Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3220321s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    15/06/2023, 16:43

General

  • Target

    Surf VPN_1.9.5_Apkpure.apk

  • Size

    6.1MB

  • MD5

    010e17e83a60ec640c7ddeccaf2cd92a

  • SHA1

    e54eb642c56318d5311bef25c8327b28b0f5d212

  • SHA256

    e53819b392cbb790bef10d3fd746b6f857eeb352bd787858b53393f7333e5933

  • SHA512

    5cd82870a5cdbeb7dda81d7cc677971ee71291188629b4273037f755565ca83ff50807389296388a9663391be7a95c1c233083544915291fd6498ec4e59ba7d2

  • SSDEEP

    98304:M/KEP21Ca9gkuIIU3FrK2OL+1+bt9w/M3+qLN48bEjll8dsQii0r455+8:FX9Hrv3MO1gT3+asZl8dsk08

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.xfx.surfvpn
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4321

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xfx.surfvpn/databases/com.google.android.datatransport.events

    Filesize

    144KB

    MD5

    5fcbc341b6db9788e1f29e814418e3c3

    SHA1

    a2b491a8427ecb168224a1d35552fe0dc1a409cd

    SHA256

    814f4690b4a8e173d39cf3df1dde6d99147f1233cd36ae951785a51d2a370dc0

    SHA512

    59be61d6ffefdca3ff62ede808503e7a68dde36925e02aba8807c74398c43b89b5d85fb70f0467706886738b12137f698f922393741c9895bd1da4a18f3e2d99

  • /data/user/0/com.xfx.surfvpn/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    bb13f5cf1b4a546ad98180fa069bbe3d

    SHA1

    7357a1d9a5c4cccfd7cee8496b11d313b68962aa

    SHA256

    193cefbb850ad7a5396d5b337b2019850d5219433459dfac111527e782960389

    SHA512

    7b98cc3c0c1d07b14d7e18b73c370fbcfed1fa204f077afcf8f5fcee749b36f085a4912a6b6f6c83ddbd98cdbdedb640c3b04a575444eb9ed03f30116583b863

  • /data/user/0/com.xfx.surfvpn/databases/google_app_measurement_local.db

    Filesize

    88KB

    MD5

    8dfcfdcef5a9793fb83bda404ec3f42b

    SHA1

    dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

    SHA256

    a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

    SHA512

    e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

  • /data/user/0/com.xfx.surfvpn/databases/google_app_measurement_local.db-journal

    Filesize

    1KB

    MD5

    f484ced0b985ac99bd8b7ef096cd2dd9

    SHA1

    bcdcf60e77916bf3bdbf0d172f623902636f1071

    SHA256

    31546c7874b056eea6be8bfa11ad97a83a0d94fb632e3ea44976f5c2dfecaff4

    SHA512

    2b3b2a6007b5bac183a7c33329eac7f921bf5129ec6db0f1819dc579d5d78e4d0ee08f7c1d54d40d53e54c322efc21cf24ae03ed64a3516d3ed17981e3819e4c

  • /data/user/0/com.xfx.surfvpn/files/.com.google.firebase.crashlytics.files.v2:com.xfx.surfvpn/open-sessions/648B40000085000110E1F3BA82A871F8/native/app.json

    Filesize

    216B

    MD5

    f76eb88a93fae3e873ccc322bbce1325

    SHA1

    f72863ecf6b9c913973e92275bd86a3b7acab3f3

    SHA256

    b8693ed883f21b24c57600b6ab70d70dd55e308923c858543becb21c38b4cde2

    SHA512

    d059f0ae49c52d5ebc25345eb68c72c46c660989a5c4db6be707795946bd49f628292d4955b839c15cd868384c460a07f0bfdd1eccbd00132c01b7e4753d9c9c

  • /data/user/0/com.xfx.surfvpn/files/.com.google.firebase.crashlytics.files.v2:com.xfx.surfvpn/open-sessions/648B40000085000110E1F3BA82A871F8/native/device.json

    Filesize

    192B

    MD5

    abab9e67654b2e35aeaf08b24e8e79ca

    SHA1

    e9e22cee0d850585a2466f9460ed8f1c553e10b9

    SHA256

    1f9ccea8d997f8d9d7ed7ed244626775297817cba983bf60351d9c1d9b7cdfd2

    SHA512

    1c9cdeffa7221d01554fe44c5a520385e82f2d3d5cb9070b586cfb3ffcdc4ba519058870759468e7dcfbc9f959cd31fc2e1627f2d719cd6a9d8d966443040e32

