Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1004304s -
max time network
149s -
platform
android_x64 -
resource
android-x64-arm64-20230824-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230824-enlocale:en-usos:android-11-x64system -
submitted
28/08/2023, 11:16
Static task
static1
Behavioral task
behavioral1
Sample
b7ff30b39826db33a85fc677819a958cc93_JC.apk
Resource
android-x64-20230824-en
Behavioral task
behavioral2
Sample
b7ff30b39826db33a85fc677819a958cc93_JC.apk
Resource
android-x64-arm64-20230824-en
Behavioral task
behavioral3
Sample
b7ff30b39826db33a85fc677819a958cc93_JC.apk
Resource
android-x86-arm-20230824-en
General
-
Target
b7ff30b39826db33a85fc677819a958cc93_JC.apk
-
Size
3.0MB
-
MD5
0932738ed4bbf0a5ed48919087a0b5d5
-
SHA1
f81cf7f542e133e3b34f8584ad6ba5ac64a9c118
-
SHA256
b7ff30b39826db33a85fc677819a958cc9307ce2c54dde77c3e1239f39e6ec36
-
SHA512
2daf58fc35294ec94ba891d0f9bf82cf328c6f7320133de88def60280c6815f7b3efa307ab23319e0f63c8551a6d5f6c3413f34f4494a817afb33b0d73ed7aac
-
SSDEEP
49152:A/9qwKIvMtJkW4nuTk4F9ZXVJrx79zpLglaNHFIQf7sjmCj1dIjr+Sjp9nmQqS95:O91cJkZV4Frlpx9zpMAIQDsjmobS+SjL
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.winston.blue -
Checks the presence of a debugger.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
16KB
MD507fcdbe5fd542f21032f57176959c749
SHA1fa8e316a203710cdd7b2bfa49ad2b6a3518c68b9
SHA256e87e2b5809d4d2dc8eaf131f208ba2b4d7de9424595eafdba56f4f2837f641a1
SHA51221ecce359227a13ae2326d7b9828f4fb2358b65de8fd14f73d23d507e52c1cc286223f48c55086d2ff75647c1b7f7980aa48cfd36c62c88d1b3d421eecc1fbe0
-
Filesize
16KB
MD5b9d9432b1333a1138e5ca3efdb0b514b
SHA153a162a2cdeb52d018e27ce18b36a6821dcbddb7
SHA256e7cc05b3d5d6136e4bb5150002edddcf7cb3fbd317027915f508cc50e8b3ad49
SHA51201dcc2b9f06d40f630b9b1e77c83efa9d1bec3cb584d7aae5ba886be19bca1ea761a138e23760dabd1562e9491a2e533d79df1d208863b2753dd549b81f56dbe
-
Filesize
16KB
MD5aadbd0ed27c151aad915b0750d3a542a
SHA1073987f64e9380a7f05ed48b802fcc29e275645b
SHA256e14ca46fae56f859ea3e3aa9a3d36ddb28f1d648bed179a96ecb3e048b719d1d
SHA5121581f4eee7d898d0a8b82236abf14cd824b2e92d0f97f7df2ced7a581ffc5c5126ca67702a4983da2aa1c82b3cf93e84a4071f10fa1084fa808926a89e301136
-
Filesize
16KB
MD5c8ce9c3394a7500a7abcfd56952ccf77
SHA1b014d2dddb90fe723043723eadef42aedd6956b0
SHA25633b2217fdab8139913d2076947b4571cbcc6651d2d051649ba5eb3e87f5da0cf
SHA512a5ebf51ad0a82139aea05703fedaa7ec061f24da5eb342e0c83fe07d55c4d2e139bcc2203dc829f07f523fab86c67fd8c0d40318ddc13674ea825c54936f7a9e
-
Filesize
16KB
MD5ad7aac96445832f19aee7abbae87dc03
SHA1bc213d3245c06cac234c2f30c8d1eb2091c01032
SHA25695c5259b9c23fe66cb6123c91eb13665a18854679f0f92929d8da538c6411815
SHA5126b62c1f607efa1bdbaad8d0572553f57dca3e2c65e473899f79018167c12c2fe334085aa519259d4dee4c8104ca31506e00aff30d09313e32cbc970bd858d7a6
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
8KB
