Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    667693s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    13/10/2023, 06:45

General

  • Target

    Angry-Birds-v1-5-13-Pdalife.ru.apk

  • Size

    45.1MB

  • MD5

    aafcdbd602beba2a0729a6d2672c8dcc

  • SHA1

    62edede9c9a61420d7f96977fc525ad4a439b76b

  • SHA256

    f7108c91690116c2127966a4627d62d62b030d6e701ccf713f3b1eab2839e0e6

  • SHA512

    7fbc5b892d21a6264c257a108fbd14e5c2171c5cf7b547118d8aed31033200dda1a4dbfec5619a9ec1be433ac3624e61b21a9e92135cb8dfd37977a6484b1da5

  • SSDEEP

    786432:Wx+x/0KSEoX/KUEs0r46VqnPtWvJp+O8mGNXE/2UJoeQ6+tZQoS1lexvM5l/AD:SE8KUz006VAepqdCaqRcE/6

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • com.rovio.angrybirdsstarwars.ads.iap
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:4466

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/.YFlurrySenderIndex.info.AnalyticsData_7VB6Q86CTGQZ3H9VW9SD_234

    Filesize

    88B

    MD5

    fb9e8ae7592de314e1e69433411232f9

    SHA1

    d891cf1abfe7ce96dbb5b33380d783d44f335dbf

    SHA256

    6667320c2d31f333d168cf5466be8d7a35e7644d5f84019dd5ffc78457ef1b21

    SHA512

    6040b7268f181d6a87bf381111f0026768864a7fc7f72f4019e01763c8e82b01c7badb6d45641a841e40b4eec9f7df33443a18208c61c0a1fa42e5cc5abb8178

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/.YFlurrySenderIndex.info.AnalyticsMain

    Filesize

    72B

    MD5

    aeadf4616651052f7bed7247ecbf362e

    SHA1

    539533526b33e1eb8fe4ae035ca2b4f701dd9cbf

    SHA256

    5e6e7957a8cd1d50fbc259aba0832c62d7612b0d41bba91a07eb39e39e6f73a3

    SHA512

    0c6aac5d9eb79e25fb05e0c5e666b256557820369b841a5801e9a57772b88b4f86a78ebdbf701f5ff9072aa1fc3f205206b14847661c9ff34b9ddd658ea5395f

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/.yflurrydatasenderblock.e43e706f-dd42-416e-a893-bf0dedf7f16a

    Filesize

    314B

    MD5

    7e0b9884206fbdf44b123766824e9f2b

    SHA1

    6c566a38879f32ab4a355960fce0a58d812e79e4

    SHA256

    246cab0466d9d55489779286da9b252af3fb1e63607d4ed5974b7b5c164823e7

    SHA512

    559a9b10e7e1c6bfc4e476eb29be01e2020bbf13d80b56014cc7570f42d889a0aeba19926792843b06f67e6ed7e222b895091744e1733e0fe82db6d26320bd8a

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/bi_data.lua.tmp

    Filesize

    320B

    MD5

    223df52d50d7ade718b22dcb1e20bd92

    SHA1

    32b4ec4c8c5ebcaa348faea3f51e5905b1db7fe3

    SHA256

    4f212e10f667bd842a4a2aeeb3ee32b4546499e01eea3dee8705a9599ab78735

    SHA512

    5181cac9c17b480449e73762ec607840f989465a8df0d63c088af7c74de9d6e89dcd73688210a2a385029e049721e1254d1cf375ab209e98ac2dab5813ba0897

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/cacert.pem.tmp

    Filesize

    250KB

    MD5

    9d8c2e9a93881cdf1f2a7fc3d01a6318

    SHA1

    76c94151f0205a933f5ebd6713bd728eb3823762

    SHA256

    e78c8ab7b4432bd466e64bb942d988f6c0ac91cd785017e465bdc96d42fe9dd0

    SHA512

    d79fccf1196fcbc7867c6a4a1dd21b270500e4f6359ff4c40eadad1a37ff3a4c545f5e37fd0906c1ac76c221fb6dcdc80e17520b44ec51e98d688e3f125e7833

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    16B

    MD5

    a0a5384d9e94021d8a929957289a138d

    SHA1

    0b3755445e18278916858cd95e0c0b5982508d27

    SHA256

    6f27602b3850e89dc076b9d47fa3353528527ed9be9b62862eb758a6b96fba7b

    SHA512

    9bbe86b32da5a6b03c53cf341304b7dbbaeaa3efcbf9e7cbda477baa65b68d1fdebeddeebd7d9ac3b4a9cd46389653c9938ef577bdfbce60dcc569cd9b94efdb

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    96B

    MD5

    14d21d9518c4b793f0a867483053c1c7

    SHA1

    76d1af1e8150ff0a4247f23322f378e42746428b

    SHA256

    147c79578206e5a77043118f3de42e2050af892456a0e001fc82ac7a59632c11

    SHA512

    f34acee8100d064e75356617bf90f91fcfa008a9fba3db4e93c92b2db8b31ff1df61676b79d5f8799c2f1417f0bc6e9b73e7954249186d03af2a58944b0b1d5e