  • /data/user/0/com.xfx.surfvpn/files/.com.google.firebase.crashlytics.files.v2:com.xfx.surfvpn/open-sessions/648B40000085000110E1F3BA82A871F8/native/os.json

    Filesize

    55B

    MD5

    fc1dcee4e422d77e7fab7c08c8a41344

    SHA1

    d5340127e9d5f735b9d33b9dc61c772fb0e2dc15

    SHA256

    b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7

    SHA512

    3ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61

  • /data/user/0/com.xfx.surfvpn/files/.com.google.firebase.crashlytics.files.v2:com.xfx.surfvpn/open-sessions/648B40000085000110E1F3BA82A871F8/native/session.json

    Filesize

    127B

    MD5

    6a43c65506690af305b0a67acdb74de1

    SHA1

    a0be88e55590040f176caa65b410387e83bd3147

    SHA256

    c6fcb0a6d6849376ca01d0a0572bab54982b83a3e4d3d0e52a05f2698f40b0b8

    SHA512

    e439607c52625529a4329d41f59343074c452b822449f0076bf2425ecf040ac088cea07ffc003a7f18bef782094346ff653c2af7e43abe2fa9dbc25db28d734b

  • /data/user/0/com.xfx.surfvpn/files/.com.google.firebase.crashlytics.files.v2:com.xfx.surfvpn/open-sessions/648B40000085000110E1F3BA82A871F8/report

    Filesize

    740B

    MD5

    86a2fd58ff09c73863fb82b7cc3d7649

    SHA1

    178674a6be602eb3a5960b4e14900a5893f3b226

    SHA256

    7af9b5c8731b8eeb8ec8814023537c07c5a9769dfbfbe84de3088424db53f40f

    SHA512

    269f3d89e0522f8a5d9b46c30f9d7f9e97caebfd4ed49bdcc6fddc79cac1befded7304955245dfe9ec03da2d0708aa3db767d404fdb09abe9942c012575ace89

  • /data/user/0/com.xfx.surfvpn/files/.com.google.firebase.crashlytics.files.v2:com.xfx.surfvpn/open-sessions/648B40000085000110E1F3BA82A871F8/userlog.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/com.xfx.surfvpn/files/frc_1:676245443413:android:62b76eb49a084373_firebase_defaults.json

    Filesize

    164B

    MD5

    4890ca13eb38a5d0a04b800d652a37c3

    SHA1

    7fb60cf6a4b1b8aedb2662a8417b9d7f6132a228

    SHA256

    f96ddb79e10c72b5a60b64ecb79f15ea42ce59651be6e1f7ed723d20a32925a1

    SHA512

    f0a5aac26621a4f38a104be1b3e1f47fac32463b391d62fdf581ef869b1ef9f4a230f86146a37526d819763cf43b6ce814241583d83cb70a91c76ab4f9168842

  • /data/user/0/com.xfx.surfvpn/no_backup/androidx.work.workdb

    Filesize

    8KB

    MD5

    e579a6b00eef1318f9166352228eba18

    SHA1

    76988896854f0139083e77862eea1a4846cf039f

    SHA256

    4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

    SHA512

    c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

  • /data/user/0/com.xfx.surfvpn/no_backup/androidx.work.workdb-journal

    Filesize

    1KB

    MD5

    a1b471095b1a7ccbda5d14d831b02ed0

    SHA1

    0e4946719b50860a22060d64b2956e849a4c5e5e

    SHA256

    466393ea73fc0a2e83125fb1c5ed9e166e795f821dabe2992828e30fa7754970

    SHA512

    149d3644c1710b4fea66e5dd37842cc24aa89758bc2d0e705c63e1dcd14a236fe0bc19e34d03fed3296fc48ba35855633b22e0e2d449f226bb7f90f341df9a5d

  • /data/user/0/com.xfx.surfvpn/no_backup/androidx.work.workdb-shm

    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/com.xfx.surfvpn/no_backup/androidx.work.workdb-wal

    Filesize

    217KB

    MD5

    3a843ac587ac5fbc50a30b9815dec847

    SHA1

    24b963281aee35f64e292b4fe77abd23d2f3f1b9

    SHA256

    16a346a3acada73057037e4c0f917a81179dac1492876b109c292e325f1b16b6

    SHA512

    bbf3b520dc68ac9d65d39e4f356092f3c006d8bdb880eb878b4de1d3f19a4ad43ba38a7fd0ec0642dd9e718a9eb9e419ffb082c1ff82739c3faef607bed3d381

  • /data/user/0/com.xfx.surfvpn/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NzYyNDU0NDM0MTM6YW5kcm9pZDo2MmI3NmViNDlhMDg0Mzcz.xml

