Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    497860s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    11/10/2023, 06:09

General

  • Target

    35dd1004737fb01787411a6f527132ee2a05dfaedbb2a3e4d2bd982ad3bfdc4c_JC.apk

  • Size

    2.1MB

  • MD5

    eb3172d644ce7672ef642281ed4dfbd2

  • SHA1

    ce3f68090ed8907f57d6078e9d23486e5db75a3e

  • SHA256

    35dd1004737fb01787411a6f527132ee2a05dfaedbb2a3e4d2bd982ad3bfdc4c

  • SHA512

    1afb34a1a68d61f579e23f1fbfac6d168686f36e5c4acba0d4a7371dde8d94df9c85bdd50772a9509350a58c58744b6038a5c64c84991325564b336a6d599606

  • SSDEEP

    49152:qRjilZVjRGZwHANQI4i9ER/87Y1lg+4BUrFKIpyPA2JvRjcOb:qCFmwH3i9EyYnaUlpyo2JVD

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4131
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4253

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      9b312fe9b966fb9c2dcd6e9cbd723870

      SHA1

      127ab7928d88216d9e10acca9d89571b445afbeb

      SHA256

      d1251883909714639bfd18bb1425a1c9534d6173dae55a8c82b9c1eea908d170

      SHA512

      18b230f0c539cc84ed57a82d94a906de8c81aecbe3f9d4192ee5d00b0e1be911b9b2424a2cd16c801393a6e9a08d89be7e68921733c89238516c9e215cba64d3

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f0f17f94fc78d4e9acef681188532ee3

      SHA1

      1b54ac5848c4bb7f83f093f9111a864b6343a2c4

      SHA256

      8f5a958abf9ec66f0ab77dfffaf3be04332b3f9e6ca2a3dbbcb4c8039e050e97

      SHA512

      f684982516237612c4b95517936de8f4a447f6315b7ba5e80dbbf9b92ab51c48cb106e9b17c3324575a080391ca3166f9d52ed755cde7ddcace372be7aa76a5e

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      ff5873fc9e203b9835c4a2dbe5a7bd44

      SHA1

      8013f3e927280895242d85e6e942aebf96b07d06

      SHA256

      b41916c4f00ae699cc131a24154beefcfb44d3aba7737c123b90adc1d6373476

      SHA512

      a96174fc489e418949097e71a25918ba184db24fa42b7f38915063093367dd15be9bd31d3f499ae3aeb4ba8591c8d3b78814e8023c9a0a472bcfacecfb04c06f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      245065be57b3741c58a57de3656504e4

      SHA1

      a7d42de60018e17228be0b511a05205cc46204bd

      SHA256

      af2e69f7fa83e0de5418b9ab7b85f88d18e168d3141683144351ef0d5ae53a23

      SHA512

      3c342f38a479cc4e08facce7d94aaf007fec6bc12f46de171116a3e54cf18bc0fff9ae63a75895a4e26b66db1646558830260b04933662a4817adaa54835bc87

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      df5bf4a1720e14e5abb7b87f33d1611f

      SHA1

      8aae858c8caccaacfaa4bc34241dd760855f500e

      SHA256

      773cbb9ea8612b4be03465ac472fe037c4aa2388a909e5b2c0ab2e3f7f4916cf

      SHA512

      9e650b39e3cb0efb061be71adfbc263001bf0e1cde17a89eb5698d6a1a98c4fd47c78e3c1d4ef3c30d07e8c17c37e087b5a19ecb36c57737401364b2edd65515

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      8c267881a7737755e1f7972583691608

      SHA1

      acd6c3ca14f53731943702ae416dfbbc63298933

      SHA256

      fbdd25644d6d77f7e5323557cf997a0ff0d9dc6a8af184727a949d583b004676

      SHA512

      47335522a03e47b0e696ef1b6a72523388e0295808165dfad1d5a7669505303cd5308a28a670d2034ebea719a05d965b5f25b5e407bca87a22c504dbb6a7c3bf

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      a27f7e64db93b78c32c9f663d0aff99d

      SHA1

      471b9ae52d20c510569d5d9545f31bafdca4e3a0

      SHA256

      6d2046866e85824b82f19074602d121f82dcb0d9aae25fdd0f76bdf92162f486

      SHA512

      65d36c124c29ede1dc97440c26cda0566c8a1fb08451d3c68dd111a9f53aee0158ff53b18135ce6c211f84da795f99bfceb08ba5e1e3e6997fd0ad106bb48e65

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      e4fb0aeb1cc21fdeefc0fc9b365eb76a

      SHA1

      e0c13d179926a168f2651d1ca984ec85c83e0f3f

      SHA256

      a31546dc6b004e995b1a34e54f829682493096ef0a812466545a94376b12d24e

      SHA512

      0464915ada8008c2a4716abcee202bb705c7b7223d998a1c2290d3953d7ab72d16f8253b3576e74d95de7cfcee4f99222e34b26839e11833c703e612898dfb44

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation607629719438734038tmp

      Filesize

      90B

      MD5

      74fe7dbaec2a15c50d9a103c92281bb5

      SHA1

      343334da6ff6e1db488275008daaa4d8fc3dedea

      SHA256

      3e1141e665f4db89ada2d728dd95558e2f91f75981f4e1c949e0cdba1faaa9e5

      SHA512

      e978a7c508ac4cacf80cfb57c54ad4523786dcc4232b768206e52a9ecd68bf9b3c92b0dbd4890e37bbf401fc63fd3b7006517dfbe3423b4cd9417aff2bd84982

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation6958111712755695398tmp

      Filesize

      567B

      MD5

      4e0f812f6410c5113453c64845a28cba

      SHA1

      42a1d1dc2e197598fd893088c3180da3453181c6

      SHA256

      9f9c068117386372e310eccb0e1acf28eba1b3b8d511c57701e35f6b7a87bd8e

      SHA512

      af3c66721aa7639b2ca6bf0fdf64b334448ae316ca869aaf4f60b4191194ef95859e455eeefe6e4c49c14fcf957e7e957a134599e96abc5a637dac5ad34fc65d