Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    511470s
  • max time network
    139s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    11/10/2023, 08:00

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    eb3172d644ce7672ef642281ed4dfbd2

  • SHA1

    ce3f68090ed8907f57d6078e9d23486e5db75a3e

  • SHA256

    35dd1004737fb01787411a6f527132ee2a05dfaedbb2a3e4d2bd982ad3bfdc4c

  • SHA512

    1afb34a1a68d61f579e23f1fbfac6d168686f36e5c4acba0d4a7371dde8d94df9c85bdd50772a9509350a58c58744b6038a5c64c84991325564b336a6d599606

  • SSDEEP

    49152:qRjilZVjRGZwHANQI4i9ER/87Y1lg+4BUrFKIpyPA2JvRjcOb:qCFmwH3i9EyYnaUlpyo2JVD

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    PID:4457
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4595

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      524bc77ecb29727b7ab71b77899d4cfd

      SHA1

      327940599bb508f68b2a0034e325e3ee75371698

      SHA256

      a3af2dd8889d50502f1f71d6c60272380df7ba936d459178f14c1e81bcfd8daa

      SHA512

      b824512209ea2eaaf7e1f9a7db063d20e4ea1c1af2916237a85cfe0d17a286822a51d5d298682c6eb45d5f4fd9607f6efd2ec8ff31d8ea47a7ea650bad5e5099

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb2ca817acf1ef16b33e82c4eb2a7d2c

      SHA1

      a15470ac44bb4cb6b8085fefd0aad8eb7db2027c

      SHA256

      97cc7706f26cbb54b1076dbe4b1bebc0ed70f4514bdcb96dd2f5e3b23f8e5b02

      SHA512

      8733841b96609398c562a542717109269bb0d4c177a4925d86e80e04a3e9cc244757454e35b9b023b4a116cc96d6f8a77c2fa79b397959bcad3b238ac236440a

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      74fc80b41e5f8822bcdcd9ab04b8c72a

      SHA1

      9756632844be3eede315c988a78fb485f617041a

      SHA256

      5bfa17c6b463c4b4eb32336e06b3f7eac897fd2eee301d3a609ce4623fa6cfed

      SHA512

      bce1540d41a9c7093526ae99f11ccad45028539c7e8c02d0860473684de90f7f7b5a3a9caf66bb8f37474322fde0481e38d18dcfb459514f659c28c22f80deea

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      8445a4671f7df2c614e9e6baca3df923

      SHA1

      83572036b194ddad98b1b87f424f874f29d81e60

      SHA256

      67c4e969f5e0e0728f89cd41f1ac19dd0bb440f7df0386192d34cd481303905e

      SHA512

      d5b382b258fe6cda5d57341e395e2c10ecbe9e1d032779d4d143755e9bd3dd1c53211529c0af5d357147ed2bc6b62a87a044baf3a7869ef56d322442616d4870

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      de82e2c94d2718988804b035a46d17b1

      SHA1

      705f5ff19093ad209f2a666085d6ccaed3bf58a4

      SHA256

      29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

      SHA512

      68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      3dcc04a81a02a3625813c96d0191464e

      SHA1

      e3dc5ac6d6e333927d546e7ae0a7451e56b6a88b

      SHA256

      7a18fe5757d69972e133949961e78fe3faffd28b648e32b136ef9025e7e0112e

      SHA512

      d6bd75a883e2921268f2204fd22d209fda2eead655effdbb2df3ac4e44a36257d7724944d8e2156dd370995f7caf1c4c2d471d0c6bbdbcce2c833df1a0d5e883

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      d45666deab70ae182de27e50a64c0bd4

      SHA1

      f778adf8012b0e790383c6d9bdb92f2fb177d337

      SHA256

      54e8fe060f44606c9a2bea5cf7176143d9a14b747abbb34ae36cd27e2f89187e

      SHA512

      a7ea11379794ae0c40c0263704aad73e33be322223bdab7d62dea962f46079c4f5813022f7de73964bc1f6251068973dbbe378a145f0075eafd9a3916d9f3044

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      3afc00a8ed5e322a00ebc5af6cca3f8f

      SHA1

      53524b265f9b42c569172cbd08e8437b42f8f21e

      SHA256

      14ae9bc58f3ed5e98125c03c73cc26af006fc54ddc80720ac11b3fd5f0e468be

      SHA512

      39b4bc7ee3721cf1c3074d4b9922b9037057d924aedd36f93aca54e477153585431ab8353fdab2e39b59d22445ff9f9288ad5143e3f521e665b5ec903ad463bc

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      5d433b0e5d35791dbc22e6f2447332db

      SHA1

      23426a3b66454ac4dadee8e5e2f0638a78e31f4e

      SHA256

      b75d92e9caeec50ca0601d26d93bc01a6ae56af0b99bfbab92be5e3013d1b475

      SHA512

      5d109c0b75edebbf39fc9921625e4c4a380eb0f362bdc3b101dabca57060e7964a6b8ef6ddfcf224283494738d081dfd480de0278d938d09a207361e073485c4

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      3b9b10eece7cd3cb555c8fdeb9a81a95

      SHA1

      353ab2a2b60b106f39aff41e01220332277a3493

      SHA256

      bfb8127f5b6b925cfedd68c972b23cd23392cf2f3abee26390c622ac80886b95

      SHA512

      a64e31bbc61c0e7e63bfc6866f2fe142695f926d28d4b6c7a84de7fbc2bc4e491d2459057a1e0fee4e7057ce91626c88a8fb2d7470ea2ba057b37d73a9c412c9

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      970d4a1c25d7b6d2ff6f0fedf7d5f540

      SHA1

      aa179b999270c4bd87f5ffe0e226406ffbe067f2

      SHA256

      d90644861b71b669f29ae943980af60119f8e0b5ac423cc2508358b28be78753

      SHA512

      e79be83a8264862e23cf651ea953ce2f36e50ad34d1f3a6cb68fa3677e3a00e1fed51ecec66d3896dc9bcc2e95513935460dca21362a26fb9bfa41f645992311

    • /data/user/0/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/user/0/com.MrXnxVip.global/files/PersistedInstallation1871064361041716111tmp

      Filesize

      569B

      MD5

      198424d4fbb8fe053d20722de3082230

      SHA1

      a7cc3dd9dee00b9c3c615e4cb088ed3c9fb14853

      SHA256

      7cb716d8c505e95266bfa70e1d6a3ba1f42679190d8c3f9b7bfe6a033f4da69e

      SHA512

      e7ef88677944ae9344405e2f9d67edae2b8286ccf516a1b04ba33f8feb49b6e094fd59f75e5cc415e820d66d5624cb89d45802e14cd905cb1202920affe716b5

    • /data/user/0/com.MrXnxVip.global/files/PersistedInstallation2734215199084350279tmp

      Filesize

      90B

      MD5

      c397a0e36daae975cdfcce8d22e530df

      SHA1

      915fc0dc12077ef6077545e6ab3458712a3a1b06

      SHA256

      7eaca75b8d1d1228de31d651fb46a04a7930703788bd61f505ea5278f55a07bb

      SHA512

      0b1fd1ce959857515669b872a68c496b3c93dc137c64bf850f1676db278792b2556a79a0df3b6e9b51500f38506a687f623761f34b1247b956091b4459fa1d29