Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3064755s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    21/09/2023, 07:35

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    b1edfd7aba1d45a042eeb82893697291

  • SHA1

    67d69aca103149f36e067617a15889fb3395ecfc

  • SHA256

    c4f03a8ba2c49933bc750a2a849c0299f2a19f5685e86d798da9ba629fd9c009

  • SHA512

    5c4e53ab79f3cd032172eff78b66a4198171e8f22ff5dff0c3056d33dbea2c00edd72a91d1ee6175f4fa94a3a6f1bc976d799f234e86922f8880defd1d03e040

  • SSDEEP

    49152:AEhKR7EFaDarTTnneg46ZLxeiz10gY6dm65m9uHajKMcofDrD/gnPx:AgKBaFXTnnVPBY6dmmHajHDrDop

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4981
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5110

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/1

      Filesize

      31B

      MD5

      7fa8c1ac5e7099e56e5daa2d7e93b811

      SHA1

      e7fd945f29db39198e6caf28e0162ed4ed9abd4b

      SHA256

      ce7cbc9c4f6d566b4f53b54ccb4777d8ae35fac7937227e3687a7dcd62962fa7

      SHA512

      847c1093c800e8399396c5cf1ed46b90850061b032864c8230e999f203c3bd63ca539e0b3f255f4bee00ccd770fdb930cad11932f2c9027784e0abc6069e1c68

    • /data/data/com.MrXnxVip.global/cache/2

      Filesize

      690B

      MD5

      bdd89b9d5f598ff13f4d9eaecfe86033

      SHA1

      fc4926068a2c242847710dd623f0a60e3b405e70

      SHA256

      cf40a58b3b009116d3469ebb16808827519f22eb6216aa9dd2740c389199ea79

      SHA512

      f74423fa0d082f4e011c3e60abc2f81825e872e6a78ee30d9c4a7b2b357f4cad0a4921789538554194cbfa4f3a9d99713676cd29f7941bcdcd4cc891455b4b88

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      fcb2432a6d1a602c4081007087be0211

      SHA1

      cf5f06fcfbd81d879d8b383fd5aafdfe8d1e7a5d

      SHA256

      19ca5aa9c403d0ff4931d939a063a20b3f3b4d89581f6798f0377ec79a89d22d

      SHA512

      4e95f475030e8584cc4079a2ca317cba1bcf46ff18d2f263351e75eaada56a7958b1872a3cd6718af75d7215ca538bcf74e93177e26308f50081c34658e11460

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      989577dc42ec6e7eb62adec1b3ad6dd9

      SHA1

      c5178f9bf8c71fcd39ec8fce0e525d22d29213a6

      SHA256

      f8867fa5dfeaaa8df9fa7f3d730bc1b65620c49316891f3be96de25828febad4

      SHA512

      ff238a148be1565c1aa2d985f80a7f0e228cdef6e4b68ca1bc73cb011aeb525edc9d4e0c603553995cfcdb2001d632a585fd5ea3e0b63362347a6211774ac924

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      810531c8e1cdc4af51e9ccc23ee3701b

      SHA1

      1f3d42a1f526165d4c8f98592541db07da904afd

      SHA256

      c5afd5ad857500ccdbd42a89aa3a548a6ec213fb579cd2012533473563b719df

      SHA512

      73995a0d9604936d03eef753adb41d39181f43306e8fa4057d90d82d6ecd9d173aa90491f5985f52b3a97bc430f3d1c3c45ceea051d7af198aa221e8f1010926

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3985fd578dd375949d2fef67549e1696

      SHA1

      0a516f47da7ac4140e4876a31b483f7b190851c3

      SHA256

      fed8a1519e7af8fd5643f1e33dca1d06866a04e46b43ca580c4ed15a09498367

      SHA512

      388be35023bf9f8992e579c8f288895eecd7758c4623f43c2e01fb733a8158d4b46eb0e043d2117770a13e8a205cecee230a99591afe90023003acd02fa958cb

