Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    221853s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    07/10/2023, 23:51

General

  • Target

    277e4e17c56306ab477fa1f53e092858412fa5d33ec754fdbf7864ec6b20ed03.apk

  • Size

    29.0MB

  • MD5

    f1e9f97abc3f92c8a6f86f32626eec40

  • SHA1

    2febb96a7df38cd8950530f8b947766f22d69c95

  • SHA256

    d00d35bc2bd07e9d6c8cb402b6c139b59798cea11dee80987aaa49575af60a62

  • SHA512

    b34a59f873541ab791d8197d0c8cb5fec1262339d4bc5fdbdf1a54667440b1dc2156028ef17abbd93e053f199c96d8f1182c5747a3a31519558feca881ba56b0

  • SSDEEP

    786432:RsOfyluqL6xJfkWqimfK42YtIvYWl8qZwrulR4u8:GOfyluqYJszimS42YtIwW9z8

Score
7/10

Malware Config

Signatures

  • Checks known Qemu files. 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Reads information about phone network operator.

Processes

  • com.estrongs.android.pop
    1⤵
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    PID:4726
    • /system/bin/sh -c getprop
      2⤵
        PID:4822
      • getprop
        2⤵
          PID:4822

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.estrongs.android.pop/app_bugly/bugly_trace_1696733910808.txt

        Filesize

        31B

        MD5

        843a4616267622ed809f58f255fe00e5

        SHA1

        72424d2243789a4fe0869f8fbdd5c7bd31787a3a

        SHA256

        16dc9c950c778f9e858045f0adfdca21dcbe3965f86e893a09a2a3d36f6365e6

        SHA512

        555beb12ad627f853c9ba38c0f859b0f8bc4a0a3adc53d00e32428fcc660b576d88c3ccb542a880a8b2ca477b5e9c40a3284efa64b09a7d3658823476ffe9df5

      • /data/user/0/com.estrongs.android.pop/app_crashrecord/1004

        Filesize

        58B

        MD5

        0d210bfb2a0e1f1b4c082a6a0f79de07

        SHA1

        bb8ed9e364db79d1d9f2fcde3f15091893222faa

        SHA256

        988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

        SHA512

        536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

      • /data/user/0/com.estrongs.android.pop/app_crashrecord/1004

        Filesize

        237B

        MD5

        ba1de9a3fed459647a459c59fd3bd6aa

        SHA1

        9b8bc4ebabf37d55231988dd983d63adfc69bd98

        SHA256

        082d4ac597cb4d6d06870ef7cdeda88addfa07a3c6295a8fd4e9964abc5aa7dc

        SHA512

        f08d2180dc159d7dd78a49841fd264058b822ced9c31f9f3acef18ea7c0ee768bdc836dd48ea627838957393a63c5ab8f50e0709e7bfc6d9c645d4a9cd473714

      • /data/user/0/com.estrongs.android.pop/databases/androidx.work.workdb

        Filesize

        4KB

        MD5

        7e858c4054eb00fcddc653a04e5cd1c6

        SHA1

        2e056bf31a8d78df136f02a62afeeca77f4faccf

        SHA256

        9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

        SHA512

        d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

      • /data/user/0/com.estrongs.android.pop/databases/androidx.work.workdb-journal

        Filesize

        512B

        MD5

        efb8e24d62fd75e23cad4863889a8a9f

        SHA1

        d910d65358ed560dda1c7c4bbf3031d278c8d3dd

        SHA256

        8988fa3f396571ab848fcae09fbf2ddaa7d978cfb999c97a3041450ed3860a70

        SHA512

        fd2d7fd6eda291cab65a32470f4673ef63210dcafddb0fd28f065e66dab2f95f01adea59055502da44ac096af63133ddac070e1c141d7243d3f1601797f9a683

