Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4246854s
  • max time network
    28s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    27/06/2023, 13:53

General

  • Target

    91ead948dbb22ecba5f4d912660e013f.apk

  • Size

    2.0MB

  • MD5

    91ead948dbb22ecba5f4d912660e013f

  • SHA1

    96e04fc72d1e2c1cb2bb34c5553c4ea72e2608b5

  • SHA256

    9c05e67dd97a9f6aa83b4bdb6c57362835508523ec603ecadfb8cae125555de4

  • SHA512

    d789056106d098f513a49b4fdab39ca25ca09f6e18ff42d9d15e937ee12bfbd050a4b9629cb69cef377253fb1c3bbc958a1ceb2868dc4d43e53845c9d4dcc6ea

  • SSDEEP

    49152:dH7HNOFtAzk0AOYkvDJU1ssLlzKx4B2BVPQUs4OEjb:dHIFtlnssLTsBN7OEjb

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.realdrift.nearme.gamecenter
    1⤵
    • Loads dropped Dex/Jar
    PID:4846

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.realdrift.nearme.gamecenter/app_webview/Web Data

    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.realdrift.nearme.gamecenter/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    a4cc410fbbf24d61c2e45e9336e97161

    SHA1

    b82894c6e5351c3679a379e5a7637ec356b55aa8

    SHA256

    3b8f25f950cb821c969289f4e98e762a6ca7fa74f1c4c22d0c58cd4acb6cd51e

    SHA512

    1039dfe11c376c8b3efd65f266da442cb1e26c099bc740f5e934fd2550da0e07e619561e9f44327c0e804df1a711672ba1ed0ac0dfd6f30e9df7272039ddafa1

  • /data/user/0/com.realdrift.nearme.gamecenter/app_webview/metrics_guid

    Filesize

    36B

    MD5

    96e9e5f875cba105572177c2c916d54f

    SHA1

    e0155663cbe06a574fbc61595b18b02fb098a4cf

    SHA256

    6a912d3b3fe0480a810f426f1031ac1b2a3fd13fbac0d17211e8fcb77222f0b5

    SHA512

    cd732ab0533f369d6e33036275689a30615274ad706698e2c3085e9448124ca2357e9f9cf67525767c1067417f45131ace188c074ce1bfc6b3400b08fcc1f659

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    fb8aac009e0570a12ee40595b2ae6361

    SHA1

    05f0c9532d8e293024251a21744b97fc30fb39b3

    SHA256

    f8a96ec9dd962097192a6d3fa7a64eae2074b78ee73cc7b024a00516688ceecc

    SHA512

    ebdcfaf9625718879af63f90764fea5de2de0b466e346cdf1b7e835fd32c7d7721144a48bdf6c1cb8e3a703b30bd197775f47fbd09737ac66035943f362237df

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/org.chromium.android_webview/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    419ff8e46748ec07b767a1fb5fec3b65

    SHA1

    0a323516f9d0f66f014ddcdd23d53d76a54081cf

    SHA256

    6457e79544542bdac283f07ed09ca1da2c3f571faee17d279713be1f7a0f1fc3

    SHA512

    f6fe2ad4f83a12a0cba0b2b36b7fe5cf78370ccb5db78f280d5eda2588b4d7da768317fcc1332a3218f694e52a60d669fc325d81f1fb0e9943e4b685f32ebdc1

  • /data/user/0/com.realdrift.nearme.gamecenter/databases/com.google.android.datatransport.events

    Filesize

    144KB

    MD5

    b836807f7161fdfa473fadd6af868113

    SHA1

    61d9c30c2d9f8d84df15e28bdb20fa278961ed6b

    SHA256

    245206d9a50f04ec417c043b4acecef8831bfff341f8e47786a2be0a7b6ad26a

    SHA512

    627c0df876caf229502cb55bcc0c536c37a3cee5a7bd09eec3c2d35fbe698cf9cecc26309f5ce6780c18a91cf1d0df1dfd0c1e244739c092dc3785c1978aad2e

  • /data/user/0/com.realdrift.nearme.gamecenter/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    0571d82132b51ca27eeb211c9e277f95