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    96B

    MD5

    04381dec1b3123886b7dd1629ed4e45e

    SHA1

    6013700da891f5dd8711631b735df0eade555cd4

    SHA256

    e92d90a7d79ea95ce70f2e2f0fa79766538ed374fe836ef880b3245137da6b37

    SHA512

    ebd2871342141d446e6039d21a7d93c2de0790a2443df53729c2b0849fbd542f44e2df8eedf1b86f1df3d1c29806c74357a06c65bf50738ae12b360bb67b3134

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    96B

    MD5

    29a7b503f63357461bc8e0458874a0b1

    SHA1

    e90dc4b30a275d754c9e44414bad104396295a46

    SHA256

    414a9017c01980b89fa46cc8d7092e1d0e80be3eea41916dcd98a15894b8faf1

    SHA512

    b4cda04684562816e0c5535bdee399c0d7e1739ef1ca03aec80d748bcefd0ec2886d74c501e876472b4b37c7cf3ed8088fe09285f153938bfeaa099973e086cd

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    96B

    MD5

    e6563a5766f8a279e559f6333a7a8220

    SHA1

    b47db8cba6b93b3a9c6f475a4f8cc735a398d470

    SHA256

    7f837df1266e53e41cbc9f478897cac631dbb035b91120eb030eafb005a8c68a

    SHA512

    7abdea5df446f9e43ba989f641b1f4aa8e22d062255f0d89403047b3b93b41c6dbb4f4de41fc1c9afe25eabc6e9a9601035fa3e96c54f063ad5199efb862a49d

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    96B

    MD5

    53dfeca316995c540ecc963e024d0bb7

    SHA1

    5247404cc1612ff21ff502bb0cfdc6e89179f1ae

    SHA256

    f1d2d1242913f51c7fb013936a97d2715a880ac05ac646410bb0dc8bae2c9985

    SHA512

    e6770cac26ec9130b777e2271527fb0da89a442c47ce2cb67849f412e68a5d00558ac3d4aad94f356cf4d2af54a8cf7e0dbf580f94a203b4f813c3ea6114739b

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    192B

    MD5

    a95513e00c2586d179de2f893ae1d730

    SHA1

    bff5f94300827f1fa88f7ec414ddd899163235b5

    SHA256

    8a2bd5b1f25eb9781c383fc4dedac799956d00c1f0658fdd79fdf908670d283a

    SHA512

    f74cce7c46103624ef7e52853034441aa5291f973b1df2a269c350ddbeff075cd298045df44da1c6876af83458138456290f40959f87416bc7b6414f018e034a

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    224B

    MD5

    b50bb5a96553d738542e1878513549d0

    SHA1

    ea3d5e567b5e8a1082034f46b11587d011feb41a

    SHA256

    f70aa39eec45864fa059065ee4130993fd342ceb3ed82d594f547d65d01a45d0

    SHA512

    e43bbacc7b8ec2337ffe58664cb3b75b1b17f13c0f7cfad40f7fdf5f755de982a6f89736854be8753a4679fbc7c4b0f8e6b7fd4a961cad20b3bca6f34c4dd30c

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    1KB

    MD5

    c768a920a6e5b19d06439ed621d259f8

    SHA1

    59c140d8ebc0b3a73811c6fb293912f1e9d7af79

    SHA256

    4b64b2cbf0bc41fc26aa3430b97208f065b7a62378aac9d40e63d748ff790395

    SHA512

    bcaea607c082f868b6a245805a47014531fbaf83234421560b7c71ae64bb2c3c994b74e78676efd764330048814ca9ea8cc92b57f804e4d32ae2fd29a62d517e

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    2KB

    MD5

    3e768c70ee2327ad646a879c9e1dbfe7

    SHA1

    46e4da7957ab7a25601db5d0f6f43e52507035b6

    SHA256

    3dfe6799913365ab62a71d5a694d6395454db1620f845a6ec4ee9cff3fd13ead

    SHA512

    89c51d2fbedb22da5e376aeeb1c01979ac81faac8cc398adbc3169c21f334174b4b224e1648b32aa33803390512dfb93361ad55c0d8c9209d71ee49db39947ae

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    16B

    MD5

    67deaccb3ae4ea40f149a964db38936c

    SHA1

    55309309beec753c6e23fe2b5220bf865189a6e8

    SHA256

    9705560a6f55b0848e715ba780a16b3ce6b2e186e8f44cd16643be07647c14d8

    SHA512

    09a42472b63f410ad31af6b5826003b0fa9cf66901a65a22a9829884fc4f31ba849921e9f73d77a86e956da4238f46f8f06cd0aca5618976edc6a10d846f757c

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    4KB

    MD5

    a3e326b22881819aa2baafea40256a60

    SHA1

    90b36f49f70d3c333193d27add45fdc8845be8a0

    SHA256

    877c73f397e318cd0db7406669851e7c416d6eabf6642fcebdec2c3036b986fa

    SHA512

    169da66935b8d30d838b577fd7d373f51bc3910bbe66ac849169a93b2a53392d5cab5a2ba64cec22c54af7ff40c44c064a5d92f9512e326418f83d879c4760dc