      • /data/user/0/com.estrongs.android.pop/databases/androidx.work.workdb-shm

        Filesize

        32KB

        MD5

        bb7df04e1b0a2570657527a7e108ae23

        SHA1

        5188431849b4613152fd7bdba6a3ff0a4fd6424b

        SHA256

        c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

        SHA512

        768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

      • /data/user/0/com.estrongs.android.pop/databases/androidx.work.workdb-wal

        Filesize

        88KB

        MD5

        0e517178477f93f258509a38b8b57a72

        SHA1

        98b27e6e624fa0b2ac9ed2ec72bcd26b48311e31

        SHA256

        a78dc50188f632c6a883dc3b9197997db69acc140141a6b34eafc1f3599a3f45

        SHA512

        25434f701d641519b3ec68769e4967a2f527b163d473e28f97db9f0c2fb012f2f2992638b36129a2c3321ef4cb0005e4e1db6dd735f66f0e5890084f99580e05

      • /data/user/0/com.estrongs.android.pop/databases/androidx.work.workdb-wal

        Filesize

        16KB

        MD5

        6c8b522152f2dea23a6b6d721bde7abe

        SHA1

        0d3bdadc0e4b3cd055a852a5226748976ef7624b

        SHA256

        cc6b53b41d6871aa2a8b7d01413c516e3cc3d04c60b0bbd84949a46506d73041

        SHA512

        fe41ae114ab8caf1c8f827d2c902adc7a0f49002896f4a4391c007bf5684b85e3ae504d445be82eed4aad495e2ac45d8318651fbfbdc2fc23987fcf6758d23b5

      • /data/user/0/com.estrongs.android.pop/databases/bugly_db_

        Filesize

        88KB

        MD5

        806db7c2eba3f1b52be30e83b16649c4

        SHA1

        b08cf0fa2deae4010ac38268a71e3a04833a41d5

        SHA256

        4e996ddfc8d3f019d2bbe497523459ab88098468afa0cd03bfe01afe6e29f391

        SHA512

        c1408d92dce0866c6c70cec076acaa1b71fa33a3ef1323b9d1bc7a8bbda507210cc380f8115b095045497a46f99446b6c566b3333b544b1e56dc016d44992276

      • /data/user/0/com.estrongs.android.pop/databases/bugly_db_-journal

        Filesize

        512B

        MD5

        a4b6ba02b3f64e06e24ac6d217c2dfbb

        SHA1

        30b5de2dda1a3e104705ea93ae06f180a949d92c

        SHA256

        34f7ddd5bc88a0ff15fa8b161a33f22ddf2cd7e83d014bb37fc7d47f68d7512c

        SHA512

        4516a2279ae8b26621c48154ede6ab2d28e720cf868ac060aeef39b7ef9104fc7737ffe5aa33c19711afac96054140d1f268c3b38e32f60a0211a38fa3863c50

      • /data/user/0/com.estrongs.android.pop/databases/bugly_db_-journal

        Filesize

        8KB

        MD5

        5f7dcb370554f050d25a715d686657fb

        SHA1

        132f2320808b42ccf50fa5a2fde9ef36d5d70bf0

        SHA256

        56c91407b3535108ea88be1b3a190d85a64f2b36dd775cbde3de54bc1e5cb74a

        SHA512

        373746d954ad53b273e640d29bf43d05ce8fc955f9cd2eb01bbd2d10b032b9ebff9803ecadae264e72f211aa2edbdff0516136b26e0c33ef8f480f57f5b54a9c

      • /data/user/0/com.estrongs.android.pop/databases/bugly_db_-journal

        Filesize

        8KB

        MD5

        986145473edd9b15750216d0587c6d5e

        SHA1

        152af0dc7a57385e329987c706c8865539754088

        SHA256

        9368ca0d0eb228877e0ef187c884623ddcaf95e145ccbece9e6e751b09b92a6c

        SHA512

        32f1ab89d437d92578f8a87b6981b90158b2d8407e7d072038910a6343dc38f00ecc936df472c9baaa0b85e3a454b4880f79100d56f0a84c9e90cf1853fef206

      • /data/user/0/com.estrongs.android.pop/databases/bugly_db_-journal

        Filesize

        8KB

        MD5

        2ce00cba9f9334b1d2a35dcbc3117c9e

        SHA1

        6e27859ec69577ddde80b7d23af7b0ab222d0bc9

        SHA256

        dae54a1e9fc0cb0fe793ed7d7f949c20b5ee382123d3d4b9e04894acebd6940d

        SHA512

        36202ff7fdc85d9363630a8b96104a550dbf5aee44c69d62e7027d161d38c8b0c4e10c408b1750f1162c78a31c0742243b6052427c47b6a5ebd9d24edbc472b5

