Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3064759s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    21/09/2023, 07:35

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    b1edfd7aba1d45a042eeb82893697291

  • SHA1

    67d69aca103149f36e067617a15889fb3395ecfc

  • SHA256

    c4f03a8ba2c49933bc750a2a849c0299f2a19f5685e86d798da9ba629fd9c009

  • SHA512

    5c4e53ab79f3cd032172eff78b66a4198171e8f22ff5dff0c3056d33dbea2c00edd72a91d1ee6175f4fa94a3a6f1bc976d799f234e86922f8880defd1d03e040

  • SSDEEP

    49152:AEhKR7EFaDarTTnneg46ZLxeiz10gY6dm65m9uHajKMcofDrD/gnPx:AgKBaFXTnnVPBY6dmmHajHDrDop

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4181
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4299

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/1

      Filesize

      31B

      MD5

      7fa8c1ac5e7099e56e5daa2d7e93b811

      SHA1

      e7fd945f29db39198e6caf28e0162ed4ed9abd4b

      SHA256

      ce7cbc9c4f6d566b4f53b54ccb4777d8ae35fac7937227e3687a7dcd62962fa7

      SHA512

      847c1093c800e8399396c5cf1ed46b90850061b032864c8230e999f203c3bd63ca539e0b3f255f4bee00ccd770fdb930cad11932f2c9027784e0abc6069e1c68

    • /data/data/com.MrXnxVip.global/cache/2

      Filesize

      690B

      MD5

      bdd89b9d5f598ff13f4d9eaecfe86033

      SHA1

      fc4926068a2c242847710dd623f0a60e3b405e70

      SHA256

      cf40a58b3b009116d3469ebb16808827519f22eb6216aa9dd2740c389199ea79

      SHA512

      f74423fa0d082f4e011c3e60abc2f81825e872e6a78ee30d9c4a7b2b357f4cad0a4921789538554194cbfa4f3a9d99713676cd29f7941bcdcd4cc891455b4b88

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      19d6bb000c51af052475ac7fd93d3f72

      SHA1

      6c3990586eca6ca0b2155884f46dfebbf2ea8987

      SHA256

      d6888d00fadf01dea98268f6500478027ef535f12778856bd3313a1d72ddae11

      SHA512

      08b2c1b69ee991e0bd4319d2942b1e20030fc6b4e7eb6bacd89d0cad8cd8a61376ef853ce06ea1c053ebe32a6ec513af13b116bcad2dc9ef4b0a5145d9581098

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      ef041ac1d2f1bb74113b1aa9b2e4c7fb

      SHA1

      e94d5f12478a43c629313cb5d855e4d817810cc5

      SHA256

      1b9b5dcf19e8d9392360617d366b7d8db9e9be083e8cf3d992325220a85e77d5

      SHA512

      0d8b234f39d60c416efd0992f49403f2a3c5f8e1850136ca3fc742dcd3c021185bd5363a3bb942d949736285adbb6c4393ebb731d8b865c41e12213660f67b18

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      ddf06ad83e4c5db118f0e922cfc44e3d

      SHA1

      993093e88f93706e10ec0b46543a5bc68c3cbc25

      SHA256

      53512b5ecc245c823c0df6b11fefd136ecad9959992c7945c8abab7b96f88726

      SHA512

      cee38520478998adf3c2a7f8ee7ba9867e16388bf7f7ce9bb8f517f1c9c4b9b30f8c170c6f18006a0e69a317067c8400c3492e9b912f537d3901bd886e6ada80

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      dc66ba59381078fdc3babef5122d1986

      SHA1

      8705f29a609f6953550d9099665a3bdcdd242757

      SHA256

      a4f3a1ac8505f33bf39d6ac13d65fb7c88e80b3e32142e34b3fde926d512eed3

      SHA512

      782567e05158427c195d17625dd07dd4bf5c44b138fda2bada78ad81620780922d9c9e96893bc0ec20351d6bea06503e0485bed8d4ba7ddf7a9d43835e2b4e62

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3e881d9a01ca707bed38018ac69f4518

      SHA1

      5820f9351d7cc8082de6e5686eb9f8fedf6fb830

      SHA256

      4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c

      SHA512

      8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      a9bd2882143680fcf8c9bef6dad52b46

