Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3848739s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    30/09/2023, 09:23

General

  • Target

    legado_app_3.23.09272322_原包名.apk

  • Size

    17.0MB

  • MD5

    d2ef86d10ee3d40123c1aaa0db95d2ef

  • SHA1

    18195f22c28114c7b0197d6cd1f35d034749402d

  • SHA256

    855567ba65278f666b2921f0098bb0d74502b8b80e8b0989cfb4cf54bdb0b08d

  • SHA512

    ef49211e1660460e7c01441eba5a7897bed588a702e1f3b6b98a8851a0ee4450c60386844f064714c6c133b28269bcfe791c9bc0bafa9772ba2807a762e9074e

  • SSDEEP

    393216:ibyKpomD9y+R33jiVdvrtoMx9/yWRAbfwLsvQiXok2a0bV8:iHumD9y+OTrSMx9KWRqw4dh7

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • io.legado.app.release
    1⤵
    • Loads dropped Dex/Jar
    PID:4519

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.legado.app.release/app_cronet/x86_64/libcronet.117.0.5938.60.so

    Filesize

    4.5MB

    MD5

    a91196950841eb45b8dda49da256b188

    SHA1

    d41291eabbde70d911561e05ffd7da8f61a2e618

    SHA256

    1f7b7c5b60f4f7e576371cfa9058c0d5635bac1eb7c5b446c81398dcc462d0c2

    SHA512

    c0725d70d565da4929a259ed6e243e1335e0361993c88765fbccdbcb21312c2c36daa7cbf5ce3025960582280d4f7f38c9cc5cd91affd5e869b68d32358e4c7b

  • /data/data/io.legado.app.release/cache/image_manager_disk_cache/6261b3beb2da7a61a6c32a55dee5eabadebde449b1fa5101cfca42184abfc199.0.tmp

    Filesize

    307KB

    MD5

    c592a9734b6ef661aa6d79f67f0e34bf

    SHA1

    c25b981c3036a50027a77b6bdf772de76e067d03

    SHA256

    523bbaed0dcfd203b677b40383f5487026bfdc09529093a7d3f6fae215b9fbf8

    SHA512

    52b851024f749b8653e5dda477f6c55fcd0612629ce58322bd1c397ea0bdc3370c8aee3b56615b78107da29621c9767304a63de99775c13561631998ad976f3a

  • /data/data/io.legado.app.release/cache/image_manager_disk_cache/journal

    Filesize

    180B

    MD5

    02cce4afe098141b387c7779d26d978c

    SHA1

    65d3a17f83e4325135fdf6e879343b3d460a7a32

    SHA256

    c55ee06beac48bc6c1b23e2d36478aa8a801fa70da46543ad37889fd6a3f075b

    SHA512

    728afdc246702edc90a5a90c07ec042c7dc53a20f27ad58ee8afe0ec286eab8a0491a4bab37deb0197e8dcf94fac3a5cf769caa906ae97493e65a318462b1013

  • /data/data/io.legado.app.release/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/io.legado.app.release/cache/so_download/libcronet.117.0.5938.60.so

    Filesize

    4.5MB

    MD5

    a91196950841eb45b8dda49da256b188

    SHA1

    d41291eabbde70d911561e05ffd7da8f61a2e618

    SHA256

    1f7b7c5b60f4f7e576371cfa9058c0d5635bac1eb7c5b446c81398dcc462d0c2

    SHA512

    c0725d70d565da4929a259ed6e243e1335e0361993c88765fbccdbcb21312c2c36daa7cbf5ce3025960582280d4f7f38c9cc5cd91affd5e869b68d32358e4c7b

  • /data/data/io.legado.app.release/databases/legado.db

    Filesize

    220KB

    MD5

    92ca382132a4cb07015240534b16868c

    SHA1

    bf3b805599564de294efbf5ec516a277c02e2bcc

    SHA256

    be6d588b2fc6b8a95e5feebf24a907e790cfa9516886a802d4da708f003b4d50

    SHA512

    04b61b0a5e7a77b541f3e1d79d4d115d77bbe1893fe8c7e47f76074577f6fae465f71620776ee8b0f7e4833ea7e80092b6b9487d1d39c2724772823f82a72849

  • /data/data/io.legado.app.release/databases/legado.db-journal

    Filesize

    512B

    MD5

    eca9716a3df2d5205fb8659e63771ddb

    SHA1

    c7f698486473d78daa3bbdf90c15cb00a69a8e7f

    SHA256

    6edf30236921a92ab97977dfc63e874567f950c15b0d466ced8f7b2c10e8684c

    SHA512

    56ef7379fa31c615d6c0ced9430aab6e2ae9f7f8f7b5b84ae4958d0aa9bb19a3278468be9b1f969660929e200a24a51c30eced71bcda01e8026a2c2f84ee171c

