Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

02/10/2023, 05:59

231002-gpqn5sfe9y 10

Analysis

  • max time kernel
    4009380s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    02/10/2023, 05:59

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    b4e81f83647d9bdfde8c3bed024de1f4

  • SHA1

    ebb7a5bae95f7ea04198e95d01dba427106c7bf9

  • SHA256

    7bc96cb82739ddadf27b1fea759b61aedabba949660d1b5c29034ef531568a36

  • SHA512

    cc69472ef7dfd6d7eec032d73c8bc3762d14a8a382c2aea633ffe0cc92d5d9a99167f0ca01451e8d6f86d3f48de7327c6fdfd2bd287334a995d8b808a435a56f

  • SSDEEP

    49152:ZEApvcCI5rSRAv2P/6aaKzmgxra2IenQbfyDZDCmn61ch6LD1F:ZJpvc7rSj4lgVa2kNmn61VP1F

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4178
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4296

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/1

      Filesize

      690B

      MD5

      bdd89b9d5f598ff13f4d9eaecfe86033

      SHA1

      fc4926068a2c242847710dd623f0a60e3b405e70

      SHA256

      cf40a58b3b009116d3469ebb16808827519f22eb6216aa9dd2740c389199ea79

      SHA512

      f74423fa0d082f4e011c3e60abc2f81825e872e6a78ee30d9c4a7b2b357f4cad0a4921789538554194cbfa4f3a9d99713676cd29f7941bcdcd4cc891455b4b88

    • /data/data/com.MrXnxVip.global/cache/2

      Filesize

      32B

      MD5

      6fe0c55fb634c400ed0bb42bb5534d54

      SHA1

      95ac8496a4f5da4bf82965def9e304d9b705d675

      SHA256

      09e492f636c815b747dd67ede9e0754dba1367369bd35b280c10e97a344336fe

      SHA512

      0177164ca2cbe992d5fd03eef469834b15e882e8ef8d6a21c95c9401913b4e7f29d355072889e87af8d06e95712efd711fa7642d5082c4a94418ecee8ffcd197

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      0472413d03158e6dbaf9e7deaabcd9ab

      SHA1

      63da124697710fb866b1028c5074db07522baee1

      SHA256

      08cb44be1363592ea6e7e3ca8d9187351d09e098e9f1c1d610339eb28261c044

      SHA512

      cb05600f555ec2d15c9b16aaab44393d0e0c3c33e7f3515b27f19e78818deebe24edecb0c1941c169abc533d56fd5df255a05d6121d3e9e73f5c1f92636306a0

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      75f30561e3a97544aa9e49fe730a6491

      SHA1

      cc8429da028b942b7bc9047971473de7a40a767a

      SHA256

      307d46f7a3cd1198be1b4e1939aea855cdaa2bc424e56c239af17a2ab4665d35

      SHA512

      bcb6ee3c0de3d0bd18eec9fe6fc9e9aff682ab5784e9bafb691447450d7fa8df11c6026b951ec93aa2ea3eeefd53700f989046228b35ac68571b9048986f4369

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f8d00309f1b4fab3c3034a636045e5ec

      SHA1

      f9f8f1572c2f6cb409e185a6fa1dada6a3350ea4

      SHA256

      3b1348f428a0eae1e018f8fb180f3075227d67ef74178073c3d87fbd3ff801bc

      SHA512

      9b0d0664df4e9eda0ee0ac6bdc58f93b20781adf80b313102fbf19458b0aa06f9026fc231b07d2e842cdc9522bd7cda0425b74bd10c8874fd18051dbc2fb0935

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      375f22cbde5948b3966c427a33cfbafd

      SHA1

      6928393c86155e32a6e74fb144f8324f44d00cc0

      SHA256

      ad4e62dcedbe77c492857c26f788a14b628f31465ac303f22a549f0acc9470b7

      SHA512

      dacd0f31cd2dd54a49d68b6b3d4bfc1012e454fbe66af6c08dc230bf6b072bcc0638ca78820205281ef4fb6c20d8dc80b74db56373bb30d275472fd9f3760cd8

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3e881d9a01ca707bed38018ac69f4518

      SHA1

      5820f9351d7cc8082de6e5686eb9f8fedf6fb830

      SHA256

      4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c

      SHA512

      8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      2381957492c1b3b72c62dded0aaa6e60

