Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2193947s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19/12/2023, 11:44

General

  • Target

    APPayAssistEx.apk

  • Size

    4.0MB

  • MD5

    5b93e3237c3ba784d53d04f38ab1b70d

  • SHA1

    b1511bcb417e8188faa83005759394687dc9acc9

  • SHA256

    c25b0fe9ff77551d4a9744d9d9053ed45e807b07bf52e5e003b415341e8b671d

  • SHA512

    47e35b554f4adf42ac4273c913facd1d99acec20f17897e27d60b292a81f1b1838936f6b4b34017364b8c5d478a5c0cf48d5680d40cd229c3d765d3b9a0868e3

  • SSDEEP

    98304:fIDOfGyMudaOXTUjvJ3fk/RlNW13vToP5N:Q6fSuYiIjx3fk/REvToP3

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.allinpay.appayassistex
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4268
    • /system/bin/sh -c getprop
      2⤵
        PID:4302
      • getprop
        2⤵
          PID:4302
        • /system/bin/sh -c type su
          2⤵
            PID:4334

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.allinpay.appayassistex/app_crashrecord/1004

          Filesize

          229B

          MD5

          fedd464496f1093f6a30e0e1ddd405ad

          SHA1

          f6fe83d020de95de717e554fab5036dc19f897c6

          SHA256

          037e4e77a1d35b0e1cfc77a65919e0d67f836cf7e2ebe23afb646bf95216247e

          SHA512

          4ec59ad34ccdd2d50b5c258c5c50103f890cf93553bd774e5874dfff94042a3b54119237f21bbce9b5f29d8d480f5fc4108e2a36c5e57da6b0ef4103897e009f

        • /data/data/com.allinpay.appayassistex/app_crashrecord/1004

          Filesize

          58B

          MD5

          0d210bfb2a0e1f1b4c082a6a0f79de07

          SHA1

          bb8ed9e364db79d1d9f2fcde3f15091893222faa

          SHA256

          988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

          SHA512

          536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

        • /data/data/com.allinpay.appayassistex/databases/bugly_db_

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.allinpay.appayassistex/databases/bugly_db_-journal

          Filesize

          512B

          MD5

          0b3726b9e2978087373f3bce10773acb

          SHA1

          8de778df7c62f10b028e7cb007fd6358d2d58a0b

          SHA256

          b7744659145adcf982788f5367f1c5cdedd12d3c1298ab89691b33a668a33b17

          SHA512

          74e4aa6edc0c4a34ca212248d19d927f072843a24d22a720077dff2e2d30960f99225c6e1c1275d5730b22b5ae7d5841a59cdce2601ca0518d4434803d2b76fa

        • /data/data/com.allinpay.appayassistex/databases/bugly_db_-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.allinpay.appayassistex/databases/bugly_db_-wal

          Filesize

          72KB

          MD5

          9ee059270ed4dc7e3723d34ad4cd3f55

          SHA1

          f00bc682a8eebbe020bb1e8d92f1c9b165d12dd2

          SHA256

          925ce77832186ff98066fdc9654c10e684eee7c8ce112a7cc5b8bec36781a8d3

          SHA512

          be4124f4cc2bee2c1af8a5cb9b41fdc92bc46fcffa0d4a993b9f7a75c7d908c210caaccbf76366e50f67d305b7f6b27bece300639a75c459871b13f005aa76c2