Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2282585s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 01:05

General

  • Target

    774ffb2f7968233385581b7635d1e40a1f79a8a550bc19daaef92595668fde3b.apk

  • Size

    11.1MB

  • MD5

    dfb449b082fd865e53cd9a6699359cc9

  • SHA1

    2021bffa4bb361bf8ac5598ebc83e9158dc0d17d

  • SHA256

    774ffb2f7968233385581b7635d1e40a1f79a8a550bc19daaef92595668fde3b

  • SHA512

    b1acbfb3ed3b2db2304d0a1f1927e797a26b41953d087337e1981547136f32fcc3d0c3f3b09794b457e9a6bc0bd665e9345cfb8700b660ee4405cfd68f1b54f9

  • SSDEEP

    196608:FcYQUPfwW+Ncr7hBA/F9efkIJE/E/uOqxUEioh4W1/LuseiiV4vCZ/D:aYQUP4W+W5W/Wf9C/E/ucoh4W1/ysesK

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.canoodleapp
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5057

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker

    Filesize

    28KB

    MD5

    e8fb059af97d2076b1c7a6981f473e36

    SHA1

    296df5e8a409a6d82b13f43f00de963faeeef4bd

    SHA256

    3d0f10b85948da03601812b2c89cdf4110e438ea30b3a84b679a5a5af92e1c6e

    SHA512

    ed16a053c817d8ee2866dec6b5c4b42bf2db45954b7592f849f15cca8c5f7c3f4931132f7c9058f95b9b653cd0dc431af2d2803f2ca13cbc6ca7bbb98aab69ae

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker

    Filesize

    32KB

    MD5

    a8ca221e23fc8b4e6c99855968616ff3

    SHA1

    7cf53c2f9b7869107e628c995488cad6c515323e

    SHA256

    151221d2bd285193e4e835ec7fc66416cd585d40651e200af8e947a0ed8e7e85

    SHA512

    0308d4fcf7536094b1a43f614076557d20662410b974dcea7e49a04490776d1b1d180ee12ee1097b7faa80aabd3a46fb3e0c2eccc3c48a7eb1de090cffd57583

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker

    Filesize

    32KB

    MD5

    fbe1ab3de0a5cdb14b735580afae4042

    SHA1

    26b6e667e559a5a1630206cab5d57350d95fabfe

    SHA256

    e45cb98340dd1d37a15ba5bcb87a8bc82f602f4de2f065dd5293f563f7688a21

    SHA512

    72965fb0bc2e767722611b31d72cf3326d96dcb277be96978d4a06bbb9a957def94a045c6ae6a6e8cb0a06f803162ad6d28840dc37b9d29153c86ada1386f023

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    512B

    MD5

    c58a0560ae837a0b1d5eb8b71e7d0554

    SHA1

    a78df9bc97895e6beff3ef746f8c9423ba6609e1

    SHA256

    bce6303cf8c46ca2b81dfd76bb8c7e6f76aec86ddb82bef4aaacafb138df6454

    SHA512

    6602eb13d7cbf4e44e3a825b7a2081fa78e60db4a2ad76b57a2e458a763b147796df1f4b8bd7b1da1e3311f199c385ab8e6152234c272b42efc485511e4ce85b

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    8KB

    MD5

    372fcd17afa962dc0375b9698b4eedad

    SHA1

    11006761f53313c14206375f59b22bd4348be159

    SHA256

    1222d687cc1a3b86fc29f2931460e5d642868645fd5966392cd7da72c27f5d0e

    SHA512

    8da8cbfc762f1fc0065c25dc41a5c5fe6c8e9609fc14e45503af3d37e42ee1841d43e1dda1e8e2ed7c35b2a6cf2a160d1d364d233e8db88ca475ea63428dddb1

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    8KB

    MD5

    70e6b444206f4d166348fa08539e7172

    SHA1

    c8160b08727c4a90a170d00127fd6c8aa68e3faf

    SHA256

    1371e74ab01c92c63c31a66de7dc638678578535654d74f0324e9fb29c9747b2

    SHA512

    2dd8af899975ef0873c9c212f3ae3ba0eddc81d97d48dac7b94612130f79bd99aefd41d479bd4fe0a54c219b918586e2bdd4f39ceb1fe14749c91f7a32a407c9

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    16KB

    MD5

    a008b9e6ee7ff88ed7ffc9c3ef7fc391

    SHA1

    54e5c0c2452585838228a66c8c243660d8f347c3

    SHA256

    204eda2f46efbd3f7c8ca1f20061518b561395ba1fa3b0ac103a89dc58c14b33

    SHA512

    2a68f077f8d6f1ba8b5557530118114f69d816486f50e5f7336b7ae02e5101154e1d803b605570e8eec8321cec7ade2944b61e610b4415cbde82d96b01babe37

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    12KB

    MD5

    3b5887cc5771e51ebdc54f1d7b06d580

    SHA1

    078686a99aab5c7f4704a3c37e3019bd3d743db6

    SHA256

    9f6b06ee2edebae26730f6035be59a5e1f104b98f9160a221279663584577372

    SHA512

    055e38c62e6818ebb636f5e4991a94a304abf109462b2e1d67d2028a7295522cc711116b245192685a9842a36d9c07335d8e525fa17125550aea8d20d0383b1a

