Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1550614s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20231211-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231211-enlocale:en-usos:android-10-x64system
  • submitted
    12/12/2023, 05:06

General

  • Target

    ece44440ccec25557bea19115f7d3fc0.apk

  • Size

    100.5MB

  • MD5

    ece44440ccec25557bea19115f7d3fc0

  • SHA1

    5dc42cd94fda6f7b871c96688245c454a9d35190

  • SHA256

    8d043942c8ca1c45dab4bbc7e59b18e6860baf74a0b79cb4db87f47842848bd9

  • SHA512

    3cd5d41ff59888adde1d7087b30ccc7f269282183345b2df66587c921f713abcf64cd628b07c12d7abad9ce7a9fdd60d806775e942fcc572cab54312b2d2c27c

  • SSDEEP

    3145728:XSHYconQp5wMSpFtYL3dJj8yvFPeNo2L87mkAh/W29QaON:C4/u5wdtYL3wGFmNjL87mkAZWJH

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.tplink.iot
    1⤵
    • Acquires the wake lock
    PID:5068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-journal

    Filesize

    28KB

    MD5

    4610d9409da428118aeaf9f0813710ae

    SHA1

    4549181d756d5eb0dd39fcd2a769705804e41d7f

    SHA256

    3c71801967bb6567d4ed532d2c20459e81fa9bb416b7323c98bafa53d5c52e79

    SHA512

    caa00ced60b3d20fde84993e6d86e4be861120dbb08dff78040c60b9e85f1ebc2a3025641be8a3f85f94dbbee86693e37e30b6b6428539c5a17fb5f29c327a01

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    b616575c6b3f5a2e37fd34219a0e5992

    SHA1

    8ec8bf0e8dd89db837c21d4c67461dc338f9427f

    SHA256

    25540d7fadb5bfef1dd66db05ea671ec9a4cc37b054909807e51f3d50a468df2

    SHA512

    0d712f198cb90ccc4c7d43ae24e509342819aba350d99e651e947aed77f0b7d4e28b246c508c72723e9fd4448efc72fda4f705dc09a14289ad6099245a0e50b2

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    05b671dd5c2dfa613683aee79d6c3704

    SHA1

    499a7c136b310d2f10be1dcb6b0069c954226f02

    SHA256

    c6dc1c5495f6ac62b0c6e2c84d3125d0faa054013ad6c475aa2178a3358cd90a

    SHA512

    058a0321b4919d909b73ba5c912385484fc7539f0043c1dec8d6ca06956d73c6b5f225315ee7364c91441acded1305005740155304af1e480fef27cd81410ea9

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    645b0be0001ba609f512376bedea0580

    SHA1

    293ad639c78ff15358e0305a018fdce11e059106

    SHA256

    00223c1e5c1b314fa9e8c4795a03bad18135df383ee518ee004b41b077c0703d

    SHA512

    473b494de049acf3f591aa9ff01b5c73212c10d3d364eef5dc5536b6cf968bc22922f4c5a3d9c08bd0fb1e33f21de0faab028ed6975f3868bada55ec2cb19c3d

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    188c0542bc062e48b614e5ca8c1081af

    SHA1

    0eb9b89a5c92957cd1fe748cc063b32853339774

    SHA256

    c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b

    SHA512

    62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    37f2995c1c1e589a3ff682cd5ac7027f

    SHA1

    3bb49be2bdf716dfb3e9164b96122b0dd838d15f

    SHA256

    bd0d57fb3e8b50cd79efee82d981c4c2467b5a5c0d0256d8638b400ce30b10e1

    SHA512

    2b13fdfc586ed34266c7886006e9525c60030a5cf81e3f05a441976da0c8071f3f59a9fa0de5838977f128d8d2fb722c928ef9bee558ccafc571fe103674cb7e

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c3e740cb5f86e99b09120e654cdf1105

    SHA1

    c8a7048ba8fe6fab5284dc18eb14466f315bf7e2

    SHA256

    6c0e132d13f724b1c310fcb8f539cb134ffcf263452eeb14abdf15aae272492e

    SHA512

    803ec623fdd22fa8b915b801871e4ed1279ca8ca4a1f8cb71ff1a264fd68341e2c403a47af8583e6768bffce32ec2802250b9d68b676f92d4be5865ab2bc9ff7

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    1c0d4f1f7d3372ee03be6110fcc6450e

    SHA1

    e52b6a6456641dbd5bfd83eea802402b00b905f2

    SHA256

    05150f771a30c8a5f1fe3131657b0061748b9fe9360ba555b2527a7ca78f09ed

    SHA512

    9dfe3eb71c4f088d2e9cd5644824f163aa5b5250de68704efed2d42efaba1c4b5bac9a59a2f3c6fb13dd1c2c7a59dd826b78680f84988b30e15531d9835a2937