    Filesize

    616B

    MD5

    323d1aa594c34b676207586c25ecd6bd

    SHA1

    f4cddfffa942f363056c4ab36eebe0570c07068e

    SHA256

    d92075623cf7ad0f5d6618228092f9998c3c9b4a87489c2ccf397bf85518841a

    SHA512

    ff6b5cc1cc264ca0cbabf2bd9217f7e545b7dbc9b58803236530239bf603036b9b74b34565d811744f8b619f513be76924ecf4a8f19abac0fe34cd407623162d

  • /data/user/0/com.xfx.surfvpn/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NzYyNDU0NDM0MTM6YW5kcm9pZDo2MmI3NmViNDlhMDg0Mzcz.xml

    Filesize

    670B

    MD5

    8416a873d9e9e8ec2a79236ca0eb3321

    SHA1

    3c5130a7b0feba4db3ca891980281e8bdffe2428

    SHA256

    4e85e233800540e792b216c997f1a963c540cebcb3a33c354ce7b966592aea35

    SHA512

    f10fd97c8e35c8d5eb86835c4a3b8bae8733f4b3cbdaf16ceda3af3a31fc8a042d764ca825be4d429f98a6a15e9a6fef726056894d28c492cbc7812adb33455a

  • /data/user/0/com.xfx.surfvpn/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NzYyNDU0NDM0MTM6YW5kcm9pZDo2MmI3NmViNDlhMDg0Mzcz.xml

    Filesize

    178B

    MD5

    4927a1de87676d2cc0e5ff90dc05be8e

    SHA1

    ba8ccbf65eebd9f6aa825593f0a99db404f20d96

    SHA256

    149de3f1724992befe865d958d7a9055f757c78a39199add438cd7d9914d88f3

    SHA512

    10174d68be1534e11049bcc413530843a4cd51958597555b27c040ffbdca61c1b9a666c0fda4224d2875bf66fa1cb4401ca866a8fd1a0c37ac28395b1be3c15d

  • /data/user/0/com.xfx.surfvpn/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/com.xfx.surfvpn/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    389B

    MD5

    aaaf11559fd488154d7323d796b62e76

    SHA1

    60d2217ab26b319c5ce3a517d927240bcbc36ae9

    SHA256

    ca0a52634efd242c81d5d5df7595e4f357faef0e161783f04ea2633cd56568d9

    SHA512

    328dc5a438b48e24429ad5ecdaf87a677db42b3cbfea9814f4f3d6b9b2c03797e78ff4506efe2433fa80f043ef02ab8b619a8fbeb984e9f0c9aba91a456e87aa

  • /data/user/0/com.xfx.surfvpn/shared_prefs/com.google.firebase.crashlytics.xml

    Filesize

    329B

    MD5

    04562fdca86e2739756b5c4e0bcbaef6

    SHA1

    3424e3e3e7acc1db0f69aebf448949bbde7d1cb2

    SHA256

    7d885a77452a0fa99c9821595bc5936309c5fa3fba742617fcc2ae3dd91ea4a0

    SHA512

    69b7b5009d7604681aeda186f4275946f77ff77ca5727981d3cb37fc0bd8254430e2bfe6195edd8823ca9c3d4693ac9c3c5feb7647e74553e5cdfa96d6b4d08d

  • /data/user/0/com.xfx.surfvpn/shared_prefs/com.google.firebase.crashlytics.xml

    Filesize

    253B

    MD5

    01351436507090ca1222060a36d3a53b

    SHA1

    15f83286826e2e8c9e3f51072089721fb0d8a508

    SHA256

    3659ddd3dafdbb241efc22a02735c7f04df2400828cb26f3759f3c3242e6a555

    SHA512

    635b2e1e5c56ce804e0c6a44c172a19d28268a6ed17c679ec388736945773d7c37cbd452aca5007bc4b60277b3ce4ca7e3da9be3fb7770d782804da131201113

  • /data/user/0/com.xfx.surfvpn/shared_prefs/frc_1:676245443413:android:62b76eb49a084373_firebase_settings.xml

    Filesize

    193B

    MD5

    7109ea013435089598fbb03112ff5d79

    SHA1

    fe25beb89a700d0af322083f65324c08a45432a4

    SHA256

    42c2406e7f14e66c959433a4ac50108267e0468062e5e76608362f9537996db7

    SHA512

    8505021d0271788d88954ad23c12d242df03700a2b4d60a78c7a6faa4a92ffecb9b808b4a6924371cbd86ba57cb44a4bcefb3dfb6d6b29c98258d7d0d24372ab