Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    511317s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    11/10/2023, 08:00

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    eb3172d644ce7672ef642281ed4dfbd2

  • SHA1

    ce3f68090ed8907f57d6078e9d23486e5db75a3e

  • SHA256

    35dd1004737fb01787411a6f527132ee2a05dfaedbb2a3e4d2bd982ad3bfdc4c

  • SHA512

    1afb34a1a68d61f579e23f1fbfac6d168686f36e5c4acba0d4a7371dde8d94df9c85bdd50772a9509350a58c58744b6038a5c64c84991325564b336a6d599606

  • SSDEEP

    49152:qRjilZVjRGZwHANQI4i9ER/87Y1lg+4BUrFKIpyPA2JvRjcOb:qCFmwH3i9EyYnaUlpyo2JVD

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4147
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4265

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      31f76bdb3f3128be257e1dd3264b3157

      SHA1

      aaaae01cced5193849219403f0c14f5dead90ee8

      SHA256

      d1925a42def0d4137faa3de5a536008e086367882cdbd5f6250a4f41cee55e54

      SHA512

      bdea6570e500a1d952e1e0abbaede05b99ff4363ddbb20b5a768fba66179e9be05083f35ac9bf7de13ab392c5451daf6d4cfa96ac19aecaff2d214280a63a91b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      1cf8149ef488257b99d97ecdfa5609f8

      SHA1

      0fd7eb153f37cdc9ad30deb0b314b0513e98724b

      SHA256

      e0ceb3f0cd53397366557ffdf91491ed735e9807d8d0ef5383b955bd8fd7f25d

      SHA512

      a4c2f58318bf40dd35dda3b6c1568e7cb46d3a2f87c1b391e6306313d1a6334272eaac8ce6a9f88784330b1b76de07b7d33a7f8ae7bd7646a0f03be152804256

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      8cd80fe53b041c9afc4fc0835ea3f5f7

      SHA1

      c69960608e0b086ec2424a0dfb2bfa1732a43328

      SHA256

      829e39c634cb63ec9a34a60b58ce21e80fa354fccaf803d01706e45e59e1d003

      SHA512

      86d81299b651b4314628e740ff49b691e9d1a21799fed9d9cac2b92bb8f0853920ade2a97bd888273c614610c9b4c688b29ed48e45a1ca6a375241a3544caee7

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3baf3a14a1ab2388714a9ad1534bb943

      SHA1

      edc59c2b917159f6b3885cf57c5243238e7f26a5

      SHA256

      4dd507d3f8b5ddf90217b6edcba779228f424c7ec6852487bed035de113278a0

      SHA512

      5ea60e46366cfac97dce0cb3c7079d1dde39d030f73b4542087c6ee470d527dfe31f1e21921a11b4f887fbe799b230b2344e9b1755cf5abaae7f5b770da4dcb7

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      f8316ee7710f74d88c74826a68956850

      SHA1

      1db7e4df296687b0dbd576ee5c1cba0b83a76094

      SHA256

      2f2599065c76a99849ccb226cf8c3682bfdb1ef27967882cd896af20160e07e4

      SHA512

      28e7a73c148fa32ecbbc315b498eda17769983d9ca8e8f97d29c9224c55422e60d935c2c7c6867b98540014b4fa38995abe4a3bfd567173fb6716096d336fead

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      c8771976aa8026a26012a53b6603b310

      SHA1

      fa9574cfa0a2e59e5fd16e50c8d7374440a520aa

      SHA256

      c518358a69efe5523a3ea309f34cf16000c851dd5bde37d6283d6a82526c0d58

      SHA512

      0e90b671156956148335fd0207e972f1deeeac68106c61e50463d0abf27cd6129424c0673ebb4bd0433cbd808f5876cb2547e5a626aaf10b89185daa98e6f105

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      519158c38d631198909e9c0b95357fd9

      SHA1

      2711b6b772abb36fdb468433ea7212a3cec5e830

      SHA256

      bc595419e82a48924d69ffc1f6dae01e7e5982c7a3b2162e74b523483baa6b64

      SHA512

      e07415f577b5efdb2cced76f4d7629dcf1b553008489c0e2ccd921c0b5e4ecf3dfb8c997ab76f08a7465e3dc4beb687a1b87c4f99f1019a6d977b806dc7a7f55

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      8bfc15a141c2964ef4ee35aed5dc3717

      SHA1

      5fa0e327c9934ba3c5e031fa37b1d3c060ae10e5

      SHA256

      d8a663348f0765817089c069a0fdfeca1f648afc2cb7db4ca9cd349bed1f673b

      SHA512

      b4c7989bad91afae4fed16abc03d2a514a807fec79475d85fc15f978ee3b16c45f8f99facf0fdced0f7743f78fee68fc9682dc66b4dc69beb40c5d21d2235e04

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      c6bccf4cc15cb2984a68683df7608db6

      SHA1

      c7db9394d68f0e42ddd3addd7aebdf5e0a0c59cf

      SHA256

      a98748cad641120cf6e277ad5ab9398918c662f4cf2ea82c6003d30e81d4677c

      SHA512

      ae06a10ebdff8c1bfc1cfaab9fe53b7dc4cb24d1a5d675ff25596955c3b5d9dcc5222dd7c03c388e5c9e08169c5ed8a703dfbbe3bf5aa9c66d26093e691952ce

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      64e722f352620bb55ac470a63db50cb8

      SHA1

      20dc8ccb784ad3a70f543dc229fd6930d51d0e45

      SHA256

      d90f77eeb2d8b67171b0cc6a14a9694b5433e604fec4f6565ab10e9d9a98f15d

      SHA512

      1475415ba3f7c9a749b3beb72948f504ad8f8a696abc30e8d47e758f79454fb47f7c096b3a9e03a7c8391d747dc7bccd3b80f440ce26bf47912081cd7bcd7df4

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation2425399437733168946tmp

      Filesize

      569B

      MD5

      031199fcd883f12878d3d62abd7a5e18

      SHA1

      1e67aa60d45bad3c062583b029a7bc27c7213661

      SHA256

      998be024aefdb7ae2bd0f70697b5b0f11c31a4d8d852d175fe9260903ee500d8

      SHA512

      649730f9ef573037bd5820d97eec3bdb89b1efe65ea948835e25e704f1ec0232b22ad2805fcb88407237f6bfec6e5ce9d5bf14bd5dc01f3112fa03ca948ca223

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation5862006269382736972tmp

      Filesize

      90B

      MD5

      89e6f77eb7735164160e2f3e9c92e558

      SHA1

      a29ade55dc93097aef6aee204be52d6be02465e4

      SHA256

      8f812c017b074127dbdfbe6a8f923600ea5f9c2eb0f215becdfda7d482b85652

      SHA512

      0ef8f1ace49274e4d013a4e0391f0b21a9aa5648b421a4a2ffb3e6976e00af9046dbb19bc0416f9e77c19ce634390be2af023fde152a78b7bc295cbbbd89d2a0