Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2728565s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231023-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
  • submitted
    06/11/2023, 03:17

General

  • Target

    1129892f02171256465594ad31d3ab7ae84a6f7d708d826aabb37cc38c1459c6.apk

  • Size

    2.6MB

  • MD5

    fa95bfbdcd4a196c01e01799a79c0fa7

  • SHA1

    9a350f56d951284983a414e8bc3af9006ead6ef0

  • SHA256

    1129892f02171256465594ad31d3ab7ae84a6f7d708d826aabb37cc38c1459c6

  • SHA512

    5e2fbf3729cbec9ed57595f15db2256696a5e8ac50fd34cc652623d8e3ea8f3b6a3de55f10806b1c7e688094b34096749a36113538b85c551b589c22d47afa4c

  • SSDEEP

    49152:HYFOp/cBT2DN3cycC7mhVlvZXukxOQgpWk9L53yJdT9cOuKo2qwUVmyds:4Qp/cBT2B3pcC7mRmdzL5CJdTWr8T

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • diwix.gorbah.com
    1⤵
    • Acquires the wake lock.
    PID:4239
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4291

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/diwix.gorbah.com/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      1b2c42ee588ae99fb33e1fb61af3f1b6

      SHA1

      291c9112e6a440c18310fd25a084d2ae0823a201

      SHA256

      0f71e3bae987a3dc6391665711ef7656e65d2b9b973b5e66fab4768045d16771

      SHA512

      e4bbff54b3bfbd3a881eafd0a70c2bffb01f9d1e16cb8abb79c34ffa6dcd3f1db6baa590b1910ec5f4f71e5438984534a56a1e526ca346bc119bfaa84f0695f3

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      4662613833040f6b27743adbe7badb14

      SHA1

      d4759affb1b9d7fcda146c9f6ef743df690b0432

      SHA256

      f876817fe2f345edaafc9efe9c1f8698bdd0b0fc0198bcc32ea5a0aeecc59bda

      SHA512

      bf700e11d78323a66407cc2cdfcfd08aa216bd6151967e0203bf05ec67a8ab0c7deef8e6b0ed9a3011578db4f7eeea399c6944298c2e6cbedd6d3db89c7dac7c

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      54a0a43be58ab57bcb96362cbb15f55b

      SHA1

      16375cbc1dfc1dd0a530c1d277fb285127d23d62

      SHA256

      55801669d163d196ec3bdf2379557dd49bf3c39b91c207d3b7ac966cb6f79641

      SHA512

      6fea54ff22246d925f1b969ef99ff06e93f97c14ad7226e4fa702d8e4a1be564f66920bbd84ef397b252a1de35aa574886b9e5306d7793d14c528cc67812fba4

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      bfbae04c18ae27b1d4b9f084c72877b8

      SHA1

      a8eae48a9017ff7f682e12f6d393aff78480ef91

      SHA256

      99f5ab5d9c4c72499c98131b25476571f33ff7b2f0cf8dea2ed053688702a376

      SHA512

      c1e12b8330b38520d12e5d4e64415598c8dee71cfc4a40fbad56c3a0abca2270e8dd180b915b3ac1291f8d838e057449089b30a95556ca35eb859eca55d510a1

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      5f95ad9742db078d796970c6567c3273

      SHA1

      71a8cbde5142c5d4624f6da6101ee98534b17154

      SHA256

      f5eb90571110c572817d08e566c61ef9fd904c6a6ecdb19eb3210969ca0ed9f5

      SHA512

      6ef5e5f33609bc35590d9f57023a8c3e2a827959f5c9705b3d9837a8a7b4b5003235857c6f433f4fc05e356c94c811cb1ff964ffce4788a8d58df4d24b00d383

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      be7eb86f7e4540019398d2e94701420b

      SHA1

      34f4e926b1430da0d7fa927f93ec7def3c46af8c

      SHA256

      cd26a4382a4ef89390c4295cedb24abbf84ab45a6e92f69593b256e3b7f91aaf

      SHA512

      4a79a2b71d16b6f093b9cc2867468067112bd68552a232a5c3d7878b1eab2ba939a19760287b152ad5fffd503cba61683f675792563de9bcbdc3c2c9da818fa6

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      9d64743ef651f860741a28548e82393e

      SHA1

      479b8da3fb26ae55923081a031e2cc568f5c59e0

      SHA256

      88f52afab022cbb9749b208775dafb761565e2c3a5a631787853abfaa67b0b5a

      SHA512

      9d4858ec9a8bf136b5a6200c2617129760586944ccc0c7843322e04eea50db159ca413702b03644e45ac6caf722b65f5c8e9974ce02b20e0a88d7c140ad5d302

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      8da4241ef119a4a3a8dde889d68b45dd

      SHA1

      d3d7c4956313cb166b5ad86b04e8bca718d047a9

      SHA256

      74dcc66896f6a30bcc8d05e47b730572b80a34db2882055f81a7344848b49257

      SHA512

      3abcfc03a8bb5f7d92cfe487ebf771b35c9473679ceedee90d70e1895b7e452b1208edd96f1136c2fb5ce02bfec8d120c64fa3fa709c3ab951c7b5453337ccf8

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      a0223a760381137208e980825ff70652

      SHA1

      b0dd8d39d2b8409b884b858226f8c4bbe8ef1bf0

      SHA256

      8f6204935cb776c6bef137c576c6819096ddbd6223991895800b30f6949631f0

      SHA512

      dd4d335ad6033218f9f290fb435daf226975b3ca2f000f1389d888e3777d04047747c281392095d4c451fd34acb3049aaae8ba3ad69e786e17df4dfb21137bc3

    • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      d24326df3985b887f1f694ddfacdfc0d

      SHA1

      9f5a26d10e8a1f94bc77386b484aecbec69794c4

      SHA256

      7396c9991f70f62c1438dd21fc0af4707182ed14af647597a963a51d09e9fa57

      SHA512

      059df1d9a44be2719ccf7b304bc4ad8077c46e5b59f3c50c6f8082ddc36080205733b39cc001549128fff16b61b95087f9f6db72f36d34892b3a81d3326bc166

    • /data/data/diwix.gorbah.com/files/PersistedInstallation4126589843860171301tmp

      Filesize

      569B

      MD5

      9daefe9c0ff342a882df389d678e2b46

      SHA1

      0e97ffe5abeadf0e6ada71d16a5c305b879e952d

      SHA256

      67232949957dcc6143d18c2fe3c33be1c946dd01b60dbdc67adf3620fe685a87

      SHA512

      2312c81984455f71b72972d91d9fa9020828d8a6b9e0bce9d9be6550622b91ecc1b537bc82ea6767fe025a5c1bd229a7342cc575015d393f3417c9df7ae62e98

    • /data/data/diwix.gorbah.com/files/PersistedInstallation6486104456523400351tmp

      Filesize

      90B

      MD5

      b0f63931617c3b7514b15973506f1557

      SHA1

      cbe55c9e6cb79d1960b613a0999cb909114b4f2f

      SHA256

      7e449dcec048d96abe54e3205418480934c0af99d6cecad740b9f7b0ee701421

      SHA512

      553d584ac4c2b81a80a3cb77a0c197e879ff06ee26625635f23f5a53989f25146f8c47059c2d020c97dc4e37a6262a779947cfad6301fabbaead8fb2c7d680b6