Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3918530s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20231023.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system
  • submitted
    19/11/2023, 21:48

General

  • Target

    688bca48ba4194561672dab19c8bf5d3d8d6be79515da70c467388c064d61220.apk

  • Size

    2.6MB

  • MD5

    e01cecff89c4690f158cc4cf2dd7597f

  • SHA1

    f081a9b94c47bdf165c945f0d5412e286a6ea626

  • SHA256

    688bca48ba4194561672dab19c8bf5d3d8d6be79515da70c467388c064d61220

  • SHA512

    7cb12b6a6d29c0de0871abcef17a9026d2e4841d07628c68f4f4597594bf381ffe4c1affed37d2d5e89f14af5ab2e28c3bfbff05143ccb8bb231c3fd0ba4bebf

  • SSDEEP

    49152:R8EEzJGntKseWfUaXpcYWMRlH+6vd6KmK/r8ZNV6iTOwgCxBdxqROOORqBR7:ZYGtKsffUi7zq6F6K/r8B6i60xBy2CR7

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • vip.app.com
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4919
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4974

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/vip.app.com/cache/1

      Filesize

      5B

      MD5

      68934a3e9455fa72420237eb05902327

      SHA1

      7cb6efb98ba5972a9b5090dc2e517fe14d12cb04

      SHA256

      fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa

      SHA512

      719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d

    • /data/data/vip.app.com/cache/2

      Filesize

      690B

      MD5

      bdd89b9d5f598ff13f4d9eaecfe86033

      SHA1

      fc4926068a2c242847710dd623f0a60e3b405e70

      SHA256

      cf40a58b3b009116d3469ebb16808827519f22eb6216aa9dd2740c389199ea79

      SHA512

      f74423fa0d082f4e011c3e60abc2f81825e872e6a78ee30d9c4a7b2b357f4cad0a4921789538554194cbfa4f3a9d99713676cd29f7941bcdcd4cc891455b4b88

    • /data/data/vip.app.com/cache/3

      Filesize

      28B

      MD5

      4e6ddb391da2e63afdd4822076a014cf

      SHA1

      d064a4f8de6c5274ae5d0f21d5c1597aa798070a

      SHA256

      e66a9ee90dd2d951b5b695c3d3bb5dbb73af6115a24bdbfa806675ff8f43328c

      SHA512

      80ea25b1f08b9cddb60c846e38954490d65b6b580db956b01e7cb25a5722e431474cc9812cfba602de28063b6fc74b670941f0b067b30f0fc591c6ffaa75d76e

    • /data/data/vip.app.com/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f6fe4d46d3b787cbc7b4db3642232993

      SHA1

      652b051a4b86aa61847544b2f164439ce5cad328

      SHA256

      489ad92ade3cdc99ea7961311987ea24b153d7652005729003f830d03d310436

      SHA512

      d25b443869d7c2f3b1eaad8d64885c04461d28b27c3552628027dc00fb2dc0795d03f2fc70decd95b8095045a3c93ee5846e712bd56373eedd78bb5b3edf95aa

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      35ef3c1ea64b447a86dd5a7c6154c81f

      SHA1

      8a295890a87454d85fd8e5992cbc1c38a250264a

      SHA256

      c9940ec65439806b36e2643b343ca8790c8e6370c034702121406b1bc2316bc7

      SHA512

      934696a5362d89f35651f9247b0ecad2775720b5a2a4f22dcf2294c4cc3f663924fd275f8632581efaf4fb9c7c00921c7e5c948a323144520314dc656220b72c

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      047ee3ee54ec81d9c628b528729b81f5

      SHA1

      bf3a10f4a25ea94921f779561fe5b8e1e6b96e67

      SHA256

      7448e2213b93057eff872ef53364492c20670604ee0e826cfcddaeec9045d99d

      SHA512

      d6932cbd2277aaaf779070111c51e6e3917e47b9ed3e98512e70113462ccb9916717bd1bc74ab4cb1d7e36073e7cfa620f1945240cf1080cdbcc66e5996c0bf4

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      23825f34c5c99c895b37f932d7087538

      SHA1

      572a65bd8f35a9f2cdf3d4c409333be3b5a4466c

      SHA256

      fc9a08e82d9469d5cbba66fe658a9cd6ac8007e4ee231d43aef1bf399717a131

      SHA512

      299e57da6c29102437e467ad923b278f911bc4175bd91a6c7a40a02b818dc591c3dafff98cb99caca56df23194e32a5e6df1c34d305765fdfa626059acd499cd

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      adf6082723784327d7d1b34adf974e7d

      SHA1

      b1502f70eb881a1dfe41139cb719fefb877ee37c

      SHA256

      252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

      SHA512

      762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      ee2c3d83ab1fe358f773937913457eb8