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    4KB

    MD5

    11f1bce230f0c0d387f00823e9308510

    SHA1

    730c17903712f127830ede2cba675ccda6bdfc35

    SHA256

    9683d8f67240d5008af6720cea1852d3366cebd428e82af5260bd09b08b27af6

    SHA512

    75d39491759912a0ae08e64ab067aefa487316c46050e06158b509ec63d97cd0eba7e067196d69ddd9ba3aacd517f56a28de2f7228eefc6feb2ccab688c97a0a

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    6KB

    MD5

    9c704b0c7932f7f08df627998a08c0ad

    SHA1

    8a61a8ce2eae70ff07d422f20923c3b3637b393a

    SHA256

    723200d73e4d9898b811bd101f0cb12d43a3bd0a923f9a1a3275efb83f25e813

    SHA512

    8e674b0267f4c9c3893d53393541bbee946155e4d8a91b4248b65a7aac44b7114c8ed1f307acc256244fe293cb6ad969f45452bd3377f0596126943a45801be5

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    6KB

    MD5

    4cb4d79627afc185f702460fe3ce485e

    SHA1

    ab12cc103a0231ff2b1044ebb75bb040ed756568

    SHA256

    976bd82b0708d1ec76154948ab7efa513c425880af6ba2332bcbd5f0f6603cf3

    SHA512

    a6db6a59575a5b8314b47ae7b34af80e7c368e30ba7e20bac0a11bb96f07247d54d41aa82be0618ee56fbbb6d26335c8ff4d5d04c486f6ccfc6faf8ac92a7e75

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    6KB

    MD5

    4001384d30833eb3d0a60dcb588cbad5

    SHA1

    3dcff5736bf864387899c903ccd5cbc92a70966f

    SHA256

    f459ede065498dd31528c35e2bdf0da1eafb5533d3fa80fa119fb1ed63329b4f

    SHA512

    8cf775ff754eaf8b4c9d984237b594f69447ca4456ead8d1d32cf2430f7c7831215c1cc898f01165ea0ac36e0460206ad65ab23e07e573107ff51a5da0a8f6d0

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    6KB

    MD5

    4001384d30833eb3d0a60dcb588cbad5

    SHA1

    3dcff5736bf864387899c903ccd5cbc92a70966f

    SHA256

    f459ede065498dd31528c35e2bdf0da1eafb5533d3fa80fa119fb1ed63329b4f

    SHA512

    8cf775ff754eaf8b4c9d984237b594f69447ca4456ead8d1d32cf2430f7c7831215c1cc898f01165ea0ac36e0460206ad65ab23e07e573107ff51a5da0a8f6d0

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    6KB

    MD5

    4001384d30833eb3d0a60dcb588cbad5

    SHA1

    3dcff5736bf864387899c903ccd5cbc92a70966f

    SHA256

    f459ede065498dd31528c35e2bdf0da1eafb5533d3fa80fa119fb1ed63329b4f

    SHA512

    8cf775ff754eaf8b4c9d984237b594f69447ca4456ead8d1d32cf2430f7c7831215c1cc898f01165ea0ac36e0460206ad65ab23e07e573107ff51a5da0a8f6d0

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    64B

    MD5

    d7dafc9c3437a2d1990e7903577993e2

    SHA1

    19635d8dd092340628f449af9e5ac48b817cc927

    SHA256

    3da095613a603cdc427dd077ca5926d45610619bda67fcedf6198e9c03fe5e30

    SHA512

    2ef44699fa7d74f662dc0099b53c72493a5726f94fa75e2a8102489c7784a530b1c4f531111abf672fb632eeb3f2c59b5425f1b8c6a0291abba06ebc8c0b387c

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/fusion.registry.tmp

    Filesize

    96B

    MD5

    cf8d2457f50a47014fe70bb73bb03446

    SHA1

    2e89c0bf4c933b538736570c39e9410f18cdb24c

    SHA256

    6b2d72c0c9a527767d80c36268c047db3c95fa135b9807ac3fe6e1ae82678f4b

    SHA512

    1825ca71057a07062fb76a59d0e388706d5659aab6beb70bddfda3b1a6ddf557c3e19f31cd573b1b39f715aee8f0453516bd3ce032d4450622e2271ffb4704b8

  • /data/user/0/com.rovio.angrybirdsstarwars.ads.iap/files/settings.lua.tmp

    Filesize

    1KB

    MD5

    ac100650705c0bc52d383cf6dc3c2759

    SHA1

    c3ff996cebc364bad5b6ca103cf70a4d5417a0b5

    SHA256

    c3401a713c850f23c426a4580952780673fe5d0cddcc99d42a1176cd943943cc

    SHA512

    84bc2f6cd7dfd2ff981d2aae2817573c4ff0ab82ded36426f1eefc1481ab9173d6c324cd16ea831480dae1bbe119452da70fe4903c01992cd0757ae38075d66a