Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2342404s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 00:29

General

  • Target

    7520dc35f745fe9413ebb62abb8e1f1c832046287bdd2c4b420f4115cde8a569.apk

  • Size

    5.7MB

  • MD5

    596ad76a5a59edf3de5b397c1f9735e5

  • SHA1

    267b03c76682f41ed3d51a30c473a220c421ad3d

  • SHA256

    7520dc35f745fe9413ebb62abb8e1f1c832046287bdd2c4b420f4115cde8a569

  • SHA512

    4a55557bba26385b4ef88abf2cf849022fb3eee9044cfe17ee155d81217d5e59936acbbd81b445e266e1d26bbed006c32d3b4fde2ea0fe7bee61fc4be9c625a9

  • SSDEEP

    98304:5T2MgF/Yd9OjGKOgGbe08rK82DT8ZdyAAUKPk9/IJUlMucmo2UKUUBtlJrxtpvVZ:J4BSKOFeBY8PyTUK8kUWUcGjrxtVX

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.aliulian.mallapp
    1⤵
      PID:4255
    • com.aliulian.mallapp:pushservice
      1⤵
      • Acquires the wake lock
      PID:4294

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.aliulian.mallapp/databases/pushsdk.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.aliulian.mallapp/databases/pushsdk.db-journal

      Filesize

      908B

      MD5

      e54ee84b7f6892133b5307539889b374

      SHA1

      f547fc5bc0bcc27e89926e41e12739b0fa86d6f0

      SHA256

      689e636eee2dcc0bc5495de09f743dc03185236e274bd7df9e36c2d46e5f4be3

      SHA512

      362b090b18619d314ff08f6b44501080c6ef879c502a740dc7f00899554ed79cf378d7c4456b56168d916e7b1f93149b61ca122d5db38ab1f8e6182e33ee2812

    • /data/data/com.aliulian.mallapp/databases/pushsdk.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.aliulian.mallapp/databases/pushsdk.db-wal

      Filesize

      96KB

      MD5

      854ee62f7be669958ab0f1dd6a298ccb

      SHA1

      54475cd8b13edf4b1028441678612281058bfa67

      SHA256

      3cffb4468452d2a52ad2caa2d0ad875b6f0430e92aa332ce2c48f179aa880936

      SHA512

      78cc2ac73a52e6e83eba3dd3487301b0896d30b1ec2bdd2eee9789257d76531b04dee7123fa09e2c9180f0cf76cae3c49893868ca752bada4a0e4d071a460ae3

    • /data/data/com.aliulian.mallapp/files/umeng_it.cache

      Filesize

      310B

      MD5

      9f7d99660cab60b9662c1f745e2767f1

      SHA1

      128e79ff48fde4845341ee48a9001e596b77925d

      SHA256

      95c65d770c7f6a6bb94238ecf8865570030cc655e4ef7de2b42abf690a29bf0e

      SHA512

      80e1776ab1504423b2cd1804a53c018814da96faf64dde7caa5328a691813e3744edc6fc7adc8bb36b6b82bb38da76139a77fc679d3d1e7d7479622be63a4965