Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2317964s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 00:29

General

  • Target

    7520dc35f745fe9413ebb62abb8e1f1c832046287bdd2c4b420f4115cde8a569.apk

  • Size

    5.7MB

  • MD5

    596ad76a5a59edf3de5b397c1f9735e5

  • SHA1

    267b03c76682f41ed3d51a30c473a220c421ad3d

  • SHA256

    7520dc35f745fe9413ebb62abb8e1f1c832046287bdd2c4b420f4115cde8a569

  • SHA512

    4a55557bba26385b4ef88abf2cf849022fb3eee9044cfe17ee155d81217d5e59936acbbd81b445e266e1d26bbed006c32d3b4fde2ea0fe7bee61fc4be9c625a9

  • SSDEEP

    98304:5T2MgF/Yd9OjGKOgGbe08rK82DT8ZdyAAUKPk9/IJUlMucmo2UKUUBtlJrxtpvVZ:J4BSKOFeBY8PyTUK8kUWUcGjrxtVX

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.aliulian.mallapp
    1⤵
      PID:4467
    • com.aliulian.mallapp:pushservice
      1⤵
      • Acquires the wake lock
      PID:4517

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.aliulian.mallapp/databases/pushsdk.db

      Filesize

      44KB

      MD5

      c21af5fd5c3f4c1e0392c48967a25c63

      SHA1

      c14b60a4fd8f5b39785db8ccfcc81dfaefada122

      SHA256

      3e07fd5c4d3d1f5a93d43d796bebf45707967e6715c65d1817080aa95aba6a31

      SHA512

      5b0cca329626f373c986ab0c4fd00d0d3f294ef06850e233dfd0e865e0ea1a2bd3aba438c40ac91c45459409bb3f6a788ef0ef6f6c48b8b595ec057f75ad0920

    • /data/user/0/com.aliulian.mallapp/databases/pushsdk.db-journal

      Filesize

      512B

      MD5

      c486af3bde638543e5ffd4fe5ce42668

      SHA1

      8bfa806ac3b0ceb758fc7006f2623e8196d0a057

      SHA256

      5e657010f546cbca0a6cedc9a7453dd679d687905822b4c2af0607d7dbf39c08

      SHA512

      2c096738050dd6e42539e8040f763de1a2f5924ec0a666cd9367e2742666009ac798724cac61748ba7a8eb56d4f634d9db9669f3fc741c0e437f202914e790e0

    • /data/user/0/com.aliulian.mallapp/databases/pushsdk.db-journal

      Filesize

      8KB

      MD5

      89ac4cb572733af5a90c21d16092c800

      SHA1

      09a89719e3063422ec916a215118f7545c47f768

      SHA256

      cb66e87e8317276bdae185e510d97cd94bc04fcbb243309cd92d0b05b8e585b7

      SHA512

      ac9364bb92fe889dcc3277183f66cbfce4b737142834b7cf35162e969a01b0e8f871c020344882c95beedb4087d89c0e8e78fe7bb92ad2f47e4a26a146faa81b

    • /data/user/0/com.aliulian.mallapp/databases/pushsdk.db-journal

      Filesize

      8KB

      MD5

      bdef502439b35ca092d1f929a36cd6b6

      SHA1

      0f550e7b30b2fceb7ac09fe6f0b1ddf7dd472f5f

      SHA256

      8596f5fc07300e7f6a8147e0baeaeb5a11cfd57a42570c8145e0393891ed2c20

      SHA512

      6ead815bf534926ee1e4568dc5c1ba9e91be4e8036dc2a1f5e3dd8aa34f02c83ab9b8832868ccb746443f58775236da4341654e64a9831b31e6f77c6ab4aaec0

    • /data/user/0/com.aliulian.mallapp/databases/pushsdk.db-journal

      Filesize

      4KB

      MD5

      2eecffdd4a0ab0547572bc686970d700

      SHA1

      0c9342538cebfea2c6a70cc2bb599d41d5363604

      SHA256

      caf748fe7a543a9afface17f9bbab5ecb66b98bc2584481a7966e6a972ea9f0d

      SHA512

      8061826188d511b012823a9964cf98caf165ad8b1846de81123f31ce08bf4873a03a64272a58752215a93603002b0e5259da7a64708327da4f3fe9baccb65fc3

    • /data/user/0/com.aliulian.mallapp/databases/pushsdk.db-journal

      Filesize

      8KB

      MD5

      50a00219668c217b75f604d1671d9063

      SHA1

      17000aafa38ecd432be54a2523de17ae6e3739b4

      SHA256

      6e924d53fc50382242389415a44827fea3f27a94ca1903144ea15a1ee67ef2ea

      SHA512

      2723e29066a5800ac2e5ed2eb20d63bbd75ef2d50355ebd72e61ed028d4ab4177f9de9c2b6091e16f77d7134162b74587d11b7977c730c0e8c8680f882d86db7

    • /data/user/0/com.aliulian.mallapp/databases/pushsdk.db-journal

      Filesize

      12KB

      MD5

      9cdfbdcadc01c556505f3b6a03a10241

      SHA1

      995045ff86efd9a7c0628a109933c448781560a0

      SHA256

      6e4ff2e56fb896893a0077e4b8586ee8e1d41aaa5898c16a0782ab3256967b1a

      SHA512

      b3317a0cf25fd0a1c29609804727c2a0c28dd3ee215fa4687b71d4c1f26b0b3041742031a67afea370bcd90877364a2ed263aa0d2df4f50488f72b7038b17b3e

    • /data/user/0/com.aliulian.mallapp/files/.um/um_cache_1703124925368.env

      Filesize

      540B

      MD5

      1f379b37bdb6b1277caee7309eaddae4

      SHA1

      bcc7884dd8aef5b43c563370bded7ee5b88d137d

      SHA256

      d56cb5ca831be74b8c2178c780b8a62d9491b86a95bcdc7c934ff8de4a399d14

      SHA512

      78c4686cfe458b3ae5b31c1d1037da4aa4245ed26a58dac63334af1b9248707517bcc626364ae549c78a58c80764a8dd526d28d91b980433ef22cee7c323a801

    • /data/user/0/com.aliulian.mallapp/files/umeng_it.cache

      Filesize

      245B

      MD5

      b73f8c37ef2922995f24293173b7c61e

      SHA1

      f540dcf117cbd3f3ac35efc49a07a5f988334fb9

      SHA256

      ca0c0c8098c5246c34c8d048525dcdab11a4e3b367e482fadfaf0fd6f1d402ec

      SHA512

      a4e2f001450bda0bbb91f2c9a4a7069ac563cbbe178e7dd7801f258616fc5e6549d75bed96fc0bca04689e0dfd9fbaf074afa5e1f12511ed434332129a16878d