      SHA1

      d5a0ef7c56f167376841810015813b5eae6c8253

      SHA256

      13a4338b1f26f4c0b05f8b62db481beb618c097a66c6e616e006c1a5e455a0aa

      SHA512

      3c98c54f2d16cdfd5b6024f51800e4a36698abfc3843b1019216991bea6a9e86d1d3513a464c33cd6da699e10f4afc4586a3b4a624e3f0ffd5aa31aa4166d070

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      4903cc5c90482979b0fc0b0130f03a61

      SHA1

      4fb962f4f6d26b41c51eb3b45219356a4e24dd6e

      SHA256

      47373e9b8be63d3007cb27a69d3edbb490f0f50c4be037c8ada7e1f576498b7a

      SHA512

      a4867eccba898c5d11c2b2c101eeefde779a3161fa44638dc827c394dd50b82e333a338ce444a881b08234475976d460cf114420ddd5545971cbaf86eabd8c0a

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      93afce5ff4efe8a6a8841fdd2c91fb41

      SHA1

      91efef4c7cd945bcfbbb128d5af2692ad085b89d

      SHA256

      cd7b51b321836f59a90e68270c779552652460c2e0ca34b6835e31e30f7b475a

      SHA512

      f7f2acffea4d94bd8edd6596e1e0ad608731fb39b6e98de70dc65c71b53cda140ee638c0b0d80bc36bbc2b57e313444d01c1454b074df773afc92149d5c75469

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      1e664eafaeda0190850be5e2ec1be16a

      SHA1

      7783dea3d68920e5353fa71cc7556134f796a397

      SHA256

      09ee9d16d4808eddac2ad3eeca10e6a41e7f04e90c383057e8dab0c1b9f131fa

      SHA512

      640795d64b8ef3857194948669709635d954ad20c49891f2fd710c9f497c9951debc55ed0badb6d3b0086eaca95c24c8e6e7a70df4a549048ce79e1cd0c62f9e

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      e4e9f9bf693ca64a8132509d2e5dcdda

      SHA1

      82d67b1a0aac7dce02df0a8af4e22f9a5feb5834

      SHA256

      eadab140829c1d92cbadc6a8c022d72bcb911a878466f27cb799e4a88e8de667

      SHA512

      6b0f701bcb87e7f1f11cf2b111deb97038e2836770635275767bc2d4f25c7d54f81c00712648a522cd47f239e57e4da212984b2898c39e9286629167a86b8fe4

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      8e15ddc11c208b4c1558057d560dfbbd

      SHA1

      ac2b39a667198ef14be1dcfaf8dac9e66d31ea39

      SHA256

      5830ce76736ee09e3442e205bf02be0650adfa9b5683a1ac37fb1654b071693b

      SHA512

      3947e59bfdae0acefb0e83418067e3d713108d7edbf9a1b8afe20f075596d5b51383db52b95a4ea8a72c7c344eae1e6b63c54284fcc906fad969d09f53d300fe

    • /data/data/vip.app.com/files/PersistedInstallation2821838088982457707tmp

      Filesize

      90B

      MD5

      09985dc80baf2cdbd740f4b6a9c69e32

      SHA1

      8dc553597b08ec6507838d1ae572c04cf0c63025

      SHA256

      7f9f572de9487d024fdd611f2ee0a73bd5026f42670407297919618b4c539efe

      SHA512

      1f64522dc2677357d2265335ece1b666f19adf4bd28d88a77b44bc492e8b320a3a96b5a931cf5918925480f8279312c3606ae0b815bfc55fd3aed83149c854d9

    • /data/data/vip.app.com/files/PersistedInstallation5008190899071619070tmp

      Filesize

      568B

      MD5

      d33c4c9545d7e1f7dcdfb1cc16438dd2

      SHA1

      43102edfe49954ff40890fa74521969728841e18

      SHA256

      d8efab18d29ebc722e277844e7f54c2fa7cd2d4d787eaa7e07805581349c334f

      SHA512

      d6b0477812a4e2fe0225c6abe1661b6f9bc908c33c277f10737e29ec7cd3eee9335997be66550fc5459670236a52b672f30c185bc3510564b978d287d670b87e

    • /data/data/vip.app.com/files/phonenumber.txt

      Filesize

      19B

      MD5

      b5f50a9abc694ad9adf0e7c78c30f9a5

      SHA1

      9ecc687d819e519664740bc2ab3427bcd9e1a4ac

      SHA256

      1f00b91d3c22c2e9e6d94335ab58471fb228c8daba97f4e443cba87217b850a3

      SHA512

      a2a057a297a3b7eea07b7e671070d35f9815487cd45d637138accb0db0114165bf658e0519ac0a926df6320e8a10745124824f8a65297d6bc3eb1484d1b32068