Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2372009s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 01:43

General

  • Target

    7a4ee5da3d2b8cfb75671296b5c28c1b668baf2899e1d719110ddd9aaca6a6c6.apk

  • Size

    25.5MB

  • MD5

    64da2c6d6e264316342f849f7e1610a5

  • SHA1

    3b17dad5d653017871bff721c94c9cc19755232f

  • SHA256

    7a4ee5da3d2b8cfb75671296b5c28c1b668baf2899e1d719110ddd9aaca6a6c6

  • SHA512

    4055edc17f682fb297ee0401f1ba02a98b9b46534c3d9b5785016b7c9fdaa9bc519ccb637364768ee4524ee6a238dd6822bfb0403acd9cf74a707d4ed552dcad

  • SSDEEP

    786432:uu40hSOIfEy4dNZMNZANZxNZINZTQrGJaqnAYWz:uWIfJ4jK6xKTa7lz

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.crystal.frozen
    1⤵
      PID:4262

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.crystal.frozen/databases/cc/cc.db

      Filesize

      36KB

      MD5

      ce6135aa1b1fe4f2c2db2a546d2a5558

      SHA1

      79b59582154017aadab783dc266fcb158c252940

      SHA256

      7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

      SHA512

      2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

    • /data/data/com.crystal.frozen/databases/cc/cc.db-journal

      Filesize

      512B

      MD5

      14369ca4c13fcb05d5134165ff40143f

      SHA1

      c7ced6098ae7d29bd601e8e46b25651c12280eed

      SHA256

      1e2258d5e5f032cba6b41b19a7524cf93de136471fbc6f9d14f8359c98f094f9

      SHA512

      5f6885112f33d151a4694b9e0e13a65fa302fda46d64821dcf68198fabff2945238ef85c265bfb2acc43d71abb4231895c545163951cb3c253013a7828e53ca7

    • /data/data/com.crystal.frozen/databases/cc/cc.db-wal

      Filesize

      4KB

      MD5

      4f23ce4aeaa0eab624b4d8080d73dd26

      SHA1

      595b54b6d99bd64aa45e1657f92b177af90cda8a

      SHA256

      d8a5dd7ebbefb6d9d2dc4bf20d09a1cb3cf2347e79ed84e7636c0035deb15599

      SHA512

      5e87da3172606b397490de2e9af82e7b0f4584951c6332c6c26f7eff3b01f435f84c6de9147c7bfd517f60a8dabdc5d9acab50312c701e90e117839b57143b78

    • /data/data/com.crystal.frozen/databases/cc/cc.db-wal

      Filesize

      48KB

      MD5

      c28140b38a552078692f6c4b43172bef

      SHA1

      c6e4c4fa3b99de20cc9494a6f2868f407c85f4ea

      SHA256

      142d2b3fd65086830a8e8687c9e6b7f4b086f8d402db3b20414ca017c43f41a5

      SHA512

      6686a72ff1fc7a212382e386bebe1a74ed1b1718fba26c9caed99bc6558e59576fd8834abe16a84eb3588722d16f8a92685b10128e75c5da8aa7ba4a454abec3

    • /data/data/com.crystal.frozen/databases/http_auth.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.crystal.frozen/databases/http_auth.db-journal

      Filesize

      512B

      MD5

      186086af3352f53891c3b1b787732e0c

      SHA1

      2ab188013afc407df32b41b60f8659df3b1c2111

      SHA256

      b3842e396ca4ba5c294bd23399dd3a14054422d3cd71618891c8a64b4594c8a6

      SHA512

      7af3a791f8336a4d1010a95bb364c55c1087e64cc7ec99bd4e8cdd159c859adf6bab047cce38f70a153a1e490685484161ea1f57e12772fb2bcc4dc95af2d947

    • /data/data/com.crystal.frozen/databases/http_auth.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.crystal.frozen/databases/http_auth.db-wal

