204cab51ec1bd0ab430259d4ef81dc008a220e813afb7f01c826cf25118fa43577065dff2728b134e3dd7117

                                                              • /data/user/0/lmh.android.jjbus/cache/WebView/font_unique_name_table.pb

                                                                Filesize

                                                                57KB

                                                                MD5

                                                                f080fa2a56ab5479d58063e5ea871447

                                                                SHA1

                                                                4b3fd57a98916fa5784305b76ba30af26b5253d9

                                                                SHA256

                                                                0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

                                                                SHA512

                                                                8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

                                                              • /data/user/0/lmh.android.jjbus/databases/customer_info.sqlite

                                                                Filesize

                                                                4KB

                                                                MD5

                                                                bb48455d8cc25065a4287add038ec68f

                                                                SHA1

                                                                a3dd2c6c5a2fe2e2587ebc2582b3eb912fe49888

                                                                SHA256

                                                                7d266f7654c44c5ebebd6b9871c4d39f344cc16d8588cdcd6540f2ec78b5f383

                                                                SHA512

                                                                3079acbab78616abaf85665b9955e9bee4afc63c2fe6a9d4cc3bd0c5001f9ca47b0192feb32291c79fb271b7ea304860e7c6b6f5227e65af5eab2ae314fa5dd4

                                                              • /data/user/0/lmh.android.jjbus/databases/customer_info.sqlite-journal

                                                                Filesize

                                                                5KB

                                                                MD5

                                                                f9d5e32d534e48ea323ed98daba71fff

                                                                SHA1

                                                                7c842a092aa5004cf0e70a0a6034b9e59682f900

                                                                SHA256

                                                                711477f55ea703bb7dc6942c34c412c7b13365a5cb0b61db9685fa6b5c67a8a4

                                                                SHA512

                                                                5a95c8b7955a95b3bea4a2a12ed8046e4d55ddf615932d9deaac0bc3f4399b9914bfd96609c9a6075ae67861ae5ee13018bac8732c4ceb4baa9f3a36dc50fbca

                                                              • /data/user/0/lmh.android.jjbus/databases/google_analytics_v4.db

                                                                Filesize

                                                                208KB

                                                                MD5

                                                                bc06b90c7868a2fd4917462cb147c968

                                                                SHA1

                                                                42b9ee01606dfa87d5d38640f9b7fee610cbb73b

                                                                SHA256

                                                                8373c600d9e6c8c361eae3ff77cb616399f973c32d68f742867ddd901935f065

                                                                SHA512

                                                                4536764c582bbf480ce47f050c719403a00ee622cc7e1e4af70b211c98ad4bcb3418e4895cf2f710299090b42a52306f5135fb50e303a13a5c0782c41453588d

                                                              • /data/user/0/lmh.android.jjbus/databases/google_analytics_v4.db-journal

                                                                Filesize

                                                                1KB

                                                                MD5

                                                                8ccc0ac92efdc70863a5fd16ba53239e

                                                                SHA1

                                                                0fc869646422e83373d7338e546405a3c58fd75c

                                                                SHA256

                                                                0f7a53ba8b9261d9676cc20c2e7e841f4f3b0704e1616f20da89c4ecc435390c

                                                                SHA512

                                                                80b5a4b29dc4596ddabdde72b42db4516fb7ce2e90da2ee65dd1d91772002041e5d3d469d8370b8d533ebba31329c4b3b3bdfb1af5468283853d64e5ce29e591

                                                              • /data/user/0/lmh.android.jjbus/files/com.adlibr/image/1979924498.tmp

                                                                Filesize

                                                                2KB

                                                                MD5

                                                                61e7bb9867dc6e5a98252189b970c1b6

                                                                SHA1

                                                                c49f812511c0d818d7606cf5a62c5f48af27664f

                                                                SHA256

                                                                45197a7845ae47040cafb4c475c9cf00ba10890361abce36472ee362eff8d66e

                                                                SHA512

                                                                cae70154632f4f7b6e4f68267f376ee9d5016d348ea5212d692138a0211e9c72b49c315b0b22141375ebdc0ec45c1ebe35752e2b19e071a74f8312f31f9ddf96

