Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    221849s
  • max time network
    134s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    07/10/2023, 23:51

General

  • Target

    277e4e17c56306ab477fa1f53e092858412fa5d33ec754fdbf7864ec6b20ed03.apk

  • Size

    29.0MB

  • MD5

    f1e9f97abc3f92c8a6f86f32626eec40

  • SHA1

    2febb96a7df38cd8950530f8b947766f22d69c95

  • SHA256

    d00d35bc2bd07e9d6c8cb402b6c139b59798cea11dee80987aaa49575af60a62

  • SHA512

    b34a59f873541ab791d8197d0c8cb5fec1262339d4bc5fdbdf1a54667440b1dc2156028ef17abbd93e053f199c96d8f1182c5747a3a31519558feca881ba56b0

  • SSDEEP

    786432:RsOfyluqL6xJfkWqimfK42YtIvYWl8qZwrulR4u8:GOfyluqYJszimS42YtIwW9z8

Score
7/10

Malware Config

Signatures

  • Checks known Qemu files. 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Reads information about phone network operator.

Processes

  • com.estrongs.android.pop
    1⤵
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    PID:4197
    • /system/bin/sh /system/bin/pm list package -3
      2⤵
        PID:4234
        • cmd package list package -3
          3⤵
            PID:4318
        • /system/bin/sh -c getprop
          2⤵
            PID:4295
          • getprop
            2⤵
              PID:4295

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.estrongs.android.pop/app_bugly/bugly_trace_1696733920046.txt

            Filesize

            30B

            MD5

            c207d806d2a4251a6f57eb0c511701d1

            SHA1

            92fc84d1f99f1e1c8ee0097fdce5f0eed7994d70

            SHA256

            d87e3864ac2d3856a305ba4e0b1486e70ed0bbe85eda39d6101a30a9ba90f52c

            SHA512

            1b45db86e3fef3d5ff1d38b50819660f2d29ccc7cacd31edf49e9ec118e16609d25b69216dae63806dd20d61e2c6e39e4609a520a1161b21b54bd22e48207b83

          • /data/data/com.estrongs.android.pop/app_crashrecord/1004

            Filesize

            243B

            MD5

            c2277946a0acbd3753b1f907c37e61b9

            SHA1

            742d806eabfd2366850cacc808a2d5b85a6cacfe

            SHA256

            aec6cc7f546be38c26393caae04e9e3e7d1b697bb7a1fd3cc8d69fc0264dbb78

            SHA512

            48a69400e345d99f23cb8cc52e3df474ae46deee480824fcafa997cd1e3d8d7d709a73e1e1cb4ae46551962f3fe66ecfed514c40f20388c233128d4d16e8fbc2

          • /data/data/com.estrongs.android.pop/app_crashrecord/1004

            Filesize

            58B

            MD5

            0d210bfb2a0e1f1b4c082a6a0f79de07

            SHA1

            bb8ed9e364db79d1d9f2fcde3f15091893222faa

            SHA256

            988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

            SHA512

            536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

          • /data/data/com.estrongs.android.pop/databases/androidx.work.workdb

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.estrongs.android.pop/databases/androidx.work.workdb-journal

            Filesize

            512B

            MD5

            2a7ca8970c02108b779bf1e3502101f9

            SHA1

            45d91360d72ec9a393aed524bfbc2369e03c824f

            SHA256

            a9ed0d99cea13226625a3e1e764024fe6d3bf518b5ee0a99959d2ebc8c3706a0

            SHA512

            22c9f5ae72eb2c970e60f483cf1481977e9733e4245f524d3f2201693b0742c18aeb0aa1b2471ba40840494a6fcc5989696478d165a4e38477ba83e670c54493

          • /data/data/com.estrongs.android.pop/databases/androidx.work.workdb-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.estrongs.android.pop/databases/androidx.work.workdb-wal

            Filesize

            16KB

            MD5

            9c7d8a12e347df5c1be6f7209d1a17f9

            SHA1

            2f0f13b8197c8822591962d59d0673aaddc89249

            SHA256

            eba546dcefa261f4f13ed02677afbb5cc2d4169a1094fcb7127f7f9c4080f6ca

            SHA512

            1f7a4f8cbcb92e81409463017c8e822232b811b85c1e1a475f043d5b2ebe227fb1695a7d5fff58524f8cdebdc09c4dca4727e11bdcd426c57a6c25f28c547df7