      • /data/user/0/com.estrongs.android.pop/databases/bugly_db_-journal

        Filesize

        8KB

        MD5

        45bc30aa0ffc14db0e2188d41a06f1da

        SHA1

        47863c2732d108d153d780aea436a1ee6cf754c7

        SHA256

        4e9a9a29da30bd625c6511a90823565a0ce723d83d533f083f6fe8634b4af59f

        SHA512

        2cd3840f3b77a87eb1a89035eac398ab3a9b535c2c6769162eb32de1a23ccb4fc9fc9af5bec106b15300c277a29e2cc986af761b3cb8ab025109717550d0be4e

      • /data/user/0/com.estrongs.android.pop/databases/bugly_db_-journal

        Filesize

        48KB

        MD5

        846829b93342a9e9a724f23068a5966f

        SHA1

        529e09c5a73c02b831ee0eeb0d726a955ced48e1

        SHA256

        892d9c2460e69b91aed9e391a2f1201d545c456686b90643cf96d591741f42c8

        SHA512

        bec11a0b69f53674f932f9eb261d8c4e409a3e3ef450301cf58a019b0642d53144c8790275617297938d6f944c15a5719de7e7e0ab7d9cd297421e77ad138a5f

      • /data/user/0/com.estrongs.android.pop/databases/download_table

        Filesize

        20KB

        MD5

        4baddc1d411bb22002e4e299a15e6eda

        SHA1

        299d9c01a03d2ae96499fa68fa005cb6f9dac7f8

        SHA256

        5b9b667cfc6f2e4ae3239b794bc717360f32fde7c6f8e08699ef9b21b9e801ed

        SHA512

        c32749066269a62994759c19cc0d18a0487c0da53f1aeb78fc83488a5bc57019fe5b4b16e998e06bfc14741af7114e630e6027ecad0e5283bb5b3c14dd8ff591

      • /data/user/0/com.estrongs.android.pop/databases/download_table

        Filesize

        20KB

        MD5

        67b3f1dd5236b39b3d3fbe8f8242a224

        SHA1

        ef0a448a0487a54a2439dd6580b1efdf4ebe4eb7

        SHA256

        207b799b27f04087377faeb8f3e8e272d99cd9b30ff2611d88817762ba5e3f17

        SHA512

        91fbf6523d3d66466fbeb21ae536cae22718df8bc7f4d843f669e419cd7a3879b85263513279fc458d377f6830c8d57c07734f086e7019c0701d2e38baa10b24

      • /data/user/0/com.estrongs.android.pop/databases/download_table

        Filesize

        20KB

        MD5

        ae4ae92b4d250fa1396875ab1bc4ac38

        SHA1

        2bdc635e48c723c04067d4a5475c443e07e5341d

        SHA256

        cabce979ea0215afe9db6aa3acc815c215482e56391425748e5e7d99230f1224

        SHA512

        e26d397fd670b2b3fc7c7f747e6643b9f221db88b1a530e6e1256918809c409c129912e61c319242d34db6ebdeaa96892776f752c4f915b0e4a5fd632689ed55

      • /data/user/0/com.estrongs.android.pop/databases/download_table-journal

        Filesize

        512B

        MD5

        d1f6946197c8f96b9e9ca3ba37cebdc9

        SHA1

        0533a060f66beeef30fadbd73dd78f20ff66c67c

        SHA256

        ef6ba0a31c1a4769f5e7fae3e035fa3b1c5dc23f8bd61ff6206abb9eeba947fe

        SHA512

        2a6a10d6d149f621fca58c5ea275374fdf4655365e6446bf5eb1292b4ff4dba17ae8f9b6c2888902f235d800c79fad4ababb8e40198bdf1878fc30db2565820a

      • /data/user/0/com.estrongs.android.pop/databases/download_table-journal

        Filesize

        8KB

        MD5

        74c79f2766e6642a19225c724e6769f7

        SHA1

        89526274f65c91e011ccf8030a9dd796de98205e

        SHA256

        0ca3016d2b2492cb8b2b750f4790c9f5de44b41bdcc223b37ec0ab59902c9e13

        SHA512

        3c29d3f15f19ed1c12e1d195b8a92650ec74a8d426508c7bbea91fec062927219516def11ebce27b15497d69d17f328129657c659496c94b9e28a2feb956421a

