Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2261342s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19/12/2023, 23:47

General

  • Target

    6e683a41bd2b206bd5a820ea6bf60a6f3c279b23c719e7a796af8700a0cd94b9.apk

  • Size

    12.4MB

  • MD5

    728f5d56276ca08e5b6277d33fec368a

  • SHA1

    bbfbb41ea90a60f9f3bf788184aac17d25edb1bb

  • SHA256

    6e683a41bd2b206bd5a820ea6bf60a6f3c279b23c719e7a796af8700a0cd94b9

  • SHA512

    01ca55052cafbdb87b24159b0f925591998a098b2e35446ae935c832f7588eb32ec11b863bd7935381a829e3ce632dfd9e19940cf0eaa4469d2af9118c56d856

  • SSDEEP

    196608:TkdBVcCUwiJbPUwKkNlNIC2URVqsncNl3QiDtPSWPpEoQFFzL7n9wMEUcl8:Ad7iJbPUmLIfURV/nC7ZPAr97EUK8

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.fangdd.mobile.fddhouseownersell
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4241
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4305
      • getprop ro.board.platform
        2⤵
          PID:4305
        • /system/bin/sh -c type su
          2⤵
            PID:4361
        • com.fangdd.mobile.fddhouseownersell:pushservice
          1⤵
          • Acquires the wake lock
          • Uses Crypto APIs (Might try to encrypt user data)
          PID:4294
          • /system/bin/sh -c type su
            2⤵
              PID:4428

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_-journal

            Filesize

            512B

            MD5

            029078a45e72e0ce12a6537aa68db599

            SHA1

            2cd0c7d85f94110bc0e7b30fcd4f4bf62fbabf4e

            SHA256

            cc2b0c02fcae111c261474bf04265017c768e7909187bb45fadcac051941cb60

            SHA512

            99b2f717cae621eb9ba2961b9cc24cd9cec3644f9a16d27f4d1cf3ece7d0682425814ef9d3f3c1231e21310815066d236d2037eeec283345af1e7db429fbd62b

          • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_-wal

            Filesize

            56KB

            MD5

            5d8a03aae5b17cc9399e4ec69c6ad07d

            SHA1

            9c07ff37de6912d2b58c322fd86f12c33029ffce

            SHA256

            ac787127f081e4ff20859babee671311e81721f79f94aa4d335e48b85e8a24de

            SHA512

            6b437792f549dc42ebba82e53afc5aa5e6c96b71a2ddd3a6b71a50ac3205b48fff2bb8f2944897c82dc5626606ebeb2d6e3d6df851a5b3dc09a95fe38179da20

          • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_-wal

            Filesize

            525KB

            MD5

            9f4e9951995a017a9f96db441b855f04

            SHA1

            f54882ac1a13cac2e4191ee0da4e4d67399c68fa

            SHA256

            c6dffb5f55e87791e94b4b33c94324b0c52314978caf90c7dd9d80a8bb874c49

            SHA512

            a9f96cc803f2ef177f704c48ef17d614e5f0341a5995bb51de98fbc90c9063a4ebdb548cdccc322c6052a2baee143a32c902acbe55348c792ee5c06560f751d6

          • /data/data/com.fangdd.mobile.fddhouseownersell/databases/pushsdk.db-journal

            Filesize

            512B

            MD5

            969dd347c78c205de34a4f6b63a1aa3d

            SHA1

            28480762ed6cc2c6ac92eea3802860dbd2980ed1

            SHA256

            f9929ee9d664ecb6d42d9afcac3d1b8ee7db700afb83f4778605de3e2afe7f95

            SHA512

            126b54b6bfbd141d954d65ecda46d2ad72cc9b1d31736eb9b78f3a41f5c66c41c0e31e5affd6bd56b87392c260fa076d01b5a59608112fd03bcd047b71f1d679

          • /data/data/com.fangdd.mobile.fddhouseownersell/databases/pushsdk.db-wal

            Filesize

            80KB

            MD5

            5f50cbb099a06d665e395850101b0d94

            SHA1

            36912dd9cc0773f07c5cf67c32b5d89237961837

            SHA256

            a7250ed2fc0c75f199782379889414099c3b2fe5aed884b8892564f460165387

            SHA512

            e40760a89327be901e73000b38d4fd8113e360310d931d34346e22b498302e1d87d71a2275c26c4f7c20dbf7928ba099bf8c441c401cfdebdab082b8251f7abe

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/.um/um_cache_1703068311337.env

            Filesize

            625B

            MD5

            5a7aecef8e18e6aaec6e5c88095321b0

            SHA1

            70a316619feaa4e8744b432e6aa7b5b30ba4dbe8

            SHA256

            47df47b6cffb310090768dcc47000d0f42151256747f424e6c4b02186663cd1f

            SHA512

            e412b7cfcd8371b9ec6a0af838c7f6865f41ba69c62d7b94cd6d0f454519032bce174c3e467cea94680d6ee017ca8e2ee48b4438a9706b562d64d29426fa6342

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/.umeng/exchangeIdentity.json

