Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1564735s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20231211-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231211-enlocale:en-usos:android-10-x64system
  • submitted
    12/12/2023, 09:00

General

  • Target

    be0ae4394b8592cd1325b86669fa78f9ccd320d23f839e81001138be914a760f.apk

  • Size

    248KB

  • MD5

    54ae16a13dd825ef0589cd5e78a6f356

  • SHA1

    f16e355715924d9e37b6134433e312899f4501cf

  • SHA256

    be0ae4394b8592cd1325b86669fa78f9ccd320d23f839e81001138be914a760f

  • SHA512

    04066aa21ae6ac5786ec016a428c207aaf062d96d99a8ba20127b08333ed3bfc82df8e1052aebe75d2621aa7fd95ef33b334d9936e45a4825685edd8d2f12302

  • SSDEEP

    6144:J7iq53RZ3wVazR4GXzwupzH6fDLkXWnXXuqdiMrz:NiqlR6Va6GDT2PkXWnngMrz

Score
8/10

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 IoCs
  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.photo.android.p
    1⤵
    • Removes its main activity from the application launcher
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5005

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.photo.android.p/databases/dynamicamapfile.db

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/com.photo.android.p/databases/dynamicamapfile.db-journal

    Filesize

    512B

    MD5

    3b3b7947ae9d36203b1936a51911cd76

    SHA1

    fc42c827bfd29205e5507a8007ff99c16a83fc4f

    SHA256

    103da9cb9bb5af7bca097f5540f160af335f2efd7374dc3fc866e31722e316c6

    SHA512

    fc6059b5f8b5e78b8488dc01a67c0f238f23ccc8b30aee8380812beb952279f2e1a585e136069cc782467bb9354a82a26c20635ff1f1ef658c75cb13e85c7479

  • /data/data/com.photo.android.p/databases/dynamicamapfile.db-journal

    Filesize

    8KB

    MD5

    ca1ecc4a930f279d0d16ebc00f664bf8

    SHA1

    be944a561b3475557980219b9186ff89117279b5

    SHA256

    78df3f5a895257ec653dc26fc16516fd2ffe4cee7d72188a67eb2a7129247d3f

    SHA512

    fa2cdb9951b92827ba2b6670c0612bb3dd6eedc90fa9cccd1b0d761405f9f31146cb0077c8c09512408cd08984517148ff86111e3fa6a7228d5e60c04e65a88f

  • /data/data/com.photo.android.p/databases/hmdb

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.photo.android.p/databases/hmdb-journal

    Filesize

    512B

    MD5

    2804ef6c163ddbadd0185506f5316514

    SHA1

    7555f22ef1dc1329c00fb5ca3f546d81f23c2a11

    SHA256

    9eb2ee8d6e7819088b214651bcbc7777e10ca46f077985399c269ce540ae9d48

    SHA512

    01217a0d622e4f8e0144e7a694f17edd2cbf1db0eeaf6a54e73a6190b30589060c616f89038aaeaf8218544410855403f9fe8b849e97f1b3051165c24e259b15

  • /data/data/com.photo.android.p/databases/hmdb-journal

    Filesize

    8KB

    MD5

    8be4c4230b2629676d6ddc654d18725d

    SHA1

    27aac10ed2ea1a6f41092eee17388b5c962cf770

    SHA256

    6297e5e0e3398e46dde2819ba85a89e32d086069e9c190fd9d018bd4e0b7ea0e

    SHA512

    95af56e2aa10af03bdeee99ee48b54076f25981e8d7e2ae79a6d4da8fafce6a0b25930999fe6c0c1c078555eff8e87131d0ea9ddb995bc3c134b4b3351f3b74e

  • /storage/emulated/0/Android/data/tmp/map.dat

    Filesize

    109B

    MD5

    90b3a6b384c25e53d66d2ecc85632ded

    SHA1

    22874f228ff092fe31f7bbeed630e5cd4573db08

    SHA256

    84670c738312fb3be60bc20b899fdc363048656ba72165ddf8ea58b6bd45f3eb

    SHA512

    ce314e6de0bd085ade2b80ffb6d421549807f6f46641c5429d0cffeddf1ab3c55d169fd6ee4ae8ef9fad6654d6fa8883d6e0add33b5a6b0c5957b32f010cc17a