Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2262033s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 00:02

General

  • Target

    706fad17248dc2731fbd3732d452ad74a6846e27f4fda48f98e8170b002ff75d.apk

  • Size

    2.4MB

  • MD5

    388b9ed95e5dd04fd5aea9bfbf05ce13

  • SHA1

    b75e5b8e40ce6f1b70e45aab6589eb2d62217476

  • SHA256

    706fad17248dc2731fbd3732d452ad74a6846e27f4fda48f98e8170b002ff75d

  • SHA512

    60a3156a351496e0f26dbff09816e7a787853371bfeb1b1fb585eae8bfe7384d6dc0de4f926af20260a31a57f67f23e36bdbfddaf391001d7d270e2446d22c1a

  • SSDEEP

    49152:NmYqCottcFF3pJgUxDZomznCwDyqn/68sJzyI3Gi4rZTRSpnQm:NmHcX3xamzCYn/DsJzy3i4FE

Score
5/10

Malware Config

Signatures

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.yxxinglin.xzid10794
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yxxinglin.xzid10794/databases/ua.db

    Filesize

    24KB

    MD5

    eba3e2e01012f03f380b4e3612c1c905

    SHA1

    f7f366f3b18f13327202e97da20fc239981cdd17

    SHA256

    349f72a638f3ec2e39014c2e4a824f88666fd80bafa15f716e65adc79628d378

    SHA512

    2a493b8edfe71303b43bbcbdf93f51dc7e3d4cee9f25013c072f0c4dade764c0065e9a5f024a60452c686ca58821ec87ee505e4734100c55701edb385bb7b73a

  • /data/data/com.yxxinglin.xzid10794/databases/ua.db

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/data/com.yxxinglin.xzid10794/databases/ua.db-journal

    Filesize

    8KB

    MD5

    184642e00411139ad3b2515ba128c172

    SHA1

    caf8a507793a125693c4f8e4d135adec6cbc24d5

    SHA256

    acf83dfee865c1caf6b9cf2e0173bbe316fe711a2b7ecf352467da10a8b62fc7

    SHA512

    ca9eebf905f48adb64d5e3b41abef34b0de71cbee5bc645adcda098b51ece048cdac4ad168b00b4b558817a50d98c6d0f9a886567cbe8718a7e71292731b11f2

  • /data/data/com.yxxinglin.xzid10794/databases/ua.db-journal

    Filesize

    16KB

    MD5

    8cc035eca21336a70311fc51756280ef

    SHA1

    c82b73ad30f23f1a263b5158b5340f09d513c8a2

    SHA256

    89fa703f2db65c884d749e0565ea04029d2fe102dd48e904af804aa4b31f5896

    SHA512

    0025b422874ec09e3d0473a8985e864f019492135df9fbfc5459196c7a9b8fb8444f39ce7a371d9fd892d6a89825aa52737ef137a6fe8ccd393d59f2e7ddfed1

  • /data/data/com.yxxinglin.xzid10794/databases/ua.db-journal

    Filesize

    512B

    MD5

    a41ac5b06601c4b904bde8cf98ba6c8a

    SHA1

    b4f8bb7ebe07a5c32971fcbb580003c84ab61c89

    SHA256

    e587ad304f9d5dcb315213d8db8f34f89f795015b5fb14ee61491cf17f936e2f

    SHA512

    ee6d879d47cd1dac450982b90ac71d33c38948875085d0b637687aa641a01617610034d0f5a71dccf43324482d623da828e07349045c8a48ad078d6ecb4611dc

  • /data/data/com.yxxinglin.xzid10794/databases/ua.db-journal

    Filesize

    8KB

    MD5

    2167c82f2d7dd2194435614843ec9fa4

    SHA1

    51eddf6d6dcd20cbf0c8afa072c5752a84fb6fcf

    SHA256

    f1e33594b305c05d168cfbffadab5750cdd23f3dd85829a7a5f42606c16f2b0e

    SHA512

    ff157bed1e707c7c3e3bf263839c32874a6ec1995c80207bd7988d286e3660e0f7e32779c6356631263abe527d3746844825c3ce95b310c11c586fef5baccecc

  • /data/user/0/com.yxxinglin.xzid10794/files/.envelope/a==7.5.0&&1.0.0_1703068933083_envelope.log

