Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1550606s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231211-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231211-enlocale:en-usos:android-11-x64system
  • submitted
    12/12/2023, 05:06

General

  • Target

    ece44440ccec25557bea19115f7d3fc0.apk

  • Size

    100.5MB

  • MD5

    ece44440ccec25557bea19115f7d3fc0

  • SHA1

    5dc42cd94fda6f7b871c96688245c454a9d35190

  • SHA256

    8d043942c8ca1c45dab4bbc7e59b18e6860baf74a0b79cb4db87f47842848bd9

  • SHA512

    3cd5d41ff59888adde1d7087b30ccc7f269282183345b2df66587c921f713abcf64cd628b07c12d7abad9ce7a9fdd60d806775e942fcc572cab54312b2d2c27c

  • SSDEEP

    3145728:XSHYconQp5wMSpFtYL3dJj8yvFPeNo2L87mkAh/W29QaON:C4/u5wdtYL3wGFmNjL87mkAZWJH

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.tplink.iot
    1⤵
    • Acquires the wake lock
    PID:4517

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    2a451cfc7c1c3de2836b8091f0d2f03b

    SHA1

    12e448af3b8ee4fccf9d33cffd04086ec2f97b42

    SHA256

    976c68d0ff255b058362b6542cadbe6c128e0a7d40e2b721f20ec12b220a4391

    SHA512

    b47e88b53708b7cc33c3134e3a1ed58f9d9802cf0f48fe518fbaf35acbea40bed982b125f61af2aa0ac8d96b6e69ba74d27f86945da97ad7c47708b240120b6d

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    4bf197f6ff25f0b7b049e3e733c3a840

    SHA1

    9cc2ae05593299cd83e67e46b9c60ea05201949d

    SHA256

    a85c0d6d00abfe81930a7321b10da01a6ec054e336aabc238572df1970d67943

    SHA512

    f3f12b992378079b0493c5c189174fc65666d5f3696fcbd4ff8e57e365bed99f2d50f814a98e10bbda8d69db036e97ce8bfbdf2da9f1623951de9c528c8210e5

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    9ac20c31d98a1c9e73420e083b7bd368

    SHA1

    e180f69037cd9a05fa74bfef81420c8a6f919142

    SHA256

    d6e4faf22260a8e9113f39a1c2a23b08f9bbd9279e6fab94a4668f0b158f5c49

    SHA512

    31234ec19901e730211bfc42e754ecc9a5c7961cd5b09015fa9ba66b928e3825a5428bf774f8236428687e08eb64e89634eac2d969594187c8cf2cc129037619

  • /data/data/com.tplink.iot/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    7019f54f6c93d0c693f90eea79ddcfa5

    SHA1

    3eab139bc7aab3f8953b403808693b3b4ac762d0

    SHA256

    44f2e4c573e3220517a6e048b4bab5fe9f90969781bef19fc1385518301fd1c2

    SHA512

    7b9ed19cba9021667622ffe1baca4bf9b46f87a8c7e644ad56223d479cc563937059749341b1009b6dc6a25aaed021c50f1155d39a2c42af88ef83e714ff8548

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.json

    Filesize

    709B

    MD5

    20ba1bdb187bd697d9dc33e9629a81de

    SHA1

    601f1359ea40361830807e6e41e59db8226d32c7

    SHA256

    eee684335fd3daf2d3fdfab4f986fb9f2116f348b1a1cec6e5dc868da9c8e0ba

    SHA512

    f5a53afcf1411308833d4cb527142ba401fc3aed812d6f6bb5a8992999e25a48d36dc90aa5f639086b8c355f683843bc7359ba680e46a349649d9a6c19ef12d0

  • /data/data/com.tplink.iot/files/.com.google.firebase.crashlytics.files.v1/open-sessions/6577EA940153000111A5970B1DCC4367/report

    Filesize

    739B

    MD5

    5e5f29c7f5abfea43583c99e07fdb0c6

    SHA1

    883d8b0a83740a49e5121ab0afa47ab62f1cdd57

    SHA256

    aedcbac8e291cb7c9877b1d7f5a06713d3fbc25beb38be2799919d599a69f0b6

    SHA512

    3ab7e3bfc0ce1c6840d266e998a891e113d7e7b4e804031b44849b99a8ade3b84e935b32f193389fdbd9ac91e65750f6dca3e63f2fbd50aaaef6dce054dbe15c

  • /data/data/com.tplink.iot/files/PersistedInstallation5213213675649876360tmp

    Filesize

    558B

    MD5

    3e426027727e4d50b998c797ea243995

    SHA1

    a8a3cf3b6ed9724695dc8e5fc17c3182e9fee444

    SHA256

    5dc69d93456309522bb8b3b7cd6a9f33037898bdc4226d3da8a5b22c767506b4

    SHA512

    8e5fe7c75aef52fffd621aff4cd097056253e07be873aa1b8801c299091f6b224fa1c98230f0ad28444ef422b3ff91464b5a8833dbc0c09a54aa2cb320148e68

  • /data/data/com.tplink.iot/files/PersistedInstallation7401532822137363383tmp

    Filesize

    90B

    MD5

    2a32eaf7ad6f478ce218c27d787902e7

    SHA1

    d342319184bdbc66acebee8e38ace02302f46898

    SHA256

    2436ca1ed2c00952ad3503ed1bf778a4caa483485fdcca8998a3ba2b347ed0de

    SHA512

    64db886c34300fd364f987f2a6f8e68a1a89ce78ee13516a3d3ac696d8bc97947e273feb2339d438a05a06711d3b9e8c9463b288a9dc85918c3ce9c1b84dd7d3

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    55df290c9bfa5c8d6f2d84e6cad317cd

    SHA1

    7cba26edc2833d014ed8261fa7bcea8303d11e83

    SHA256

    6c4ee7536d5414e5714203f8600a942bf98123c160f7815cca429ee9cf7b7555

    SHA512

    d950f10cff775261b2222deca04f6b811f9abea627a319d76bafd9becb7446788c9f2554eadc50feeafebd4b9f406cb6ce516ce21f35595eddb5dbe140362b2e

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    7f0586895126fb0c4666bae654801f0b

    SHA1

    0dce7fe02fa3d5ae8b08e6bd2f4333c43c26548a

    SHA256

    b704e64c8a7dfc2cbd4631612d47fa45bfc8e27f3da233c35b1c095996fbef90

    SHA512

    62717ca4ccfe5ddbde2245b7655376be8c746954acdd0a1f336c77353d7c0f1124ac2e76070475ba442e3a36c5684575875c8185a270de34f9f6c92961479bd8

  • /data/data/com.tplink.iot/no_backup/androidx.work.workdb-wal

    Filesize

    56KB

    MD5

    12648a8c4318ac61720bb6561d87c2e7

    SHA1

    d7d47f831578a139998598b00d6900132088e466

    SHA256

    b2df56f3afa8e48d668ff9b0bed2a70ef5cf9fcc20de0e1c2b0a7ff3afc5faae

    SHA512

    82967c479d85a330d897acdd98bd34a4547f22af6ee520633e71278bb1277d69e861e1e6822ce22f232487e8c68945f34531a3fc22119fb413932f939ac2441d