Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1550616s
  • max time network
    167s
  • platform
    android_x86
  • resource
    android-x86-arm-20231211-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231211-enlocale:en-usos:android-9-x86system
  • submitted
    12/12/2023, 05:06

General

  • Target

    ece44440ccec25557bea19115f7d3fc0.apk

  • Size

    100.5MB

  • MD5

    ece44440ccec25557bea19115f7d3fc0

  • SHA1

    5dc42cd94fda6f7b871c96688245c454a9d35190

  • SHA256

    8d043942c8ca1c45dab4bbc7e59b18e6860baf74a0b79cb4db87f47842848bd9

  • SHA512

    3cd5d41ff59888adde1d7087b30ccc7f269282183345b2df66587c921f713abcf64cd628b07c12d7abad9ce7a9fdd60d806775e942fcc572cab54312b2d2c27c

  • SSDEEP

    3145728:XSHYconQp5wMSpFtYL3dJj8yvFPeNo2L87mkAh/W29QaON:C4/u5wdtYL3wGFmNjL87mkAZWJH

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Checks the presence of a debugger

Processes

  • com.tplink.iot
    1⤵
    • Acquires the wake lock
    PID:4255

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    6a0dfb50f7be45c5b2884ea1f24f5792

    SHA1

    4ead0bda29577dd6ae7e0c93cab4f50a6734707d

    SHA256

    a892e63ad803c7ece2cf1e6a744eb3411f5e9acdba0d0385e70462131df132f2

    SHA512

    2bdc6ea78e2165233a61e2f18bd68409f5049f54183660e99d76a9d728b3c8ed3d9b6b557cc79ba7c31fd429a9fe35fa07c41ef5b83e311ea5f1287c59314109

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-wal

    Filesize

    16KB

    MD5

    dd5f978463df2eefe422cd4167b90e25

    SHA1

    044c2b86993529fbf025ab6a7597b1e73e8c73de

    SHA256

    27251ae08140f4b75f594ecbcbdd59fe280e5c7b29dfbb7fbcf7ee6013560c59

    SHA512

    4e5c054178c32bcd92b54581ede3c0cf4f52fab033940b3e108590e7a89c72a9fc9f42058266277b9f345b52faa563106dedd1f94cbcc90f0ede657a4b8546b4

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ab3a8fc5daeaa6f6268935628435fe04

    SHA1

    db621c930eb5f577de6fbb16ef6de186a8f109b7

    SHA256

    502b5e5577fc17b4c3ba6325019c7a2d3e14170f9d3774e106a50591a140d5d4

    SHA512

    5ea29bf2d5a183338ca07dfb39505735dc6a035b30a9de316b7f7cc69eea459b8b7a6f0deac30821346ad8ef2db8b342178c269ee61cd604f0c480d8d41a0adb

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    37a7a15f516b839635441e54046a64fb

    SHA1

    a3dd0a592fd89876dfab1060758aeb1d98af89be

    SHA256

    3e0b590e7eaf3dcd71372cfdcc4d247e7cb3c7ae4f76d81885795c9a82942bc7

    SHA512

    142b96680e4cbec1b9f9b3190935197bf2e19999d513fc98d970cfdebbd0fda6a29a8a2d4750290e9e0477b51eaa794ae95903422c59cf190988feb0f59884d7

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    5d451a6806bb90246678c862401e63a4

    SHA1

    0d68640288daddbd4b0631b8f687a75d6e0c0d82

    SHA256

    a465963e01f9301bebeb921bb0ddcfa7955d72f33179373db2554494fbb5f41e

    SHA512

    db1116b7764323e213f28989f8f9db33c2dd68d79eb917f929fbc0b388f24bcd566a61e0bef70e8b5161cd52e6fd9daed432fd6c3f8d53e569b673219e2b00ea

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    bca3aea2bc062aa8f673d62cce160721

    SHA1

    d40d3ec4121704061c7703dd78e1a1ffa41fdea6

    SHA256

    2b7eda9d85d59aea65426281c8b85c9b7837b7dd04196ff5348ebefdeee091f3

    SHA512

    3b806d114d8befca3d7251b2173fcc5dad856d196715a33f9d19fea80313c03b13662617be60905c2358450016b6dcf60a5653d5669921a69aea4bc426e9740f

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.json

    Filesize

    709B

    MD5

    5834217a3d50ed8710d21ef030affc76

    SHA1

    69903136b83a6788851e9955adb6f1c39e9b41c4

    SHA256

    32d56f2ad97b1edd5ecfc0a31f428700a20274f019fc6c416db798536f73e2d5

    SHA512

    62e01e0c6a43f9ff74a4d9a664a0a304539e778850d6e0d4b1835f29bca54154d126fb914617ffbf78f39238ec319ba430ce17ba4b8b7b59dc0c637e9fc3856f

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/open-sessions/6577EA9D021C0001109FBE6EB46BF45B/event0000000000_