MD54941181557112e5b4d833a081a08ee83
SHA121bc034c4d2cb6dcca5db28046d76554a77d6c97
SHA256cc43e2acf7094f61825513d029aad10198a0ad76d8ba165ef5b38c43c723915d
SHA5124a09d375e15fd2e8c7bfbac325f7fa2338d1ea275e6e750ad9f3d2d20f0396169ddc1629f58c1284b270d0a60d7d4feb256b5fcb4d42b26937aed8f513a1f7ac
-
Filesize
8KB
MD5f70a6e7f8f93a43f11e87ec53ec659c8
SHA11eb0a9fdf0430c0d4f73475243c56b611371c968
SHA256e28ca03792beedaf25417884d17ab25789a2f6fbc5b58c054e0cfb34c4891606
SHA51239d41ed7ede039aa5d1ca33d5ca960d7347290022be6137a04ebda6807c488556ca252e5dcd03766fcf4a9c262956c5b3375806e96867d0d9f2a61ac938e180a
-
Filesize
512B
MD535fea82e3a14299c73ac37a9ecc8e862
SHA18c2e5bcdb26d42de632aecdbda6a1728a026297f
SHA256556ea0fe0b4f9c11e4a0ce00f6c48fd7780c43d8c7acadaaf49f7c93352bafe6
SHA512049959ea232ccb20e29fcbfb05ace036a779c5a39c726246f94a162f867436d8f5ef7df60d31e1415c57ea1f82fffedf737f8416726b6416516c5c1adc585ce3
-
Filesize
8KB
MD57af9a0c264acfddc9465c8770382398d
SHA181b1c91235960ceda83a5adc34096fa426eb4d9d
SHA2560487d7805ba4950704a453974dd22d870f9cc65b940672c2d035a7958ef122b7
SHA512a72b0306ccc5be56fb238d997e6c4abbd673ed1df37dec8ee997ccac8960c40719665fce83b4735cb8d8a12dd348619237971d75800263f2b9e792d2c609aae6
-
Filesize
4KB
MD55944296fe598db6bfa6a6d9f8481cab5
SHA16f0536822453c56114b75c90bf9deb2b39bd30fa
SHA2569b449d86853f7d512079a83e0ca2e4b2b4462d2e361cd58e38ada9db6532a455
SHA5121e58358188a92057ea6839a951c2ddcb3b1a5aa7dbf199bcf431b87916cfa9a2cbda1abb9cc844404256f8992f33bd49d58f5eb9da1f929fe651cdd59a31e0c9
-
Filesize
8KB
MD521293ace16511db9ddc51f4d82f43a3a
SHA16f8e0dddcafe87e38d43950349c112f4b2cf3b35
SHA256858c6f0bad378d3ad64b0ba992b2e5e67348a03988cb509bb5fc940b95bdc73e
SHA512f0c9fc689ad434b0b78789eafdc51d4af3da49b2cb656e3a10df48aa843812b4f89f2de12b3b335f74d183d8d7c752928f1906bac952e4fe2fa93960e6af8b20
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802BeginSession.cls_temp
Filesize77B
MD5b757f3c5515eb8908526f041879cd4c4
SHA1f0f24a78b062d43d60e3c7c35ef2c0f0bea1e67e
SHA256415b695d6e2af395db73aca1852a08a9b8445c32069084de02aed8685f704fef
SHA5125e1062b281cd94764ab370db392598cabf5ffca90ca193525810e7be2776339b88baa1d713c51ad1d528ce9540b95f37f1b7ace42dfb986e71aba9c382eabf05
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802BeginSession.json
Filesize132B
MD5899163d3bf5276a863fb85bf2dc981f1
SHA1e4e1ccbebad6b7926cc27cae8d69121da98af150
SHA2561c3bd32f001d5f500836b79f25cd82dde3e1f6ae4db9c09c1a53b60e5dfd638c
SHA512e9aafa1bcbbb306d7d8e8cb779ea89494d28cdef63a8160f4b5e1c7adf162ca21c5a6c0138fd9619605a5e992b53e449a42c22b8a6031435ae51f43f246644f5
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802SessionApp.cls_temp
Filesize105B
MD5406e338cb64445ba5621b1864d251550
SHA125d5eed3008b4549f1181f8b751e4cffb20b7dcd
SHA2561ef376a68517950d5db0646cf5d5a479acd8a8112b604c53ca443daa5faedbb5