          • /data/data/com.estrongs.android.pop/databases/androidx.work.workdb-wal

            Filesize

            88KB

            MD5

            3827e8a288b0adcbbf4234bb76123c4a

            SHA1

            740933992a29d194f0bf38d0a4b6ac4b79cc8550

            SHA256

            56fa086427544cfc0aa393a8e99cd1b7e05dd98dbfc9c00225c8b8d7812d1614

            SHA512

            b5231c492fd7d22403894be19f08a1e1c6624a27a994679bdddf58ac35100103a14fc94021cc37ceff28002fe00d7590f20faa89c449e7f4dffbb309882de728

          • /data/data/com.estrongs.android.pop/databases/bugly_db_

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.estrongs.android.pop/databases/bugly_db_-journal

            Filesize

            512B

            MD5

            3ec64ed4c44e7102d8b6e13119089cb1

            SHA1

            5f608eb28d2268d9406bdee3d5ca722f8a7e593c

            SHA256

            f05b7b9de8c2b78b11e4fb8bcc2dbaacbd5cc66fe89a5e5a9384e6ecf6553abf

            SHA512

            6b447bf335997df7cb5dff84738468020e3ccb96715ff7f7dc06a4d4b51e14503d12fdf070147fe4198425cf5dd15186e8b2a7581c85b0627f759eb9b7504b6f

          • /data/data/com.estrongs.android.pop/databases/bugly_db_-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.estrongs.android.pop/databases/bugly_db_-wal

            Filesize

            273KB

            MD5

            69a911e966be6814d1e70d2d7a611da3

            SHA1

            a1cd150a5ae75c9a5022df603094fea8ab00cb40

            SHA256

            4dd318ce7e6da12bccd99ac1a8e832ce97e87f2c0ba63ce98ad984c2a3bd3dd4

            SHA512

            0e1460d53f5eaeb52578354b6339220a6fddf8c993579f89cb7e5ac75abaf9eb9e309555d4974d885fd6ad981049d239fbfbb174e462b5ec20981ed67b67b838

          • /data/data/com.estrongs.android.pop/databases/download_table

            Filesize

            20KB

            MD5

            0cc56c0ab1fb80270cf08b9c32285865

            SHA1

            825dc01f9ca4798a666603df048e192fc2fce720

            SHA256

            7ceda035c3a38d8c675bdb33eef78cb6f7ce806615fec3a9663b61bdd0cb67b6

            SHA512

            51f1e658a8c68a42423cd9dda44e7a1b4529e17753b133b23dc8eafd511178d74d4f16e2ad3cd445ea32d569bd80c1b866b76e1c8684936e95cc33c3d741a2f5

          • /data/data/com.estrongs.android.pop/databases/download_table

            Filesize

            20KB

            MD5

            8968d187b84ed0bef0185baeee3495f7

            SHA1

            e4fcf886ab2d6f1f9db8b1cb012eaafd15413a71

            SHA256

            630b8eb25cf027faa2e118ab821831fc61c43d36c2679124c593a1229116fd03

            SHA512

            0ee7fb568eb21a622a9c5ee444692fa91b59d1da56e31f209895a396c97195fb7c16099329cd2d859efd061574416733c1fe383c326cb7a5abd66423e7479988

          • /data/data/com.estrongs.android.pop/databases/download_table

            Filesize

            16KB

            MD5

            ead18384ee7ba2d4445074c63e50f7f3

            SHA1

            565c56475a2fe6cb7b6f0a115ef6d2813c161db1

            SHA256

            4812284235876d93b1310554eeae3429a1114f0aec5164ab24e77e6e40ea1f75

            SHA512

            c75609f5647a261e7515ad8864b88e7393013115538e32097c7104be5389dd54d1144f89e7cd55015fe325fe6c9c8b46ce8776c026cd579e2b76843694dfa98a

          • /data/data/com.estrongs.android.pop/databases/download_table

            Filesize

            16KB

            MD5

            ead18384ee7ba2d4445074c63e50f7f3

            SHA1

            565c56475a2fe6cb7b6f0a115ef6d2813c161db1

            SHA256

            4812284235876d93b1310554eeae3429a1114f0aec5164ab24e77e6e40ea1f75

            SHA512

            c75609f5647a261e7515ad8864b88e7393013115538e32097c7104be5389dd54d1144f89e7cd55015fe325fe6c9c8b46ce8776c026cd579e2b76843694dfa98a