    Filesize

    32KB

    MD5

    2788ccdd5e86a740ce09cbfbbb6439b8

    SHA1

    a0c1625bb4ad0653f9f70268cfbc4aba9a706aa5

    SHA256

    66187253679c2aa6dd7df1ec26dd8d3a2de4c95617d8e0c35bcb54d366de630e

    SHA512

    37a34305010cd52b041276ecfc07ab79e795614e36b1e92eb689fcf1077800cd2da5ffe008679de3eee6350b856bc43d0f061ec8a7b83e3d33aea82afc0a97b6

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/open-sessions/6577EA9D021C0001109FBE6EB46BF45B/report

    Filesize

    738B

    MD5

    0835e99f825889b5c73cb2978c530555

    SHA1

    924713ff7e013887f9874361b64b47d28d424f68

    SHA256

    4831b04cc6a55b7bd445274353526652d9979dd0e64a04edf2880e9dc7042704

    SHA512

    c9f69b0612cda27d8f5250d148057793be4ba7d2f770919b3a3ea6f3290435b20cdc817e30ff51dba7a76cad193997d54708430872f2762153708f6a010402a7

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/open-sessions/6577EAA101660002109FBE6EB46BF45B/report

    Filesize

    738B

    MD5

    80ebed39f677481929b71afe8aad3d9a

    SHA1

    796de1911a1224755740aa70e259aab45128bf7b

    SHA256

    96e07beff2a244fd20d0dfc029bae4a9e2fef7c606c5c3e229e3e5d93a6683c0

    SHA512

    7755e11275717aca414ece7f53f12667ff1a7baa76b8d3664cd7da7e073b67c87b8ef72864fc26b7d7b4822d689c856b6d73cc9b54678aeb0ca5fcf3c2f164ec

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/priority-reports/6577EA9D021C0001109FBE6EB46BF45B

    Filesize

    33KB

    MD5

    e16168fffc6de9e833db92afd3317a82

    SHA1

    37eacec2ef4ebd64f578d2d63287fe228f804377

    SHA256

    1ac3d0b0588efb1a2c89c9334193a1c7c102bf1c84b195d0433172e50800ddd7

    SHA512

    249ca23b1237cfa9c6f8654fa12b5223475ca8808fdbe0b80a5edd732be3e25a6f73633ada6db50cfaf812e29aa4c821c3887b32e083a2b235ac16d06205b936

  • /data/data/com.tplink.iot/files/PersistedInstallation1802802740652422636tmp

    Filesize

    90B

    MD5

    9f412a8dd153a5fafc34ec6406811165

    SHA1

    d2c7e5877a391530902a5a3cb24ab0b30a106820

    SHA256

    2b1d33340c8fc026de53dd7bd17714eba74542f85a282c8fa02cfe1c6fe661e3

    SHA512

    bd58c11ff5ea0cda090539153fb8968331313c45f8c0c7a80ee9f006433026ca2e975b9048eea1f77061cdcc88a71c1033088aa4ffbf41524ddf9c7333df922e

  • /data/data/com.tplink.iot/files/PersistedInstallation6550509934438855141tmp

    Filesize

    556B

    MD5

    275c9917318e0a31a40f3754979e5b30

    SHA1

    8706ffd2be677c8a59ac311c28f21a0f34caff72

    SHA256

    fbeb7ae89ddcc28ab26bd3cb1ac3f89d9fffea1a49358f60c1e32107f6677f9d

    SHA512

    3f2dd75379cdd83ad309e9ebe1cfa44f96509915f2da55dd95edfa81ebf7ff5a09ae8ce745991ed4abf4895d163cc848413306550b7de9e254d5eb0b53fec30f

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    1bb800ef4d42b999d7588280d2865506

    SHA1

    fd67c7569ffc3247c4ad7c9b8cf92993c56054db

    SHA256

    31c01880553f8bb4289ca61190c9dcfec373405ec79479ab69bfca5c51b95b12

    SHA512

    80698fb0d7938b80f29bce0f9953f347e944fd0ee2d86f9b773d54f7fdae834fef7cea5f44121ea289af109bfcb0817dd29babf3d1aba8611e541285d4dfa356

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    1e81fa5ae4070b187fce1bb69f2e3062

    SHA1

    43de429269f76e491f6786f93a3c1ce780c45ca1

    SHA256

    c6f2d6c18c5d6c9ac3859079d5b70f42f1fb68a7324c042ba15fb355638846fe

    SHA512

    b418c3bd72065fe2aba71d4f19ae8177bc3a9771309e60fe8c1fcb50dd325165a8c9ff3926bd7534089ec281e489bcccec25bb2a9cd36774f6a00231e1e673a2

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    b2fee1907b566e316b0cbd93ef00c133

    SHA1

    b28619b83856628d89e4718002a999ff0b4dd502

    SHA256

    a0a7010f0e6ea08b9e4e50e0ac6d165aa41edc58ab98ca99ae4ada6b203c203e

    SHA512

    88dc67e1e841e5403827855ecee3492edb308a23172b55f0177e529c1677bf4060b27088120692d2495fad0d0f4c8afdc0b69de7ba8bbb7f1d28519f6a49a653