    SHA1

    a064dd0acbec78aaaa75f36b9067b3b1af9bab25

    SHA256

    c9c1bd5beda706c732112551e154a14ac3c958c5d7381779824b04d6aaecbed0

    SHA512

    1bb901f717e38d588b87b46352ce3b3451f540d426935dba51ae9803dec1562c7dd0d4cf624801409968fab82926142cb73f7087cab6b5970c689ae02adfea0d

  • /data/user/0/com.realdrift.nearme.gamecenter/files/0119815c.dex

    Filesize

    2.8MB

    MD5

    e629bc573f5cfecd31ee8d09c8034065

    SHA1

    ed21bd8f57c9a77c7b801274c4b967433fe9c3c5

    SHA256

    c679b66c420c8cff9a88ce05eed8e84ef09e35559a194ce04a3901092c8458fc

    SHA512

    c3fd47fe3c73fa7420d7a9be99c5c914caa5c989a61361aec6600ba6a92026b413b25d04b9beebda0e63f5b1dd5b9ba3cd10b8266a08692bb92463fc01d6859e

  • /data/user/0/com.realdrift.nearme.gamecenter/files/L

    Filesize

    236B

    MD5

    a51ad324d0c5a1821c708fe937b7f9b1

    SHA1

    775b3350eb7b6185e88a1734e11288116c75e2ad

    SHA256

    d07bb35bee7477bb7f2a498799719efaf3a83fd30bf97f313562e56ba33c241a

    SHA512

    c8f26485494d5cf262ece3e49e833524cd852350f0c4c198bfe1cc63576236931e9d6c2609edf7839e0b175239f3b90f409867bfb8430191b783ef1baba2737a

  • /data/user/0/com.realdrift.nearme.gamecenter/files/SX

    Filesize

    399B

    MD5

    e0bc03b400be35ea24f63f6efd830e55

    SHA1

    f72e0bfb322a78ec5f16e68384ce17b96ffada0a

    SHA256

    ceb02d58e6ead8b08b62f794f8767466d31aecc66a0e82196ed6eb873e46a5d0

    SHA512

    4de958246541f919e7fee5f5353b7f88c4225c655615acc0fb1bd4dab4a199b3047db7e957f84e1d7721f313025cdb2f37ce64453fe300f6d24afe3c5aabc439

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

    Filesize

    465B

    MD5

    9abc30e9eb3d82241481929c9930aa55

    SHA1

    744485e052a08961c2785ac8ce93045166888d74

    SHA256

    62b7557d0480c9b56d7e03d7b7efc0589fe1bbecd214cf0806aabbd201c09de0

    SHA512

    1b0805fc8effedf6f633d327a4bf71ca2fdfa8164ff427c9940ddf51be0dac606f9d29479869a565838c5599e8dd5c42465763bfa925537d232f26559bb275bb

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

    Filesize

    519B

    MD5

    7a64381f262f5aa064ef9c327575b72d

    SHA1

    a19f17297ba191cd1a450a3572bd3d1ff8297ab3

    SHA256

    3f71858720643f0d21d209d8a4ece2d869603daa5563a6f9e12b7cfd9285c3a3

    SHA512

    dbe65ee8726ab0c5c9af266449c747e3ab996e0cb623dcfdc64859f1410956090af690559456c0f23a8736d0171c9c0ca2afc8cf862ac416a2f8a30fc6f78f7c

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

    Filesize

    178B

    MD5

    d601a660f8529df16f45f04dc5c82bd2

    SHA1

    095de2f433b9b77db79fc33b73d8e1a19b7822b2

    SHA256

    617ffd1c9786a37d46809be1f9b6ecd748488267660a46e23b60b3323ac597c3

    SHA512

    7fb7eea443c1b255b6c3f1e2f20ac21d24be3ace8d18364cbfe2e009e101f386fe671245f63910f3079257b13f9462f6b5cce5462e3f6161bd2093ea7ce0d196

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    137B

    MD5

    d6b32b6f7842c43a69d96e6bbc0f951e

    SHA1

    f09a77cc001d93e3386c5cd436a79ee29a46da6f

    SHA256

    5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

    SHA512

    e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56