                                                              • /data/user/0/lmh.android.jjbus/files/gaClientId

                                                                Filesize

                                                                36B

                                                                MD5

                                                                5bc83095277fd18062fbb0e8fc5c1cd6

                                                                SHA1

                                                                8261cdd80e5ab8907cfb763d3aaa6f4d81b00a59

                                                                SHA256

                                                                d8b52d275c4a51a6c0f9586175b646e932da5dc41b2b17ab90a7aa4b1b8e30cd

                                                                SHA512

                                                                268d80c3df18d09a0e126f417270b18abfd0b59e7f15221abc95c966e8dc9c0ed87cc5de5831ae2458d8c90b866ceaabce345d64f07a9936d31637ea5782447b

                                                              • /data/user/0/lmh.android.jjbus/files/gaClientIdData

                                                                Filesize

                                                                32B

                                                                MD5

                                                                4f6927d508720b69be16c60cf5a28306

                                                                SHA1

                                                                611d2c16b7b6cf2104e58c3dfdf90e1d12426ac2

                                                                SHA256

                                                                96d3b90b2f9e6f14af2f02030281cc7ed1723bfc319e49f396dc8864d873da84

                                                                SHA512

                                                                d4a70a2917146111292b160e335d2911eac922fa048723cb49498a2bd4eaf9e7dae7f01792b214d36e33bbfcad3a61c9cc61beba493f49da3fe9d0c2d8a9def4

                                                              • /data/user/0/lmh.android.jjbus/shared_prefs/WebViewChromiumPrefs.xml

                                                                Filesize

                                                                127B

                                                                MD5

                                                                97ccd9a2b2063143df56b6937f961ca4

                                                                SHA1

                                                                5e78a91ae5df289ce83443cb7d5589dd3504fb5d

                                                                SHA256

                                                                248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

                                                                SHA512

                                                                86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

                                                              • /data/user/0/lmh.android.jjbus/shared_prefs/com.google.android.gms.analytics.prefs.xml

                                                                Filesize

                                                                129B

                                                                MD5

                                                                1b845c6a21d3a96c4789c4dbe4b1a6a0

                                                                SHA1

                                                                a7f5aa1e6b6644cf86c84005978b13c55c93339b

                                                                SHA256

                                                                349948ec4673661c3e00fe38c82bc8ab091a65090f562d47ae3284e550ecd91b

                                                                SHA512

                                                                202d4aa34c7ad05caed9b3384a34fd65b61ca935285220594580574f720957334b54ab4adec1ce6a238c77850190798142a0a22a41665dd0098650836edc4d81

                                                              • /data/user/0/lmh.android.jjbus/shared_prefs/com.google.android.gms.analytics.prefs.xml

                                                                Filesize

                                                                454B

                                                                MD5

                                                                58fcbbcb6c4ca481467045b378eddab4

                                                                SHA1

                                                                58424f78fa02d2919657140e0679d3b8aa1440ad

                                                                SHA256

                                                                56db72aaf050e98d624e578ff077e2883ab22adbfa94aeb90c5f0839fd69aa00

                                                                SHA512

                                                                94763b868ed74889c85e9ff0ea45ce93633c234a906f79f119afa32aeee6073805bb736822f3a433f2f20b63666e55131f825d55ebf16978378f6eb58463b6ef

                                                              • /data/user/0/lmh.android.jjbus/shared_prefs/com.google.android.gms.analytics.prefs.xml

                                                                Filesize

                                                                418B

                                                                MD5

                                                                d3c5922b968b73be9ceb0e8728f11b3b

                                                                SHA1

                                                                17be3413ae90a194044a6484456d872c7f345653

                                                                SHA256

                                                                c6966af3d854a8340d5bef1c98a6f1ff34a2fe8cfe6e2759e04e36289f721773

                                                                SHA512

                                                                1f5e2ee49610d61a9c7c26889b464ad544c9b9fea54fccf0c3f7cd20c5ca9ad45803e38284dbc8917d0a69fb119e2c6c901ed98d6932f63418e43e8fb8f4e5c5