Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    667682s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    13/10/2023, 06:45

General

  • Target

    Angry-Birds-v1-5-13-Pdalife.ru.apk

  • Size

    45.1MB

  • MD5

    aafcdbd602beba2a0729a6d2672c8dcc

  • SHA1

    62edede9c9a61420d7f96977fc525ad4a439b76b

  • SHA256

    f7108c91690116c2127966a4627d62d62b030d6e701ccf713f3b1eab2839e0e6

  • SHA512

    7fbc5b892d21a6264c257a108fbd14e5c2171c5cf7b547118d8aed31033200dda1a4dbfec5619a9ec1be433ac3624e61b21a9e92135cb8dfd37977a6484b1da5

  • SSDEEP

    786432:Wx+x/0KSEoX/KUEs0r46VqnPtWvJp+O8mGNXE/2UJoeQ6+tZQoS1lexvM5l/AD:SE8KUz006VAepqdCaqRcE/6

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • com.rovio.angrybirdsstarwars.ads.iap
    1⤵
    • Removes a system notification.
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:4183

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/.YFlurrySenderIndex.info.AnalyticsData_7VB6Q86CTGQZ3H9VW9SD_234

    Filesize

    87B

    MD5

    0788872e8b3c35531d7720dbb6b72319

    SHA1

    99c01e16504d43355b2e2d1b1e7261a7268d59bf

    SHA256

    c109e87711a9e5902f6392d7c7996533b87705ca541cef262108068c2cccdf7d

    SHA512

    2b6a670176e30d50dcb554de4a7f885df94bdd5a971b681d9db9d25ccda257ef59f8c4b4e84c64d84f2a09d8e8a861da59c76e6dc14b173ca659783e303ac9af

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/.YFlurrySenderIndex.info.AnalyticsMain

    Filesize

    72B

    MD5

    aeadf4616651052f7bed7247ecbf362e

    SHA1

    539533526b33e1eb8fe4ae035ca2b4f701dd9cbf

    SHA256

    5e6e7957a8cd1d50fbc259aba0832c62d7612b0d41bba91a07eb39e39e6f73a3

    SHA512

    0c6aac5d9eb79e25fb05e0c5e666b256557820369b841a5801e9a57772b88b4f86a78ebdbf701f5ff9072aa1fc3f205206b14847661c9ff34b9ddd658ea5395f

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/.yflurrydatasenderblock.3b5ad655-1148-46f0-bc8b-22259cc9bc88

    Filesize

    310B

    MD5

    f67efa9a2eb43a165c2cf4ecae0441c7

    SHA1

    91b781a1ea184a8afe63ac9bca52e2cee925c91d

    SHA256

    7897bd6854d4ed0d01eb3247e1a62d78919e96f931622ea1dd17473eee39be6d

    SHA512

    fb01c0d49473af5ae4eca946bd13162fac4dd44b624bc3915623e8460ba629ecf78417142da609e413896888395214ac25111e8084dcd0f548e4c6b149ceac83

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/bi_data.lua.tmp

    Filesize

    320B

    MD5

    f6c031b3e36a41b63743a07623197069

    SHA1

    364d94db97fb0b8f0ca2ab88a7fb7e4fbccb040f

    SHA256

    d31d7e9bd944f294dc5faf71ec977a03359796c3f39e01551cb3235238d49e0f

    SHA512

    60a06b645a5b2fcd75a6216a10a48405324de443ed45713d6aaa3ee18b98903b497bb4dd0954b771ae66a63d92204d93e218d46945bde1f2fa12e9f027d56b97

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/cacert.pem.tmp

    Filesize

    250KB

    MD5

    9d8c2e9a93881cdf1f2a7fc3d01a6318

    SHA1

    76c94151f0205a933f5ebd6713bd728eb3823762

    SHA256

    e78c8ab7b4432bd466e64bb942d988f6c0ac91cd785017e465bdc96d42fe9dd0

    SHA512

    d79fccf1196fcbc7867c6a4a1dd21b270500e4f6359ff4c40eadad1a37ff3a4c545f5e37fd0906c1ac76c221fb6dcdc80e17520b44ec51e98d688e3f125e7833

