Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2207713s
  • max time network
    135s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19/12/2023, 16:12

General

  • Target

    59999afa2d2e80b37367488ab6e75f41.apk

  • Size

    9.5MB

  • MD5

    59999afa2d2e80b37367488ab6e75f41

  • SHA1

    fdee58000771fbfc857340821b0cac449448e76f

  • SHA256

    b83b142aab68e75da5b97b0f46ef4742c3dd53f31d0ee500f2cfda95aaf6cdbb

  • SHA512

    e9b384572996542b70e49469cd491c30b838c5b64ed4b078dc32283d84765f9bd830cb4976f87e12bb65c48c17177821807345733abbe73f880ce85538223d06

  • SSDEEP

    196608:NN01y/zdAIliLuDcdf3u7rRDPNOIoKq0+ul5RFomYlPhBnlYQcwqZCAaOqUATWoZ:rT/zDgLscVaOLRulfGrTBqXZCnOqHWJW

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • hdpfans.com
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4475
  • hdpfans.com:remote
    1⤵
      PID:4612

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/hdpfans.com/databases/hdplive_tv.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/hdpfans.com/databases/hdplive_tv.db-journal

      Filesize

      512B

      MD5

      9159ef232f72328da8c214be626feea0

      SHA1

      bbf16edc7aefd10c357a9c342f0f5f17cc3572b7

      SHA256

      baa74a769b179a3f3449cb259a25eadf7e9ca381cbbda3c597470314d03abcdf

      SHA512

      69b3058977066234ab59c34c1386889dc12ae950b7b18adcf75dd34f3e20f58a3b0fe5b67bfaabd9fbf85e0311162b009645f58a0b52116f1a5d75ff60635d02

    • /data/data/hdpfans.com/databases/hdplive_tv.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/hdpfans.com/databases/hdplive_tv.db-wal

      Filesize

      56KB

      MD5

      de67b00c4a95924ae7796c2d11a99b2d

      SHA1

      89e52ce3462bf35d0cf8e12102e31b7f21818eab

      SHA256

      0ca9e71a8fb784f063e4d0cfa434ff1970a07c834813e11d75285270f7c02275

      SHA512

      dbe3cfb8c9e1af19b6db9e7f82e387f37960b66a2c1cdf5e8410dc73c34ab105b12515605ba7224e9736f629576e0d41076265543a07536369d3236d877a20ea

    • /data/data/hdpfans.com/files/readme.txt

      Filesize

      5B

      MD5

      5c43dd53da4c684501d249af3707364f

      SHA1

      21be99153561f83ad48f7df2df913fa0ebb5481b

      SHA256

      e2562169afe06342dc07d82fd65d8b32877c8b26e8a724e2112929a178269465

      SHA512

      da4b7e773a0b045851db62b47df3cc16445c1eed9dc12dc7c1cd060c6df3a6b3407758ac6a97a2c6a20cb20d14f4a8f00051b92d12d05cbd1ce1e901078bf797

    • /storage/emulated/0/backups/system/.confd

      Filesize

      24KB

      MD5

      8c7f6e3b52e6e841b895bbd13644ed43

      SHA1

      ec8daf46a7eb99c75ea1ce8582ef77b2df8455d2

      SHA256

      6615188d5d8fa77b44fbae7a249d073b3623316e7489c5fec95fe53188ea467c

      SHA512

      cffafd628e62fa915872796ee02dd8119cfebd6811291155acd400986ee5d34b244ab3b5d0bd386566724205771f665571bcb04950d390c5c60072fdb90c5280

    • /storage/emulated/0/backups/system/.confd

      Filesize

      24KB

      MD5

      0a1528085fabf4ad2e2b8d749d92f0c1

      SHA1

      3450e15e061c3e1417e2e2e68707ec8a89648441

      SHA256

      dd5322df6403d6913c8c5e816d38cdb43233638ba6d0fb3daad08fec9c017ea3

      SHA512

      299ba7b42dae68d9d914d2921dbc687ea7e8ae4a04afb31a06fafecd66fad7a95d0fd96216d8413d8eb1465511aef6c1587bdcc544d8f370e0157d00f7b01e2a