SHA512ffb4f6f4f9671b46f236eb0f57edabfb44f1273a24cf490bebdd8d0335248b22c82716fa03697cf5e418969305e3772cdf9fa21800b4194bcd0c3fc87e5a5351
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802SessionApp.json
Filesize219B
MD5f42d51e71ab78c68a0a98ccffa1ef3c5
SHA1141c881ca38a09d2440f7e51a3a88cf242d7f246
SHA256fa40e12dd4ca5a38b6f88a64b4a3434939e8f7dffe0aaed52541ff41b915b2b4
SHA512df9f25e6555a36581301feccfcc35d2bda4156d6d9e3fd9457816bb6b1713315b2d3cf6480fa31a9dfba0f0765fa431607431b80f47b841a343b641fa877f0e8
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802SessionCrash.cls_temp
Filesize40KB
MD54811a2b5ca206281a8d4bd9af1ade464
SHA148ee834bef7e3162c2961490212d71174fa33916
SHA256b3b1b86d61ed10ae32362cb55b5ad1f465a6732716941b0cbe75ab7d3affa9d7
SHA512b3be0505e04c52cb7b99e4a1573485adaf52353d3f2fd6009a8ddead5ec68f033e928727e3545987672bff7404fd78a9871f0d0e05741792ff71138a0e079cb4
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802SessionDevice.cls_temp
Filesize48B
MD5fd6372364a5c5c9cf8945ac3ea7a5d94
SHA13c798cab71f6ae7a81e71e58712368231230588a
SHA2567400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
SHA512a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802SessionDevice.json
Filesize202B
MD5eeeb942571fa704cf8ae49731fbe9789
SHA1b5989c4cb932ffc779ee25bb3f7bfb79cf720427
SHA25678809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
SHA51271e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802SessionOS.cls_temp
Filesize15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802SessionOS.json
Filesize55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC82270158-0001-1156-DD67FDB4B802SessionUser.cls_temp
Filesize4B
MD53ed7a02f7ecd29e9a0da73bbd02b94dc
SHA1ac0e7b5b3976127f95e987bd1f27e504b343a305
SHA256dd385bd6d860af19cb2c132d628e3d6872d7b89b3bd2d50f56253bfcb84c78ae
SHA512115fde1208bce0530dea2a5ce627349653d304274582103eda80da3e254ac4c3963444af769ecbda4bc609d89b2816e6620c2eae88f7b3cf3c5e9de5491855a0
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC822A0377-0002-1156-DD67FDB4B802BeginSession.cls_temp
Filesize77B
MD5769aa3d68605f26b12edd125e5497766
SHA17ef48109bd04e775c118a488a96116b0009e2a63
SHA2567c84c0d4bfcc4b3b7fa9249da85ad86e97edbe8a2955276f6ac3e17fbda8bb9d
SHA512b551b357872caa6e8896ab028b27bb2493dc4722685b6d7baf6fd2bb131388c7a1414a3937a1d0b319695b2210a13c3ed293b4741348e434ad0c6c64138474e8
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC822A0377-0002-1156-DD67FDB4B802BeginSession.json
Filesize132B
MD599e38be6df38b472fe27d5a9136e6d80
SHA169fa5cd53a4a66162f5cc0575ffb149732068fa2
SHA25686788f698f20be9caac16577d39a38fd0a7d4c7470696076ba529570e99997f6
SHA512b620daba08a2f0bd0366de35ce7e4f4c99534fd4e4cf1b5d81bad59b1ecce48ba8daea1271d42c12be6d007482b53cc39c18b4b6977c7d9b78d66efc56393a9c
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC822A0377-0002-1156-DD67FDB4B802SessionApp.cls_temp
Filesize105B
MD5406e338cb64445ba5621b1864d251550
