Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1564734s
  • max time network
    146s
  • platform
    android_x86
  • resource
    android-x86-arm-20231211-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231211-enlocale:en-usos:android-9-x86system
  • submitted
    12/12/2023, 09:00

General

  • Target

    be0ae4394b8592cd1325b86669fa78f9ccd320d23f839e81001138be914a760f.apk

  • Size

    248KB

  • MD5

    54ae16a13dd825ef0589cd5e78a6f356

  • SHA1

    f16e355715924d9e37b6134433e312899f4501cf

  • SHA256

    be0ae4394b8592cd1325b86669fa78f9ccd320d23f839e81001138be914a760f

  • SHA512

    04066aa21ae6ac5786ec016a428c207aaf062d96d99a8ba20127b08333ed3bfc82df8e1052aebe75d2621aa7fd95ef33b334d9936e45a4825685edd8d2f12302

  • SSDEEP

    6144:J7iq53RZ3wVazR4GXzwupzH6fDLkXWnXXuqdiMrz:NiqlR6Va6GDT2PkXWnngMrz

Score
8/10

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 IoCs
  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Tries to add a device administrator. 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.photo.android.p
    1⤵
    • Removes its main activity from the application launcher
    • Requests cell location
    • Tries to add a device administrator.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4240
    • su
      2⤵
        PID:4269

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.photo.android.p/databases/dynamicamapfile.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.photo.android.p/databases/dynamicamapfile.db-journal

      Filesize

      512B

      MD5

      4488964b4f4a014fb9d80c00e72a2591

      SHA1

      1053a8a39bb573f8335125834c9bdd7d11d97aae

      SHA256

      0ab8b0674b8d98efa1060702202eab2d7a2bde1445f168b53d31fe3b24d6294a

      SHA512

      638f7a33ff712c480357d21aa805cc1db97e834b5b04a95e58f2b145c0b71cd34e184739531fccba397e7d24519ad46bdba15c33497bbb44b3a3d5f039226983

    • /data/data/com.photo.android.p/databases/dynamicamapfile.db-wal

      Filesize

      32KB

      MD5

      befdd0052469f08013adfec733e57608

      SHA1

      836993f313758caccf362f6928d7ada26dff82c7

      SHA256

      1aad0c02e8d70ef69eb67b7d933836beb47118c989bf7ce1363b08ca88dd5eed

      SHA512

      7c06ec8a1b0612c8d3e270e3dc5a0453212a245db8a4b9a39a5dcbcd42ad81675098fca5d0709b518ceb08a0592b47cae63ff19146d31de0310af0839b7af82d

    • /data/data/com.photo.android.p/databases/hmdb

      Filesize

      12KB

      MD5

      3fe30614d7e0d11db870b4624f6c50e0

      SHA1

      053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

      SHA256

      67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

      SHA512

      c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

    • /data/data/com.photo.android.p/databases/hmdb-journal

      Filesize

      512B

      MD5

      e385cfef58c05fc8f2fce15625bfa36d

      SHA1

      9613e256ace9917841857d288a94613827d5a36a

      SHA256

      6b0255cffe6061ea631cff07f2e33cd156c9adc5f0d4aaf81b0e9c4b4c6b3c91

      SHA512

      10388e5fbd596ee52c1ee375b8662b52b6b5817e5880fc05079f3a4076dcda92724f64bb72ea04698704e66439c3d34c76f5cef69451138e88d4aa2f2159ab9d

    • /data/data/com.photo.android.p/databases/hmdb-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.photo.android.p/databases/hmdb-wal

      Filesize

      16KB

      MD5

      910617333f55064e969762c1d54c356f

      SHA1

      159eb4ca7dd361a1f8c5f7019708adfb161840f8

      SHA256

      9be138f1e8d6f503609d783317fc9cfd79f60a343126cb5018ab4286dcd410f2

      SHA512

      bf0453a257930b1dfd81bd1a6e29402f8a7052f4936c5a06092ae41cc555462c72c08b448e75c13af34bd81859a45ddb8bf33f92ec936637250d06188c785d4f

    • /storage/emulated/0/Android/data/com.photo.android.p/files/carrierdata/1702371653

      Filesize

      917B

      MD5

      06c94e9ba85396fbf83dbaafa988d316

      SHA1

      d61ac8d435befd4aa76f360c73c8931deeed30a6

      SHA256

      87ef6c50110a96caad4113a71663a3fac26646ec8364704c4ae454bc21101a68

      SHA512

      9694dafc155ba6f981128a1e6c928e51a0101a8ea038dfbed8df0d50627654671f6608039cdaffa0a29bbfd2ffa21b40b3fa0f4dbe1835d9d7074be23edafacc

    • /storage/emulated/0/Android/data/com.photo.android.p/files/carrierdata/1702371653

      Filesize

      2KB

      MD5

      8047319d2aa31a0c297a33ba76ba8c88

      SHA1

      a678d2541664902a6008c9886c618daa1f3b28c6

      SHA256

      72b06ae109b0e0ce092d1955a3cf58ff0a8cb20b692ae30db42fb07363f0f009

      SHA512

      ab823d3428896af37ffe80318002348da6e6fb10472534efa43d9c5fb8eca08029ca7c91d9d4f1b29f1521147b6af9417b87ce99541570d86df398960c5bc18f

    • /storage/emulated/0/Android/data/tmp/map.dat

      Filesize

      109B

      MD5

      1bcf2683f3cde1caea11994818493585

      SHA1

      3fcb489ffae5a7d63d0077e46d44ffa24b684477

      SHA256

      08480d4ef2450d8a69472803d46550b69b8038d280479cc3e5f8320913e18dc4

      SHA512

      a4b6b190966ee1ea74f199b10d6d7567d00adeb68a28e16ce14a7d4e17b096c4f233ecb39fc39173a392c4dc4e881222650c693d512e19059ca836a3422f34ef