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      adf6082723784327d7d1b34adf974e7d

      SHA1

      b1502f70eb881a1dfe41139cb719fefb877ee37c

      SHA256

      252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

      SHA512

      762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      e20e4b65440214a488c5f73100a8e1c7

      SHA1

      e2ca5de16c52e3b81b7f3117adf8a3448ba929e5

      SHA256

      746e61c579a7e29ec56c8d950cbdc26286b10c7b9eb2e6d845fb901b889169eb

      SHA512

      80a9700f20dcc074b6e35e072bcf81c19dc395f8dae8a5e74479489667b801011bdb659fbb1db7764bc8b4e7408e8fd721c6e16bde4f3ce9a6833b61fa97d8be

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      c59bbf88e7846215873e44d67c7a41e9

      SHA1

      61a85c6583cc77730e6b965d61dee12d4db8de28

      SHA256

      f11fdd5bcb1f9a55541aa4e2fcf79534a3975f29513b1f0cb0c6d97b28fb69c6

      SHA512

      aff19691ec640f1c94afd055a2eb080de9f7991445ce4da0b8f355e20a0dd93e54d87c149e90756896a814f9f37f528dec1bcf105f355684d12b2c4c4956e7ae

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      bd00ea350b2ee2ebdb9af5cde096a61f

      SHA1

      223072103de8dacec286f30b7992fc1f2354f1b4

      SHA256

      52d7305cec453fe9b2b6f1294b5a02f510a5dae5c614db82fde18d04945ca4de

      SHA512

      3e9e251e9a66f0706dad8d119d68467809f2f4aa4c3b4fdc365dc73e681eee870a7b78ab551d04337e5f49d336bc227679a5edc935a4521f04e4e1450e188f7c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      88d74a70c2221ae926d0059c6562530e

      SHA1

      d30d5d544d2e3ea2b9dd398e668443c8217a4365

      SHA256

      f00198fcad67dfa9699f3643171f515623c392d411b7a79601016c00835bc11b

      SHA512

      39cb1ea76d66bcc5d31a3d702a728e9661d60248b9957b89bf5da6bb5a774e95a36ca58260a55d677c9018c4ff7ea0e9bf48eb0420f46acb3ca5d3fb20e7e1bc

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      455251a58e5dd9654c794e8277ad8861

      SHA1

      3ba91a9ebe14ac08cf0506b7d19575a0b2f39462

      SHA256

      a3216808cdcb67a2faed184b82c92e6b554e9b0a8b3969e45a33ab9423c7a87f

      SHA512

      424965e8a8d825a3eea65def8a2e06c80519388db71cebff3a6a83b90ec5334dbd628cb52c01f3dc290a595704a4b101499fcff7296eb391eaaaaa1f18a97d83

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      1178bf2df38e8dc024056f86beff5802

      SHA1

      f835fd274e2897aa4027be3385e927e3de21d65f

      SHA256

      7e2fccfb84fbdf25ed825d9ad946ad4b41ebff0e61856d13c4046ee1328f3b2a

      SHA512

      ba0b03f9ba20a10fceac32d299d08028a039f153a5a4033f4edb590e019bcd67cd02a827b5c8bf3bf049e715cd5d1aecb6648998167b7d7e205784c6dc492c1e

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation1564600281702709301tmp

      Filesize

      90B

      MD5

      1fb2c9f1f931dccd6485f96effd67918

      SHA1

      a4a19365521616a17a39e5635ae01e81ef3a95bd

      SHA256

      67049e6649e76396ed3764c52685f6b09868a287a0f48b695f7efb1498719d7a

      SHA512

      5589c0d88cabd0a69eb3fd7c000de1690a0f087032eb372d7dcc8dc47e866954935020db6b31456da0ba524d95f84d92c18a989296a3160a4a3b45b58f854ee1