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    16B

    MD5

    a0a5384d9e94021d8a929957289a138d

    SHA1

    0b3755445e18278916858cd95e0c0b5982508d27

    SHA256

    6f27602b3850e89dc076b9d47fa3353528527ed9be9b62862eb758a6b96fba7b

    SHA512

    9bbe86b32da5a6b03c53cf341304b7dbbaeaa3efcbf9e7cbda477baa65b68d1fdebeddeebd7d9ac3b4a9cd46389653c9938ef577bdfbce60dcc569cd9b94efdb

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    96B

    MD5

    14d21d9518c4b793f0a867483053c1c7

    SHA1

    76d1af1e8150ff0a4247f23322f378e42746428b

    SHA256

    147c79578206e5a77043118f3de42e2050af892456a0e001fc82ac7a59632c11

    SHA512

    f34acee8100d064e75356617bf90f91fcfa008a9fba3db4e93c92b2db8b31ff1df61676b79d5f8799c2f1417f0bc6e9b73e7954249186d03af2a58944b0b1d5e

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    6KB

    MD5

    197f8fdaa349acfa3c66dd3ca2eed3dc

    SHA1

    dc32734843ef39edd4bbeb58cdcc1b46cad4c668

    SHA256

    0060311a7ec6205be00c8721b99092dd966138ac36eedbebe9da05766f309122

    SHA512

    a60e9392e637686156d3eb90993335c0e48b9374943b96b8c031009afdbd10c5183d8cf4723587e8f51d8fdd7c73ddf0857cbc39604df3d58175fe14e75df3ff

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    16B

    MD5

    67deaccb3ae4ea40f149a964db38936c

    SHA1

    55309309beec753c6e23fe2b5220bf865189a6e8

    SHA256

    9705560a6f55b0848e715ba780a16b3ce6b2e186e8f44cd16643be07647c14d8

    SHA512

    09a42472b63f410ad31af6b5826003b0fa9cf66901a65a22a9829884fc4f31ba849921e9f73d77a86e956da4238f46f8f06cd0aca5618976edc6a10d846f757c

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    64B

    MD5

    d7dafc9c3437a2d1990e7903577993e2

    SHA1

    19635d8dd092340628f449af9e5ac48b817cc927

    SHA256

    3da095613a603cdc427dd077ca5926d45610619bda67fcedf6198e9c03fe5e30

    SHA512

    2ef44699fa7d74f662dc0099b53c72493a5726f94fa75e2a8102489c7784a530b1c4f531111abf672fb632eeb3f2c59b5425f1b8c6a0291abba06ebc8c0b387c

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    96B

    MD5

    cf8d2457f50a47014fe70bb73bb03446

    SHA1

    2e89c0bf4c933b538736570c39e9410f18cdb24c

    SHA256

    6b2d72c0c9a527767d80c36268c047db3c95fa135b9807ac3fe6e1ae82678f4b

    SHA512

    1825ca71057a07062fb76a59d0e388706d5659aab6beb70bddfda3b1a6ddf557c3e19f31cd573b1b39f715aee8f0453516bd3ce032d4450622e2271ffb4704b8

  • /data/data/com.rovio.angrybirdsstarwars.ads.iap/files/settings.lua.tmp

    Filesize

    1KB

    MD5

    ac100650705c0bc52d383cf6dc3c2759

    SHA1

    c3ff996cebc364bad5b6ca103cf70a4d5417a0b5

    SHA256

    c3401a713c850f23c426a4580952780673fe5d0cddcc99d42a1176cd943943cc

    SHA512

    84bc2f6cd7dfd2ff981d2aae2817573c4ff0ab82ded36426f1eefc1481ab9173d6c324cd16ea831480dae1bbe119452da70fe4903c01992cd0757ae38075d66a