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4ff4f9eba6417325dee8a890cfa6aee6

    SHA1

    c1df1416cab03333d3e6055f76c59546622fc78b

    SHA256

    9876c5ac6cb3150c84ee70116caa89c1de103a3807757f1d77a9797b6009c58c

    SHA512

    e117ded64d9f9fbe2ffafe7a258584d1f0b13d9a23e22a7377a84c06a101a6fd00e11ea6d1e0e875db24ac307675e73aa816c690eb9baaed7a9b9db5323d4e47

  • /data/data/com.tplink.iot/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    2db1fb20c199f512d4d36d607b20f708

    SHA1

    614f9a100c2652530f4601030774f0bb57701af7

    SHA256

    d4ae85cc7ca62c8e0c58801226eda759ac69e21d68bfb3a3114bdb6d03d93204

    SHA512

    432611f4e4518936dced38446e57161d3bac8a128ef76b4e02d085de8574880e51b06a7584d16e5ebe7241325b4a25a3eb40d9943fb886fff2618adc2aaa813b

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/open-sessions/6577EA9C02B1000113CCF1F226B2D1FF/event0000000000_

    Filesize

    40KB

    MD5

    58a36e1899f5afcc30fabb93a88290c6

    SHA1

    322ebdea4c908abc1bddbe0ca5c2bea8357a4b85

    SHA256

    d14ebdb63fb64255ee32d4a34c790df0f86a154d4e92e0468868c012252345f3

    SHA512

    6a997ab92ba2a5aaa21da1a8ce9eec90b0fd6181d2246a49cae007ea86a234e08211afd57bf38c9d982d075aa615483fc36af07a2986e45d68ba1f58ece34f87

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/open-sessions/6577EA9E038A000213CCF1F226B2D1FF/report

    Filesize

    739B

    MD5

    19249d67a602c280cd3b600f91712da7

    SHA1

    22fa07afe56317359fa00a6cf827a09d4edffb4a

    SHA256

    a1c93206f88e36bc85af21a234a1ad1cae45bfb180b43029bc324b265bd2a49c

    SHA512

    6db9a349b7adf48ec2e15202c154ba40e86e74111c8e53d6e34d9939c657f7af1d1769b4e9eca5777b906e74bb8c4cf97d6fb841264cadf8468fc38d83c14599

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/priority-reports/6577EA9C02B1000113CCF1F226B2D1FF

    Filesize

    40KB

    MD5

    746862e5082856548503100a28080d91

    SHA1

    8c4848ed5dc93968814718de821551a79c42b490

    SHA256

    e6caf8fab8245fb80f3fb305a2314299c8a995b3f9b9fb8d39377857f6eb9775

    SHA512

    0f45b6fd6f11749f32ea6083ff47016da3f81e763ad18bac50780d44bd9ecbcb0b32133ede13c314c5d0ef3340a16dad7da636c5341ad6eb920b940d0d1fae06

  • /data/data/com.tplink.iot/files/PersistedInstallation6332261226153475643tmp

    Filesize

    90B

    MD5

    ed748b4d7a5e5ed0d445bd976d356732

    SHA1

    455538bd86cb8909ba735272b5a93c7583b1665a

    SHA256

    6a6e168ece5faeee6e9f31505670e9984df442066712403075413aedbfad5b4f

    SHA512

    50abc1e045e8cc37521a5222890a496bc9ff590f09694dea9ac5e218cc4d6b561561e2726a0f9166da800b84a460ef96409d76085db39d5cf103735bcd3215f6

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    e0a9d35fbb5705449870a41ab1aed10c

    SHA1

    4757b58312c4951b392b92f8a468e27dfb254086

    SHA256

    270c3e6c54d2e4d57ad45efd52be02c9f60eb7f04fe2649aceb21a738fa6551a

    SHA512

    606724276436c7f1be372206a10601d861933d20d58d592daa3423ac4ba1a5f7ab1f117e0a982d03cf37f82c6714e69f7053bab28d35f453809b3f121cee404a

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    ffcf3005d21435f9cb2c33b9ca679f6f

    SHA1

    488f8b9aa6e132d9f8f6d35179b6764953a4ed8e

    SHA256

    73bd96b94f93d36348de614ebf5cc25fa23b6027297957c54e466bc2dde5f4e3

    SHA512

    883ae47a7da032a56c159502262b31f4a345569aa7975bd488cf2cc36fe331f783bbc5a88381d6db794bc7aa8f1777b121bd7096c985fe9682bfdee3ec68b80e