            Filesize

            162B

            MD5

            316932d3ccc53e27047500b41e2bbd97

            SHA1

            f40189f02320069ba45aef83bd8aa3f1d5b0407d

            SHA256

            6c9990783493f3299d8987b3e67e5ef3629b66879386a84f040ceaafbc4ca3aa

            SHA512

            f971a1b0415643fc9fe088c9b28243324cbb27b15749376ec1412d6988534073d55abae15efec23ba2ce250113ba07f65cb201daafb7283d0f0c9fed0ca74176

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/a/ResPack.rs

            Filesize

            525KB

            MD5

            0357e8edde36315c0e0a4f5385de625f

            SHA1

            2e6c6f15010e88dac5078f34e31a8ddf5e032f2f

            SHA256

            44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d

            SHA512

            497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/a/mapstyle.sty

            Filesize

            248KB

            MD5

            46a9f9a5221dbe4ff71bfcd2ee045c5c

            SHA1

            915cb3bc2f0096dede38afc1cd7f09c8782360a9

            SHA256

            ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9

            SHA512

            185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/a/satellitestyle.sty

            Filesize

            166KB

            MD5

            3f1348cd6165c9a66a9892565c917ca1

            SHA1

            96f0c939438c494cf3fd89246d458e92c0c7203b

            SHA256

            5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a

            SHA512

            405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/a/trafficstyle.sty

            Filesize

            4KB

            MD5

            6a86f30539dfc9332cd235fc48fcb62c

            SHA1

            5c202003f6346edb85175b8df7c460793f5512c6

            SHA256

            34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f

            SHA512

            f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/h/DVDirectory.cfg

            Filesize

            69KB

            MD5

            4e9eab735928758b860e48b2f9befd7b

            SHA1

            7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569

            SHA256

            1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4

            SHA512

            c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/h/DVHotMap.cfg

            Filesize

            10KB

            MD5

            c16f5ca1517683c46e02a6b71aab3c00

            SHA1

            2d09a048d1b8d556d89d4d723947e9e234b5e59b

            SHA256

            13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

            SHA512

            a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/h/DVHotcity.cfg

            Filesize

            1KB

            MD5

            883c30365d5d377966125dd0c079debd

            SHA1

            d296ec1e3f4badb6e3e6166c1473fb55d4265761

            SHA256

            50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa

            SHA512

            00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/h/DVVersion.cfg

            Filesize

            86B

            MD5

            298924848d2517a508f43ff0cc51bd3b

            SHA1

            b9fcde7b86653ead6deb57280a6049cf87745710

            SHA256

            0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b

            SHA512

            63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/l/DVDirectory.cfg

            Filesize

            69KB

            MD5

            65685a117c72fe8fbf5a92b07073c99e

            SHA1

            b115b527f74e4c291edcaab19b316a446aca8f5b

            SHA256

            19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

            SHA512

            e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/l/DVHotMap.cfg

            Filesize

            10KB

            MD5

            cc3fad9057e0940ad4d4c7ad27922023

            SHA1

            403cbbcd7b819733b5caf49ed2a58d654441e99d

            SHA256

            f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

            SHA512

            ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/l/DVHotcity.cfg

            Filesize

            1KB

            MD5

            1c6abcbbd253448057930ad1cc59ac75

            SHA1

            a5845d1c4bc87b8b4785b456d76edcb8309eda4e

            SHA256

            a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

            SHA512

            71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/l/DVVersion.cfg

            Filesize

            127B

            MD5

            d54b7b380a5ff46c78283013a07d8e0f

            SHA1

            f697c5f7028ba2679a96d6bc5291c38ff96d7982

            SHA256

            c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

            SHA512

            ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/umeng_it.cache

            Filesize

            310B

            MD5

            b7efa8e7db71da28d7ad00eb9628d970

            SHA1

            56c9d3a0a20dc0a32aa09ffad89456e03cfec37f

            SHA256

            ed3dfbb67b3adecb2f85a3115e4689460a628ceee60ebebd0055e2112bb69bb2

            SHA512

            fc291a21a84c5f8f12ecf4fb6af24efae08e4efe18aacdabf140319342f5d5fc926b8807e06817797f2dc2c648c0b055bc2143bd0e553373bfe593db005c6615

          • /data/data/com.fangdd.mobile.fddhouseownersell/files/ver.dat

            Filesize

            6B

            MD5

            8e31aa8d6b61e8b044ac3346e87098d6

            SHA1

            70e4050667039f00eb5231bd731b9f3cb5daf00b

            SHA256

            d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b

            SHA512

            2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

          • /storage/emulated/0/Android/data/com.fangdd.mobile.fddhouseownersell/cache/uil-images/journal.tmp

            Filesize

            31B

            MD5

            8c92de9ce46d41a22f3b20f77404cc1d

            SHA1

            8671a6dca00edb72be47363a7071be65cf270373

            SHA256

            68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

            SHA512

            30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

          • /storage/emulated/0/baidu/.cuid

            Filesize

            89B

            MD5

            4b03a2665f99b01b20f54128bbeb1838

            SHA1

            8860bb256bf2272603bcbc0ad5b565d84e2d277c

            SHA256

            d7e9b3f6ec12a37ffcf98a320e1afd08e0ccc378e0e16ff93b93efe50f339c40

            SHA512

            c3ab5e08513312296f534d7415f179476c960878f3b6d239cdcab5fb1ec47671cf66d9ba3af36857742551852b8c62b33143fd9393255bd3c7b2a929ad9c7b34