      • /data/user/0/com.estrongs.android.pop/databases/download_table-journal

        Filesize

        8KB

        MD5

        47938cb36191673842eeafa0f5a44f1a

        SHA1

        840b2a4e0c6892345c3e0b15fb6ec63cdf904c7e

        SHA256

        7c231ace85c4e20df0bed18ac15b5260180abedf10986f379d8a08b61e797a67

        SHA512

        aea6c3f67306132b025f91750c7b4a3d4fb5d81be8ca1662c9546ea219ea41964cd5111efcb794e1b65a19bba12fea1221f260a95297936d82d9b9985671578e

      • /data/user/0/com.estrongs.android.pop/databases/download_table-journal

        Filesize

        12KB

        MD5

        6715614aa62567978dcfd5a1fa892904

        SHA1

        d0e086549042c9422e4d7cf860cfc02f827e779f

        SHA256

        e29bdf3185fae198b79a16667dcfd17a3a4971260eef7e60e98a58f78505cdb4

        SHA512

        a3c0d3979b85a7cd7f3f5928b175e66c82ed83a22b2927e25f3a3a6992e84f705f34b38ece185c0872f6c86fef3dc868d69ff1ef84e5889c84bfab00abb162ff

      • /data/user/0/com.estrongs.android.pop/databases/download_table-journal

        Filesize

        12KB

        MD5

        261c7fb231350de2cb953ac7b377c916

        SHA1

        dd2ea9aa8c3d29826727601e64ccaa24ccfebb8e

        SHA256

        a61473d87f0f1ed163b9934e424e9a1aff184aa296b62551e7f3dfc809ecd1c1

        SHA512

        e7f60626b567a1939f9de226e7c108db6c692c349eb19eaa213353ea5f80073c39f743c016ba4dc7ea1a655851ac804a5154a39e2f47cfbf3ef856464f5c128b

      • /data/user/0/com.estrongs.android.pop/databases/notify_items.sp

        Filesize

        108KB

        MD5

        46bae5e4497ae887667ab2bd22b79e96

        SHA1

        2b9f8c35e5e53c341e3438253882baf98dad5f8a

        SHA256

        7451d77c6b158782a493b0da00585657d20d27b7798898be61b8125f3d4a7bfa

        SHA512

        2e50b315281c38a795408815cd0e0d2fa4b7c3aeaedf70a092dd689c9ca64d716e2e59c85da991b6cf34e1dd01b85652a5f47375511c71a17659dedfee2bf5b7

      • /data/user/0/com.estrongs.android.pop/databases/notify_items.sp-journal

        Filesize

        512B

        MD5

        f982b6e8e352a5216d5ee9a890712097

        SHA1

        ff374b958aa1bcee794d0575cb632cadb2d6209f

        SHA256

        1eaa973d104495965e0a225fb87b1eec98119b19779a2025ae5930ebfc0f624f

        SHA512

        895f36da78a2fb4ed80887469c5059672a6b4a560d6b5d5f55934f23ab460d67b7e977f44e88a5694429333523c599deab29fae78a3a0550969831966e808039

      • /data/user/0/com.estrongs.android.pop/databases/notify_items.sp-journal

        Filesize

        8KB

        MD5

        53ddf3d06b40ae3a7d7ea4ced5235f7d

        SHA1

        b0675757da1c05bed5182e2fc5f655ac40fbaa7f

        SHA256

        af1163b3fd7affd09733a052be2865cf8bda4a67f967e4dd76886f4e21e5abe1

        SHA512

        0aa1721b1bf80b2bc66d05ffdd9b97251f73fd8abf32fd6c621d02085306e55046d906eb15ef98b182ad3a8bf09d52df19428cd752d8d84530c4b559926111c2