      SHA1

      c287467f376c983cd47bd8b4750f326d6fcb7e9d

      SHA256

      09a837b69793fd5170add16d192bb2fd23f205888cc341f489875186f133b6ca

      SHA512

      104b3a6cfe06f1b24b6b337a87616822184c3e1efdb734138dcdf660733c96a14e06ddc6e8e232f84ac4a0ebf0d25a31511af97b68769bc32c941dd78442a2fe

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      204e0c2d6fbe4bc464297be9a3a9a371

      SHA1

      c91d1d7b3fae2b8b21b947f556e5c259882f9edb

      SHA256

      eee42849952be56ad57073bf67b97399a3d22395ccd7e680c4f0db74b5168412

      SHA512

      8b43e8567285dd585aefa5f8a73a320b15c621ba08e8036ed8468cf5846ab9cb93bb8c88fe1056f2ff2bc13ade35f0a92119f88ac2c069f7079e77afd69323f5

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      0d7b02504d30c4da231ecfad0c90f7f0

      SHA1

      f5e96bbd896e63844f1ca9b667763352773fb39f

      SHA256

      4b3465026478ffd45be7ab540b8570cb13a6c2858e3e40f1fdadb5442c7a91b3

      SHA512

      edc5fefbcf66ea70e7d82400f94dc54a0f38e8494f76d83c7223281538d31a19864991d16e9b726fa0870d5dfb53fe37e58fe8d9e79cfdd7462ee53390e9294f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      311304b0c7a9592178dbb431f7d6a44d

      SHA1

      41eb841bdead0adeca8b79f341c2f933f2165a53

      SHA256

      1888daaf61e3ead921409f844aad5a0385c0f170456d1f1d630eb100b3863c77

      SHA512

      2963200afd59e2a10151f57536374e5d3d3b0b7f10e5c0b4da949063dadfc773df3382649635327f27b040c9d2a23bf803927a909d8815dc27598cda406e1935

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      76ca6d5fec90396e46f8323c6de78d4f

      SHA1

      1be7b319d8c6f36ce1a9e0dd13c870fb474aa56d

      SHA256

      612c4da58f74ff48a25c6c5489db82bdfd6dc18b469e23e2c18bf0491ed4a759

      SHA512

      78f8c1ecaf3ea169f048b36a4e60fb4762589f9e71733bab941e26d14a52346d97fa91729be9d196d0ac9673f33a2b3cd1d88169f1111ad32e5a3ef8c2cbab19

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      83091dc04fca78da0afb53ef53069d10

      SHA1

      6652504afc4beda97becf72bc7dd6c92dd7c3c02

      SHA256

      80d07760f7458c42a29026034d318e456fb5ae9e0c316bf0ec8b493fba7428f8

      SHA512

      d988b79783c792bdac25cd5a2443023e2cf837f623e0da8f88922b1ad7b52dd00cdb24ac3f3daa6fe5d17887ca7a486bc0a07ff806929426ff07125fc2182d32

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      bdd85f59875cbe0a5f6dd2051d4fbf12

      SHA1

      bea0da6de0bb2c5146298af78750918188571e9a

      SHA256

      bd4e2bcb5feef7bbc7d1684642fe59b20d9c6d27ada9b0f7734852d2ff36b0c6

      SHA512

      89aa626dece4c4b8abe4010e84a162efa27c5ac89d819c96ddc62f7e90663523cfd4f40217433ce04afd27391890b78ad3a713a024c4c2cbecd04e2675a6fbcd

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation4626861496721079036tmp

      Filesize

      566B

      MD5

      476d13df2eb4195aef686f384a0a4e42

      SHA1

      93e1b15388e0e328c2c7aeddd7d8941d179276e2

      SHA256

      d029a8d2bfd59a9f2278666f1fc36e15148a54827aed19e20736537d1b2a2334

      SHA512

      6f5d0b0668b9645388204cb5a3be0edeb7ec33820cd420e8cb989b2ec8365cfff180e9836532ad3479b0d58ba2ab64adcc1b4b162c528f9a37762dbf9575c2c9

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation8814585550874159121tmp

      Filesize

      90B

      MD5

      f39f880c45a1a5960ca44572cb7a1576

      SHA1

      89cd6e1b513ffd5c30838f89fc94f67e07410092

      SHA256

      f51235ea085f089e91e2a8a4c17e7f0ae3a1b7644cca62d15f868824546ec29d

      SHA512

      9bda2ea526e720c6c9da3eb3966534639973385ebf7ecfecd8c26abb76d39a3378ef5e0dcf6ee0962961cbdc778100db73cd24929cf74cb934cc7e1bf5d2cc46