  • /data/data/io.legado.app.release/databases/legado.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/io.legado.app.release/databases/legado.db-wal

    Filesize

    156KB

    MD5

    5b85559d2e666b8f51dba724412eedcb

    SHA1

    46401ec550ede3ffd4dac97aebe6b518af3d398d

    SHA256

    ba71554992b148ba65d41d341f11bd7e0cd53f33cdd3246982c91b93cbef5735

    SHA512

    f4e494d15105a393f842f0366b2ecc91acf4e9e212db6529bcb0863c51ef73e0875654477f0fa34981eb9f2f7b844741d204036ea01fc1aea39e81b0dd209797

  • /data/data/io.legado.app.release/databases/legado.db-wal

    Filesize

    16KB

    MD5

    a8ec6b24f64e69d2c1d9a8700cf51062

    SHA1

    6362bbfa331f2470f3d1d9c90a4deaca9cb1ff71

    SHA256

    e42338eaf7bfb52065001ca7f1f62ab272ce093b4ee91e527d17d3345af48f09

    SHA512

    1a3bb2d99142a4bccb89ce21a406dad9d3b6afa97d5bf8928ed44eefbb11587ee1311e8d724968ff94c6cbdc5b123a07f6a11041360321d686209202e525744f

  • /data/data/io.legado.app.release/databases/legado.db-wal

    Filesize

    237KB

    MD5

    ca8a94edbd9e89036ae30c47e53629c7

    SHA1

    ac19669bc8dc626f02146f77166519a4eae6b793

    SHA256

    f0a95945f301635f268f69c44e88696ed9b00339f6398b613d3bc65bb81ac76e

    SHA512

    520670d068ccf3ac73a4901517d848cb1e505da303e7887837e29c3be886425e7406b599e653fd1a31927fe05ac86cf16b25cc6f07ef6ccfcb2a8758b06bc615

  • /data/data/io.legado.app.release/databases/legado.db-wal

    Filesize

    406KB

    MD5

    774a2b1cd8324735dc71eab97f5428a7

    SHA1

    93c2ea7af4fbc5f8984d22992b90d1d4265b8888

    SHA256

    a0b40feb5766c2b8ab78b6d242dc75a4df8c682250ef31df19dbc9c938bcf96d

    SHA512

    b9fcfb220820f2bd7fa6b6992ac068aeb72d6a99d17e96669d6ae251e8c365c2aebb248d62de7be84df6cc3a0030468759f0e30a1a63707ff45178b2f1aed532

  • /data/data/io.legado.app.release/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    04678edae76d9042d158e53c1701030b

    SHA1

    817ddf9c18578fe4e157f034a64cc50ac2453423

    SHA256

    9176dbe29b65344c68879308eb30366645661ebbe098b685a0311d6b788ff5fb

    SHA512

    e7294e302b2e5714257fd324ae06e6b8aaf66c303f6761e7e29151d9549444966e3ea39902056d553101de73d14cf39f42ea9825a0e387724d3df7b4ef8fff3c

  • /data/misc/profiles/cur/0/io.legado.app.release/primary.prof

    Filesize

    2KB

    MD5

    4935de9498935deb53248e9d8b727400

    SHA1

    6980c7d113895f6bdf21251279930a721cde77dd

    SHA256

    eb301db782850f8a670d5ca5b2df1c9bb4c98219aa5771e99a797a35f5473d4e

    SHA512

    f190fc3c59a9335d368f18ce9404d8182ffb15cc4ad22406093c811bb664d28d9bdf7a40ec1a908c811281262a4d21cf2a9b97c8bdc12f938b54670ecfea132d

  • /data/misc/profiles/cur/0/io.legado.app.release/primary.prof

    Filesize

    17KB

    MD5

    47be26d44e8ab2c69e5e62d5fbd25897

    SHA1

    a0f3e175cd2aac06e83dac9b2e37ea9668a747e8

    SHA256

    0bee3979e33d3775d788f36e9a07101f9f1e4e6064415a99f0253d1397adf3fe

    SHA512

    8649483e14f122a9224fada237af3b6bcc7deba26cf55482686d14e9c6ebbcee1419aa8ca7627db8d7829a8fc34a760e89971888e136da2a5f26aa3ebf1e1051

  • /system_ext/framework/androidx.window.sidecar.jar

    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

  • /system_ext/framework/androidx.window.sidecar.jar

    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b