      • /data/user/0/com.estrongs.android.pop/databases/notify_items.sp-journal

        Filesize

        8KB

        MD5

        330169c4aea659486a46e081f8391b88

        SHA1

        becc6626fb5414f215eae9eb0f0415de28742a0c

        SHA256

        0f2b1737fc07d04e5191fbbe1a87c8488fe04b83277f9e773c54dc709f9839b6

        SHA512

        725e4abeba65edf1b54f011af2655262c2d1d58c568a592ffe24f8c910ade38029ccfef24c72adbc8eb8d94f3825a4fa88b9aa243bf6942b45835bc9a7de9385

      • /data/user/0/com.estrongs.android.pop/databases/notify_items.sp-journal

        Filesize

        16KB

        MD5

        4d15ddd10f185ee07882f813db421213

        SHA1

        f36648e6b59c404d17e7d38538a509b7ce3ac1cf

        SHA256

        a918fe55b2701d3142736e34cd8312c2696f239728eb308c73f8f804a59c4bd1

        SHA512

        eb8b4b3116bbe0ac3f6e2a68235fce03afe98ec9b801d46550123b9362edc8f0308f75b1c6a9370ad691b8f6b7455f71fd5216c154aaccb7d098a87e55000d5d

      • /data/user/0/com.estrongs.android.pop/databases/notify_items.sp-journal

        Filesize

        16KB

        MD5

        b64e8e767984f2cae09131c5348a5e52

        SHA1

        ec1b2073a9a38d667082f16d4cf61f60c7446fac

        SHA256

        2602c9c2b3d7ea9117abada256bcd855f48354aaf2f6fc36175fc873b62e493e

        SHA512

        c20435609b6daf57b535f3fe54189a08b22dc873dd815b123a4a537547b8127c3729762d81ad19ac7fcaa0f8c4121793af8a84c3579820c48bb97968e96781f5

      • /data/user/0/com.estrongs.android.pop/databases/notify_items.sp-journal

        Filesize

        24KB

        MD5

        3711d5d960cd53c6dcca99d03506945e

        SHA1

        5567999b6d67906b742e0a4c427151edd6dcbd0b

        SHA256

        10688c71f15096afb2af5918de4ba4629f91994d0ed3a1bf42d96ad7cfcb5370

        SHA512

        304171f8a26bd1ff7946391802e854a131295ec2dbcfcded8e7d1e60d1fc9d132c8844052fe6f29b6027d74e88b723e4c24efd180dab51f311e4d3d3bd73369a

      • /data/user/0/com.estrongs.android.pop/files/.envelope/z==1.2.0&&4.2.6.2.1_1696733890506_emNmZw== .log

        Filesize

        303B

        MD5

        45e277c85d323297a907029d016b6f0c

        SHA1

        af94c1b25b4d373fe5337d4c68413b68ef38070e

        SHA256

        867be1b82700b43d7480acb5f983acccc4d1173ff4fe4bbd347cd6b74955939a

        SHA512

        94106686dcf9518b19568876a71d512b1582c9df717e9e6ef88ac4593dfb3f4ce6fedb9dbae644a6106bd32106dda893744dd13cfd7abab644d48f243e697437

      • /data/user/0/com.estrongs.android.pop/files/.umeng/exchangeIdentity.json

        Filesize

        162B

        MD5

        fc7eed78a61bfa860af3c5d6c61c1015

        SHA1

        7230f9e501fff494061b44de51ecc4ba6dc80e1e

        SHA256

        9fdfdfd14510919054b53f15cca9f67273c29605bc04b9ff2afabe5b0465123a

        SHA512

        84e5730f65672242f3c77cf6978990eeff0a1d056e39becb205dc1fbbfc38ffbbe0e8aaedf478195b927583a40c5688fa7b9b729c2e60ae472ebba3c09b206ff

      • /data/user/0/com.estrongs.android.pop/files/exid.dat

        Filesize

        56B

        MD5

        8f5dc003b87b2ca4a422339bcce9c80b

        SHA1

        c50f3dcdae313053a2bb1015073e993afda649e6

        SHA256

        9df9c8df5997082db4e5e04f69407bd9ae54977bedad5b0f81397a7d45d84bca

        SHA512

        6a5835e646c58aad236e4737ec5edb417418f474539582d4b27b77c75dd00163db09fd95142122a17d1e16a012e2eb0b997175c4b35403dee62892f6a6f287f5