Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    497887s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    11/10/2023, 06:09

General

  • Target

    35dd1004737fb01787411a6f527132ee2a05dfaedbb2a3e4d2bd982ad3bfdc4c_JC.apk

  • Size

    2.1MB

  • MD5

    eb3172d644ce7672ef642281ed4dfbd2

  • SHA1

    ce3f68090ed8907f57d6078e9d23486e5db75a3e

  • SHA256

    35dd1004737fb01787411a6f527132ee2a05dfaedbb2a3e4d2bd982ad3bfdc4c

  • SHA512

    1afb34a1a68d61f579e23f1fbfac6d168686f36e5c4acba0d4a7371dde8d94df9c85bdd50772a9509350a58c58744b6038a5c64c84991325564b336a6d599606

  • SSDEEP

    49152:qRjilZVjRGZwHANQI4i9ER/87Y1lg+4BUrFKIpyPA2JvRjcOb:qCFmwH3i9EyYnaUlpyo2JVD

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:5032
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5204

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      825760c2d4fa171e9e6887d0b1beccdc

      SHA1

      6573864f21af9cd821579eee58cee424286db482

      SHA256

      5f0ec0c1a360d0d5b083d473ca20db3db182817d612bab0d9d2323bc04d9242d

      SHA512

      0ab2ae9011357db98c0de556302a8f5ef821f060deceb906dc7fd84eb6ae5a6e9d828ef599393737cc3d0beea56bb87de1009cb90d3678d73a4a1fefa329b17c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      862c87747497fcd84b830622eec9ab55

      SHA1

      ccb2203ca71ca3d68ee5e4427ef48d3461fb5394

      SHA256

      d8ec0f2221d7c6fd3486f5f524d10cb9cbda18ed4b76f77f159e0a00a5463f56

      SHA512

      77f67fa4941b82a329c7f2df1594f43394d9e74cefc2461c37f7da4636b617d63c3d4e2f46779f0f87624c53349d33125a1672fede44e5452ad7ba20e0f20066

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      8042324fd41e502da5392c2a0d086911

      SHA1

      6100c30919fe8a71973d7fc3c5a1bfbc9ff770cd

      SHA256

      549f3cb4ed8481e4a6a079b0cd155d2a6350bbf8b9e3091f09fc1123739d4e79

      SHA512

      b4d6915cfd334ac5c490f1370b06ceaae398936fcdd40c47c9578e4c95bd2d2f7a2cf27f31194f6076dc9eda515ae4f8042a880281d327e743b179c96f126420

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      924f67afb90a18e8d2fc003b6320121d

      SHA1

      42d549fc4beaa3b40d16b119b554448af2363b79

      SHA256

      4a28dcf47d537d5a077afba2021fff79d8273d35906a6e1b4586fa06d0d32b40

      SHA512

      18317d455287684c7ade5ed1d22dfcf185d115f0a1c88521bbf4b68e9e3f0d44b47ae72d861ffaf7947dfe1473967f5a497da601567ec37c44d5ee325dc1ae05

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      adf6082723784327d7d1b34adf974e7d

      SHA1

      b1502f70eb881a1dfe41139cb719fefb877ee37c

      SHA256

      252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

      SHA512

      762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      59e45fd3b3c2a0414a0d2ac149b56ba1

      SHA1

      42d1e28396978591af14ba6c4cabeb926f6cce21

      SHA256

      a67133582f121ff8c37e4ef39a2d98448ff6fcc6662e16514d2aceaddb5d1cee

      SHA512

      912c7f7c036d4dd265c6fc1735d56d34e765864b5a0dc090412553142aaf6c9dfd4242c609b7e6bd696c3ba4fdb39af17e53605cd7e18104aa5540007423330a

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      570199889aeb3adb480bbe9e36c50e5f

      SHA1

      38f1c64fc4908f9344af348845e67199f4d2c083

      SHA256

      ea4e574753888c9a84add0f83b2d29725f242a16417a4bc7bf89073f40ae864e

      SHA512

      80072889fd12f9aa7df58905475f0a566553c4599be4e2c763b9b9ce85136e4a2a34ffcc5bb824c5da817788b7189ea07f3110426fc2dfbd0a7f78dade42029d

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      7d6aaa48a51bac4fd62aabd0cc352c41

      SHA1

      d4ef8a2420a43b5d7132b17e645abd4178d46bed

      SHA256

      c28083a63256ed4daf32022a4f354c8a86a85538db33993328ca5ff5e3d6c86e

      SHA512

      829b2f00067e4a47b5513cf1640f01ba762b23f8a6a190883c442dea686acd09121d14f4e166d7de5cfc8913e7587ac0cccdc0c5ef4e5aae0ef93c939d4c2b17

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      ca70a79c6632f928341b0490a1ebf897

      SHA1

      764285c05d5f16c569217818a744405e57b1f142

      SHA256

      f01d8f04c6fd8fb8906ec4edeca9628a9a6c7df3e7c72f3e05e15b37d97c0ced

      SHA512

      3c71043f5a3ee57d55988666260777f6dd34cf30dcb0c49411207c3bcfef1d008d3e630216e4564de4962c068c9db200a7259a438abbbc49fa8829bbf717e944

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      fa01e9e74569e94511540c121a415531

      SHA1

      c6f53ce6879c928373e8380c708636026115a5a5

      SHA256

      ac42d5b6fe466eabe950505da64ecb9213ed8ab949fd5aa237d9870449158157

      SHA512

      7d49cc5f96979823d0ca0daf0b35d32502479fd52fed9e6ccf4ee311e7781136850f69fcae1b78d1a189df48b974e5e6b7e0ec95bf537f2fd8dbde76a22afe3c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      6f486b8546e1a4552e46bfba0464de2e

      SHA1

      02cc4cc82ced5c7e88ef2a3611c2ac7a383aacb4

      SHA256

      d16f73290f56a1a8e0e4ad147b6b935ee52d9dfedd3db6e4ee395903e6ce8ed0

      SHA512

      459bb0813789c75353fb2ed49e93a1bbd4708aa11b3a3dc9982b7728e0dd5ec701a26d4eb392c7f736280467ac3342e73dffa020003010cd0795a9624ab0e3cb

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation3059297965962457535tmp

      Filesize

      90B

      MD5

      d11d78b74619800e2d3d0e27f0bd2619

      SHA1

      79c936041a9deca25c57474394438b9b554550c9

      SHA256

      deb712510be82b38628fb4965998f56738dc571b10b1716227cd99e26cde5c52

      SHA512

      7d92ce0ecca0e4375f659085bd0b28cb31ed6c98b1980593b0dd1091e95395d5c79f2d42d5be03ff8efb165406d83c4181418ff082d412422d551ee0385454f4

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation4016219642049191699tmp

      Filesize

      567B

      MD5

      ce4e598a0a119f5b4b4d8d77ca1deeb4

      SHA1

      53a6f9d4e9e88b821ccb716fb3f18c9f49de6a7a

      SHA256

      d7f9c9f2f098b778b14c1674d1b9c079d106646732d0808464de4abd8b867378

      SHA512

      ee8b9f45829734e54f852c6adabd3b484c08699c08fb574b0d50da438afa5d10f7e581489a04ca03015f9019fecc457e9144ba18627c0d097a827c526e21b1a8