      Filesize

      32KB

      MD5

      ec5a53abf94f9f9081c5ae679bfb4795

      SHA1

      477968db58da315a4ceca5f8a434bdc268c8b28d

      SHA256

      65efffbbf542f9e8af3db7ca293a67b644d945da78dfa315dab8ab29a65f68cb

      SHA512

      4b74a17d9c5b852addc465a991b9449a3524d247b8f2e36dd1e62f2e49ab8ed3fb98a2a10f9d93c9844e1b43dc270cf76cb21e3b01de6fc5b37c86ea0c1b062a

    • /data/data/com.crystal.frozen/files/.YFlurrySenderIndex.info.AnalyticsData_423J2MHFY687Q6VHQ48M_228

      Filesize

      88B

      MD5

      8e819a1538e9fcb2e933f11e6d182aaa

      SHA1

      fb7b4a4803459131f27800ff8fa1b639ed7c27f4

      SHA256

      93c641cdf035f7baafb9e89296a6e33e0df2552c5ace32352d26d143e94f3501

      SHA512

      38c54483e41ee7a26584e11eb769ad9e206c209330f757841ab7679d61ea777368fa59e43c964c8eb393dc5b81b0ba86acb63869e672e0c219c603f502556494

    • /data/data/com.crystal.frozen/files/.YFlurrySenderIndex.info.AnalyticsMain

      Filesize

      72B

      MD5

      55c004afe4499f7d975a34902bcf4a18

      SHA1

      92a018b9ee261c58ab0d19de80903746cc86cb68

      SHA256

      a46c17f868f9640117c39d9d81d1edaf9f2665e87de79a263da019e9bd2d43f9

      SHA512

      7fe1ff42e91e5c37c8e034afc332ab3fc1b807335b609b02bc914f497e2942b191c4c92131763c3598cc8e6cc4bb2a1fa2b460e0bc2dabf42894c10a6a253e09

    • /data/data/com.crystal.frozen/files/.um/um_cache_1703178985139.env

      Filesize

      1KB

      MD5

      b16162a74843b9f395d4546f83780f2d

      SHA1

      b45744bebaaceb7806bad681fd20bb4cabb2ca2c

      SHA256

      14d47649768d47d4f90f067831e1a4ae19777f3676c7d4065748f2c3c5dd6a03

      SHA512

      31afb1f6cc7c02fe4def7a045c3129e3a9fe643eb96639818605548f8869de19a3e118af9bc539def4885fc0479af54170090e9c5de717679b06182bc1d2eb4d

    • /data/data/com.crystal.frozen/files/.umeng/exchangeIdentity.json

      Filesize

      162B

      MD5

      13e1e0f619cd765cdd8a8f33b1a91521

      SHA1

      dc0ebb3c5abe935278a3ba8294a56ad830486552

      SHA256

      75a1b1ac09a3f3bcc035f3a0c844eb707a5a78b18b407d4216215e1c35f33b20

      SHA512

      b1caf7b522d77b3db913ff0c8ae50b48a8fa3b69f3fc1148da43a81c95a3c1fe267314ffcd3593ad605b4228906af0b46c2d01ad0db875b8a4eff8dea82e39d4

    • /data/data/com.crystal.frozen/files/.yflurrydatasenderblock.1c1841f5-874a-4102-ab77-70b9a739016b

      Filesize

      271B

      MD5

      5fef199826b9f8183a34d8e8bf9b52df

      SHA1

      db7a615273370d679b1df6c74a6ddd0553516b09

      SHA256

      9d5b13e1974412c92f3265cf6bb7f462dfa18f232a09fcc168d859d2aba46566

      SHA512

      699d78cf185f45791cc8927fb18ec3c06a646ae28ba346dd312e3bf037f875f1163bef239c4c68bc46190fc18e1fdd49b846c3c0bc5de7ebfb663a033c502471

    • /data/data/com.crystal.frozen/files/AppEventsLogger.persistedsessioninfo

      Filesize

      480B

      MD5

      a94dff39bb09f1564b9a54b0e68f257e

      SHA1

      eb98c3681872564b2c5dc0c7e5e64aa4dc10628c

      SHA256

      d2b714391780d5b46bcf2ea86a295301cb569b930868a37d548856521a19789e

      SHA512

      5fb9844d94fe9e0e1665c512c777cfb39fc4ba2ae6ca904f9592358e0565c3325d0adb5d6852739b990c4dc82e126abb40ebdfc6753df898f95b197c6dbca439