          • /data/data/com.estrongs.android.pop/databases/download_table

            Filesize

            16KB

            MD5

            ead18384ee7ba2d4445074c63e50f7f3

            SHA1

            565c56475a2fe6cb7b6f0a115ef6d2813c161db1

            SHA256

            4812284235876d93b1310554eeae3429a1114f0aec5164ab24e77e6e40ea1f75

            SHA512

            c75609f5647a261e7515ad8864b88e7393013115538e32097c7104be5389dd54d1144f89e7cd55015fe325fe6c9c8b46ce8776c026cd579e2b76843694dfa98a

          • /data/data/com.estrongs.android.pop/databases/download_table

            Filesize

            20KB

            MD5

            adc44f0a038bb57bf160f5caf6be4f7d

            SHA1

            f07b7b987398dc26b2b64600f0f4864ca3b755ca

            SHA256

            e8a6564a1e13232b31e2f14ddbbaff11263b88decc157cfaddf8bffbd74ec7d1

            SHA512

            fcff9bafa086a5e77c0d2f6d45bd4e6077a920c09c27da7a6e59509273a039f0f2cd64b6a915c2bf259c3f64171bee381b6651d11e33d411243989b328c071be

          • /data/data/com.estrongs.android.pop/databases/download_table-journal

            Filesize

            512B

            MD5

            07807c2364742f3663fa14e37c4d7488

            SHA1

            d98e419563ff022708ad1506910e9f552bf396d1

            SHA256

            dd104bff22773c441d62b25edc643a4d7e5076ee7f919aca1b641bc5e97d6d88

            SHA512

            283bf22999cd08896a9077005d3617afb80b7459bd6eeb036bf9d787e4764bbc71043e753982d7db4aa44be846776a4853d0ab5eaddabcf22c06382395dcfbff

          • /data/data/com.estrongs.android.pop/databases/download_table-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.estrongs.android.pop/databases/download_table-wal

            Filesize

            32KB

            MD5

            36bfe833a2af7f092516c5c427ae8804

            SHA1

            380b8eebee8a8a3ac77fd2d26ddd6ce64fada44b

            SHA256

            0fe5985ff8c512f9773817a61927cc09eb69f0b5b266b941860dfc47509bc930

            SHA512

            e4d29c00364c68ca437bd0c9ef1cf1d4ef335366bbea8b3040d284a848807eb4eabcac74f4d5286c724b578c932c246223f23fd543efb5073db8d6070fef28dd

          • /data/data/com.estrongs.android.pop/databases/download_table-wal

            Filesize

            8KB

            MD5

            d0174f2c023c66744943b185bb18fc07

            SHA1

            026fd61ae49d20add02c52eb72e7f0f2c367f179

            SHA256

            42204e405527ac037513d4cce6198e0f681fd18fba59eaa3930c58b9e43acfad

            SHA512

            cd7de8444a5ae22484a6456dc7dbbfefaa7feda6ec29eed448d8f19bf626e8ac75af192fc561e76d3d36ae08fd16f1d1b6f4a4b140c30eb8a0dfac76847c2211

          • /data/data/com.estrongs.android.pop/databases/download_table-wal

            Filesize

            4KB

            MD5

            6728f6f18f47b2f06794481e9a2cc814

            SHA1

            0fb2f0e0b9e104b96eed29fc834b3adfd1838fe6

            SHA256

            bc6bb23b349b794ed363b572e44d2e043bd155467e026b204b50c4dfa0322304

            SHA512

            634a01b8e9f5fca9606e2644ba6087cdd74bd784ad7c302394586aaff9b802a0a3defb1f4cc6942aae54b2b024e6da072ca8d2d74bb7f00e8d38fb3eb5a996eb

          • /data/data/com.estrongs.android.pop/databases/download_table-wal

            Filesize

            4KB

            MD5

            34cb07106c87a97964f35a44b8747b5a

            SHA1

            14a901de8585df4a6d8d38b6100df34be7740622

            SHA256

            5e5c6dd370e576ff2a37bf8261bd3dd6171ea23d730a4541211ab8d7ed86a55c

            SHA512

            91094ad8c22632a0a4ef2c940111cbe2fcff30bafc4d8d5435f736e7895a7f1f7e98ac6a1c9595976e4dab080bc545e0bba0366b8eed7c3e2136a62ec04608bc