    Filesize

    1KB

    MD5

    b45a6e13f84219e71f3a1e6dcc3b4881

    SHA1

    efbd94b9556bb100305cefdd1b4b0e99446e9b07

    SHA256

    722e4c28e6c2acb7aac8701930c9770e99c716be80754831180b4d05ffa35c03

    SHA512

    a450a16603cd682f7314a54631772d02d12f3208e8048f716e27d164d02c3cd2f623ab448b5d2465aed05b46e09b61d170856c53c189211e8d23b92cbf51aa80

  • /data/user/0/com.yxxinglin.xzid10794/files/.envelope/i==1.2.0&&1.0.0_1703068928169_envelope.log

    Filesize

    2KB

    MD5

    67e5ff8dc1d1f4346cdb9e6f9778bee6

    SHA1

    c0cae6e0871c5cc026f90c6c4eea51e7e64352a6

    SHA256

    eabd7e8f7fe68421ff4d911c219a10b2fdafd269a90a3bd347d46386f4cb63e1

    SHA512

    979b051f17e3a7fc71f4dd5cec751135e5421323dc91cd66b6a4be62ce39e761c349273bb68145626af650db869f47db177496e2292ee5a998c3fcbfb2dbd0ad

  • /data/user/0/com.yxxinglin.xzid10794/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    5a7c8977abc2e21c79db0b4c66b5d321

    SHA1

    848a0d67c043e1bfb48693561c04cffd2f2bce04

    SHA256

    53b28cb0c756400f939a9bbce7efc1574482f9d3ad283fb70b69cfd2833f2adc

    SHA512

    5ad0daed9ce370ec17d54518cab5980cd703089bf86200f467b20d42c65e11a48917cd4a13a707b9750b32d3074a80fdc1aaf1864197f90213318616229f2440

  • /data/user/0/com.yxxinglin.xzid10794/files/exid.dat

    Filesize

    62B

    MD5

    dea092318ca7acce21a65ac85c9d2b11

    SHA1

    fc24ec3a8fbcb48a2e9141ba61da0fda5ef6d398

    SHA256

    425bf26238882f2523d92eaaf10e61134c6ab0f370bd688375765f6a23ecd946

    SHA512

    8649bf0d9a7949d46190edea839c2ce17ca4db1b7babaa22310386cfe92db83b0885815b0a6b8fd01254d1ad58f098a0089e068e1f67123fd38a72f635e45d18

  • /data/user/0/com.yxxinglin.xzid10794/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMDY4OTI3OTY2

    Filesize

    1KB

    MD5

    62d97988d0e46283a6cbcebca1e95dca

    SHA1

    05c68324be1f630dd7ffc65ebcef03ae65382d00

    SHA256

    a24e9da5224a5a9ca3078ca1498831d57666d1881a14f9bbc49e682f413854e5

    SHA512

    f0850007372d0764ab84242ca6a21676f47f4220201db385617cbfa9ba3933d9f3411b0c13904361f438e42c749634c3e0ae5c10b3c8fc9fbcaba4d63a246996

  • /data/user/0/com.yxxinglin.xzid10794/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMDY4OTU4Mjk1

    Filesize

    1KB

    MD5

    ecf73fa2ebeb57454a9fc662c27958a7

    SHA1

    b3d8b3365fae7305397a2dcaf2e3af82587f9cfa

    SHA256

    c264923875595bdbad602c1fe61848c1d151a70d4bfdb29a5a2e49edf988db32

    SHA512

    eddf90f5a5613c1efadef24888d5120005c619dabcc5108a33799316b89eed9caa64dc036e85a7d9e3df245237dc21f84a90f46514d5cbe527d11b1f35aa157f

  • /data/user/0/com.yxxinglin.xzid10794/files/umeng_it.cache

    Filesize

    352B

    MD5

    1d5c6d40c31ebecd1b4e8980896254b7

    SHA1

    7033c6ec0e0a1cb4af4bb980539d425b2ef84f08

    SHA256

    0f693a958f95226a02112b0e3fd34179826184b9479c6876dffd23b7bc24323a

    SHA512

    4b6d1bf75cfe7cbb4be15ac005b85c029d3fa821a983c6aa6d933df0f5aa6676d42ffb21dd804dc5e8ac71ce5194453efee1eb8dbb6ed995b9a6ecc0259a5613