  • /data/data/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    12KB

    MD5

    ae00b902cdca60d71a38e8758dcfde1b

    SHA1

    09fc6903c4bda43a852200b2f41d833a6bbd4442

    SHA256

    59349a1c9b5136e1dbae1556bf59edea4cdf5839838633918649450fc346ea4c

    SHA512

    eec71d293c562585afd0659dfa373441b74c5427b1e9acf71e5727967c9a3b402e8ddad54be6c3124d634f628f21fb0ef00eb40b2b3d468cb247adf2ee69f946

  • /data/data/com.canoodleapp/databases/dating.db

    Filesize

    64KB

    MD5

    0165d90060403c1ecb3abfb62be8790b

    SHA1

    e121c7d4e8438d0d3bfcd16a36d295f130936202

    SHA256

    3872c8e13531c4808a263f52d7d416bb1cdf2523cc6a73b8a98da21560691f45

    SHA512

    5957c8520601ab5df929f92a5cf4aa8ddc40b328d6f98a281ae682b91a2043cbe0a4145717d269c6056c7135296b684747c176e500c60a4cad5056b408cf1893

  • /data/data/com.canoodleapp/databases/dating.db-journal

    Filesize

    512B

    MD5

    13f743e561354fd4bb05d19c60185f29

    SHA1

    45edb26a3d069224ee60f384abca4e1b49b6c501

    SHA256

    05a2552f0c0fd8aa9f5a98a71e0c5c09762f3799e2202ab9ac4eb5d265f2a28a

    SHA512

    324778feb8caeca7e7847a72d3184b29384e2c548596312eb828e103a432ccf844f5bb5910fa45f456ef7c4de02abd9e0c5d15a078aaf5e82e69feca722ee27b

  • /data/data/com.canoodleapp/databases/dating.db-journal

    Filesize

    8KB

    MD5

    4bbd7b6a882542418d36c5e8b4b8bcc0

    SHA1

    525ffd15818cd3b9d93068dbee8a2e77ed9f78b6

    SHA256

    e992b629a4520f180780a74e9656582bf9172598bc1b158cd1c8666ac0b05662

    SHA512

    ca93bf83828378b9b63604f59065680cf7004fb5710d52412cd1bb0b64191017532146b32f2e9ba5b087315576f18f7d830a23227493feba6456e985f7ba9ad9

  • /data/data/com.canoodleapp/databases/dating.db-journal

    Filesize

    8KB

    MD5

    67ea752caff742ed07055bd86a79f53a

    SHA1

    031720f196097e84ec7b15340bf4d57de63e7494

    SHA256

    770e851330933a876d06075d5c28680b5f9190c12b41c97d0b5e0565bddc72cb

    SHA512

    a9213374eb8a4c6c99e29067a02ba5eb96a84ca822b70bdb3071e12eb877790ac158335be14eb9551ece0f91b807eea58876d71b4aa536491517486b656bf832

  • /data/data/com.canoodleapp/files/AF_INSTALLATION

    Filesize

    36B

    MD5

    a6ea1874f596695156b4327e5cbbed2c

    SHA1

    3f4f50135d83fdf05b3cecb5764b148dd862b42c

    SHA256

    b56115db2c89be4df703f2a3e8fc314157528556384308b8c71e8512d72df723

    SHA512

    ffb66d471a9a450ecf29bf42bbf6648a4b890c72f2c211bf4b29278cbf6a52929bcc5c46d7929e5ce7f2078a71f80ab3704f0e5ce551e72d8e1cf681398d7519

  • /data/data/com.canoodleapp/files/gaClientId

    Filesize

    36B

    MD5

    8372d311565d16d1c90cea119cec77df

    SHA1

    4ee8a20595775517e6c547c32542f2764b0816a3

    SHA256

    401376c0057b43b8383f898b0e8709799d51747c3731536f4241227f6e13199e

    SHA512

    49d80ae042840244b093f5d059cc2959f086587ed0bd3a55994f50f6048d8d92b9f1f9feaa88c43cdc7098df7fd482abbdd8727b6bb4ee1f5c5bf5533d78ea86

  • /product/framework/com.google.android.maps.jar

    Filesize

    315KB

    MD5

    4899aca36d1ed747a447dcac0d101a62

    SHA1

    32e43edc0bf3e036683ea8639472e6cd31ab9929

    SHA256

    67a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f

    SHA512

    50b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f

  • /storage/emulated/0/ppy_cross/7c8818e0b54505648c31ec132d64a3a7

    Filesize

    32B

    MD5

    044ae6c228f5f0760960be2e25a102fa

    SHA1

    0326f29bf5c27a6d108dd45f4cf8c8809ad38db6

    SHA256

    0ea654505099f392346e953db5718c12d2671a257eb68f6c8406d1c438e68c93

    SHA512

    fb5cc66638885430892420e085a692613951e668def5887d731f1481812c56a68fc6979a7cc0fafecf97c85128e579c843220f94392e7b6bbe3092e409801cb8