      SHA1

      4a789ab7092c2a2187059425256170d3047ae3f2

      SHA256

      64f1c38dd464ed2346d27512a2a10650cd7bb787b29306d31dda0805360c1399

      SHA512

      4e3dbe358cdcb56a0f91207e0590896d3ef9f4786794e84c8abf86e2ce05ff7fe96d636c6fee624d90911f43f0e1033686d5f9aeaaeab1f208e9931ba6f1c4f8

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      41a186539947748ecf65ace2c1b01f00

      SHA1

      54e02dbb87ba3b07423866a255f18e2b80fbde33

      SHA256

      95553ca33d3cd7615d68bcedbcd6da13ec1ef05ce30d8ecde3d57f036e8c84be

      SHA512

      e1bc8ea704121935a29deec6d36cbec18dff1afe68ad51a30b389ad84b86eee84add448819564d0a4bdaba98fc63df0f7ab4db1ebac494a3a5df8552d1c22b65

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      3cf6d775bef75d2731c0ad71e9dbd953

      SHA1

      1e776324bbc5ac198f2c2bdec1c2ca3a4f24ca47

      SHA256

      be538f18183fe3a5f5b684f6155180cd570b0d1f6824eedc30a6af096dd54179

      SHA512

      bde734dfbc98f945acb3fb4e064c292b55028ce69f98e7d3d7bd867a8424e1fe513e250918e3cb03e37b04158a7db3a6e994346d528f93a37624da1544370aa4

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      79c8d78260f5583f89fe11292f8be529

      SHA1

      32203719165a2b3e9a434a3c6f6921843ead9810

      SHA256

      7163d79a49216901a1c5db67a000974ab5451f98525dc3ff82350df240ecee41

      SHA512

      903f560790f234bab6f06f3829d2c0ec6bdc4ed42dfeb004a07f7170600c952c3778154ca5e7ecb879c88da6132598018b281688d932af857647e75c39ce1f20

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      78871679b4a611c3b5c4f4c319a0d39e

      SHA1

      e72283cebfbc2f2ab95db21111b969d6a170bd00

      SHA256

      b6f57a54b552e2831f09b132c227ec5d6560332459d37a1468ebb6622ef51071

      SHA512

      9c93c62691501d990a784f3dfaf2b26bd1b28893f02613c86fe126ffc604c74074d8d407fc5cd2e66b527ee6655c26c4ee5692b609976d683068d2c59d2cb475

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      651eac023a18ca864a9bf53b9b0abf30

      SHA1

      ae9d0ef6fc06af0c1f18682629e592ea2e1462f2

      SHA256

      50effaaf03925e551beee89d486f1730522bcf656cacf4cbb6588a15344c626f

      SHA512

      d07e0f88e4e3ebe5d0cdc3b8c986848242128fd9f3b241893b28c198863b7308b69513ffd3bd706cdb98de8bce589df3f83b90c8328ad6a5d41a6e729bb78fab

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      a404d259a3b6c96bfa9aaad22185fc0c

      SHA1

      c37e24aabf0fcf5f91a7bb887e9d28168ed9512e

      SHA256

      87a914a42752e541efb405f2e1e0b94f0f3cac2fb7ef1ced769dfc750beb57c3

      SHA512

      9ebc6b01cbb5eaccd73e32a54a566f8450b1af19207ec41577714a9d577ddf401ee5099ee95d6b0ff1b8ee080d1a3713de2e3daab4d650b6ec4e879effffe533

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation3576908938273125525tmp

      Filesize

      567B

      MD5

      0956112a488237e8ff97bf4a9a04ee86

      SHA1

      6bed6b1405d5aa21c4b26e8f57a4809196687258

      SHA256

      72b27de9e13e274bd8d693e3f4f4fbb68983c0123067fcbe5cfe6bd62fa2282e

      SHA512

      bbb2dd7948a918c7faa263b500c8e28cd72bf070312d805322672d3a77f6028f09ff0847980669028a81d7e1e9cf1ad5002e5bc1686033dc74ef4accd5848ebd

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation9007190131104291208tmp

      Filesize

      90B

      MD5

      7a9d204f6ea9c4ff957bdb37ccef58cf

      SHA1

      81c1e02c763bdc1f4ee9b8db84fcccc762558dd4

      SHA256

      c97c02316ae14ac1f76528b158182faeb8e3a91558e106d89dec986c2e1d42af

      SHA512

      3d02cb7ff16e2ae28597d4a856a0a9ce310f469210e19c97c65dd2cc13dc7374c9fa8161196b115b85996313bb1d3ade481944903c06f36f0d09150f1bf2987b