SHA125d5eed3008b4549f1181f8b751e4cffb20b7dcd
SHA2561ef376a68517950d5db0646cf5d5a479acd8a8112b604c53ca443daa5faedbb5
SHA512ffb4f6f4f9671b46f236eb0f57edabfb44f1273a24cf490bebdd8d0335248b22c82716fa03697cf5e418969305e3772cdf9fa21800b4194bcd0c3fc87e5a5351
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC822A0377-0002-1156-DD67FDB4B802SessionApp.json
Filesize219B
MD5f42d51e71ab78c68a0a98ccffa1ef3c5
SHA1141c881ca38a09d2440f7e51a3a88cf242d7f246
SHA256fa40e12dd4ca5a38b6f88a64b4a3434939e8f7dffe0aaed52541ff41b915b2b4
SHA512df9f25e6555a36581301feccfcc35d2bda4156d6d9e3fd9457816bb6b1713315b2d3cf6480fa31a9dfba0f0765fa431607431b80f47b841a343b641fa877f0e8
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC822A0377-0002-1156-DD67FDB4B802SessionDevice.cls_temp
Filesize48B
MD5fd6372364a5c5c9cf8945ac3ea7a5d94
SHA13c798cab71f6ae7a81e71e58712368231230588a
SHA2567400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
SHA512a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC822A0377-0002-1156-DD67FDB4B802SessionDevice.json
Filesize202B
MD5eeeb942571fa704cf8ae49731fbe9789
SHA1b5989c4cb932ffc779ee25bb3f7bfb79cf720427
SHA25678809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
SHA51271e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC822A0377-0002-1156-DD67FDB4B802SessionOS.cls_temp
Filesize15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/64EC822A0377-0002-1156-DD67FDB4B802SessionOS.json
Filesize55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
Filesize
395B
MD56b4968465f98b098fab8ab6aa7d60c9e
SHA1fcdcd806a8843aceecb40fda6ce0b17aba1d3929
SHA256776804b3aace409a4ce76d1467397283d6806bccc933c4af50695190934f3fbb
SHA512baead45ccdf4044755ee7c0a5261a16fcb2b899a925f493a964ddeb753f7b6ca22466ea29407e6cb5b3cfbdc4e0a0562676e1892f31a7116dbb7873cf9b0f6bb
-
Filesize
1KB
MD504462e684b2054fe973d2e565e30e1a7
SHA1fc624d2fbd3acc7840c482ce38d7d55460acad4f
SHA256880f319fb96aa67082e305e27cce12c85c971b6bf4aa0a8dfd577126f821de80
SHA512a209133eff41b41e86c4783e1b4c66b0c678e146ade036e1942ff68faf56f1a932889672fce0e5720cfed96b1b9f73bfefd718a5a4bd6e231175186758cdf780
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.winston.blue/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_f1211506-837c-4d4a-89f9-4e7f18bcd809_1693221417764.tap
Filesize328B
MD54000db8c33766104606fc704826a907f
SHA1c9b2c8e1cf1285533aa1b2cf221f6a10344c97ef
SHA256b4c58f14fbabbfc18252fadcf0b850dc61859d282dbbc930b4916cdee5c424bd
SHA512f7e7cb772f440aecf07b41a3516483bb8e3c30103e0e998536b80e0c26637411db988d2de5f9917cd6dd56f62ec8344d6589f05c5bd8bf761a69bd5cf9f59dec
-
Filesize
90B
MD534947c8b4da2c4fe3c7ef47561a5f0ce
SHA1b2354462712d2256cf8c21b89e6bcb45a2904495
SHA256ed40d32bd9e66f74a5f3d522806252399a0dd03b430e378aca4593ce493d4db4
SHA5125a57fe428161901b19d3c4698bacb8ac60ae817cbb82b9163ba44ddab5b717308e55a0bfae71f583d636e76af0667a5be96e5a90a53025295a5bbeafdae752e2