    • /storage/emulated/0/backups/system/.confd

      Filesize

      20KB

      MD5

      c02f1993206281b47ce9608f85b7e61e

      SHA1

      74cb8b0f64ff0af4c3d320606894ab77ea01948f

      SHA256

      30d421eeaf3a6415d67d587373751607ced8db089e624995d0662de6d1b188c2

      SHA512

      293eba5107411968c3f93151cef20126106931739b94b97929d86e6014262842cca8a5ffb673c0697634d05bf07e253a178095ac2288ca44594458aba458d723

    • /storage/emulated/0/backups/system/.confd-journal

      Filesize

      512B

      MD5

      b53cd31e1a56a699644e197912efc37d

      SHA1

      157fcbc57812ae0934700d47acfe4eaa802b6cb7

      SHA256

      658a1c54556ec2729f0b4cd96a591f486e3f70bae1503999c4c5e4650d97507d

      SHA512

      daa96b41f7c6176f55fa971689b8d9c8ed75c575ccb14c26a61cc9e1a285af732648e19bfcdd70e5e364861d7827d9fa8d562d08f51a87ebc42d40e6457b0d40

    • /storage/emulated/0/backups/system/.confd-wal

      Filesize

      8KB

      MD5

      e62e50a20c53c76b0fea82743165ca55

      SHA1

      d8185c073908c5a3ee5bb622e178f11a3123cb75

      SHA256

      287b50cbcad11a5b51eb6e294f982b237bf02deddcd128502896f7b43cef9bbc

      SHA512

      39182f15a8d01b09fb3038a936dc2affbeeba070ff1c8391898c9c5f7742705bab1cd725a7b81d5c011c15b53cc81ef95bd467e01855d281a9766a4cfb824713

    • /storage/emulated/0/backups/system/.confd-wal

      Filesize

      36KB

      MD5

      ef18caceff2b77a9d9d3c52a724d461d

      SHA1

      f243e12f46d520ffa05e12f666261edbdd8e9785

      SHA256

      e7113ccb62bd3ff6a4b523c9832f62287077c984728a7490fdad8d0df4efd68c

      SHA512

      0dfb89cc2bd423c0acdddf5af5192da51a56bd3e1cd2e88efd4f6b7fcaac86e86318e26a9248f4fb49acc68ac1de8fe55b69f7774b816627c667c413e911b764

    • /storage/emulated/0/backups/system/.confd-wal

      Filesize

      12KB

      MD5

      a55a1d43d2eaee9b8dd2fb583ab4646b

      SHA1

      30ec43f57e667f939087d6cdc192fa67cc58540d

      SHA256

      92dce0c191a2fc9d52cd6eccbb4cd319cabebee8294649f3aa4200376cd0beaf

      SHA512

      0407ddb44eea5cb9c0e904e8190aef2309191a8d2ba86bb5da683972ac6b681d0cf8a863d613771777d7cb7b2cbc6158ba42c3e30803b76fad0d8d2da5211abf

    • /storage/emulated/0/backups/system/.timestamp

      Filesize

      55B

      MD5

      b787c49f0291eed7b714789f13648024

      SHA1

      3c8a0034bf844b7a57da41ee704361926fdbad49

      SHA256

      2cd7626813e1eec463adba549fcbfc541c7ca7010594cf3bb7b9eedc5dc3c1d9

      SHA512

      cea83563a5fec29bf5180e4449b8b87f04b05336e51010d75f692735a03323d5fb52c90ea0eefd5f35b4865320dac740caf72d438b6e8369cbd7ec2e945e925e

    • /storage/emulated/0/backups/system/.timestamp

      Filesize

      56KB

      MD5

      59fc5425639355cd3d9579eadda6b263

      SHA1

      a0a08cc4dd48fbd8c42bd0c5431b4d23650eb596

      SHA256

      1064087b3958f2d6da9cdeeb559d1340d6e71bd9ceec92d551001694c3af29a8

      SHA512

      2ca6bf8f0d122d74965c22f867cd93f07d816112073e7a59b138e175e803eefc69e5d8b009f6d7752c72cb44beda7ca7855f969c9652ebfc19c8e889e84fea87