          • /data/data/com.estrongs.android.pop/databases/download_table-wal

            Filesize

            4KB

            MD5

            1427960b440e739d1b8198078ef05b35

            SHA1

            ba5d1954c5da035f043eabdb5ae805cf2fe09246

            SHA256

            3f8d51e4a04c4cd3c6d119cace6fa4c80b34914a2bb373e6cef05599dfcbb229

            SHA512

            270e5e1b3d52ef68dac006c2f458c8810053212670ba779b0b522c941eaff921e8478207c05900ee617d5cf7fbb6ee46cb227cb02855dd629159136a09bc821b

          • /data/data/com.estrongs.android.pop/databases/download_table-wal

            Filesize

            8KB

            MD5

            99ef77b5d3062549236f1cf8226cc388

            SHA1

            698f90ebada5e58d35903b14e6f58f0f705aebb8

            SHA256

            19255ac21e464a18cd2c2607592149568bd035977727ba167729d598624d51fe

            SHA512

            280191ceb63eb020d00a5bf0af1d7c3580d9ee40d228b665665a995d6b66155d6dbcf4733739ca79d720e2b7663fc46d0e17db43108f5150f68f10268f0ab563

          • /data/data/com.estrongs.android.pop/databases/notify_items.sp

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.estrongs.android.pop/databases/notify_items.sp-journal

            Filesize

            512B

            MD5

            830442793708906f998ccacc321ce8b5

            SHA1

            f866f9a3e3e3f30d7195e46ce328cc086d97eeca

            SHA256

            5f5faa8ece1a5cb3844b184172b687c0d428420bae8bc886093984eb39db8629

            SHA512

            006a22faa3b4c37d122afd4d4e248652b404675eacd50a025cde84bca6facd3757192b79ec0501fbb219df0314ca8d964b00cc255e7e477e750802af4a6c42a2

          • /data/data/com.estrongs.android.pop/databases/notify_items.sp-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.estrongs.android.pop/databases/notify_items.sp-wal

            Filesize

            289KB

            MD5

            da0d5faa222318f9d6c50158f21ab087

            SHA1

            20862617493fd15cdcd36c436975f4294d85ddc1

            SHA256

            7f4006628ba79b8f49c9ec380fae28f8fea00419ff1b8e63cbcd138c4502844d

            SHA512

            29350512a00f3bf6d3f7da5b7524a7ec9216d33b542db1894523d5b9f80faf5e1c78a9298ed61efeaa814f964f766f6dcf70f53a0eeb0d17836a3b0bd92d8e90

          • /data/data/com.estrongs.android.pop/files/.envelope/z==1.2.0&&4.2.6.2.1_1696733899768_emNmZw== .log

            Filesize

            303B

            MD5

            83a8519d90a58ef0887d991fc43b25fa

            SHA1

            aa8d82cd0b90524823a4bbf4c465dd72e28c688b

            SHA256

            a2f89be1dabd3cd98475506e8ef273e93097ee5178e6ce06a695f48ae51522ab

            SHA512

            52a5434d3ff7b71d52d689c66252c498c8f2c764cbc404b2fdd873603370c35339d50ec58c9d138d68dfe7c00fe412557241d96c1a3fc640b8a13af8f50f008c

          • /data/data/com.estrongs.android.pop/files/.umeng/exchangeIdentity.json

            Filesize

            162B

            MD5

            a2aec69885275b5a78e10c01320d1e0c

            SHA1

            16a924c432fe76d83e4f4b550d9e726a87d5b709

            SHA256

            88a6d1eb8374e36e7a1db7ea8a92cd9865bc69a4688fe99cacadfb352aed85c4

            SHA512

            d3896bfad9d4c4b2423417d02e10a9dc9b15c0b6742520717beb878366d5a6d4576abe2931bdba23b03f30bf694395c00c6bd0d2a010e1eca62d549877afe859

          • /data/data/com.estrongs.android.pop/files/exid.dat

            Filesize

            56B

            MD5

            8f5dc003b87b2ca4a422339bcce9c80b

            SHA1

            c50f3dcdae313053a2bb1015073e993afda649e6

            SHA256

            9df9c8df5997082db4e5e04f69407bd9ae54977bedad5b0f81397a7d45d84bca

            SHA512

            6a5835e646c58aad236e4737ec5edb417418f474539582d4b27b77c75dd00163db09fd95142122a17d1e16a012e2eb0b997175c4b35403dee62892f6a6f287f5