    • /data/data/com.crystal.frozen/files/Qril.lua

      Filesize

      15B

      MD5

      5892ecf53a38e5c25e95699aea5fdc25

      SHA1

      154fa1db6fc738b93ec90b83067205b1acbc3426

      SHA256

      8fa738e8afc138abc0bc2f00bcc4667ceceb55b7a4fce4cb0ff7c0129bc421aa

      SHA512

      9c5a5037dcfb542602907234903169df1fc56cf41c49a7c7bf5e84f75f7bab512d81365536ee2e56f2d69b68fd3bc8b2e98eebc7ddc3f23204f0bb1f5a862f9b

    • /data/data/com.crystal.frozen/files/Qril.lua

      Filesize

      6KB

      MD5

      714435441d12146bee51dd0929cf02d4

      SHA1

      d4b8c7a2575c7e74303a923073d60493133c20f2

      SHA256

      ee69b3ff41c50e8b5aeac4a11700e024c25463cea1e6a1683454c043ec172a17

      SHA512

      48724842d117632822d2818d4e10a58b045b875033d021821efe327a69199c456b51ca7e00674980d8de9f17e98ecc84fbe84a1e60d761e94d2480daca755866

    • /data/data/com.crystal.frozen/files/Qril.lua

      Filesize

      6KB

      MD5

      cf5602758fff737a2424646fb6747e7a

      SHA1

      e4e9363a840151281af9750aea80f64c38a5086e

      SHA256

      1d901a7a81042128632fcbbbb5c17defd060b80ade54439dba82ef8de81c3ede

      SHA512

      3dbdc04fe013facb6288c0858b9d29a1bbc4368bb277b36c8af30383045917185c540b3142c0a613b866bee85c4f73507b05f574edff6e286211ae3610769d37

    • /data/data/com.crystal.frozen/files/umeng_it.cache

      Filesize

      498B

      MD5

      5b39e71999c30612de69b3744fa6a401

      SHA1

      08bd950f24f834b583548eee56de3b6cdd654fc9

      SHA256

      c13cad5895f1bd2aa7638f6d2a2126e4b5ecc16504563334798685c6f03336c6

      SHA512

      6b32c2cb39b8dc4f47ae1642600463c110751bc75cba254611978e5cc83f4457e686574e00e9eb1df45ec22f7c7824bc8e576295d5b71073ca4eb4785c32f9cb

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      111B

      MD5

      67a763d8f4ee52a4412e780909aef7b3

      SHA1

      40a9644ebb340f61c45aa1e2a6dc00a7f37605d7

      SHA256

      abcebcb0971a2fafda3f1be283376a7ebd217c5fa3b4f8dbfdee06641fb80332

      SHA512

      1387c9a63eceac221a566a2e2dda1df329f17bb09ab53f576cba788380a5d891abfaacb2294d1f16570804a51296b4521f68a81cb1418793e994ef24d5bedb01

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      0bf1c1057dc795ba502114b57be98332

      SHA1

      c676fc1207355088ddb4c36f404a8d60a99f0057

      SHA256

      8023dd556c9aae1c49ed4fa9b1c87a6a7ed4b0fa3c5fe91336bc435ea09ea1e4

      SHA512

      a170cffc18f3a5417001f0fe3960876bc10856970b546c7ff7667457e1b5bf442a47df684e45dcaaadbe40e52aa252f92bb663df92e84bae1c1027a389291889

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      381B

      MD5

      c4dc1f0fe438d9134a22a0cec0822041

      SHA1

      1f9be4a249a891ba2154bf1e43630277e05b5b55

      SHA256

      c0a2d05d4a924c073fade7a1729ec906a433b64164dcaf1a7db1e8222b521b46

      SHA512

      5194be129428bbb056016e0ad3c4ca9aa214a6b9b6e96e5c9577bc074f57ca9ddf1199163f0b64a180727afb4d2b6c323493332023a9793af1d768cd539ef692